hxxps://www[.]mediafire[.]com/file/avml6w16956a09b/Drip-Client_Virtual[.]zip/file

Analysis

user interaction
yes
max time kernel
898s
max time network
752s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/avml6w16956a09b/Drip-Client_Virtual.zip/file
Sample260707-vlsafsat3t

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5696	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-uk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-ec\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-mobile-hub\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\pt-BR\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\wallet\super_coupon.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_121494295\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-bg.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-en-us.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-gl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-ec\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\runtime.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\wallet-webui-560.da6c8914bf5007e1044c.chunk.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\wallet-webui-992.268aa821c3090dce03cb.chunk.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_121494295\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-lv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\da\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Wallet-BuyNow\wallet-buynow.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-mobile-hub\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification\de\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\fr-CA\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1266418482\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification\zh-Hans\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-tokenized-card\zh-Hant\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1422641826\_platform_specific\win_x64\widevinecdm.dll.sig	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1097938819\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1365527373\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-bn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_250058804\Part-NL	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification\id\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification-shared\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-de-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-ec\es\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\de\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\en-GB\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-mobile-hub\fr-CA\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification-shared\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-et.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification\ru\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-notification-shared\fi\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-tokenized-card\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1042022936\female_names.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\cs\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-tokenized-card\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-hr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Mini-Wallet\mini-wallet.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-es.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-eu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\es\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\fr\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\wallet.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-as.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-hu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-hub\nl\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Notification\notification_fast.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_250058804\adblock_snippet.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\driver-signature.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-mobile-hub\ja\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-shared-components\pt-PT\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Tokenized-Card\tokenized-card.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1979038177\data.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4092	msedge.exe
2392	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279175257765660"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{2DCC5825-75DF-4644-98E9-3BFF09F1673E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{F9B620CB-AD73-4CAF-93D7-37D720084869}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5696	msedge.exe
5696	msedge.exe
6108	msedge.exe
6108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of FindShellTrayWindow 47 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4820 wrote to memory of 60	4820	msedge.exe	86
PID 4820 wrote to memory of 4092	4820	msedge.exe	87
PID 4820 wrote to memory of 5668	4820	msedge.exe	88
PID 4820 wrote to memory of 5668	4820	msedge.exe	88
PID 4820 wrote to memory of 5668	4820	msedge.exe	88
PID 4820 wrote to memory of 936	4820	msedge.exe	89
PID 4820 wrote to memory of 936	4820	msedge.exe	89
PID 4820 wrote to memory of 5524	4820	msedge.exe	90
PID 4820 wrote to memory of 2832	4820	msedge.exe	91
PID 4820 wrote to memory of 5524	4820	msedge.exe	90
PID 4820 wrote to memory of 5524	4820	msedge.exe	90
PID 4820 wrote to memory of 2832	4820	msedge.exe	91
PID 4820 wrote to memory of 2832	4820	msedge.exe	91
PID 4820 wrote to memory of 3052	4820	msedge.exe	95
PID 4820 wrote to memory of 3052	4820	msedge.exe	95
PID 4820 wrote to memory of 3052	4820	msedge.exe	95
PID 4820 wrote to memory of 5600	4820	msedge.exe	96
PID 4820 wrote to memory of 5812	4820	msedge.exe	97
PID 4820 wrote to memory of 5600	4820	msedge.exe	96
PID 4820 wrote to memory of 5600	4820	msedge.exe	96
PID 4820 wrote to memory of 5812	4820	msedge.exe	97
PID 4820 wrote to memory of 5992	4820	msedge.exe	98
PID 4820 wrote to memory of 5992	4820	msedge.exe	98
PID 4820 wrote to memory of 5984	4820	msedge.exe	99
PID 4820 wrote to memory of 5984	4820	msedge.exe	99
PID 4820 wrote to memory of 2248	4820	msedge.exe	101
PID 4820 wrote to memory of 5596	4820	msedge.exe	103
PID 4820 wrote to memory of 5696	4820	msedge.exe	106
PID 5696 wrote to memory of 2760	5696	msedge.exe	107
PID 5696 wrote to memory of 2392	5696	msedge.exe	108
PID 5696 wrote to memory of 2464	5696	msedge.exe	109
PID 5696 wrote to memory of 2464	5696	msedge.exe	109
PID 5696 wrote to memory of 1232	5696	msedge.exe	110
PID 5696 wrote to memory of 1232	5696	msedge.exe	110
PID 5696 wrote to memory of 1232	5696	msedge.exe	110
PID 5696 wrote to memory of 5792	5696	msedge.exe	113
PID 5696 wrote to memory of 5792	5696	msedge.exe	113
PID 5696 wrote to memory of 4744	5696	msedge.exe	114
PID 5696 wrote to memory of 5576	5696	msedge.exe	116
PID 5696 wrote to memory of 5576	5696	msedge.exe	116
PID 5696 wrote to memory of 5052	5696	msedge.exe	117
PID 5696 wrote to memory of 5052	5696	msedge.exe	117
PID 5696 wrote to memory of 3356	5696	msedge.exe	118
PID 5696 wrote to memory of 3356	5696	msedge.exe	118
PID 5696 wrote to memory of 3076	5696	msedge.exe	119
PID 5696 wrote to memory of 3076	5696	msedge.exe	119
PID 5696 wrote to memory of 2780	5696	msedge.exe	120
PID 5696 wrote to memory of 2780	5696	msedge.exe	120
PID 5696 wrote to memory of 1204	5696	msedge.exe	121
PID 5696 wrote to memory of 1204	5696	msedge.exe	121
PID 5696 wrote to memory of 4544	5696	msedge.exe	126
PID 5696 wrote to memory of 4400	5696	msedge.exe	127
PID 5696 wrote to memory of 2312	5696	msedge.exe	128
PID 5696 wrote to memory of 4272	5696	msedge.exe	138
PID 5696 wrote to memory of 4272	5696	msedge.exe	138
PID 5696 wrote to memory of 4856	5696	msedge.exe	139
PID 5696 wrote to memory of 4856	5696	msedge.exe	139
PID 5696 wrote to memory of 4716	5696	msedge.exe	140
PID 5696 wrote to memory of 4716	5696	msedge.exe	140
PID 5696 wrote to memory of 6108	5696	msedge.exe	141
PID 5696 wrote to memory of 5544	5696	msedge.exe	142
PID 5696 wrote to memory of 5544	5696	msedge.exe	142
PID 5696 wrote to memory of 4060	5696	msedge.exe	143
PID 5696 wrote to memory of 4060	5696	msedge.exe	143

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/avml6w16956a09b/Drip-Client_Virtual.zip/file
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffeb52ac188,0x7ffeb52ac194,0x7ffeb52ac1a0
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,12289237829881707816,11939674880259705809,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,9968585297981906182,14476835237377671277,262144 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:2
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,2478515396615727983,2091896934709680826,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,696550354339677520,1587808659760637909,2097152 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,905731421610935636,5448952134853237768,2097152 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5288,i,17298890946182514141,14278375592802667287,2097152 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5384,i,3246590787265738844,4491400318127672826,2097152 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,17879060783008776568,6157869275107354923,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,16331647896035169858,16865740228686460185,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16167769517556298427,2070841846984669311,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,15978608939105251510,2560575838092716022,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,15978608939105251510,2560575838092716022,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,8450055163946398997,12078843761943222697,524288 --field-trial-handle=2512,i,12408175879075298588,14989900910995046346,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffeb52ac188,0x7ffeb52ac194,0x7ffeb52ac1a0
    3⤵
    PID:2760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,17779637903533412812,16817227851257771496,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,15029371031287286648,17304807478524292522,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:8
    3⤵
    PID:2464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,5007836064813004689,4769880057573833077,262144 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:2
    3⤵
    PID:1232
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4128,i,11735304164146640152,15142054380654639343,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:8
    3⤵
    PID:4496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,501667959812332807,12439355223236136854,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4128,i,11735304164146640152,15142054380654639343,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:8
    3⤵
    PID:4744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,9379373271437398651,6518509042869919366,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
    3⤵
    PID:5576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,16737037293901896012,10256780196062065892,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
    3⤵
    PID:5052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,9023066307308765371,9363546669428172684,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
    3⤵
    PID:3356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,6085091516103224508,18197073543707632649,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
    3⤵
    PID:3076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13773115401512963056,12260942749307922194,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
    3⤵
    PID:2780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,14576437160014840030,3469371318695264097,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4800,i,3780859118606670877,4558943784440139296,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
    3⤵
    PID:4544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,11295360281883329076,5231055158230858712,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:8
    3⤵
    PID:4400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,2947247775199957437,18072230770518626674,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:8
    3⤵
    PID:2312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,13600575096455245828,18340797611691841295,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
    3⤵
    PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,17041173269984680931,9245328478039775638,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,5900280616642770936,6995924304007506965,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
    3⤵
    PID:4716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4616,i,5464397118613019335,8495932955227966500,262144 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,16344054458407746386,1537370318863760326,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
    3⤵
    PID:5544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4112,i,4621602766308797678,11686991117521575993,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
    3⤵
    PID:4060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1304,i,837500339505110556,11647140491969178733,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
    3⤵
    PID:5140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,4915815713752363723,3845869208759273861,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=1532 /prefetch:8
    3⤵
    PID:4376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4140,i,11814067894897232345,4922025959603272453,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:8
    3⤵
    PID:5688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3992,i,13613389733460425480,14306637060334977266,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
    3⤵
    PID:5396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1396,i,15617739964862573520,9100009733626628026,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
    3⤵
    PID:1816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,16503101271174953421,11819503202551466657,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
    3⤵
    PID:2012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,1988830815585421840,14088195423125684949,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:8
    3⤵
    PID:6000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,12132083365089626607,5806862443175504833,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:8
    3⤵
    PID:1736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,3722576463801758393,5814142817433646588,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:8
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1396,i,10467001895976891694,2802547761553176480,524288 --field-trial-handle=2552,i,4194576153392611046,3879830421189620734,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
    3⤵
    PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3336

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4108

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_Drip-Client Virtual.zip\Drip-Client Virtual\Read Me.txt
1⤵
PID:4692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1042022936\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1097938819\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_121494295\manifest.json
Size 117B
SHA256 41dc2f552ff2c4b12f937fb652ebd96687f2b951fde98b888d774caed5757185
MD5 74c7855716026a453dc82a05e542e578
SHA1 1cb4db41c68db32527d2d788c750d7056c6da4f1
SHA512 ffe6d31b1196a379f676f709f9f17e62d512ef035d1f01ed2a7561d2ae0dd06d991f518019aba918c17ec9dac4cec4f6ca675b01c409ab9557eb79eaa9946c6d
TLSH
T16EB092B00C0AA03B22C19320ECA066CA83F80218E8425B1E08803A481F882B881362B2
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1266418482\manifest.json
Size 141B
SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
MD5 811f0436837c701dc1cea3d6292b3922
SHA1 4e51a3e9f5cbf8c9c96985dabe8ffc2de28dae87
SHA512 21e7bf2f8333b2900bcbcb871ede14684073249597d105095dc7d3f101e7ccc326068732f11d4a167365f245a3f2205793f520c7666d7f948e70919b40b43d35
TLSH
T134C04C5185005D72509D87781D6C97054B12CF4618947509DDC68309EC1DCCB64B234E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1365527373\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1422641826\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1867386528\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_1979038177\manifest.json
Size 53B
SHA256 b2574db59e08ca01a3df98d2fb2d691981bf8167321f9789caf4e456364a46fe
MD5 8a7fdbc8b7044c1062a9c2ae49afa19f
SHA1 0602a4bc23f1023beb5c2a90235ede1fb8b6df10
SHA512 51584c3507666262b06f6e31da984947d18da8fe44d1b47942a4483b47573596abcabfdb739a894ec18eed6686591916cf60d5999fe3a76f3f2e6d94b328b2c3
TLSH
T1C49002604414951716C10E5065F0B881D391A61995850D5D04451559029546CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_2064056338\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_250058804\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_794906241\edge_checkout_page_validator.js
Size 1009KB
SHA256 04047fbad72cb02b113ee3a1f1823227aac74e1615fc5fa359d11776c727259c
MD5 21147b0280aa959a020d50a7d5738f17
SHA1 2e57c2a0e0b2c1f1cc78acf1a8fbb833c01b984f
SHA512 92db10d864968ee94156df795552867723aeb7ef03341e00c7f8cf11542a8443f83e1eb2487631ed38b441d4af751c8f4b3f99319312e50d8501df74263c01a4
SSDEEP 24576:cs4ymRAbsvvG3kJ6ARjiQixwaErg/OUfWEo0EQ1Xp8C9T0dK/vzHEiJsfaG81E9/:cs4ymRAgvvG3kJ6ARjiQixwaErg/OUfq
TLSH
T1B5252B84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C68CADB0F94723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_794906241\manifest.json
Size 146B
SHA256 c97cc8be28f97c110b37ace786188903f2f1c9d6736e5b0ebd875d900340f4a1
MD5 c8b91ccf65e0519cd165ad5171ae6169
SHA1 bff29cece85fe2c0e817a1de9746ab4ba86c5626
SHA512 01197a05068fd9a4f7fc08e09f3192d5418dde6b62b6e5ee5aecc2e19cb28b4734f8c7b5d7175f08f55ac2c6e8a501e7c2ffa1725b3960f7920632bc456dcc4f
TLSH
T150C09B73C931AC71157507D449F59745EF74974BF511B0563731018D4B3D57550606D1
MD5 SHA1 SHA512 TLSH

Submit Download

notification_fast.bundle.js.LICENSE.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Notification\notification_fast.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

tokenized-card.bundle.js.LICENSE.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\json\i18n-tokenized-card\fr-CA\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5696_929469532\manifest.json
Size 121B
SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
MD5 8083caaf7f5bc5f01ede464e68db1c7e
SHA1 ed6cf18f79c4ee2968adfffe7bf1bce163ef3873
SHA512 60924bd5617ac5f994805f9a871999764ba93c6adda79c501a0b692dce51b9db6f6531a5e25129bc424ae7c4de868ba6e5a976d6bcfbac2bb8bd192c5513c7ee
TLSH
T10CB0922289429D300469079809B486A6E230674BE406F0397B7041CC8B785B8A4A2A94
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fde3047f99414642a72b9d4ed89de016f2244065578b284bff36caaa54e7d46d
MD5 194705af31fce27cdb98163b9fcf81a8
SHA1 b2d09e4a6c1ad5bef281634eb3202f2d1d615b04
SHA512 05531337ac91cc7988137059be025bb6688b9f5c8b2004da114113106227596c830c353bc1c380126b0c06eb70e2953e1760596d46db5feea15d8211e8b150e5
TLSH
T14FD0A7E8662AB9D1E13D1D32A4208700F66C16932966D305E268440D9C7E09666C66C5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4da7551c4bb0fbf464609e0050a4cee8db61c59491eb6a14aa98bd90017ddf85
MD5 b628ce2a0cac33a4d4ac9b6d2d4d9ab8
SHA1 bc612116bc512bc38034ecd839dc282a8f1f0a1b
SHA512 6da07bd7f5caced45241282e602bab7dfd0b174cdb0d3393e8c3fa505abc49ff289bc7743eef0472f43bf063b8601cee6f428c048ebb9c2af5eabd019905fff1
TLSH
T154D0A7F877693851D22B3D317410C611B7A957912919E311A178400D9C7E0A526CE185
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 99e4e486aa08b1071ce341164245f39a6aba2d327dd832f99a317b1495129687
MD5 341211e8f587b928a1049bd2c11245a9
SHA1 c0c61d4f512549013bbc35108279911520a97b7a
SHA512 65ca811bafb9e7f19bc58a436817c0d9b41623df7c6bf7093ae0b551f76b7c22ae6a4c4916213937f5faab2c9af142f120505773fabbabad2a35d18ee1252f6b
TLSH
T105E0269517C8C6BE9E13B4878564930CC3D0371BA2C87A1A976886D73683840A7A39E8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a646867e89640aa32bfb535c7fc037d497720006c1c6778a44fc9cc5c19151d4
MD5 3e17faaf2916942e8a1ae02e3e891469
SHA1 76c0e7dec6649d143d6b3a7f531363f15371d9b1
SHA512 6967e3991fb2f8b4c072b8809961b808c15cafb1197d106927bd3fa3a3d9580ee19252e908dc9f5497953bc55de42730c1cb8ca849e7adf228e3fc37d3f47b9a
TLSH
T1EBE02B66C822EC2718FD0718742D864AE70013172A41495F3B3C920D8FB573B46C6C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 eeb27baeb03bf29a572595e5c1db4182389c66011465e6bbbe0f00c4ebecdf85
MD5 ef466b27309b9185bfae1cc730d2bd90
SHA1 c1afec75a1d08edb6cc666281b89e69088c2ba7c
SHA512 672f7dbe0cc93184e6fc65479a32262d045cd55e302de62e20900d9d8ffa1f1879589ba2d405df408ee7f805f4e507c46f92abd5de5bf08e119b6385b8a6ccfb
SSDEEP 384:psX8kmjRh5WM8AVxrJkbTGzQe4ece0Kp9qz2kVrUG6qot+ARt+:pRkmjRWMRVxrJkbiz74eBQZGq8Xt
TLSH
T13B13D83C3A695DF5D6D7463E4A4F1A78673CD875F2D24F8B33323212229678A398E850
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 2c0be9da09bfe676ca2c5b57468ae81185607f77779a2a6617b426ec502b10a0
MD5 862351ab789f3b6bddc3493454189bdb
SHA1 447f17198b00149dbbfaf60766d591c2f6f50515
SHA512 c7980b40a104921e88e909c3439e2164341fa3537ac11239603f8c956a8437220b254e359cf40f5e2cdd006208c98e08e598d6a28f221b4127e0d717dc66fbba
SSDEEP 3072:DL/uL/XEVWfFL/PL/zL/D25l0guD+GfozKM:DL/uL/UodL/PL/zL/i50+EAKM
TLSH
T1A6447FF70950A05BCFA802F6D2133A3DD177056D7CE1E8E9E6784C952825B32B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 e38baccee28f978c37094b1969b11e07d3c19851cce2f3e6c825f65086bc6733
MD5 8e0dc58df86b3562962e1c8ffa5aabef
SHA1 774cd9ceb674ea773d1c6cd088d1f8e7333fd25b
SHA512 8f19600e5e80634954b9e19c20024df3429ef269cea78d25a22a324575849a50f799f4d392485d162f862bc807154102a06fde474ae911510b6eb5486964303e
SSDEEP 3072:ODf9y+HI5/uCBLHx2b6aJN3QnlcZcHYiNrZGY5mFPprn/Y:if0v52gohN3IcGdFZGY5O
TLSH
T1CC2519EECB682C92CA6B8774B0E0D9077E712183B68CC0D39944C5D897D6B8175F92BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 3699f2c4068335a4fc7314bb2efe0d9bb9a2de6913eb1f0919d8ec4ef719b43b
MD5 7ac479b452164b6a0a0e932b9c90f12d
SHA1 b3e7b0b4dab572f34f46e36e6cb531e92c63a7e5
SHA512 639f1ab62f07930e39ebf4cf3b400a44d2f453e4a4ed78c54172499deb9c9f0715ff6aae63a3ff51a0afda9a5a5d855e3495b6a8b567b2ed6a111a2c88d6bed7
SSDEEP 24576:ZYIolGXKYmkVoA59FaLlPygYWAM9PJhe49JVs6uYYUlhiCCO+sGL/Uq+PkJL0frP:ZYexmksLlPTY+Py493sIY8hyJt/CsxK
TLSH
T1FA868DEDCA6898C3CD639930B1F0ED477C7413C3F995C1D68898C684026B7C5BBAB669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 eb1f89eadb620be5bdf32e3c92dfe175ba0c4c067f0574461702ef01ed2387df
MD5 b16885025f5c14b4a8284a41c9c05dfe
SHA1 c4e96344e4aa3772d6a878645476c0e50a16cd9d
SHA512 7d6b2ec944f9eef27c02b5f1b9ead657fe2af07a8576489867833925c02e8ed83cf80bfff6ea9ae3bd9fca288cdba43a37f89adf88be46d2e1fbb8080d19a030
SSDEEP 96:V5AAgsD9UUKhBZV6QTnMV5ZF6o+HJixXAi2cxOHNvQ1pmO:V5dlxUU0ZV6QLMVt6o4sB/2csHNvQ1sO
TLSH
T1FC81C739856677F1E3324237A8E246023D3DF9F8F913BE96498461382703B62782DF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe586685.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586685.TMP
Size 3KB
SHA256 b54409d9be10258ef17edb6c9395bcbdfb968660e9ae8f03a09ad86b62c67073
MD5 bd16d9f49a603e4794324bc0545a6be6
SHA1 a177a23d170592cd2314308a2429d6f54fc27563
SHA512 ef65513866510887b261a25d39b527f30da674e70298508f48fd48a705aad91659c282b0127b245b4e623ee940308deb9df055041ba56584cbbd4c48875ff96e
TLSH
T12871C73D855676F5E3324336B4E286023C3EF9F8F913BD96099421782707B527869F88
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 29f43275998e7b692228362bebc667e3e220b00f752e618b516e4227d4f4054d
MD5 2af9c1bc2eb357b84637fd6e32456e29
SHA1 3dda17d240488b94d078372ebe612c413bc228f0
SHA512 2908b1d59f5bc77e6199dead5fab940896d5c94dab55e8eb69e2842fac59357d5ce8b7f8cc16b3d64aa453b67249e62a0cd5eeb6d42a0006afceb78bb6a89f9c
TLSH
T144E0D8A599C6C27D6D60748242246708E2C134AAE6866E076B848CD07B47503B7C3597
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 9c66e03ddb555b8a2c29f1227028e3141c773bf5b3e1d5a44494d9978f0c8199
MD5 dbd4b7abe05ce7da41d73de2010609ef
SHA1 182753fcd5f9c4b7a8addbd2457dccde96bec01b
SHA512 c29a2fc1106d7ff26264c2d64ffdb1a3bc5a12e062ba8568a602ba6519881c26b39eba7fb49948a4069fcd86f041b4a2ac780a34bff3d6c9aedcaea0d0f0f9f1
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jbTPW5L8/K5fKFtIzLOqYpzn:Tyi+7f+UZD4jJ/BjWxECKFOWTpz
TLSH
T1E7E2CE8D3B11F511C8ED777DB0C2C5E09EBC696C868D70B0923C98768C63AA2F59E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 ffe190e6c28572153cf0368ae52828c9cf9eb8d2522298c55d932602ad123953
MD5 cc5f832d675f426436fb693792a2c911
SHA1 c3afa97801b8a0928c9e989ca2af8a3f5e1a41a9
SHA512 86eb94073597cfa03e3288faea49253a59814e1b20a27c336944bc443f7d4fc37d619cbbcfbac0a0b9671067a8e6178174515941f2c308524dfb6d882d967a71
TLSH
T1D3E020440ACCC11A681474D382BCA34EC3E13462B6847F0167D998506242F467B591D4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 4342f97a72cb45485a475b24dd980e88abba5bfdc4e1540eb829f9377299edd0
MD5 202b3e65e4c9e249a00397928dffe35e
SHA1 d8d20e03a89692bb14f7ec012ab0df4de383910f
SHA512 47b78d9ffaaa5e3a60dfdbc0b1d8de640a36a9d461a5da04962639fd5a3f4adcbc4b8e36858ff19969cd28bc43ea2a8fe8712c56beaec8e96710a45ae57c81e0
SSDEEP 96:nT+l73Px+PIU+bGz83uy3+u4tgp4DLjGQLBze9z3VjBHMsDEuspU0wbtqrOQpPfX:nT+RIPf+G83uy3Ct7XBBKLH7DXspU3iV
TLSH
T15D14325E5F643721CDBD817668E744B35C7DF02FCB1266CA687114B4CEE2A52A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 496B
SHA256 c4a9d6482254cfa5df32d01aee1b196f4d77cd41913e2b7250860671f7ffa6ba
MD5 47f8e19edeafe200ba8ad2f3fb64d053
SHA1 4f1c461d723f17514af82d6b8d1c9b08d24d80b4
SHA512 4ef0e1a71a96231260b3c95fd56d9619493e67525eddaf5f80d3b229ae64ae7230b39d8c388007860437a764f3820eed957e76286dc13a6b91607f38f6ca1d39
TLSH
T1E5F0A0B78CC0A0BAD7174C75E17AB7EDA317E49D1EC0D3C5E402E3454E444B411D1D02
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 3fe7366e58b56a4ef0ef7fa330e65b4cafa22ca8bd5b272b3f38e1a0d89c0053
MD5 2d5b06baf2ff9cc9e46dca36477a399a
SHA1 85895aeeff8c4047f6b71796ae423529f2f4b010
SHA512 f7b0c724e5407dd77c1b71d393f147cbb5ae118f5c375e4802a77e24ccd57025332dd7de895a54ab6107f932d0055c4e82d6b72ea812f8a98455d5fa8e7ecb0f
TLSH
T177E020A149DDC25F7A553047433D778DC3F17416F6897F01EB44A940B542944AB851D5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 4698808fb20c4f2360555fde10e0cc849ddd9336ad1b15882df7c5453ca1e262
MD5 d642ec067fadba6408c1a1b475efa6ed
SHA1 3691b3633fdc2f72e144512b12575ed91c245052
SHA512 92f269d1b1699bd60f7b3c0bd5822efcdf52b1db353217476479fd882ebcc22430766f229a6b336298f3449bc345207f61287e555957f1f26bc4b28d89b92d04
SSDEEP 192:D1jYvzJh/Z/Z/wM8j6SN2inYTk4lsPxee4Vp2V4qQVBtFag7Al:D1jYvzJhRR/wM8GSN2inYTk4lsPxee4Y
TLSH
T131029DF7C2E9C51E88015AF85614AE1BCE1D0715832C3D2A88D5EF8BE3E3072D15964F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 80bc998f2580a65d105eb5f9f8e2fc1f273ec795063dec47064053c42bda43dc
MD5 0472eecc688091306192dabcf96810de
SHA1 cfbe612b2eb116607289c598bc24277f090ceadb
SHA512 09cb806f9e31805001e691889a205d7f0b957cbce77eac7b762f8c606a63b9d1af5a75d7be812ed6a4e3342eb9675224be485c46b97e76cddd7f07286c835c2d
SSDEEP 192:D1WtCaq7t2A86Jbaaij6SN2inYTk4lsPxee4Vp2V4q0GMVBtf:D1WtCa6sA86JbaaiGSN2inYTk4lsPxe/
TLSH
T1CBF19BF382E5C55E89015AF86A14AE1BCE1D0715832C3D2A88D5EF8BE3E3072D15964F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 e673c50593f3107a19fb7de12fc3b561efa72a3dce580af9d514aaf9409e1c77
MD5 e30971466fdd244f3cf869c5fa787c26
SHA1 7cabd263a19f64ccdcec03ccbb6b45e0f65eab81
SHA512 ff0b5e657ba8d59fecac9cb2b6358a4737ab62cb52afbdbb857d28befa61480f400e1455243110ebf9e392c4b06d1b7b820c9b28498f8cbda506d937d6090b3e
SSDEEP 96:eIEumQv8m1ccnvSuolqvdQalbxf3cQWbanFEJrMTLSh4g:eIEumQv8m1ccnvSuhPFG
TLSH
T144F2CFF71627A106C99445B0A0005F8FAF16021747B6B6ECA6D05BE3F2930F3B57D756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 858B
SHA256 aec2160225100b1d0dc003bedae70de5aa28129b9d454a7f1b66f1d6731ab713
MD5 d9a22c8e052d6df842d84c9cf055f2bc
SHA1 77163d777add30a1bf8ac634e57cae5024fbb6e1
SHA512 0825bb778197b4654199055fc5499896e721c30b7fcc2b219b3d79f0cc7345b1a50f39a9d5e17375f3daadfdac00b08613f3a394b22a97c1de30b2bf7490f2a6
TLSH
T15A1148ABC1BFE467342C987F0D547D092A7EB836034158BCDA9AC37D70854BF6B12865
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 9123bf326bbe4f528434e5734eca53cbb6651bae1366993c86883ab989d2dc6e
MD5 719a0f820d895f7b3563a594d9ecb31f
SHA1 4b5c83fa7858b729aa92590ffdce312af4556184
SHA512 bb3e618fd5ac862b5b7ae1ff3c06b930b6e24f6b4c7e6a20efb18df25942593922e8ff0e5d68e4aaeb965a42570f35e32e69f66138b08a5d83473c413522419d
SSDEEP 192:sxZARdyMqZjK1Ml8W98/fhsakWpV0cJaZdgbzodpuwHW6+WN2zCOM/YPUu4PrqWs:sxZA2F8/fhsPWv0OazgAvHb+0/Rrq1e8
TLSH
T15472F8066A345A7BDCDBD219FA55BF53D6F81523E2905E449AFC8A1C01E7BEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 405fc20e0bcb1c89d7d8395fdd6ccce75b76ad5d675be4def24de465402d5251
MD5 81839aeafd9f4d42c90c2f23eb53f2e8
SHA1 be4af7330e29938aa273b0f1b81e6fe0c54891f8
SHA512 e86f6ad21aa0f9612f822a1da9c1f90654cc1b50f49dbaf08527a609b152e43d1f269e0cc52aa642884c759247c036e9a081ec756b4955aabde30eb1f47d81bd
SSDEEP 192:sxZQRdyMqZjK1Ml8Mk8/fhsscacJaZdgMzodpuwHW6+WNmOM/YvGC+rq06IgjYJ:sxZQ2M8/fhssjOazgPvHbQ/jrq9j8
TLSH
T1E162D8166A34597B8CD7D219FA55BB53D6F80562E2905E449AFCCA0C04E7BEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 e4561428a94f06fe540d193d06ab4f61f84ac1902a78afa6517a39cff5c58a09
MD5 176f0b4c7400c453073074b7abc53ddd
SHA1 27400f97b650a72c5ee1d7ce7d818e952581a1bc
SHA512 cd989b6147297114095f1b813909d2b5c3ca800bcfb377d57d3209405c983d844ab79014209e31c1f483551d014a0b0330a1b8030eee182dae4ab33fc8a6c658
SSDEEP 192:sxZARdyMqZjK1Ml8M98/fhsaacJaZdgMzodpuwHW6+WNmOM/YvGu+Prq06Ig5yYJ:sxZA218/fhsxOazgPvHbQ/frq9o8
TLSH
T1AE62E9166A345A778CDBD219F655BF53D6F81162E2905E44AAFCCB0C05E7BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 69690d2198cc306427fbb8202494acb3e58ca790c539ab8396a31bbe3545a3a8
MD5 9166f7b9794665be027a1291532d1ec5
SHA1 48981e4fe99bb26e05e00212afb0383a9fc696cd
SHA512 1519e1ca6e5e68d98f9a18776fedd7dababef57a24ac9285707effaf4f10fe9913e2555e74f75ec093c5981b2a824ccf2c42231e4e98c2f38b6983b65a1cb30a
SSDEEP 768:ZYsv8Od/hWvFvQX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQro9RLG:eY8Od/hWvFvQXu1ja10Lm2Nu/S
TLSH
T1F8E20C3B284CCB7E4F840E9DEC26AFD66DD801CB66984D5447FA884C02C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 32386c3c74a5a1f4e80e286b20474b94ddaaff2b4c554b609d2b2e463b605bf1
MD5 111779addde69407e9124e4a14240430
SHA1 c2b31e10ef9d624896895be760f9616f632679c6
SHA512 a8f03a25137bf19b8dde9b7c9fcc8077771972f8305a049451bec56bc4ca6dc5f28bbfa0b17b8d4ed67e0e0cbd81c721542527a3af8a41c2c4cd42136eb67a9f
TLSH
T191E026A94BEBD97D791534430228974DC2F67527E3C83F027FC8CA607747985B2921D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 d4cae5da5f85f5d4899cea43b34bab81dde3236c15e88d4e2e9761ef17eb5895
MD5 dc6b404d6904a4c756fde8a7d41aefd9
SHA1 53731b2828315f82edd50e652a9aeda622c7dad0
SHA512 8931c5c6a83881f4a29a117c3860d8a0a70188524e127f791161463e8bbaeb70160a216492f2893a9f16183795109638e7b087502c823fb9bf9af431f11aa794
TLSH
T1DEE0D8795ADBCA3A754930875228E30DC1E37512E7C82F117B8C9550730B5807343190
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 6790f88eb43780fa8ae69945a5e6faf4e2f3567428c00728a4709ead66744e6b
MD5 eb129639582d43cf7928c112088e7d29
SHA1 2c40c6737014763e7f0e777093bc754202e5e0e2
SHA512 616c3159c1fbb80f1c0fad337963606532d698dbc207f7063c00b99ddb6f7dc755bc29c48e33b3a24a8087d439357c114976009b70f41fff0e4dd5df07a64ced
TLSH
T125E026B98AEBCA39790870834268A70EC2F27916A3C83F02A78C4460B703591B3A71D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 22e49990c5da895b0ceddf791aa6f32c86081b38a038f752c41c66740bd7d892
MD5 4e417fe1ac4975f7c500731652ccf5cf
SHA1 4b9314816711b14007b58ef58917665845e070dc
SHA512 7973d8a33e1f162c9ffeba2b29bdc31caacce6b5d36eb14c9252e35de18df1e3578d5d6cd340a5bf96f095f9d86c478cccfbcafa4d0a86e8c0962578f920f02c
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J9XP51inOiU0kds5ySaHgIpy6hAiLHXAlhXVFkx+VG:0LppY93PBZJPtN53XBjJ/
TLSH
T186C2655A713B0201397E2948B29596364F8275A37158E8BF7FB814A14F27E224CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 544428b45c899ef83563f55409e6f5ce1d03fa8108886d9f103e3b6dc8fd7255
MD5 060e12fd9191af05f2840514404205ff
SHA1 e5b413f61510ec7384d69dc31c26835b40e59cf9
SHA512 2c52ceb3a3577fbf436c5bdc193c4bf40d0fae73c982e3a02f61951a9281a40c367610da7dccc3128cd74ab56ec98abaa4504f88a9c7cf0a4161edc8aca92da2
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J9XP51inOiU0kds5ySaHgIpy6hAiLHXAlhXVFkx+VD:0LppY93PBZJPtN53XBjJza
TLSH
T170C25356713A0201397E2948B29696364F8275A33158E8BF7FB814A14F67E224CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 b3cf60023a7f71ff7b45962e727cb92006aa0850112a0027d27f09ff879f0922
MD5 69e8e50cf0a8171ca354b354ca186c66
SHA1 78023ba46071f73220e3900653df1d2bc0c7fd21
SHA512 84620d659ca5913cefa3727c24c49da331feffe90114cac511586c348fa9c46b4c1e43699a552820db42bb011e5a80258e7ae47862f23ef350fe1d59108f07fc
TLSH
T1DA51A2C193A910966F89B982D21E9413ECE17F5E230E9CB6332D54F44F84C264E2FD79
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 16KB
SHA256 24aa3efb684c1e687ad68be0fac3eb2d35fb10c7ecede4c1c8943bc1262b5a73
MD5 77f9032754a2a2689c75bba99c942383
SHA1 0bdab5592a946a8a01f13ff71ab22bd59f75b556
SHA512 f6b475c06e15779fff3fd407ea421523ea76057e56aa93ec401bb69db144f12bf6b09b00224fcd02d0f2b448a7b5bc9c91c5607f9dedd81f4865f99c584576e7
SSDEEP 192:mQOA4AsBDl9HNCsMFP4flmIkIuQmIII1blMIMHOYcYIGBIOI0:GAhsBJGscZIkIuQmIII1blMIMuB2IOI0
TLSH
T1C372A56EA7047733C1AE2F77127687685BE6E8438577635C3821284E9DF2A2781D43F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 aeb48c6b103c065b4808f22bdae2c2ff8142f3f802a967ac8c50812157c01ac2
MD5 4c2443d0227adc2d9687e66755b591d7
SHA1 76ce77e30a0648be8faed2692988686caef04018
SHA512 56298d59e25462ff2e0ab7e6116963b9a73fb87ea5677fc7115d814c6c3dfe069e8c73e9f226e341e0f21a31e595ac24c2789f3cba58a8ec3b18df8aad8eed60
TLSH
T198E02610AECAC17FB9183097013C538AC2E23A13FA882E876F48C444A603A21BB862D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 e84bcb747a7fa0e27e3056800ed45c5be3631043e084b34d12aa9f535289d51a
MD5 ae49bff9e1d31403c1f7b6bca8fe6f41
SHA1 49139ee2b9548f9b11abd8dec79e0669e11ead57
SHA512 d614126b5433e8af99b0708f3d6379d67b841f46131677b64f27105922fbe26a23d300c0425ede617d873401bd996f69fd0b4c5bd0fe5f6ee852481fda8a2e6c
TLSH
T181E020106DC5C17F65143093017C938AC2E23913FA842F436F44CD445603A527B462D1
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.17\data.txt
Size 149KB
SHA256 fac5ec341b2f4b9c98a8bd7ec852589ee81e4938812666568752f36ae4f115ab
MD5 37f7815ef32ef7a6d94bf74fff24d177
SHA1 7f89ad80f67aad3ff68cbb27b15bc2ec7abe1bee
SHA512 843a7845f7c020a7d111b8dffd1482625fab9eb15afabff99e2cada1533d1a90c33807c208e536b4062cd4356ca9b19ca648f98b8c708d840d5d52378af13e03
SSDEEP 3072:SPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEhRUnf3WzARDcgGfQUX:+X1aI5aZoKzMJ07Nh6n/vDcgMQ+
TLSH
T1CFE3F1148DC44FDDDEA8291C90FD0F2D23A0C6AD857BA5CAE323BD49BFA79045727185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-checkout-eligible-sites.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
Size 23KB
SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
MD5 ed22bc3ded6df0109b9e594867473559
SHA1 ee39eb80dc23f7fd764199cbe4a153c4edc2e768
SHA512 fb337c0a0107dc37a3067bcd6f60ffb8f63ee892a0ff729dcdf67c7a21fec95a742a274853e8947489108d7543c13b9479e02574f490bc217e8a182f08543aa3
SSDEEP 384:rQR5dkrKzmQWgFlhpyZv8CTi8I6kxAvh0mD:reKrMP8d5JIVAvhV
TLSH
T18CB21064C9210DE11FE4412B6878224B1A3C951B8F90FAFE3B6D928C1F5E06F61B95FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-notification-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
Size 804B
SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
MD5 4cdefd9eb040c2755db20aa8ea5ee8f7
SHA1 f649fcd1c12c26fb90906c4c2ec0a9127af275f4
SHA512 7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209
TLSH
T1AB0189EEC8800EB216C24A3A163985C31A3756576C953D147FC9741C2F5D62F22FB98D
MD5 SHA1 SHA512 TLSH

Submit Download

wallet-stable.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
Size 81KB
SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
MD5 46ca0b1726448d9c7ed48735c246336f
SHA1 8e26f1f1c6f909f2f3d34c17e042e579f3b2b449
SHA512 c9ec0465c2c0eb0bc0316163f9a2dab9332c372dfc4ebedb0ef4139fe1195efdd8aa34367155c29e659d97d5a27e2395ce2f6012c115ef5791bad270de26bb28
SSDEEP 768:r7PEXSl9cv2tlNnqSBBoCJkQgXzwb7XARjMLVF2CYgYHFkJ/Eqajvapznp+9l:08W27jLgX2ZLSgYHFkJ/EqajvWnAf
TLSH
T1F283DB29C9120DB11FA4001A28BA290B297C960B4F55FAFD7B6C938D1F0E45F61F59FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-tokenization-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
Size 34KB
SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
MD5 ae3bd0f89f8a8cdeb1ea6eea1636cbdd
SHA1 1801bc211e260ba8f8099727ea820ecf636c684a
SHA512 69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa
SSDEEP 192:0NOKnK+QXzpTYaDEqIyVZ5mxzrIAfrXKoNKExGI+MmsMR6Q9GMKPrZnfB4FXZ8N:SOKK+QXzpTYaDEq/e5EAfrRoRI+B9wC0
TLSH
T1A3F2FCB1D9009C932F58850A20BA9505376C52237F86F9FA736D424E9F9F58F2530EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 efa68442a58aa26d8baebc7ee3b621adf581d13addfec9d726a268bd7e7d4929
MD5 e3097722f97a8afbe7cc92e77206a554
SHA1 9be06606b9e1154344d9f1963981a0ac557f33f6
SHA512 c76e46af861b087bdd86cb411c3c828a235775acd0180a54aab047ac6be89f76ac27beece73ca1404708bd014158ef144c1a872c4f01cb7184b1178fd957239b
SSDEEP 3:MsEllllkEthXllkl2zEflPQCl:/M/xT02z8d
TLSH
T13344041C7FC00405CD1010304051D3543370D4507517775334D10D337CD77400C00044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 56cef99ffe36b07315e9838899b9320e00369ae4ad2f836a76500edc96405f69
MD5 d82b5f6459191acfb93cc90858646e23
SHA1 0b09166e700b2f41fa8e21c510ddb97bd272dc9d
SHA512 07c41f848d7814d535ec12d6e9d33549fbc3f7706977d25b611cb5c74b9f694bfa17086d14716d81ecb1e565c5cf3a6f6c6080ef61a70637055a6f027fa907b3
SSDEEP 3:MsEllllkEthXllkl2zEflagl:/M/xT02zW
TLSH
T19B4404547FD00445C51010304151C3503370D450551357C334D104337CD75500C40400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e0616b55ea1d3aa669928baadc784d0de5f053fb9c22b91865f90cb020e76d29
MD5 17f3bd369a7555202c920e45624ea4be
SHA1 cdfc1963723d8a2cf611ec8581843a1926dd6c56
SHA512 bcf1b81169c782effad466b9eefdbda6cab53ae14379e8be2ae4fca96caa4a3b98fabf27bc7e0386c4af16d1ced16bdda154e7b0fc6fbf20e26046ddeb88c3ef
SSDEEP 384:n0QiFV7tNn/s3n9SCsNd8TUNTUlI4HQckCrY0E8GE7bpv4fxGgxiz0yJUHcvrBB1:eFV7j+9lswguk8RkGgGJccDzNi29Mw
TLSH
T19DD24A36D855DE77BDE74B89B75A3A57EFE001A789CC5AC4D5D89E0C01832AC030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 4e6749c721b929492e3879a197d0b33820513f28e3666f76576346013a023f93
MD5 442c50b298a99a3820dfbb95ca07dbc6
SHA1 2cfd61c7891fdc1c63741e339304bb393a5ccfa5
SHA512 bf49db3eb735ccb88b6748b4ee6f9b3618c8e5bc35862c1fbdc3f500e7407e0d034c8e1855a5c47e4a8144e22834c1de5c7ccf849d02c11001feccf51945cb4b
SSDEEP 384:np3iF9CcmyWCs3sNC8TUNTUlIm2QckCr9l/PJKpv4fxGgxiz0yJUH9AJpwe4KV8w:pyFccps3fwgbkU/kkGgGJc9PI8p0YM
TLSH
T13AB24B36EC58DEBBEDE34F89B74A7A07DEE0126785D85AD4DAD85E0D00871DC130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c52588567c6976ada324a78e5c39bcc1d697d3a8141770a28ef463e0149a5732
MD5 cbede2bb38d40abc88e4ab2ef30de5bf
SHA1 27f0c1377fd699a5e36fd0af3844a37a4d43e1cc
SHA512 39f3b22f2b2e906cbbb7fc50ec9e659dbd4e0e23c27ffdc5f1a311ecb8c0d3480b286f733b11c2e9f710093ab8759d90ca11a7bae55a70b5b27bd8adeeef5f79
SSDEEP 768:pvFV7j+9lZwgukKRkGgGJccDP6xSU99mkg29MR:pu9l2XTcz+d2+R
TLSH
T108F23971D854CEE7A8E2CEC9A74AB916AEE40277858C498CD6F87D3D318F5FC4302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 8b2b478fad16c328b5a45e5545af6b9c7cf79b68622a5b16c381d84859c98f81
MD5 0c48ee98a18e94f89c9b4bc04c1017a6
SHA1 84552bba37c57e2a09a8d2b953b5ffce02ce9d2f
SHA512 b89d6275ed432c59e49df61bb6f415bf4b94b9575b1b8210c91436677c4f957abee5976fc2d2528557beb7fadad65aea8a435f395c6c610582cd9c951b9612ac
SSDEEP 768:pvFV7j+9lZwgukRRkGgGJccDP6xSU99mkg29MR:pu9l2mTcz+d2+R
TLSH
T1E9F23971D854CEE7A8E2CEC9A74AB916AEE40277858C498CD6F87D3D318F5FC4302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 d6e89facee0cee222dd46e5699dd225efc8d2268036146b131df804d9e3853e4
MD5 1116abec71a38d3498cff5600a6d09bf
SHA1 6fbfaa3c687f67561909e8d5f4399afee79cae66
SHA512 9eacddde678e081ea36825b3c5d490c16157a19b7fecfb3dbb87f9a13a50e69d7b2ae22c665235b9e53c6732b7e7d881992b6743d1b52ee6de8059744836d653
SSDEEP 384:nprQiF9CcmyWCAsNXg8TUNTUlI44QckCrYR/neY7bpv4fxGgxiz0yJUHcvrBIAgX:pvFccpAZwgtkDRkGgGJccDeDSQ3J
TLSH
T124B23936E854DABBFCE74B89A75A3543DEE041678ACC9AD4C9DD5E1C018B2EC430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 5c83fd88f74dbe83761cfac3a8740f3b9f1b0154bfe5a889779a4a7c5f0ed463
MD5 44068b0a597a9879cfa845ea0d8f74e7
SHA1 3a27b12a20eb0a7d74bd3107072cbe88e1ffdae0
SHA512 c5c09663165ca198ab443015980ea843af8d3cfcdff45aa09abd70835c97dd549e65b133c4e99c1dae19535bb3254645565c2382d0e77b2fbaf119039276e55b
SSDEEP 768:pgFccps3pwgbkU7KkGgGJccDeDSI8p0YM:as3zcTccI8p0p
TLSH
T1C8C23B36E858CEBBFCD24B89B74A3943DEE0426786CC9AE4DADD5D1D00971EC430B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 d5249e563b94203aaac9b074de407a39049a9b5242867d11befdf4aa231405f7
MD5 4968790b0789438e46008c0f64d74ff6
SHA1 171a3b819cb836af2ccf37d67bc630ef8a14f6ff
SHA512 1ed1f6c25348bea647055ce79cebbbc8f3db568c5503b915af16163658c590713864426c1d65b43f4c81e31c4410bf33d70dbc32844b18766833dc5ff052aea1
SSDEEP 384:nprQiF1tNn/s3n9SqsNXg8TUNTUlI4LQckCrYY/neY7bpv4fxGgxiz0yJUHcvrBx:pvF1j+95Zwg6k4RkGgGJccDeDS29MR
TLSH
T123D24A36D854DEBBBDE34B89B75A3A57EFE0426786CC5AC4D5D85E0C01872AC430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 bcc5ab5a6cce8482e287866ee60fd3cd4b02770bc47504fb9e76f67e1d13e2ec
MD5 bdc9cd11385e9a1ea306985898bbea28
SHA1 f04a8011dacc7d338f2d19b5f9ed08ca031fd59e
SHA512 bb2cfdf6b74b5e0b83252d159270cdae3ac059894a8075ba3d48d65b6c25a3606739d18d9a4aa17f0a80b23385b58fd4e10cc831a3a2069e53c77fab48e9d77c
SSDEEP 768:AFV7j+9lswguk8RkGgGJc1NZIWZLCQG4V3u9Mw:Au9lt9TcDKWZmQzV++w
TLSH
T1A2D25B36D854CEFBACD38AC9A74A7A17AEE0427786CC5AC8D6E86D1D118B1FC4307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 631bc396fee6ddbdfefbb98751d7bccfbca50925c731329c2f9c93cc7b7994b4
MD5 7d28eb30a5f113bbc27f0537608b36cf
SHA1 9c1a1dad335a0defd1be60fc408cd68c06041970
SHA512 4559e4f5724c94d6f252ae54202c7183186f255a2d30465f99f916b399e24134e52ba38e0c9e249d8253c8f87bc73941c0e5477ac7f53636e1e1934890c2f49c
SSDEEP 3:MsEllllkEthXllkl2zEflMa/l:/M/xT02zdat
TLSH
T1ED4404147FC00407C50C303040F1D3517370D4D15713DF4334D145735CD75401C01010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.7.7.1\typosquatting_list.pb
Size 829KB
SHA256 1dbd087f13f5541510dac0dc4cdf35cb3b62ca2d8b56a485aa294417f4107461
MD5 4c62cc2d461e269cb4ab80269b440621
SHA1 bf59ed1da89058f86f3167c6f95adb1082633ba1
SHA512 7c8594a933ec99e916a5d9f2d7a331c0a1583899babc4311d628e4b4527b4b6608f007de34e895b241fbbd7f7373cbd928ad1db90f6589bab86dab9472d9cbc5
SSDEEP 12288:Ob36Ki/M+3lZI6EHXYXHZYPHO9ffE8DOQ:3lhEHXYXHyPM
TLSH
T1FE05C6B9DFC00194DB78112D20BE71D8181412A580E9EFEAFE7C855F2BC29C977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

well_known_domains.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
Size 572KB
SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
MD5 f5f5b37fd514776f455864502c852773
SHA1 8d5ed434173fd77feb33cb6cb0fad5e2388d97c6
SHA512 b0931f1cae171190e6ec8880f4d560cc7b3d5bffe1db11525bd133eaf51e2e0b3c920ea194d6c7577f95e7b4b4380f7845c82eb2898ad1f5c35d4550f93a14b6
SSDEEP 6144:XbBXgDO9CyiiKPFv3GPkDNiTHoIDiXkCBIvzVXCfwX5pWr+W1gUe3h576:XbBQDwi5FvGPkDNirYBIvzVXCoXWiWr
TLSH
T130C49E02B7D846A8D07AD0748A574642EA76BC950F74A6DF02E0B27D2F77BE45B3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 fe1728112aa87dae6432f4c170f76e89589a1c41a79db9d720ab96880a03cac7
MD5 1f76cc7a9048128f6b95ac6c8f202d11
SHA1 b7cf9a0e8b59c5115bc1e968c81a9be412067f44
SHA512 1366352df0a0162dcbfc36776684588e23c57551f866f7c03253ac9fff2554976ab7c6d0f9e6cdc7c5cb2e1ad24dc0b3a80405ec78927bf5c63c2c74f2be9e58
TLSH
T1A7310FE25C381AD2C8BD0EFFA48B39FC48E8D21AF1A471796888ED94072D95E254143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 b3d15ad7e218b09ea1dfdf83c1df26eb885fb417fdd38cca35568822b5cd2389
MD5 392893473e6110fb8151c7ae59e3e5d6
SHA1 c395c0a48506e617f8722fea50adaf5514e2f4bb
SHA512 f991f6f65e7bb62ded74f31c793a294c538a126970ba5aa60bac9971bd1962e59422ef484b72968d360d12a3757cc96e6dd4165ec5373b5f9f80a84e5ce0f51b
TLSH
T1884163E15C3816D1C4FD0E7FB08BB9FC84E8D629F190347D2C58EA984A29A1D248083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 beff58fa3983dcaa29fd079712da29af2e58a5138a9248a7f3f94877c98666e6
MD5 ae9ff6e6d3354c1c64b7c8cd5b82cecd
SHA1 dc67555926477b0fa024c0459b31d0e711b7877a
SHA512 4be2dffe4f42d94d0f6a5f3f9a64344630fa137de29934815194506ae076ef3dd9a4473d930d61391e13facb395190c48412d491b278e1eaca348c6c9a9a7c37
TLSH
T1113103E25C381AD5C8FD0EBFE48B75FC58D8D22AF5D030791858E994472D91E654143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0552cf86a46a326211993d314eca0571e3ae0fbb9ad1bc439d830d1001654599
MD5 8f3b82b3ba1f192f4140ab90aa46f236
SHA1 a72e817c6ff6186f945b3919fde1330c66375522
SHA512 a3c11b2062f74ed41ef6ef06fc0a61cc1ff51fe14b772082e06f7eb03a20732684e4488caa5bdbda86ba20b21d820679b3fc45431c809f853d349dfe3f58c19f
TLSH
T1433122E25C381AD2C8BD0EFFE08779FC48E8D21AF59031792888ED94472D91E244143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 70f598c8a5595f5c24078e37fd14812387d389a95d5374b19e82ddfa59cbe215
MD5 b835647464944f27127c5dd294105e25
SHA1 9c3f3e52e2afce9c26c9e1bb68143f48b1c1947c
SHA512 3af5eda5f5081b4c700fc1a1484f7adb147c4ec3933f48a6f3df041e7a15acf40e8656f24857cdda5c642ac930adfd08586a7b2076a48a40e213ac7b9099b87e
TLSH
T17D3142E25C381AD1C4FD0EBFB48779FC94E8D22AF1A430792888E994472DA0E658143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 9df21590ee94e1a9c9bee6cb99ad4c7c999917f381fb69f1a3a83a4ab25560ac
MD5 529e44c4ea22eca54536e0fcd8dc054d
SHA1 bcb053ed5b51d56da0b738b91275793cdd039f2d
SHA512 f016e86b88d49c987f32cba32b4287857db51c7930a68d240a5c78ab58556c9a642ca1aef19c8e0bd28f47ad599d247b265e0ada207fd813d07032ec0d19f06d
TLSH
T1F94131E15C3C1AD1C8FD0E7FB087B9FC85E8D625F590347D2854EA985A29A1D309083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 9fb99429501179354f3f9b8e3091ae79de44e9ecadc4c6003d0a2e4321052f78
MD5 4e29e74f09f1f94851827eb899c38ac0
SHA1 7800d6529fe15087e85cae0cc12db5a412343e1e
SHA512 4ffe439d12a655bb2abf6c68e5fca618ece4758ab7173d3bda0536b984f4a36a8a6c80ae7f6aec6daf6fb310f3f68ba60c12ab0e4c9966aacc848ed752ff7c31
TLSH
T1DE3122D25C381AC1C8FD0EBFA48B79FC98D8D226F1D430792894E954472C91E258043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5e33758aa50fca216f2368bac01a78fa18413f4fd604a50c602d0c076e5f4933
MD5 b38a955eec0818cfb5d0a3b817ba0059
SHA1 49ecdccbdae418396e1bbd61c1283743d0027d85
SHA512 f980bbac7683cb92971fc1c6699c5db813dc4f01d8e47d4a3ec21f94df324f319107f1421ff5f7a1950a3d447dbf865144cee85499841f8866f71cfc7bf40866
TLSH
T1DD512DE15C381AD1C4FD0F7EA09BB8FC84E8D625F5A0347D2858EA881E69A1D748483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e500ff8faec91527f106c2352a89223a00e4ffd5cdf32a555869cf8a3accfff2
MD5 dd7ac7d2c43dc467b4ae6717a2a5346d
SHA1 3c82415851af5c451054c5b7021d27c4966dfcb6
SHA512 2589ebd7028da640f2bdf2de007aec45d5e0eafc091899aa38b38e7500e845d47661e94039d5fe195a5afd78b480f56fb543e34844200101e060a8304e593626
TLSH
T18F513FE15C381AD1C4FD0F7EB087B8FC85E8D225F4A0347D2858EA980A69A1D708183F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 c6c7d9176ea97cb31aa12e89974c4c9d033472af93121130fce5f54bb6ff9d41
MD5 a562137f1050cc6fc69ecc5f2982de6f
SHA1 7cdc3109d7e9c8d1096b0e5675ec1a7be2fee132
SHA512 b380b5987df87a56acb9520b932a7f49d3155a08abe3b69b9d4160e6551875a94599776284a5020f8723ffb0125a37f36d359f62192f42a5f4fb814af0becd69
TLSH
T1EF4122D15C391AD1C4FD0EBFB49779FC94E8D22AF5A4307D2888E994476DA0E648143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e2e895165ee586a2d8ffc058d03fded85e4b2ea7ac9b9c810704253475c378ae
MD5 98420c9ad14ba0b25be14dcf94cd89eb
SHA1 55cc352792fc29c342d63ff8352e09c5e734ebe7
SHA512 058b54c07d24f3f5067085a6cddbc9f6a43c9864ae4a6666a73b34b89bddb27a86afb1436a122c1ea2d2fcb062de0ca53bc0f6bdee17c75bbe91792dbaf42750
TLSH
T1294153D15C381AD1C4FD0EBFB49779FC84E8D62AF5A0307D2898EA944A2DA0E248143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 07b403dafbc66752dcd0a5394e4839aef85f51fd78eafcb5e148c624c08b30f0
MD5 a1ba54930a8a3de1b91156ae9efbd55b
SHA1 c5ad05f63843980d154a8e2ca4731d84a551ba05
SHA512 5f0960d77500c31039df100c10956179ee79c6e48fdbb8fcad4dde9ada6b21877e979d3cb2509a773ac50589c85479d86c8e1df003bbe313a9c1bbff0c767658
TLSH
T16F4140E15C381AD1C4FD0EBFB48B79FC84E8D62AF590347D2C58EA944A2DA1D248183F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 7017570471a78ad48e769e847d3ecc53b29ab635f3813881c7dbc889aac6b8d6
MD5 0519629174acc947c2c07561e82a36ff
SHA1 86d2b025330d88ffa0296c800e75685ad1ea562d
SHA512 b689f780891fd3fa4c0ca883d7ada210791a744d5d04db2a898eca6b4b1fc0d921acd89aad71f740718255550a378f3bc20c2611d7be825a1f0a63d1f5d517b2
SSDEEP 768:lQIOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:qxhaqLI1WcxKgdfHJHH
TLSH
T1C163D9FB495B02D0FB9D40F4924B76CCC35B299C8CF8E792F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 4KB
SHA256 4cfc5213662ec5627c2cfb6d4403e5dabbc9779b656a6dae0a406cef5787d95e
MD5 5a9c2bae1c71ecdef4581e6509fe0967
SHA1 f326d20eccb56bfd8a68c26e653807e498894a5e
SHA512 f8f108c05eb3c6afefe89ecf69e4a8fd26a041a725e6c26b6823f1c2753bb4650d7ea7415f9d96b41a594af46a61544c16d85a22a79e8c7a7cb88e9428d31211
SSDEEP 3:z0l93llHhqD1a+sh8:z0vpefsh8
TLSH
T1DC9104575D45D134D01DD1FC7CC14D73143C1C04D047F40011440430C0C33041F34D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3b1665e0a8e002c22852a1fe873507ad9d82fba49f7f780e4527b0dc8afa5551
MD5 2756992c47a447b635ed63b805f7d6a4
SHA1 2474e177a86f547b1e0f91c314cb4a6c883dc2b0
SHA512 c094783702390e5fd3ee8b7060b16bf7ac5bb68f31617819e7e0b90616898100b3dc9a38648a01c023d8f2995ea3a6bf099c0cd1eed5ff40e3a3cd6620bff2e7
TLSH
T137414D586AE91148F3B76F565BF368AD447EBD372F06D05E10010D8E0763A01CC61737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 65fcd8d8b1090409d8a1044b5c53bd342f0f296218dedd9f4345907f5b6094d1
MD5 2533db180f65d3df5c95450aaf5f02ca
SHA1 9c86db71e1c5d1cdc32f3abe85e34fce03be80c0
SHA512 bccbf13f7c3ccb10a149ef1031eb4093e31286a8c97a558f52e0fc053b49858809eac97bb7bf39d56964c463dd7ea30297a2bbb72a18b70f71c7530d2ba64656
TLSH
T1DC512D58A6FD1158B3737E49ABF6A96D587E78272F0794AE10110E4E0762E40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download

3e9fba70-b3fa-43dc-8740-e33fdaf54477.tmp

Path C:\Users\Admin\AppData\Local\Temp\3e9fba70-b3fa-43dc-8740-e33fdaf54477.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77a2437e-a425-487c-aa52-8d911426b4a0.tmp

Path C:\Users\Admin\AppData\Local\Temp\77a2437e-a425-487c-aa52-8d911426b4a0.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 f6a8405d08823a8c66c0887578eb6cfd37810f1ad903b16fbb4c5e47c246ba8d
MD5 1e208a28c18a80dcb98ee70ecf4e31cc
SHA1 d8fe5ba0a662e380a5112921d7c41637d6f366c8
SHA512 80ff6cb4dc2fec61c3dc1d83162118655f19ef33497c03513b4963554fb269ba4d4f9d3693df2e95ede5759cea8a46cc7703e673bc93a398d059d4f821c76970
TLSH
T14D5179A53535A22F6BC387C460754C84A570F280032F6A5CEE1AC434BE6CEE2671F7CA
MD5 SHA1 SHA512 TLSH

Submit Download

a40f854a-6ef8-4647-82b1-3e868e3fa96f.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5696_627530154\a40f854a-6ef8-4647-82b1-3e868e3fa96f.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5696_983347966\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download