d731de5a1f6113c7e56d674268d7cfc3443cdc7033fd6af5e4d6b530d6e4b2d5

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
_d731de5a1f6113c7e56d674268d7cfc3443cdc7033fd6af5e4d6b530d6e4b2d5.html
Size 30KB
Sample260707-pntcmshz5v
SHA256 d731de5a1f6113c7e56d674268d7cfc3443cdc7033fd6af5e4d6b530d6e4b2d5
MD5 5c13dd16974b132b8558d049584fa396
SHA1 5bf66c223a772be7581fe49491fb9109073b5f78
SHA512 adbec4dae74f11b77003db84a7ee9dcf6ce9ced691804c9ea6afa95afbf98797724210efd648527803c8bcdbad016b8be66ff0962394cc9b3f4924ade70c1b86
SSDEEP 96:VTpF7eDidob8T/uu4IuHMzWsUey4Xc37ZWXBWRP5a96Nut43WowAXcJj7vnfjE2w:FpYimpQYcN43efXgix6
TLSH
T14DD2072D756D67F9C1D84AF848C8D394D307AFD12AB29822DB6C918B0D715CACE64E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 15 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_1828636114\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_1749681813\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_2131072832\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_16701276\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_16701276\sets.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_1749681813\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_2131072832\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_16701276\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_1192526926\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_2131072832\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_2131072832\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_16701276\_metadata\verified_contents.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1008_1828636114\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3172	msedge.exe
5644	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3816465931-3623202676-2955785815-1000\{733C9113-1FA0-4162-BFDE-E2CC93E307B4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1008	msedge.exe
1008	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 2500	1112	msedge.exe	87
PID 1112 wrote to memory of 3172	1112	msedge.exe	90
PID 1112 wrote to memory of 1996	1112	msedge.exe	89
PID 1112 wrote to memory of 1996	1112	msedge.exe	89
PID 1112 wrote to memory of 1996	1112	msedge.exe	89
PID 1112 wrote to memory of 4732	1112	msedge.exe	91
PID 1112 wrote to memory of 4732	1112	msedge.exe	91
PID 1112 wrote to memory of 2484	1112	msedge.exe	92
PID 1112 wrote to memory of 3608	1112	msedge.exe	93
PID 1112 wrote to memory of 2484	1112	msedge.exe	92
PID 1112 wrote to memory of 2484	1112	msedge.exe	92
PID 1112 wrote to memory of 3608	1112	msedge.exe	93
PID 1112 wrote to memory of 3608	1112	msedge.exe	93
PID 1112 wrote to memory of 2552	1112	msedge.exe	94
PID 1112 wrote to memory of 2552	1112	msedge.exe	94
PID 1112 wrote to memory of 1800	1112	msedge.exe	95
PID 1112 wrote to memory of 2552	1112	msedge.exe	94
PID 1112 wrote to memory of 1800	1112	msedge.exe	95
PID 1112 wrote to memory of 1800	1112	msedge.exe	95
PID 1112 wrote to memory of 3996	1112	msedge.exe	97
PID 1112 wrote to memory of 5896	1112	msedge.exe	96
PID 1112 wrote to memory of 3996	1112	msedge.exe	97
PID 1112 wrote to memory of 5896	1112	msedge.exe	96
PID 1112 wrote to memory of 1008	1112	msedge.exe	99
PID 1008 wrote to memory of 2664	1008	msedge.exe	100
PID 1008 wrote to memory of 1320	1008	msedge.exe	101
PID 1008 wrote to memory of 5644	1008	msedge.exe	102
PID 1008 wrote to memory of 1320	1008	msedge.exe	101
PID 1008 wrote to memory of 1320	1008	msedge.exe	101
PID 1008 wrote to memory of 4408	1008	msedge.exe	103
PID 1008 wrote to memory of 4408	1008	msedge.exe	103
PID 1008 wrote to memory of 3504	1008	msedge.exe	107
PID 1008 wrote to memory of 3504	1008	msedge.exe	107
PID 1008 wrote to memory of 4168	1008	msedge.exe	109
PID 1008 wrote to memory of 4872	1008	msedge.exe	110
PID 1008 wrote to memory of 4872	1008	msedge.exe	110
PID 1008 wrote to memory of 4312	1008	msedge.exe	111
PID 1008 wrote to memory of 4312	1008	msedge.exe	111
PID 1008 wrote to memory of 5948	1008	msedge.exe	112
PID 1008 wrote to memory of 5948	1008	msedge.exe	112
PID 1008 wrote to memory of 472	1008	msedge.exe	113
PID 1008 wrote to memory of 472	1008	msedge.exe	113
PID 1008 wrote to memory of 5592	1008	msedge.exe	114
PID 1008 wrote to memory of 5592	1008	msedge.exe	114
PID 1008 wrote to memory of 3360	1008	msedge.exe	116
PID 1008 wrote to memory of 1068	1008	msedge.exe	117
PID 1008 wrote to memory of 2852	1008	msedge.exe	118
PID 1008 wrote to memory of 5912	1008	msedge.exe	121
PID 1008 wrote to memory of 5912	1008	msedge.exe	121
PID 1008 wrote to memory of 5368	1008	msedge.exe	122
PID 1008 wrote to memory of 5368	1008	msedge.exe	122
PID 1008 wrote to memory of 4748	1008	msedge.exe	123
PID 1008 wrote to memory of 4748	1008	msedge.exe	123
PID 1008 wrote to memory of 2004	1008	msedge.exe	124
PID 1008 wrote to memory of 2004	1008	msedge.exe	124
PID 1008 wrote to memory of 1988	1008	msedge.exe	125
PID 1008 wrote to memory of 3700	1008	msedge.exe	126
PID 1008 wrote to memory of 3700	1008	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\_d731de5a1f6113c7e56d674268d7cfc3443cdc7033fd6af5e4d6b530d6e4b2d5.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7fffe366c188,0x7fffe366c194,0x7fffe366c1a0
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,16717556031323124804,10221178413906068648,262144 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,7469700291901517146,9360207420645941294,524288 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,6207532980162829889,5106117956026691708,524288 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,3626935298385722254,11783249636279991636,2097152 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,1086507636500268473,4159658769640160972,2097152 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,3117714974497319590,10295300672036197565,2097152 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,16919566345349435389,15209838141324822953,2097152 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:9
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,14990029674589544247,10022930147417379042,524288 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:14
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,16570624386416528964,11680791579685743176,524288 --field-trial-handle=2704,i,1772350610747794681,5166594798710719907,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7fffe366c188,0x7fffe366c194,0x7fffe366c1a0
    3⤵
    PID:2664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,14569955602055477613,9867244596647124580,262144 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
    3⤵
    PID:1320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,8168019503742990763,10906029752988270014,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2216,i,12711168817640795707,16423272451904736909,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:13
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,2946256217787246926,7706313265705805043,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:14
    3⤵
    PID:3504
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,6586431130360596460,6315528734666323415,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:14
    3⤵
    PID:4636
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,6586431130360596460,6315528734666323415,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:14
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,680169887163108040,16782044319631535783,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,8816413756645177447,16735767019155128941,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
    3⤵
    PID:4312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,13505299843022525079,10360736941933364237,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,1334997988088738551,451692490913456277,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,11738803251117435282,9006422094810901526,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,4864518137237284748,2577714888883640242,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
    3⤵
    PID:3360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,17777037796532339579,4918503956177961944,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
    3⤵
    PID:1068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,1005723578624724821,18091407423475516917,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
    3⤵
    PID:2852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,17887462659160754413,16851387411389729634,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
    3⤵
    PID:5912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,9342403646202108835,17854808866454833836,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
    3⤵
    PID:5368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,10410416692834606139,5836120885899581820,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:14
    3⤵
    PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,5258479546406101733,3623002915247936720,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:14
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5720,i,13076592165537337061,14629395418291812727,262144 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,5118815123476328698,7037372967685512104,524288 --field-trial-handle=2348,i,5834145557912922385,17741403759928322718,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:14
    3⤵
    PID:3700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e9a80f6c421414a8b66bf8507c53a0c4ffeb5ba8b94b60ab018ba461aa97acd
MD5 7d69ac67ab7824947bec495abe90ec4a
SHA1 a3c132aa3f49dcdcce56c4c6968c36937f0281d6
SHA512 96cc53c1ea47adf6bf5c07be3692a428e441878e2f62d51e8f602bd99412a2004cb5f7f97f8d380a16d29844233c2d6b1a7141b6130f93761e62ba2cb077211d
TLSH
T151D09B9672258914CDC03572745452696766C53055094A465441B678CC556F3C51B1AE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 33c6e6bae4ee9250332fc0a0b2e5c986f8eb2deb7cfb0ec751d4103398239b4c
MD5 74727b4352a31c683cbe2509206d5bb1
SHA1 9cf653b0f525a7c883fb4a377664b4e16e5557f8
SHA512 9adea13063f4c2028e884bd6c48340080dd142efb6412a6eaced0704a4106259503e51aa0760da81e53710d62c167935e2cb0c8a9f4f9e7b7e210cbbbb7e4c70
TLSH
T19CD022A232388808CEC0303230A082A8A322C030000A0A0A0080FA38CC80AF3C20A0AE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 2c879fe1bf44a715bc2367f9eb2861cdf6e1197e8035f4a611fc6f75f04328b6
MD5 1390ce9f194120775983ca3ee5f8ad94
SHA1 5635e5af7455b96f2fe415edda841685a5629d0d
SHA512 8858806581dc9c3581ed4a2cf24614ab7df4e232b911aaefaf1687fb08e67b73058d15e95bbf37dc17895d29c55f736c486996ff88355526e9b635cd1b294314
SSDEEP 768:1uo8/mnUwNdbL/0cXL/zl8nWzmnz9HOVxbe3eTCwu:INYbL/0CL/zRmtO6
TLSH
T1F0444EFB1951500ACBA912F9D2033A3EC57B864E7CC2E8A9D57C9C812825F75B2BCB54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 21ef5be701c3e5d25b1ede2480a234e489b70b46698ff795bc9a3e7f822ae0d6
MD5 5d093cf701f1f9e194329f957e7c58f4
SHA1 0b13b6074965e4cd0f55eb459432461b7d89dcd0
SHA512 91fa850eee8d731e8f7d6da7c23c33cab22bf6067b3c0ab7464c42e27b057621a7fc50f0f85d3ef715450fcb2e4a645f0edea1f1cab0975cd2357a223460a067
TLSH
T14741CB5443AB35E0CB5B567663D15684BE7CB40A4DCBAE23A0C3A138AD3A78C147B7D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599919.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599919.TMP
Size 2KB
SHA256 4c3979f35814fe44ed19a692ce684aff02b8a40fed1417295285c3e4eaa429a8
MD5 0a2d77cb2823fd571b0517a02b2ef46f
SHA1 1e075261cd2fb5ff5eaad61c9e5407ac8bfb989d
SHA512 5cc128054aaf2b5f72c99d2586ee6e528e90947d5067aee94002e628c9b78eef87dadb8483ea40695cca8ae82a9c41fef0b19a22fecf75603548172208a8efce
TLSH
T14C41CD5443AB35E0CB5B567563D11A84BE7CB44A4DCB9E23A0C36138AD3A78C147B7D4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 79889bbf4edc6c1ff619867fdd631eed163627240e5b897300d71eea2345c79f
MD5 b884adcb6b312aff26ccd20e8d5ad5a6
SHA1 b930ffd76d72e585c7bb4446db83aa5db28a80a3
SHA512 2fe13327826a7589284c32e0ce86ee5a91727961f00851306e3a00ef31a84dcf67430a18c3f7c8358d23fb409472be0500a0009317ce5badefec23b1def0c395
TLSH
T164E068DB9ACAC21E381038C35238A70881C43053C798BE471704C8C0B703002FF455D3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 319B
SHA256 442e1a3000203d2e844883136beda8c7bc52b8e8e4a029c81e362c6260c41df6
MD5 a6a2a799a7a140d86d1b101fe7d22b32
SHA1 b3bba612eff8345fd7831c985ca8e3a2ae52d43b
SHA512 2aea595fd9a5fd63366750452e8380c2e80e33c082aeee909e434f482672a8a88429e0559be8e6aa773caddd8a2ff5f46c6fd063ac7be10fa2447c0f4f88c2aa
TLSH
T133E0268757C8C12AD42474A7C6A6A718E2E3381EE3883A46570D88507282189F3A76D0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
Size 304B
SHA256 1f844da045ae4e4e56937a272b1c4679f12badfc99e892895bf61bcaea111fc6
MD5 e31621408f289cd9771b4a7bee72f0e6
SHA1 730336e9c21b7f4f753b1fd9c4cafb9d868be5e9
SHA512 a0fe5b23623294e52f151bac2e1d57ecdcaaad55297289ddf3657329e75744e6776ddf4421e5d7e89f899f72465181a9e33dd8e0ac64671678ab6126344a1f60
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
Size 323B
SHA256 bd0520dca5a775699ba3131e1800777cf5d2446958140a7c977fbeab0a33ee32
MD5 f5c8af1f3135fc6319e4cc231bdbdd4b
SHA1 a55d9d557f2f6f8c0aee080e4b32c5f4b2afd0c3
SHA512 93514903f50f7371982db215d93179632dcc27fcb91a9952a67c247a17ca41367cd7dad129ff9084db48dd02e13d80366b970804f238d7221025815d92da4560
TLSH
T1BFE026CA4BC8C129D03478A78377B72CD2E2341AA2C87AC6570DCC506242282E7A7AD0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 5cdf71555cbaf828b5c6b7fb1e4503d631e4e4cc604022c4efbfd03712938deb
MD5 346a888e4cc71c78cce52a9ba45ea568
SHA1 56a5683b06bacf641f139421e4522a33cd689ef4
SHA512 a3fb534ed3c207932a1ab69f3774835811ae61151a6c4ae501486754959906da3a83da5d46a1bc763d216dbd7d8dabc02c68760073508e6bfb4f703d9c61e751
TLSH
T160E026860DC8C1799A2C6893936EA30CC6E23816A38C3A46274B88406303282A387AD0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 7a9725e7fc8a25aa3292cfa5b2999ccdac16ecd73e0233317a9c323ccd20e802
MD5 01c829e4e35e9deec3a96f52b7fa967a
SHA1 9f8ff567f028d2cef4dd52069f3894b0d07aa833
SHA512 b69e3829bce7b05d1ee34a327485a0addf89ddae4461264a524c37efe5aedb1829c19816ba18351a6182fc7c5a858dc030d70d0ef28fdb893e3a11e83da76619
SSDEEP 96:rVOMuEtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/TS+bbEOVpZf24JkMfXSFR+B:rUFLH+bF+UI3iWGVoWN3qL/W4VVV63
TLSH
T17B24010E5F252722CDBD813669E744A35C7DF03FC75326CA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
Size 8KB
SHA256 0d163f7f70fc49ca42621cbcad8276f081d3bdb4a5203fe85fd7463f7a8a324a
MD5 a573c93337a3ea8786bf407a4acfbadd
SHA1 e25d0175af92a54dcbb2537bebd9670bf0080cd2
SHA512 361c0b797e0ee38a2c24f4d17358495a33d21260f8b03bc0cfe92749966c5993558c05ab5f781ffe91f1d58083ce534fdc21575244a19ee121eb2f3245a81635
SSDEEP 3:VO2Vv3lljq7A/mhWJFuQ30VkWUll94dwenqFtjE9SFcTpL0WWaV1vGrV9RUIadn:Tk7/VkD4d4FS99pLTB1eBS
TLSH
T1AF0212A10A609A73E848BA3DA28640EC1F72292C8992D80280088C311A05BDC828846A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7b5a50f25cac66d854cd8c3933e81bc52f290fded3db8db487a958a01d820819
MD5 93e7a75236b23156c22c6da0cf333d1d
SHA1 7f6d452224497f5ec360116b09fdfa21333c075e
SHA512 3f40d1f0ff56c006d8a6afa836731418f4850ce2e561cacce6d2ff800128b5ff4d85d22b3a16ad09eb1447b4730fc99af046849e7465ede381bfee6e5d29d688
TLSH
T13CE026AB87DDC12E6608305BA239BB0CC7F13416E7883F861B059840F603484E7832D2
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8234749d87d3cf87e53656295d052988339441fb310908d119ceab620612abab
MD5 90fddd2ce92e5ee2527412b7e4d4dc6b
SHA1 f3dced44c0c4db0fdb2f529546425b173640231a
SHA512 d3b3143991f9a4cb38389af633af38636138b9bee7747a063ab03505ba1b32dedd527836605127fb1fbfc2102cf2a6067eb87be1d7b27c4492643d60be0db3cf
TLSH
T12B419DF3C3D9856D890156F4AB24AE2BDE2D0A15832C3C16C9D4EF1BA3E3471E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e5cdeab686b91a9e3cc6e349ec96a293b2f0073ca2431e4da04fe40ff1431869
MD5 d2c5f7f0f3f8d507364704327cc0baeb
SHA1 0c7d6676ccf91de0cb77033401580c5bd5212844
SHA512 0d6f85ba4a768d41ec455617714fda45d2f176488e463d7a6e9da9ee4fff9629a042019f9e7a7cd08e607f8efb8ab756ed9db5abff2fad73366aaea17d1ab2d0
SSDEEP 192:sxRj/yM/jK1Ml80bz/f4sPWpVRfaIc2zoA8p42/g6+WNIYZTWgjIgQJ:sxRj5nz/f4sPWvRRcrP/5IC0
TLSH
T12862A615A634997BCCDBD20DFA557F53D6F81523A2901E44AAFCCA1C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4a1395e10139968d1d4ab0473fb8cf9805620fc70c3b33d586a067f23ec5b0ff
MD5 18b6069dcc12806dcdbd0f72739d47f5
SHA1 677e5e86d7900e7ec7b52389c23352b323327434
SHA512 cbc172c753dc25489a6516b7b11b2d31cac59eb69912d98e0e6d91c5fec64c6b70f4d5e7c364f63f07d97023bc7ae59929b96b49bb7b852a59dbda46af9ae8d0
SSDEEP 192:sxRNRAyM/jK1Ml80bz/f4sw3WpVaBYMZAfgc2zoA8p42/g6+WNIYZh4GjIgtJ:sxRNinz/f4sw3WvaCyggcrP/5Iq3
TLSH
T17562B6156628997BCCDBD20DFA557F53D6F81533A2901E44AAFCCA1C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3e15159d5e7013b10755442630bffb6aafc3a68c5dab05156ba7f2165d8bd2c7
MD5 1057a44c73c3b4cd0b157be5648695d1
SHA1 b7241bef7f1a633d8e069ec3f231bdda63d2c8ca
SHA512 d8c278b49277d57c62b21c2c1eaf7c757df679ce90ccf03bcda3d95df944cb0384b459aa281a17574099d98d2943a7ef1148bec8d936077d6990e8a8d0d74de2
SSDEEP 192:sxRyRAyM/jK1Ml80bz/f4s93WpVaBYMZAfgc2zoA8p42/g6+WNIYZh4GjIgtJ:sxRyinz/f4s93WvaCyggcrP/5Iq3
TLSH
T10F62B715A624997BCCDBD20DFA557F53D6F81533A2901E44AAFCCA1C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8a4930af2d11892598b6e1815e9216e6d16f9126bbf30847e2307161b9a0cd10
MD5 1452cf8e42d1a8bae9355c52d52c351c
SHA1 d9496565c81f01cffeb48c606820d2e828353f87
SHA512 47c10f8013ef4b5e85a95f6e1afc01b2ceeb92eeffc157c2e7cc5787e18ef7c9582d918e5311499db7df957d331b784621d48bef208553a79fe77a94407a3187
SSDEEP 768:7Oo6NmWg/zfmj8F1+UoAYDCx9Tuqh0VfUC9xbog/OV8ypC0ro0AjyZw:7Oo6NmWg/zfmju1jahwCf03w
TLSH
T1EDC20B2B640CC77E4F844E5DAC2AAE97ADD801CB97988D4447FA8D0C03CB7EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 3938d7fff5e4b1f138eef454b7b5863a5300e4e39ad926dd21bd79a5484e51ac
MD5 a49d286a2fba3a0cb924431f5a3db37e
SHA1 6afa8f98176645e5a237dbd82c326dd5f91d3b96
SHA512 e58d3bc213561789e9e443a271f0c752c5d1f039c34783522de76147289f6abe6d553290a61780f65abf4c4d457bde2464d0379ca493396f72fcdba1960adbcf
TLSH
T126E07DD306C8D17F62267443522D9348C3E5B427D2CC3E466F81EC606343785B3936D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 a7627d8e04219551ab7e64f8e03e57012ed328a8bf35435e626a77846fcd59cf
MD5 928cc9972d0ed58b18f24dc6d7678945
SHA1 c36a784a90d2156e1169e83880332ac03b7c6951
SHA512 7c81349b26388893b247fc648ef2aafbb5a5f0998a6480b97f07af9ba1fd56c2921f35ba4b6641db69a82230a5c533ed5453e951028859c3d5de4b8fe3da4257
TLSH
T15BE0DFA616C9E63A6A59248B9225E308C2E37413E6D83F566F0D9480A307580B387A92
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 b2016a2d82ad9602b19b6d5ca8260413806a323c0b65ca92d2f47af4eda1b68b
MD5 cacd4914d7c0d63e59dbf0c98bf04a07
SHA1 b22089ee0892f7f0043a232124053da4c0706dcb
SHA512 8c53ae92bc1c0f66b138a50aa0648274c1d5e9670021a33b034da75145cfeae94016b070d0785b0156aff4c5894c231e5effec9972431b1b19a988cd4fd8c089
TLSH
T12BE026B24AC8C6B955186583827AA71CC2F17C16D3CC3B8AAB084460A302581B3E7DD0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 935859953831f2dcafd5048144068996ea6d75b05e843ec07e0116e510ca3735
MD5 14b449106d00880f430f44bd7efaa2c9
SHA1 5cf01d0edf549cc4f8baf26089d6a359efdc479a
SHA512 dcb0a497dd64f6471522f968b8a400f421c14685cc99fc1b8f561210346fb7ec16426955e64230e2434dff8323045ae942c3dd7b8ca640ab8c5f248f25c6a786
SSDEEP 96:KRLURlTp5FWtC4gNFK40gjFcrzKtZ+HlyLf1vz3W7gugn3K4Wg53cdF4LDyEFw0F:CLURlTp5wtCZNv0gjarzKtZ+HlyLf1v1
TLSH
T154818746713702403C7D388881A6DC67C6C3B16A320E686BBF6911D75F6BE428DFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a83792d4b606faec7b08ce614be35c7143d766fbb73e9baa994a71c92f6a8631
MD5 5a8ae74ac78d97f1e9dc4ea884041067
SHA1 1817f82a5cd4c9a59906d3e50677aa6987aee6de
SHA512 0c67aa2810c185ae674e83e6b172ad91e28b4ee99f51b81f1cc106c840762d7a9ff0e3fd6da328e92264822bd2a0cadc2a880ac2b211f005be911f4f93813eb6
SSDEEP 96:KRLURlTp5FWtC4gNFK40gjFcrzKtZ+HlyLf1vz3W7gugn3K4Wg53cdF4LDyEFw0g:CLURlTp5wtCZNv0gjarzKtZ+HlyLf1vQ
TLSH
T113918646713702403C7D384481A6EC67C5C3B19A321EA86BBF6911D75F2BE428DFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 266B
SHA256 ec70334b580a480a025697c95c40992c02ddff7b8b1aa26759e57b92ff4534fe
MD5 ba1dfee1ccbc4c809178e36ecae4559f
SHA1 993a34688a07a9bd6130b575c37f2b94d9559176
SHA512 c00fe115874be8ee847f3a511283626edbb7d2ccee53882b1f213a8d4078d1e395c82885013950b5f2d41bb2c8d1646da242e761089d0076554ba238f581427b
TLSH
T1EDD05BC1623560847E8CBA41C11A7C03E4D9FEA9170F54B6775E56D94B448068E6FDB3
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 01ac332e01cbb4a5f84d0364bd96e56294f76f0586652087a4ebf13a3a5840ec
MD5 c243a1a9c96b281b9032f04a8e06f8ea
SHA1 e4cced02e38e7aea7259e5221586501699489368
SHA512 e6c30caec337f0cd4cf2d2eb10108b335264b56ec0f563ed6422f69b701d77f44b6370d40841a563ceb4da4fe85de86df6f2498e16744dba3a80c076dd540ca7
TLSH
T1ECF0E5C76F4219B7DC4254714033A783FF2189CB4424687743CD216B1A1E1F1C9DC1E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 1a281e6802809c820b04c147d50acb35c4ab604e1b3f574bb733a53cc9d831e1
MD5 70760206aecd059b7b4a012773240c40
SHA1 b4785a9c966e293371a2ce3bdfbab2b01bb13094
SHA512 86330d8bfbd6d9d003106f707d0a1ce60dd30b6aae44a8db860c1464c4a9f65056eee954155564fb9950870aaf4440e70a474c56dbb9ef55ad97cbb4c4b19755
TLSH
T130E0206355D4C19EE92520D721159B08C6F13413EB853AC91F17C4447302141F7471D2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 5cd4dead69c3ff90901eaaf7912fe84fa3d7d8e35f659f8a758411e2e0d2a5fa
MD5 92ed851f1120a9a1ff8f4689e0d11948
SHA1 bb2217cd7cd5bcb3bdcc1fc638954fbe338426e7
SHA512 a3c8a7eb71f924dcdff1eab058b9544f4e4368b4012528ad36ce0a498bd853fc2cdc31aa11ff87990a118e667b06f3610bd2cd0e32e930e0ff69f7978f474d33
TLSH
T14C21D456F330C108E24D827E947AAB255738E8568FB8EC0F857960742E72F441E4B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 9be1ac297bf557256120b14a2d39ce7c3d0d744a742bbc2d35b3862001f46b2a
MD5 f950a1b2e9dec01bbfab622fbdb2a449
SHA1 138bef4c3b35c991be2c03cfb87059939f3ac490
SHA512 8fea1dececd9b851eabe7ea7bc77057c0042a05c57363133a13779ba6975cf6a277dcc1e27e629f58f92990c9b70c73f9a64ef4122ee7ea89d4f302827241db1
TLSH
T19FE020E265D4C1DFD51120971165D78CC2F23813EB853F851F16CC485302183F7471D1
MD5 SHA1 SHA512 TLSH

Submit Download

4bb0c3e9-8834-4451-a9da-0cc237a20c5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4bb0c3e9-8834-4451-a9da-0cc237a20c5e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 42be9e21f62bb9dc26626ee5c912d9a95803c2715f9b495f079ddade73f44fc9
MD5 688923260f17113b43f9dd9fa6c8141c
SHA1 25942126126d76e7421a0f1b9b0e45ad1c88f4f6
SHA512 52d455766844f020a1b7876eeb81e4943ae46d59dcbc0463930ebaee2f2c3c733bb56e7e86202b1da74ab47c881c380efb1bff85c454a260900dfd2df5c82a49
SSDEEP 3:MsEllllkEthXllkl2zEfl:/M/xT02z
TLSH
T12E4404447FD04507C5001C304051D3701370D4110D53574334D104735DC75400C00070
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 45KB
SHA256 97bdfcd307b07de61e986c451676cff4f6e2dbf2fb82d2dcacf1a4023e413bd0
MD5 0a9b061d7eec8a532175227bb44398a9
SHA1 d15aa9881a1cf0293358f36c1d7466de0dbdaa7f
SHA512 2784e6f3f4307e31f5a493986f337f2452566a00c597659709cf8b4cffdaa15460f91c02cd30efbb6719905614858f3fffe20acf3db1c1f0e31a02923e4fa02b
SSDEEP 768:lrv+4UNbd83HJCxwOBxctSJiGcC3aHOQiBpe3KE24d6eUirYf:lbsbS3KEi23KEfceUii
TLSH
T11C239D3D9D29AC3F98AEB748634E7623AEA81137D2B40508DBD41B0EC17754EF303966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 58KB
SHA256 6f8d4551f7d22517ab43a5503f177e2d3cfb3a2401d271f2c22a21066af77c9c
MD5 cba57be08f03e2808928de7e326eab15
SHA1 ddb83b84191b4beb19a1eacbcf40917ea612acf9
SHA512 ee4ec3495f9980d0d42b58bab419f25ab6a53fccafd30e285d941ff2107c742624dadda201bdd6a41d1598e8cbd01e3f102d223869be49c128f85368979e5da2
SSDEEP 768:KFHj+923qwgpJvSJiGcC3aHOQiBd/QrK/a4+ziTlchXPvo8qXoqENBco+Ha3ddNC:f923DEi7YO/Tpc5IvX2IMdX2+0
TLSH
T1E543CF3ADC16CE3BE89AABC4735A7A06EDE01173C2E85984D7C44F0C40A729D8703D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 7f3d550dc2132cf12962c86f87696d2ade099a9c3aeb172e01e11479bfdc078f
MD5 7446ef9cc93f313f3a3c75b3625843e8
SHA1 5464da6aa1d7a120252faac7c0c56286d56877c7
SHA512 4dd7057912b80c0a6b03987ecd703c8074a7fd5b11f598c2d013ba93998043049879325a3815369e3ef7f6f0060284e0e6c7733939b9c7c99e401e053f452cff
SSDEEP 768:Jrv+4UNbd83hJCxwOBxcttJiGcC3aHOQiBC5UirYm:JbsbS3ZEi4UiL
TLSH
T10413CF32AD28ED33ADE6D284B297B613BFB8915352C81B44CAD82E5D059B15F430BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 e524255125a0ece0fdf42c505cccb7583ba78b9e71d7f6ca38a5fc3f8ef6725e
MD5 d1ab0205b216099895a90a06b8839764
SHA1 5f4c6dfb4ff32ea733d22ba3b38dad9a9e622a17
SHA512 9508c99ecbaff464a8a3636ef36990b03d05598d13fca4a779b99c9270dece3025a05dff5d9aaf777031b0cfc7406d620b67b2679ddf2cb0fd7a39dd9ec48106
SSDEEP 768:Rj+923oJCxwOBrJiGcC3aHOQiBCo+Ha3ddN/9M0:M9239Ei/IMdX/+0
TLSH
T10F03BF399C16CD3B889EE748735A3766EEE442B7C2E41D08D7D45F0D44A369D9703C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bc02c5d7d519ccec55d7c1799a746aeff62b5e57898b7dff56745146bd3b847d
MD5 2e0bc8a6c210f9e357ad6c53b5a219d9
SHA1 ead5ecb56ca29dc4318533ccf641e695cbd0206e
SHA512 8d43b8a4d12a2b8d2d95af763b81cc3d637807b96e9b4c7a5a0a6738a3916f9c41549dfbed03669645908a4681315934bac58849b156202e1ef132c2a34c45fc
SSDEEP 768:aj+923pJCxwOBxctXJiGcC3aHOQiBC5b9M0:Z923zEi4b+0
TLSH
T1C9F2BF32AD15DE339C92C294B3577616FFE4826793C82E049ADC6E1D09DB66E4313C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dbf1910edb9fa154b9453d9e0a970bc95bd39714dfe38f340adf879c4acae6c8
MD5 faaee9d74d59a56e06174f1720e2fc93
SHA1 7f0465b5652d5a62920cdee7ef9ee0881e36bf53
SHA512 e5047a6f45e07af9613ccd89213cc1f7f51392547909b2d10a8aa25b67e6fe1f6737e1bdf8cf3ccea5be8ed953ec76f9f278182a886a54704cfb646834a84c02
SSDEEP 768:krv+4UNbd83OJAxwOBsJiGcC3aHOQiBVeUirYb:kbsbS3wEi+UiK
TLSH
T17303CF32A928DD37DCE2D284B38B7617BFB8516396C41B44C6D82E5D059B19E0307D7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 bf356aac3e78a819f0a2b1131614aea9b100ab07492eb94e64d39f83d38a8921
MD5 6ed701cf915549e5a2611b56e8bf6732
SHA1 9b5350c937a20baad17c8ab53d497e9123908a34
SHA512 06d2bb50176edaa123530d65db085d1965bca9e593203cb0a6112030c578d9277e509436096333af3c3c4e4bea3acd3e127263e1596a1672c586eade5588d8dc
SSDEEP 3:MsEllllkEthXllkl2zEfl7lR+:/M/xT02zWE
TLSH
T1CF44040C7FD04505C50554315055C3501370D410171157D374D105737CC75400C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 5cd2c4d9f13524923046198c92213691539407e04fa520cdae9eade1bad3d91d
MD5 e9e365607374115b92e4abe4b9628101
SHA1 d5054ea9b22317dca83801eb3586017bfcc0e2a8
SHA512 a84d65ed53e43883e5ecb7848fbd48f5305a63e6975e6af480cf85532879720061106be54f2a5888ebc3569f7123081a0e6eb48ccb8d7dba3e1da1c8a3c50401
TLSH
T151A012078473800AE4144051C49C024114A4804A0219D0015060932314A40CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 98a55546e41fe03178af27446c0389ccc2781038f0b7348d2ad50846dc33f5dc
MD5 ed12c620433363f3bae135c5d15dca2f
SHA1 5414b1db440c59cc15f8847894da1f79ac9843e7
SHA512 3da4b07665fb714d7203dfd8512ceff56b29f2a6e7cb17d602a3dee21969cfb4a20236fc1605374054268d634d1412a3887a4a76a931bda931eb469c22b04b75
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfLe:TY/IHRH34kWqB1kQnjhHmr6ITmU9Le
TLSH
T10323886EDA2CA9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 512B
SHA256 6d964c21afc942b20171a9b52fb4c773a8489c07d54235a0b6e8b57eb31438ec
MD5 d0cddda7a876e103fa047e43f24ac52e
SHA1 b2e8d59626223ad34cd369000cb8a11f2d74c1d8
SHA512 4ac184c3a6bc6c2b7ba58da1a522a3e0e0f43cd2fb67ac70bff8151ac2a9c6ea1824d675973ba5ab13f473f00995de33419ce912c794c3c9163be084ac00905a
MD5 SHA1 SHA512

Submit Download

1047961a-4d97-4779-a133-8d4ba7ab49d9.tmp

Path C:\Users\Admin\AppData\Local\Temp\1047961a-4d97-4779-a133-8d4ba7ab49d9.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1008_693599417\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download