5b66855b96edf996d990c343867829bc6e81a401c94d91d6083f858a06a81d66

Analysis

user interaction
yes
max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 11:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Voidstrap.exe
Size 31.8MB
Sample260710-nkyyaabv2x
SHA256 5b66855b96edf996d990c343867829bc6e81a401c94d91d6083f858a06a81d66
MD5 55c32fe519d5ec6236b72c1f62b16821
SHA1 424d3b5aec15d368ec1c1d3ebf48de5797675177
SHA512 7f348ef7e4ba8357b88c3a83db80aa4cfad2d3dc9a60eba3f9e3ad4b35b70500b51ace4a0aed5fbcbfa498ed40740e1ffe99a9b4226ebc8058246936d88ef0f6
SSDEEP 196608:noo90CFHS3hVvAkCPIqpM8R4ripPK5kWObAbN03qDtIsL7s32vrbObyUIBsPVs:H90CIfoINs4SmtIAO3AIsL7s3GbObw
TLSH
T11D778C0AA3D88621D37B877986765206D672BC266311D7CF268CFA4D1F737C1C9B2623
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 11 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1232137701\smart_switch_list.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_2003567254\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1844554618\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_680736207\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_680736207\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1232137701\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1232137701\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1844554618\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1792_1232137701\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3212	msedge.exe
4356	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{287E54F6-BA7A-4A90-B487-AC27619A6774}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{2353D7EC-E041-426F-96C7-CC144919CE3C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe
2912	msedge.exe
2912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4316 wrote to memory of 4884	4316	Voidstrap.exe	87
PID 4884 wrote to memory of 4100	4884	msedge.exe	88
PID 4884 wrote to memory of 3212	4884	msedge.exe	89
PID 4884 wrote to memory of 2544	4884	msedge.exe	90
PID 4884 wrote to memory of 2544	4884	msedge.exe	90
PID 4884 wrote to memory of 2544	4884	msedge.exe	90
PID 4884 wrote to memory of 3596	4884	msedge.exe	92
PID 4884 wrote to memory of 3596	4884	msedge.exe	92
PID 4884 wrote to memory of 5016	4884	msedge.exe	93
PID 4884 wrote to memory of 5016	4884	msedge.exe	93
PID 4884 wrote to memory of 5016	4884	msedge.exe	93
PID 4884 wrote to memory of 4608	4884	msedge.exe	94
PID 4884 wrote to memory of 4608	4884	msedge.exe	94
PID 4884 wrote to memory of 4608	4884	msedge.exe	94
PID 4884 wrote to memory of 1056	4884	msedge.exe	95
PID 4884 wrote to memory of 1056	4884	msedge.exe	95
PID 4884 wrote to memory of 1056	4884	msedge.exe	95
PID 4884 wrote to memory of 4876	4884	msedge.exe	96
PID 4884 wrote to memory of 4876	4884	msedge.exe	96
PID 4884 wrote to memory of 4876	4884	msedge.exe	96
PID 4884 wrote to memory of 4540	4884	msedge.exe	97
PID 4884 wrote to memory of 4540	4884	msedge.exe	97
PID 4884 wrote to memory of 2800	4884	msedge.exe	99
PID 4884 wrote to memory of 2800	4884	msedge.exe	99
PID 4884 wrote to memory of 1488	4884	msedge.exe	100
PID 4884 wrote to memory of 1488	4884	msedge.exe	100
PID 4884 wrote to memory of 1840	4884	msedge.exe	102
PID 4884 wrote to memory of 4468	4884	msedge.exe	103
PID 4884 wrote to memory of 4468	4884	msedge.exe	103
PID 4884 wrote to memory of 4468	4884	msedge.exe	103
PID 4884 wrote to memory of 3328	4884	msedge.exe	106
PID 4884 wrote to memory of 3328	4884	msedge.exe	106
PID 4884 wrote to memory of 2980	4884	msedge.exe	107
PID 4884 wrote to memory of 2980	4884	msedge.exe	107
PID 4884 wrote to memory of 1792	4884	msedge.exe	108
PID 1792 wrote to memory of 1216	1792	msedge.exe	109
PID 1792 wrote to memory of 2532	1792	msedge.exe	110
PID 1792 wrote to memory of 4356	1792	msedge.exe	111
PID 1792 wrote to memory of 2532	1792	msedge.exe	110
PID 1792 wrote to memory of 2532	1792	msedge.exe	110
PID 1792 wrote to memory of 1008	1792	msedge.exe	112
PID 1792 wrote to memory of 1008	1792	msedge.exe	112
PID 1792 wrote to memory of 984	1792	msedge.exe	115
PID 1792 wrote to memory of 264	1792	msedge.exe	117
PID 1792 wrote to memory of 5220	1792	msedge.exe	118
PID 1792 wrote to memory of 5944	1792	msedge.exe	119
PID 1792 wrote to memory of 1696	1792	msedge.exe	122
PID 1792 wrote to memory of 1696	1792	msedge.exe	122
PID 1792 wrote to memory of 4232	1792	msedge.exe	123
PID 1792 wrote to memory of 4232	1792	msedge.exe	123
PID 1792 wrote to memory of 4992	1792	msedge.exe	124
PID 1792 wrote to memory of 4992	1792	msedge.exe	124
PID 1792 wrote to memory of 2912	1792	msedge.exe	125
PID 1792 wrote to memory of 700	1792	msedge.exe	126
PID 1792 wrote to memory of 700	1792	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\Voidstrap.exe
"C:\Users\Admin\AppData\Local\Temp\Voidstrap.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.NETCore.App&framework_version=10.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ff963fbc188,0x7ff963fbc194,0x7ff963fbc1a0
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,14844635861275205266,1610871330151630834,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,18306654371911869409,6782950419029426929,262144 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:2
    3⤵
    PID:2544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,7243978289718870141,581315835616571980,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
    3⤵
    PID:3596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,13221023916462685491,5858676223818479691,2097152 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
    3⤵
    PID:5016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,4446798323667472740,14140696165974853710,2097152 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:4608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,4993263797253404256,1616678849537404212,2097152 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
    3⤵
    PID:1056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,10428388991238986524,9541064588494843139,2097152 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:9
    3⤵
    PID:4876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,17694792115856479211,8658920381561667929,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,5917852372609191436,10621431205457889718,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
    3⤵
    PID:2800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,12227921308082661061,5111355044640504517,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
    3⤵
    PID:1488
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3188,i,5975154285076071308,9770953901903933099,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:2756
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3188,i,5975154285076071308,9770953901903933099,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5972,i,8534409293973611296,7353071238242582545,2097152 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:1
    3⤵
    PID:4468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,5655876590170669211,870882121506726183,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
    3⤵
    PID:3328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,12578803990644431470,8601582009528504565,524288 --field-trial-handle=2784,i,5259757722889643758,10371559455060455591,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
    3⤵
    PID:2980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1792
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff963fbc188,0x7ff963fbc194,0x7ff963fbc1a0
      4⤵
      PID:1216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,9186253221106210791,2167682314086591725,262144 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
      4⤵
      PID:2532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,5220475005570121135,8288151849693629112,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
      4⤵
      System Time Discovery
      PID:4356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,6719526244137208122,7248197885462917034,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:13
      4⤵
      PID:1008
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,15660684802577577296,12802685170863727140,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
      4⤵
      PID:428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,15660684802577577296,12802685170863727140,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
      4⤵
      PID:984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,17450556454414811101,4707650743261615081,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
      4⤵
      PID:264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,4542242164360660973,8142905502494281,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
      4⤵
      PID:5220
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,6809986889947598080,11611711481724783366,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
      4⤵
      PID:5944
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,10902434810193185737,12644538535599773639,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
      4⤵
      PID:1696
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,2476483188498301391,13426692226101712201,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
      4⤵
      PID:4232
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,13306591037617201427,6817807638658727205,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:14
      4⤵
      PID:4992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5004,i,11112201971115303240,3326044872152594358,262144 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,12983256266864350645,17207103819482927540,524288 --field-trial-handle=2388,i,15120067251026611045,5705494210494727824,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
      4⤵
      PID:700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b6d5fdf77d33b04d11d471d35a178c210e6b8755bcb281285ec2067dcf35c0d
MD5 2e80649acd1a1a098ebc4389a5deecc4
SHA1 c73f0770e9bd2c6cdf2bbc9c5b81e8df4779f62a
SHA512 febfcfa2569b2ffe0ccb9881427b2fca9b253dc33340f9d8ae4a29e5bb8a8691aeb37f5d057d4de85b67c34fa0c9c5522ac4be4683128bb74b1055aaa392354b
TLSH
T132D023247339BDC3F039617244B02700B5360023325ED6833250C00C4C7908157E2ED5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67df9e1a6f6e5ffb8d2e0ae0f52afe57f895ea86f8ac3a414021c7a56acdea0c
MD5 295ddc33e8ab03985a602dd3ae059525
SHA1 feb881e337bb21de280ebde19ccbb47977410674
SHA512 aa6c4f8a7436d42dbace6c49a104f6112178690eaeb9dbbd5bc757aad094e4abb7082c89a6fc2fb8c310454021eb4962ef22e7b86ec2cb46fff515650d95fb6c
TLSH
T1ADD0233473387C03C307B1311480E31077631213750DF8532170800C0C7558047DA0C5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

9acadf80-9cf5-499f-a345-2c264cd2575f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9acadf80-9cf5-499f-a345-2c264cd2575f.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 03ed9ed173f9abaca52c88d106e7310b1db004a4596df72c293c7e4d6bd08ae1
MD5 640630d2fe09f9d0833c9417bac5de2b
SHA1 d62027601af95fc639af3beda44a10d66dc16b32
SHA512 12c5b9d4003f79f0cc08e7d23cf6eed44840e13c5fa4d304839052859587ba6f98b3d02c0e125b09f2d4d8806b99ab7745964799da542cff6e0a26ac475c4e67
TLSH
T10CE02BA5DC61AC6B38FD1B1954504B4AF754135A5F815A2B3F3C9208CFB166A0581CAC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 d7bbb85deccbfd5e526a81d3748bd2dd6910fcc5cfad680be4ea725c8444722d
MD5 45418cb2a8307fecb38d25e7383c010c
SHA1 8b1938f168217cdce291d1f6e075c154948a2fac
SHA512 3eb6b45dbdf063f3b4af9e8b60f14ad92e94d547733f6f62830c19bf481b5625388ec6184534a6317da08f089af5518d8639953f8afe4300fb1ecfb8d0ef9103
SSDEEP 192:+ka3JwpXgUWzbd8eE19kTGbMZKe3iwVe+:KwqUcR8eEiwMZm8e
TLSH
T1AF13943F97811C19D7D3403F148B0B758779C46AE5CA07A386BAB2D582D2F2A1CDE627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 a231b5004ecd33c24f8bb65c2822d466d0121bc73e602a1b45d848d3ec05cd52
MD5 36ce28c245b82bc66b4bcada647ea6d0
SHA1 6d8b3d9369248783f586c923e7feeea2b3c36a17
SHA512 7a4e1c43b76112da4c9c86fe0159834ac10da47e02d575f7304fc036c90a8459ee687cf82bf37526a34f8af27afafd7bb27d01c17379291a34170679a29ea73e
SSDEEP 768:8HLKTKltKj/vHLuN1L/aydL/ae9xTfMownHgzN+J6bgL94WmmcB6rDVA:8HUjnHsL/auL/a05fM4YfJ4WZA
TLSH
T192443DFB1951A00BCBA852F5D2033A2EC17B415E7CD2F9A8E5784CC12865F31B6F9B45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 cf5a6669ce039eeadd9881db5861632d2469fad2980776181779517a1e40ce5e
MD5 2b0081c45419f51d608c6d231878d7d2
SHA1 f43fcb5b67960644690f3b298625b9b54548a708
SHA512 4c4047f7a6a9087bf6378755cddfb86f739d754dcdd37bd5303d48af2aaf1c02b74808f7823675d01ed1dcf006817dd8f19a4840e6d27e148605c12e7e4ba164
SSDEEP 12288:BtH3IlMoLiBDltqm8/9A+WCEWrJo/EVsFHN6ki2KfHzvu0TzqPKu6vflUu4Qrd4M:bHgOTK1H96S0UilMI/XLlCJ/FqtZgz
TLSH
T108166DEDC96858C3CE63DA30B4F0E9477C7413C3F995C1D6889CC584026BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d746c3207f1ba69d8527db9cf13617decf5a5f034965fd293ca1d262d0c24c8f
MD5 4731efd1b08f67aa52ed210718803671
SHA1 0e1dc601dfe489ffc0661787af0a215beb766789
SHA512 6fe73fecb28b9ac2228f13b938a88d1fe4ac7cc8f381f549a564de9c45c57d6bad1140d35713f2d35a5ce3b409803850163d6d3aa715d688bf049d7b66763bfd
TLSH
T12741B81CA36A06E2D3F585B72AE1925433F1D43D910BAF6114409DFC8AE6F4820F683B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 92fd73eb74e30908e0e67000b4c7be61b401451caf7e9c4c30b847ef2767ea6c
MD5 4769d5b8e721f91ad90508c5b9818e40
SHA1 aa8d461a0628a8a311cce820ae4c263f1cb680c6
SHA512 a813ebaaf55f9b8008513eea6f9f90ad6d1bc93c9a7a1be2c76b78ef48d31ad615a09bb96055f25af83405c9654bac430c451b0330f4d9a4c5ba9fd3c1eaf753
TLSH
T11AE0C0D0D1CAC53EA51434C30120A70CC6C831C3C6963E431B40CCC577C3100B753156
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 ae6bb94a917cb17ba3177205388420bcd636ccae7391234ba360d56cf6eb455a
MD5 7f6ddd5257bb765d5da0ced0f1ec2edf
SHA1 e16cded40318b7ddab24520a4538e9530ff0f3da
SHA512 c5875d75c5dd7f897cda3b38d1b1b0430d9b038703d0f650333b7d1a4c86526fcdb408759d8328c3113f02503ae999085e27d691dfa911a1efeabff64a53f7d6
SSDEEP 48:T9D4jJ/0UC+lf5xWxh+WxGfm+gBLFit+gRVpR:xD4jJ/JDjnfm+gBL2+gDpR
TLSH
T185E2014D3E12F551C4EDB33EA0C285F05BBCA93C4A9D757095389D768C635A2B48E21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 3b11634ab4bc0acec458aa6cf8a6f95a0a6fa81e735b6afbab3118cc69087b0a
MD5 cbd7f90829a8a8b17613f3ee0d67b42e
SHA1 2c0ce6fe924e5e1d2d3ecdbb6142b0b6f89c3c64
SHA512 59f4f3f3e2055b42e134d2085a8757437101a57b416bce8b022bb1c01237a1c214cc2e2b1364a5fcb302b718354b1bb1b1f670812c9925b11947215ad6d3b62e
TLSH
T153E020C488C8C139E254A493C3AC934CCBD438C3B2843A85178D8845A342741E747150
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 e2cd15532b6113df2f2c81a7e8b47497e930d8c95d0de07a7cb501c44eada653
MD5 18fed41463edd40edff14347a283dd9b
SHA1 9e73f5662eef69f2491de1c62b71b6dc9c5dcafc
SHA512 caabcde2967234d912197a7a02d51dfffa4fd0868cc8c093b0226b3dd2a1262ceb874b825f964bc07d03855799636c0d71258f135968367be7bec2c661754bd3
SSDEEP 192:LA+vyFH+bF+UI3iWGVoWN3qL/Xc4VVV63:LA+6FIkUI3ijVoWN3qL/Xc4A
TLSH
T1EA24230E5F243722CDBD913669EA44A35D7DF03FC75366CA6C611470CEE2A42A02C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 4c247ac00e8d039f629bde776e49694f17e5abd23de5c310ca5ae5a1069f8675
MD5 5cee17017f52398aa884db7db7672d38
SHA1 a5f62d0274b6701139e1d0e191c72561788ce5b2
SHA512 de12e1ecad9ecb45decdf92514a2398d76d5701891a4ffd863c56fb7909a63728fbd871a6c896a85bc621c694c7d22e5fb95b3d4545d34d2b1d9d1a4e5e5ec1b
TLSH
T1E8E0D8E4C4DDC56D914420874228774CDBA0794BE6887B415B459846F746348AB821D2
MD5 SHA1 SHA512 TLSH

Submit Download

99e8891e-435e-4236-a8c9-3fd878be291f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\99e8891e-435e-4236-a8c9-3fd878be291f.tmp
Size 2KB
SHA256 d2402f1c2db55050e33e5e945fb00594bcc17622f408307a439a2303537bd534
MD5 4fec55dee295e013e25f6ee377efa74c
SHA1 61274a7a17291acd9a318e44c78aff511414f4a3
SHA512 0ba537de91d0d65572efe28aa5173fd3f913f0febf9645fce2ded4c28fd32b445718fb9949cc95ae363af9548dccada3298d1a3657fe1c57558601853fd9e263
TLSH
T1DB51DCF3C7E8866EC90156F0AB14BE2BCE1D0954832C3D5A89E4EE1B93E2471D141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 567231ad468682896480bcee1c9eda768f7bfdcf22486d08571faf984d889d67
MD5 45108c71282dac848e6f51ae4ecf28e5
SHA1 8278be0203c3002f80d198ffe532c4304c9b9111
SHA512 838531c9a0e2e41c39f6771bb007aed3c3650c1412cd508cc4777da4d9e921b27fc67438c1968c3f067510fd4ecf673fa400296ce106b6546ad3bc7221b3e145
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7ocwTzpk:qDeMatha9RAY8zq
TLSH
T1DDB2314D1F306211D1F09B76EDD189632E7C211D87B33759AE5420B2CE9366FF60A0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 c48bf761f0579602603ca796b2e7a7fafdd4f816e30cb567948020e526a5ec4a
MD5 948abf860753285e804a81b859dedbff
SHA1 bfc8d8cb7c5f1562bfc648956a8f0152bf3991ad
SHA512 dab20e3106d2e9f3ac93c8b04301a16fe4240054165ba4091bc9ee3f9b5d6d5c8140c5d0fc0f1433254b1be100aff9ebdc47bc4176e573dabf260251a048c576
SSDEEP 96:eIEumQv8m1ccnvS6mGdyJif5nFXZx+t4g:eIEumQv8m1ccnvS6mJM8
TLSH
T192F2EEFA07276205D99484B0E4009FCEAF16004B47B6B6EC76D447E3F7A21E2B1B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 7ac63e90ef09eb04d901cda8cbae1334cb05473e540f69b9a49443ffd1bbef01
MD5 827747b8ca78251f3a73a1ece6bdf6a2
SHA1 75d47f6c5ed9a03b2974ed3391846aa060a6ab8e
SHA512 61e5f2c48c555ad34517da689f37f200e361dac0d17b9f2e52c28acb955ab6246e76e027c1fee203be4a544def54f4270a2f857d7cb48a787c514c3418af9642
TLSH
T19EE02057C0BFBCB71025957F0ED4B9057DB5E075011254E5D996533D60514FB1B15016
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 13bc98887838e5281de89a10217a16d999e49531894f028bc9d9ff19b09fc1e7
MD5 40956d49cc771079084d8b9e4ec8a093
SHA1 68f0724f54165a56ca19edcbfa9897c5a2f927a7
SHA512 01adce566ff03aa0bdb1f95f8308b4e8accbdad89a11bf2028a89ffd794559c10bad0298cde4157e40e78ec5b7be7f5a17ee6dacbc96fe7af20aeb712c97ebe7
SSDEEP 192:sxRcRK1yM/jK1Ml8wCD/f+simgOZbRLqgzoD8p9x/g6+WNZ4u/YCyuOwGvIgtJ:sxRco8D/f+sJgoF1L/5n/Ij3
TLSH
T1F462D9066A245D7BCCDBD20CFA55BF93D6F81563E2901E44AAFC8A1C44E6BDD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ab4b03eeff5402370fdab6d29e025a30a8d5c4f9699d786a4858f86b77d9d617
MD5 e070630f1d3e1771e23fed275b182330
SHA1 856c81e1cc846c1722364f5815268de0fe9dc3d1
SHA512 fdf90f1ae08b0cde5cff6c8f040dafbee81746a94e5eedbe1dbd1dd863f3bd20d673eba6b12d47f99c29153b26573d8c1e895d8c215888bfac9ed838bd2eb278
SSDEEP 192:sxRcRK1yM/jK1Ml83cyD/f+sSWpVqmgOZbRLqgzoD8p9x/g6+WNrn4u/YGVuO5gP:sxRcoUD/f+sSWvhgoF1L/5h/9o3
TLSH
T11262C906AA245D7BCCDBD21CFA557F53D6F91523E2905E449AFC8A1C40E6BEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0d89a11b43dea1741200c24160997711aad8d0f29bc6d6e3adecfbe32be0491b
MD5 f63803f0a0470cf0d48a5619ab66d5e2
SHA1 6ea4f442500a368dc0dacf5356213c927a229d74
SHA512 93a2eadaea1408bc3d39f72c01bae446c1e58a42c515bcdb1d8d1d17e39c2553a016786e0d4adddaef4f9b1525a7c9f7138704f787db89d4a36dbfb4c16d57f2
SSDEEP 192:sxRHRK1yM/jK1Ml83cyD/f+suWpVqKwOZbRLKGtgzoD8p9x/g6+WNrn4u/YGVuOd:sxRHoUD/f+suWv5woFWPL/5h/993
TLSH
T1A572C706AA24597BDCDBD21CFA557F93D2F81523E2905E449BFC9A1C40E6BEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 7ea1838a6ebaa4dcee0b323364e42333258391c2e85ceb7b2951692e2a8c945d
MD5 ca497d109777571a7c2945fdeded9ed0
SHA1 34cbac01163b64fb644990badf7198081e8abb02
SHA512 b6561cab71a94304278f6488f2aeb17bf69fd02bfb89dd3f45b0e68a84362684a037ae8939f6f1a1d127a7d89a23bb5f3094b6e02c0c4f3efcfd225f83f77f65
SSDEEP 768:j/8vNN7pLuL7tQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVoHTQqqirovX:j/8vN7E7tQWgQ+fB+u1jafHTVq5/
TLSH
T1B2E2FC7B680CCB7E4F804E9CEC297E9AADA801CF56D8CD5447EA840C03C57EB561A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 7c75d4c0d76eaffa5eb9dece781a8dafd7a492b043e8d166b064ec00cd2cb2b3
MD5 ac0f45474de37c06aa8eeae85179626b
SHA1 915583b6e3c0ebc8a363837036330151be0a80e2
SHA512 38e04a929cc4cb699c54b6f02be8d2881e28c03e3a55ba723afee5e000596783c50ba04a1f07c949a11894c531a038ebfa3276c22b7aa5d4b1b6f4dfb6b1fbea
TLSH
T162E078D0C5C4D67DB15620434118930CD7DCB887E2CC3F821FC5C84192C7B047753150
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 90904c82f70983b06089be2dccec9f5b501e3db63db4c601eb5ade61475889df
MD5 4e9c6247b05d423d09c242a38904d5a1
SHA1 75729209ea2ab1fe35a9e8241ce23a756b59132d
SHA512 a168e5f7ecc8b010a499fffeda317c825bbcfb764494f2b5e8b499d1cada64c8b72428d306a45386c9c41d561105a22a4f5b3f7b35f48b034bb74a26dd04ff8e
TLSH
T162B01286FB905516C5CA8CB30E804B446B30F0722100C4139C14CF308D157A4BE01CC8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 a6ce2b0cab2cb7a749b8dae885763b9a788cdd86aa4a120a0292c6c9437c0b21
MD5 9ec92832f6b67fd832fd7911906e4cbe
SHA1 04d7be19d0de5d37fd26cacb9a131ad9cacba80b
SHA512 094b984acd1ceb1ae1e757174a88c945392af3e6d71dfa2b3d244d8007940d161279d07e1c070d07e6dabfe577f51c8fca738a67cda921b1e40b9e591978bc85
TLSH
T140E0D8B095C9C63BA197208B5214E70D95A2B883E6C87A513B8ED940B3472407383150
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 a01ad17037f5a99f77c9be92bc4a3d9110ffd0080130c4ea793931efe6e87d7e
MD5 5c7c2003c3464fe8a373b83e4d12238a
SHA1 42377fe306354664bbc433988ad5431b36bd2562
SHA512 5c247eb30761b9f6cf1f533776aea67402b54126d7c5209a5c2fd000188ee9d47e417bec636078075fff373dd34a90ad534365268058ca08cf2dba6498b42827
TLSH
T12DE086F0C9D9C6799486B0874264BB1D8AF4BC47A7C83F869B48C475E243644B7A7590
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 25ce8fdb5c28b64334a537f730863ba171a5768cfceb36aee0ce01b084c76360
MD5 f3260baff467cc92870da967dfe33de7
SHA1 ce2046ffa2cabb5bb68c692d827820824e5c66b8
SHA512 88e7a692dc7e4eb0cfa1087703e206af3c1d71aa3e68cd1250861cd98ce134588e443fc1318af111d2af9b6174a4da439e6a68a36e73cf9a279fdd95cc0423ae
SSDEEP 192:CbEBVj5JAdSp9/EgTK7j6dJOHQCQHQuQCQ0QUQEQ9QMQZQSQyQ6QngQoQJQSQaQj:y0nwrnZ5p+BS3XPnd1C3vqdnRlPS
TLSH
T12AE13440713A024038BE690D94B9992AC6C2B4733629F57B3BE845675F27E035DFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9240d96e2795acfab447ec0ed63a3633a8d9f75e7a3965e51ed6177d3f000b72
MD5 afddab7f64057866d7aba4fc91e19574
SHA1 e9792051784c3f956462019c1132d8e358c952bb
SHA512 5ae9f9eefbfbb4b88c1ba6af7f90feeeb2ca4635d0f76f615eea96252a40f19db12da54fe00e513a453616046e1e223aadc10a18d9eb2d21c7cd0f8e6e26923a
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHQCQHQuQCQ0QUQEQCWQMQZQxgQyQCK4Qn6:CbEBVj5JAdSp9/EgTK7j6dJOHQCQHQu1
TLSH
T11E910945707A0250387D6A0D84798C2ED6C278733715F92B3BD846671F6AE43ADFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 e5d4efdc9d6c2d65d8671e0ec33a164a139f9e3d83c42e5b7ba306daa8c28720
MD5 94e338e194ca05204f84d02fb23d2847
SHA1 4b020f39be68bc15f1d2931c384534c48b9939f2
SHA512 52e89b6d315b466278634c728c82045827e89f76a2648c2ecc597c0bdac0f1ab12401261d51a9889f193948fba60c605638e8025f58f87106918248bd9fb70da
SSDEEP 384:DNrRZyCSDnxTICflMEhIKyll7svbFKfk7:xFZJSDniTyI1l7svbF9
TLSH
T15E44740A7B747001EDE6D9725CB080771E3CB16E8F22A6916DA254694DB3853A33D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 b442adc31036987819bbae4a3412637693e5f52dc04ada60316a8adbb708e072
MD5 de971f213c57886ac00a4d50961f5dbb
SHA1 cce1cec8361c9154479745c4070d207b3e96d6ff
SHA512 335530b694e7fd69469eca9b9be2b11a4b0ee056626fe5d423c938b4145d2a02fd7f24a6ab925ad40359228513e5c047294d7c607ac5a759f014a41d36905c4d
TLSH
T1D4F0E2C0532A20947ACEAA40D1197903E8C47DB7235D69B1339E89B98B4480A4E3FD32
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 d927acb79472fff0c4f6a44b06943d28eb0a0b6a1ea4264598ec4836e26f3916
MD5 ada48ddada2c85f8fde2ad599fbf5754
SHA1 52b0763469ea8ece8717ea94decbc690b81a649a
SHA512 3798712def478bd8622b0906954fd8728d2a723e8de7cf825095a221dcc39338269f27aacfd55b770c2aecac14b7b65ccd62405a0c7009276f8f1cdc0561717d
SSDEEP 192:/AvOZtAsal8BDQ2sX2s95QkIIIbbLMIMNsYcY:BZ+sQl2spQkIIIbbLMIM2B
TLSH
T1BF42566B36055B77C1DE5F79136A4694ABE448810072616D33A26C1F8EF3F57C2C62F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 dde1c5b110e11a3ab2346cb5a9cc20efb62c862e3f7e18653157a28fcfef3989
MD5 f74258c5c31143782e3bf4bd7753d1de
SHA1 f02a717fa66b601ae749941b23dc0f9d81d8c8c9
SHA512 efd3691bea657e5f7ecd431f8f61471ff1861d1c707505f4d21c59c757919bb4521fe164add252559d0b850407c2ac03b668b2fc66404759671eee71860917c9
TLSH
T16AE026D0EECAC17EF155208B4125530CCB883C83EB883ACA1F49C885E246600BB87191
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 14a4b7f5316ea40309f16fc29d4015c1b019ff031d43aff40f3edd9ad5d9a56a
MD5 c5aca2710517aae8102abc18cac359d7
SHA1 581208d45caa8b9cd8dc221589ddfbda19384518
SHA512 4ba0c78a66fc5928c03e435a9ed02e6c562c9cba202431ae8b18795a9dffae26c2811fe2320d5d008ba8314388fc752395db62c7845076d2eafef8702cf03ead
TLSH
T18D21A156F330C448E159C67E507F9B361738E8168FBCED0F457A20686E76B140E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 d0b78444c344a5e340a81900d8a69a0c433bb809c96288251eb68f69b4c4c3e7
MD5 22512146dc12f633df2285e547a7b51f
SHA1 291b4e3f536dc6bfcdbd4ba86ee4205cc974d4f3
SHA512 82464ec21356c1a74a5d956bee2e43fd00452b73f64e754336f6d1a576997fa07822b9dc777b9d1fddda6634c125b445c89a57e4c64bae2a4b11a8e3a140f348
TLSH
T130E0D890E8C5C16FA15120C74165934CD6D93C83EB843F861F458C459286A41BB47151
MD5 SHA1 SHA512 TLSH

Submit Download

62ffa379-352f-488f-a749-0325e7e79f91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\62ffa379-352f-488f-a749-0325e7e79f91.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 7267f3231e29512c53542a09b0e5b183008536f4cf51eb7512a139acc3c57776
MD5 405788aa5304d6db94eca4fda61e59eb
SHA1 08ce0d3c334e8dcc44d078889e8f2ce8822ae0df
SHA512 bd5edfd869ae1601ab644ec4bece758fbd26dbc35e6cc2a3fc2f9acedac76f97cbca24773a2158bc3170a60d59c5395d283a87a47bae10c09d77b557f1e654e8
SSDEEP 3:MsEllllkEthXllkl2zEflSQvhs/ll:/M/xT02z/Qyt
TLSH
T10B4404447FD0044DC70010744051C3501371D4110531574734D104335CC75550C000C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 02eeb911c3c068d0f50b8f737c1183049c4a6c6ae3102eb5024e8d5b8fd1f435
MD5 cdd81a86ccef94acd6df4ccb7be003e7
SHA1 16f001a774c2b1d89d710355f1e0b95efc2714e4
SHA512 a46e302cd8111111c010086f5c5aacb576ac3d4892183bbd3ecbfe8beace9df828f92b0e260a90754d7861d70f5379f482a538148e152649ed1e9b4a49efc493
SSDEEP 3:MsEllllkEthXllkl2zEflJR+/l:/M/xT02zmR+/
TLSH
T138440404FFD00C0DC50030704151C7501371F4504531575335D304337CC75510C10400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 60KB
SHA256 91080c90687aa992d61843d22562d8e92f74f5f174fb486799a72a8a0f28d481
MD5 2695218365c7d9feec27bacfe01363c4
SHA1 8fc7abb285dabf3fd03ed4e95bc2b90cb50115cc
SHA512 5d42a954ed2b91c036b3b14471db984188f3a164e354196516536aaf758e16ef7e0b2b8a8371280e2ece1685e431f8b58852beea19118120fda09f95b7f27466
SSDEEP 1536:t9H3Dk8+p3Z6n4y0oUivIG083P2uQpW+o:tVS3cnx0/ivOs+uQsj
TLSH
T1EC5347F688E7897AD9AE9787633D2E065EBCC167B1945894F7C45E0CCC622BFD302811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 367819e4f731ade25e3b36085029df20543ce52346f4fc6bd5afe102a4fd9cbf
MD5 1e199c98f5283f0a234d6f70d43e2473
SHA1 c7c384bd9525729415d05a716bc28918925b710d
SHA512 ae51a424f8b4d7233e4ed03da1a6bd138f2d1f21679179886ba1eef7ddd82d44579a952e810905f24fa00923fcffc9519a2e660cc96826ba25580600b44c8e61
SSDEEP 768:bj+9H3m0Ob+DI0wp8+p3bd66j+4BRv86aLIWIW9SAb9MS:O9H3mNczO8+p3Z6n4yabAb+S
TLSH
T146138C3DDC558E7F88EEB708724E2A961DA80277D5B04D98E7D82B0DD07215CFB07826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 15ff67e4ebf836e38b83abd2650fad0a5a65ed084afb01823d9af31693cd21e8
MD5 5465c9c12d7f058b05281c24fab7f8e3
SHA1 6a79bd485c64a9076baeefec31ebb49046b9dea5
SHA512 8c6b8913605c92e899921df14367405299c0dfdb53e4f89c36f2c2d24a6b1a219f655ed1aa834347d134774653053574126959b27b06d66886a64a262659ab5e
SSDEEP 768:Jj+9H3BnOb+pwp8+p3bd66j+4BRv86aLIFFP9Tt9Mo:U9H3B6wO8+p3Z6n4ygpt+o
TLSH
T1BF03AE35EC658E7B8CEAD744734E3B476EF4117BD1E01D98D6D82B0D506329DA307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 394bc99ae4b3c94f3ac1bdc19a83f4cf5063b5f8e6c88ed7c8eee0cc778ec17f
MD5 c1441ed95c4ce005ce93156e1431fa46
SHA1 ad492a24d4f01dadcaa04b7e670232ff3d8539f9
SHA512 14d330a59f1b5f0ca62b05b364dd576f9fdedec5dcce1c5126cd8ec1af6d9580aafaededae73da2ac5ae4bad693042a92599dfd3f7a097ed4dd57946f3092402
SSDEEP 768:Irv+4UNbdD3Wcb+NNp8+p3bd66j+4BRv86aLIi62bwCl1:Ibsbp3ZML8+p3Z6n4ys0ww
TLSH
T19403CE33E9A899739CF6C644B2467B437FF851A396C10EC0E4DD2B4E419A19E630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 915bfe6e7fa9fc36e3b1c812a2d9f6e40bf76adaf491db519abc9d5e9ea0c465
MD5 a940669c875c1f1e103189f50a4996c0
SHA1 56b4a2d5072221f551a240b70244312859e58cd9
SHA512 d845a58af2bc8ce8e03e7815e340e28412286136c4d794d508acd76219ec2066b12964454ef13fd36e7a684c6bf92d4424fa742d41f73042b172ec81d7e3d588
SSDEEP 768:7rv+4UNbd03WhOb+DI0wp8+p3bd66j+4BRv86aLIWWoT:7bsb+3WcczO8+p3Z6n4y4c
TLSH
T1AD03AF72F8A9DD739CF6C644B24677837FB420A395C00E94E8D96B4D119B19E2B0F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8063e68131496501c18087750c78630f97d725ac2590d0b64d12fc229674d84d
MD5 975270d678ebff3c5589f7ebcc5292d6
SHA1 90f0529c3fabe08c0809b8785f7f16580c0c20a7
SHA512 9279b8b42925dca3fe3e6de260cd6097ed34d1f7ac59f5eb010ea3eeae30f78e2bc74b48bb0eaf9b3d3a4a5c95f0b075522a82c36924272e1a0125659950d9a8
SSDEEP 3:MsEllllkEthXllkl2zEflp5R+/l:/M/xT02z+5R+/
TLSH
T1B44404047FC4144DC5001130D053C3501771F4100571574334D114335CC75401C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

510382de-da05-40a4-81b6-ec103719826b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\510382de-da05-40a4-81b6-ec103719826b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4884_1952612942\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download