625a2424682d6028099df8192c8ada69be63769b3cdcf32819463c02b8531b00

Analysis

user interaction
yes
max time kernel
168s
max time network
166s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 11:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
crack.exe
Size 19.2MB
Sample260710-nv1vmaby31
SHA256 625a2424682d6028099df8192c8ada69be63769b3cdcf32819463c02b8531b00
MD5 7b79b84181053e16a977058ef4747397
SHA1 172229813a3a064e8e3f2e37952f432b8f9534c3
SHA512 db2e38754b70c672236b8f0ae8a2d6f2e6a264308994026c9a8b1c15f247022713c47b50c970936ab0ec10dfd5d87ab9ae419b3f4a917928d53818941a5bc278
SSDEEP 393216:v1MUOI1SFXN4Re7Aa/PAfMwT77No6R/af5wNVMWigOnrarw:dM16SFXN77Aa/PwMwH7m0Urarw
TLSH
T1DA17D005367580B2C1AAD138DB87C61AE3307C4697115AEB30D8B6263F73BD68DBF265
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 11 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_862543718\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_1816474447\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_1816474447\smart_switch_list.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_1816474447\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_1816474447\manifest.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_1556499189\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_120449704\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_120449704\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5408_862543718\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1816	msedge.exe
4884	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\shell\open\command	crack.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\shell	crack.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\shell\open	crack.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\ = "URL:Synthesia Protocol"	crack.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\URL Protocol	crack.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\crack.exe,1"	crack.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{31123139-0F62-4F3C-8466-7927B2D04337}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia	crack.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\DefaultIcon	crack.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\synthesia\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\crack.exe\" \"%1\""	crack.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{1651273E-D21E-4B26-AD31-355DAB8E1EFC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5768	crack.exe
5768	crack.exe
5768	crack.exe
5768	crack.exe
5408	msedge.exe
5408	msedge.exe
1600	msedge.exe
1600	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5964	msedge.exe
5964	msedge.exe
5964	msedge.exe
5964	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5964	msedge.exe
5964	msedge.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 5768 wrote to memory of 5964	5768	crack.exe	87
PID 5964 wrote to memory of 5368	5964	msedge.exe	88
PID 5964 wrote to memory of 2772	5964	msedge.exe	90
PID 5964 wrote to memory of 1816	5964	msedge.exe	91
PID 5964 wrote to memory of 2772	5964	msedge.exe	90
PID 5964 wrote to memory of 2772	5964	msedge.exe	90
PID 5964 wrote to memory of 1592	5964	msedge.exe	92
PID 5964 wrote to memory of 1592	5964	msedge.exe	92
PID 5964 wrote to memory of 3136	5964	msedge.exe	93
PID 5964 wrote to memory of 3136	5964	msedge.exe	93
PID 5964 wrote to memory of 3136	5964	msedge.exe	93
PID 5964 wrote to memory of 3428	5964	msedge.exe	94
PID 5964 wrote to memory of 3428	5964	msedge.exe	94
PID 5964 wrote to memory of 3428	5964	msedge.exe	94
PID 5964 wrote to memory of 5204	5964	msedge.exe	95
PID 5964 wrote to memory of 5204	5964	msedge.exe	95
PID 5964 wrote to memory of 5204	5964	msedge.exe	95
PID 5964 wrote to memory of 3028	5964	msedge.exe	96
PID 5964 wrote to memory of 3028	5964	msedge.exe	96
PID 5964 wrote to memory of 3028	5964	msedge.exe	96
PID 5964 wrote to memory of 1456	5964	msedge.exe	97
PID 5964 wrote to memory of 1456	5964	msedge.exe	97
PID 5964 wrote to memory of 4076	5964	msedge.exe	99
PID 5964 wrote to memory of 4076	5964	msedge.exe	99
PID 5964 wrote to memory of 1704	5964	msedge.exe	100
PID 5964 wrote to memory of 1704	5964	msedge.exe	100
PID 5964 wrote to memory of 1344	5964	msedge.exe	102
PID 5964 wrote to memory of 3484	5964	msedge.exe	103
PID 5964 wrote to memory of 3484	5964	msedge.exe	103
PID 5964 wrote to memory of 4300	5964	msedge.exe	106
PID 5964 wrote to memory of 4300	5964	msedge.exe	106
PID 5964 wrote to memory of 5408	5964	msedge.exe	109
PID 5408 wrote to memory of 2080	5408	msedge.exe	110
PID 5408 wrote to memory of 3948	5408	msedge.exe	112
PID 5408 wrote to memory of 4884	5408	msedge.exe	113
PID 5408 wrote to memory of 3948	5408	msedge.exe	112
PID 5408 wrote to memory of 3948	5408	msedge.exe	112
PID 5408 wrote to memory of 3140	5408	msedge.exe	114
PID 5408 wrote to memory of 3140	5408	msedge.exe	114
PID 5408 wrote to memory of 544	5408	msedge.exe	116
PID 5408 wrote to memory of 5448	5408	msedge.exe	117
PID 5408 wrote to memory of 2092	5408	msedge.exe	118
PID 5408 wrote to memory of 1820	5408	msedge.exe	119
PID 5408 wrote to memory of 4980	5408	msedge.exe	122
PID 5408 wrote to memory of 4980	5408	msedge.exe	122
PID 5408 wrote to memory of 4460	5408	msedge.exe	123
PID 5408 wrote to memory of 4460	5408	msedge.exe	123
PID 5408 wrote to memory of 1596	5408	msedge.exe	124
PID 5408 wrote to memory of 1596	5408	msedge.exe	124
PID 5408 wrote to memory of 1600	5408	msedge.exe	125
PID 5408 wrote to memory of 544	5408	msedge.exe	126
PID 5408 wrote to memory of 544	5408	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\crack.exe
"C:\Users\Admin\AppData\Local\Temp\crack.exe"
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://synthesia.app/support/opengl
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffe9a3fc188,0x7ffe9a3fc194,0x7ffe9a3fc1a0
    3⤵
    PID:5368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,7272874580841504610,11609096656060163462,262144 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
    3⤵
    PID:2772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,11367570780681525913,15499862497422083879,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,769006052121920132,1026957912074659092,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:13
    3⤵
    PID:1592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,11219457656729784732,6683589249429044016,2097152 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,5364720267698221934,10373444784042638948,2097152 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,3162152932827507967,17057423354911579194,2097152 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:9
    3⤵
    PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,18017403274705726832,1880397339268022067,2097152 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:1
    3⤵
    PID:3028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,15145421428784314471,4399479152147993173,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:14
    3⤵
    PID:1456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,2438824666279976614,2208962099074808874,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
    3⤵
    PID:4076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,10919725275249994785,7414792243355554108,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,17980547099351461875,16672345559287312409,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,17980547099351461875,16672345559287312409,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
    3⤵
    PID:1344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,12799218155631998763,7182052687562640784,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:3484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,992437885497883062,1219802393247552714,524288 --field-trial-handle=2528,i,2494079634478771796,16521465766339382858,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:4300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:5408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x2c8,0x7ffe9a3fc188,0x7ffe9a3fc194,0x7ffe9a3fc1a0
      4⤵
      PID:2080
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,5762667345067506124,971839653207468108,262144 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
      4⤵
      PID:3948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,16076498496562245509,16379848902458740989,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:11
      4⤵
      System Time Discovery
      PID:4884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,5512433672031791579,11242923525417535051,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:13
      4⤵
      PID:3140
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,13017525824215536788,12789492301709418759,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
      4⤵
      PID:4460
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,13017525824215536788,12789492301709418759,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
      4⤵
      PID:544
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,5851434906377400271,17995490769421364130,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:14
      4⤵
      PID:5448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,3028695256894798000,16813892502747096172,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
      4⤵
      PID:2092
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,7484292504814790963,831683560498730093,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
      4⤵
      PID:1820
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,11172731214226154174,1482129322452239157,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
      4⤵
      PID:4980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13309137166033370013,17646388135091089251,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
      4⤵
      PID:4460
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,921733301878052486,13083043126545854600,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=820 /prefetch:14
      4⤵
      PID:1596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4976,i,13842837971463484907,8889611960156135338,262144 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1600
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,10749130743719351698,9845716093924906584,524288 --field-trial-handle=2600,i,15948405422070086362,8565466972591011303,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
      4⤵
      PID:544

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4504

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9b4e5895bd5e70a19ec64e3d2313f1b3a8d07193630f8f85b4fa460e14fbc49c
MD5 cfa1e350547d0afadca8b915ca77d011
SHA1 25861abceb7b0fbb6cec277059e53bd24ce446d2
SHA512 65263f71152c9a5f9c8ccddd86167e2a2cf9aeddf83ef0b92bd0ce688e4693b76117e8d5424ec56a0824569c2f701c5ab7b012a0d7811f8e0184b459650c7862
TLSH
T189D02374773DBDC6C72D217685348B007629955379974317AA50980D8C7FC82DB867F3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 94e24b0f24e413e13cd89fd63325b50cbef762a7f5ec6584f9947eadd71ded6f
MD5 3e33ac5a8095eb96abc91f1266ce1353
SHA1 7c54e0247e1263335f89fc7846292ad076233637
SHA512 5d3145adfdb1cd8ca5255a0f077bcc516182c9487b506f57d43641bc527f752cac5e88b4b6bab97064b5062f644426fe9f65b5aba2b0bb800d78692c0f3d7b74
TLSH
T18ED02370333C6C02CB0B30315010C310335293007C4AC1338660500C4C3FC81CB4E2A3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 49a6cda36cf17e6a8e8623e88a4aad2e443d537b05353b1e73a83c1a6e4dd816
MD5 52f3ccb4f76eeb04c1ce29625e48b101
SHA1 367f718c73884419eb868f5b69ad76637867a24c
SHA512 902de6f43cad811619edbb2c866fcf6b0de9e36718b8ffdf69c6bc52ed083dbafeba41992524ef2b23db99ee6e0045976ca85d38bb2a5387d7e91716803a79a4
TLSH
T1F8E02BAAC911EC2729FA176A5514478AD75423072751484B3B3DD20CCFF0677478A85C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6477a8cf09d5660d03d478630d5692ca38d5259f8629ecbd11cd0e3c9d1b8d18
MD5 a221b27951fb4f2ace1cd08f92061d27
SHA1 1490410c306e569790962082a356344d5de23eb4
SHA512 74616a27ca0a48c260e20866560905f82efe4c2db41561a8b7c7c5a04b644a70c0098058bd76b476d2a496209bec7717a001db978dedf94ddb08eceb9f1ec704
SSDEEP 192:q4cDmvu8CtKB3B4Ca5Un+f9/G9/9/x/i/yHfM1DQSCY+HGKtHBTOp:xUmvJ/x4C2JGxxNCwM1DQSCBHGKthS
TLSH
T13B13F9BEB2166C42D6E702BCC4470FB28B75F6A5C6E05A234E38B0422B45F519DCF957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 16a95c3706f232f3dfd7c88edb69e12d7d220e34ea88b42d75cb205fb8a860f8
MD5 fd1ef89ac6eab0f871e1224f2bd5280a
SHA1 87142ddfc135d221096f251359578ca93fa3812b
SHA512 f91b58940f0453ba5a663d258787e231a1c31bfca9c5191066c616ff95969c44d3b8600f2ab73ae4db20eac362e232af6fb3b0d9982714063b0648fc8b87ea69
SSDEEP 1536:NzYMgL/O5L/j31iaL6ikPp09b5aoD8lzC:yMgL/mL/BBv
TLSH
T1D3445EF71951600BCBA852F5E2033A3DC17B850E6DD1E9A8E57C4C812825F36B6FDE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 798db58ed0cf002f91777479c95663a975757b4a8df2f10ac487c508fc4cb4f8
MD5 07df0ede4bd8b66e3197a61a0bc7abf5
SHA1 a20382fae947b6f89f111670e893cbbb850d502f
SHA512 a429a915ed045ef4447cf558a9524d6d28a49257278f0f8fbfe1da859c2b9dfb3ed9f668204d04c773921368784c5c8c58594c7e30af937c8e4f589496b2e01e
SSDEEP 3072:vv9G+aQ4rK3iHEO0hTjcli706DkQtKcXO9+kwS9:vQdhrK3nOaTAIZnXpkw
TLSH
T1C3253AEECB681C82CF6B8670B0E0E8077E712183B65DD0D39944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 2735d5adc19b4cb26e97137b4b7c2a55d23feb98803964052b935185961b3f40
MD5 2aeb1f790e71259052d0185ac9aa1978
SHA1 e31e8a645a595dca6870513a9713e42738719a19
SHA512 20a1dd2270d999e08fda2e718679aea50e9c62945e0f730a32a9bdd225555d406d794965a44eecb0acc038553d5687a330e082cba53e7e7154af2c51f4ff0371
SSDEEP 24576:k2HciZaOkXifejCmlADOdZuJqXQxJ/74NI:58iMvXcRD3JqXQxx74N
TLSH
T17B167DEDC96858C3CD639A30B5F0E9877CB413C3F594C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 49cacf9dc55ab8f9c340e16b5d2350b2d92c1f2d4a7bc81fa58419bd12d11c36
MD5 b9ecb2ab8b53dc42ec307ec92681c997
SHA1 a5730656a7abdb848b953d01be8e438d9f93fc5f
SHA512 156e23eeddaa6a07305db395424c6f0ffa4274b167cd96d2f97fb63aa62b92df439442b61410113af43dc83fc935077475a0980773f99ea5aaa15e7f645242d5
TLSH
T18D610A504F181AD3EB6341B6D1E343AB32F7B7BE42072A235C60BD38980AF9494D15D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a18b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a18b9.TMP
Size 3KB
SHA256 261fc057ef383c9d9fc468f9e52e9e6dcacad5b88d5027b884779a6622dd3db1
MD5 e9a6f76193603e8217d22bd08330daab
SHA1 c5b9cc41685b664846abdbde16370e3b6dd08e23
SHA512 edeed62cc3e4b365cf5f4f0d0f9359e9550cc92a9c2f24ad85179d193e284274f9af16bf724259c2d3745a9139610cc37c5aea12830c71cb429eac03d3b03abb
TLSH
T1E66109615F141AD3D72341B2D1E3836B37F7B7AE42071A235C60BD38980AF9494D25E3
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 f913ed985c78fd16865ff7a5e56e8bebc49b1eec5b11bd25f02dbb14ff5bb7d5
MD5 c39e499b48075a5c5a52feaac5930204
SHA1 5520c5909b5d2bcc712e8056856d8ee684dc2291
SHA512 6ba0f80cfdb803cf738772d8a259de97f16928922895721b74baa4bed36bbeef32ecd381e0e5693892d14c7221e306c62e06d10afcf53206af18bf492f4b8ef3
TLSH
T1DCE068D090C6C92D9424B4C61274A71CD696304BD684AE43378088C07A42181B7C2283
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 92ed09f00d82d7596100d8812164e92a63b41939001e9727e2cd0d582ff2d3fc
MD5 f029d52a270a10d63048e96634837cfa
SHA1 a89e42678d55370f604750f6dd195b0d3c96eaab
SHA512 361cd8a5d999ad243563acc24039c5e871b442a63a41e5b5a162435cee1a49fda24185c3fc795ab33e2213fb89ba5ec6bf387cd2754bc08aa9d8dd3589798a85
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjeRbQW5LMUFtI3TwNVqYp3z:TdD4jJ/0UC+lf5qRbQWxMUFOkVTpj
TLSH
T19EE2BC8C3B11F911C4ED733DA0C2C5E19EFC683C4A5DB5B1923869728C635A2B49E11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 185c58942a56055521c81ee54e62435582453bfd4201306f910edb70f07ddac4
MD5 0ad427a77ec7b63f406ae0b49f3535dc
SHA1 44c59914f4dce32d295248126cba1c4f98b3bad9
SHA512 6d60e6578bf0b2a1a73a119473a20dd4859a8987b3041fe51c0a9e3b7737649a2f26c5e300bff1bab31bee7b7c4e511fba3358709cc9b27028197f9ebd63dab1
TLSH
T1DAE086D485DFC979D16868E38378635C8ADB3447A6983A02278A88B0E519746EB96381
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 2cc4cde5775ad5781aa63c96e316bfd0774c24c48497f986ce1c547880abec5b
MD5 7dd23b939921ce7d24a85a45a0eab60c
SHA1 85776290ca14aecc6941b02080cfef03d1cfb1b7
SHA512 8d6cf6465cf81a82ea717f4ec9e8e2d3265ee52750bd8297acb4c1718268053fb7b015c853e2863a30ec0ed3424cc6365b0c50fa8aef496c6231a058ce328416
SSDEEP 24:LLBQJY90+mhh0GY/l1rWR1PmCx9fZjsBp6UwcECjzL+Srt0f6w0NV2HM3lDnzsBJ:uzBmw6QU1Pz6WtC06s3lDnzmnqcP
TLSH
T1AD92428B9F397803EF851E3E212A0835DD37E29CAFA39C94396554619CB84419035AFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 125ba71866a3ca212ca25ff405f0d8286278c350b3c5740e05c88fed9e8585cc
MD5 45ad2169700d862951aff809b363729a
SHA1 20376a8df2962541f1f8d12bd8e2b78b3508d309
SHA512 c45c31ecfb83ab3d07d3a9ea6bc52d0f2c2d0968c5b612eb756ad1e895404c60d4fb804f957e009cafd9fe25cb0a012af548658d682c3d6e29cc45364edf4797
SSDEEP 96:rRk+WA4m/VtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/l2FbbEOVpZf24JkMfXF:rrWAZKH+bF+UI3iWGVoWN3qL/uVVV63
TLSH
T10024101E5F343722CDBD913669E744A35C7DF03F8B1226DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 5ef083285574891d1f89ee0ad7689ec912a02bd3586747294c120a41fdc091cf
MD5 d8c98b3b9307c077b586d6125dbd3f9b
SHA1 a7594ef6ad270bbc5f65fd7737158f315c12cf57
SHA512 b2cbbf360114fd33b0c39fa2a42fd8ed144bc5b2f01de956af0fb22ead140fff563d866d8586f06b129b3150f64507704a131f7d5369145cc785805a2df68e0c
TLSH
T176E0D8F085DDC529D194206F83787B0CDBF53506D7882F026F4AD860B08A104A7817C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 807b16e6f9db61899b1c0d8a0ec23ce2a5ff2754238ffac42b5b72cfbeed7cf9
MD5 bc7df0f3c387b561d13dff112b1d7964
SHA1 8bb0a4f845b964325044d00269b55f2925e5da39
SHA512 b4c1944ec91db7a7085c9692650647e861646318bb26755b45299f588e5abbe7bbc834defb606730c847f89f4a172676849a1c8d80e5a5c3904c4cda6fa93dd5
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAwn+olw9kVcP2:qDeMatha9RAcnVh
TLSH
T146B2EE4D5F346210D1F45B32EDD089672F7C111CD3B3369ADA5860B3CE929ABB60916A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 adc61e7c81e63e16434db16ed59b4a233d151cd43cca98b3d425c6d6a16994ad
MD5 63eab7e857eaa16740653a2faf0bd7c7
SHA1 e5c7b466e7430c2e19cd369b432d256dce4b0fe6
SHA512 bbbb185a6ad79cce1496acf7c15ebeb71e8d5fc734b79f98a166730816daab3678fc084be5261182046381eec1e5b00096a1c98c68c3a286febe2bf02d1341e8
TLSH
T14D71DEF383F4866EC91196F4AB14BE1BCE1C0516431C3CAAC9D5BE57A3E3471E101A5E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 b7504cbb0354553bd81b47f28d6d7435e81c5cc94917d80b46077ef7f3b808e0
MD5 9cebdd68d8f2491175e73f353facc2a8
SHA1 f3ee11132f54c44d33fe94d0c80bbc71a666131b
SHA512 e5f1f8cee6a9659d16a6517d2fe43918614d969a898025a29f0c31fdb8b24f890c7860bf72775a73c4db1ece98fa1a19fb68064c210f415ccf2b03b4dc8dc215
TLSH
T1F5E0C0A7C2BAE433103948BF2944F881BD35D8761901B0F0DAA6C37CE0C00FB560702A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 170ad41a2791821bc620a48a7dd1bfb891a038451737d2d31ddddf6830b4e202
MD5 3717af10381b6e84592ae21c22d64e40
SHA1 eedcf123b3f3f0f7382e037f474e4cfa98ca57a5
SHA512 39695e01bb8441fdef2431b43ae33fa7ccfa2141d315e7491ed42fd9edc74b6ad9458dea99a8f112cc02b9f63df8d066d3151e505afa1c64e4dcd4a1cefd2516
SSDEEP 192:sxR1RiyM/jK1Ml8wCe/fpsrNzwQZu5OlMzoD8pb//g6+WNr42/YGlkkb+GmIgtJ:sxR1Q8e/fpsh0Okgkr/55/tb83
TLSH
T19F62D716A934597BCCDBD20DFA55BF53D6F95573A2901E44AAFC8A0C00E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 9af61ef74eb5e57da5109c59affa8c747694df912ff5593636c4709795dc07dd
MD5 d5fa76e55adf09eab22f51c23da7a45d
SHA1 55384c93ce58ce221f657aa96de02b6a0edf15fa
SHA512 69cdf03bed4d48f4693fb7943b6909a5eff3b53b96a4e7511adafba4aa89d8e78158d3539ebec58be1edb471c43cf3cbd78db7f1dadc643447b6c62bb3b39cf3
SSDEEP 192:sxRCRiyM/jK1Ml8SCe/fpsoWpVqNzwQZu5O7MzoD8pb//g6+WNIe42/YKDrkbhgu:sxRCQYe/fpsoWv60Ok+kr/5p/KbnL
TLSH
T15962D816A534597BDCDBD20CFA56BF53D6F95473A2901E44AAFC8A0C00E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1dbece8bd824f85574fda14e6d202d9fe0ad7c66a8dc35fdc0c0c1b6752f4553
MD5 34042ac5a7fd27e382de7c75e0562624
SHA1 91342eb524b2f8de9c2af4fcf44d4c817f82169d
SHA512 18d095aa3c7adf188f33531c6d2c206780248cbe48125130a938fa0ee7468b613684f5af985a64dbaf42d2035e4b70c9eaae834377cd7c3b52e978011dd28117
SSDEEP 192:sxRCRiyM/jK1Ml8wCe/fpsQNzwQZu5OlMzoD8pb//g6+WNr42/YGlkkb+GmIgDlJ:sxRCQ8e/fps40Okgkr/55/tb8L
TLSH
T17862E916A534597BCCDBD20DFA55BF93D6F95473A2901E44AAFC8A0C00E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 c57ae143113f4809273c5ecd1b7cad1d0151a0193827d084943e94ae0963689d
MD5 8f9d6faf601ea498ec573344229e0532
SHA1 54e769cc3de2aded1138765b5c9bd8fb8f3bc047
SHA512 f1d8290d98532d97dbe72ad450cc096b6bcfc2f881bd8d708246a7080d1941bb71943cc6436b345418a87e031eef8fd0d8c6e19ec1a2f444d47ded84024cdd0c
SSDEEP 768:UtiiB37pLuL7ANWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVarxpN0sroYvh:UtiiBxE7ANWgv7fgJu1jaJrxf03uh
TLSH
T11BE20C3B680CCB7E4F804A9CEC29BD9E6DD801CB56D8CD9447EA881C03C67EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 79fe3181b2ffc99d8ea8d09ab9e608b3b543f8e2077d06f80caa98bb6d082db8
MD5 1e9f239a53aa1ee44aaf3fe064f2f74a
SHA1 79e23369115a60eacdcb2360805f59dcf0f5ae22
SHA512 5d35a58acaa4ac465bdd3a32b775ab6ecdeacda0a4de5c003f3e2b2b98b5c4910353b88ea18ca2f088a28ecf9aefc342023b04f1168d3ea10442f57fba34d28e
TLSH
T18AE0DF9186E8D979A17521E302B4A32C8AA97807DAC83A422F8188406182F08BB97280
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 b68bfec2e74a3080a64b2fd04baefc43e06c507cdd645e9f61e0de7cb9d7a9c7
MD5 d6fd8d0846f23e8bb78e0a4e4e67748f
SHA1 31dbfa26796f9111a74ad9f2a1d063eb6599c28b
SHA512 05ac217bf15c3d48869d7b60ff607cf13ec3ae57a08fc26624f51ccb57bf8ee535af020c3187cf650124d07a172b261d2cea3af8590e1620f18b2d19f0d1f7f2
TLSH
T16FB012183F819695E5C806F74ED04B40EB80F802010499079E444F100C08D982F20CA6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 8534af3e9045eade46cb9bedcb21fb21f9d6da2d0beb1fba503c223967349f53
MD5 92e9d4fe3db4900036e8eeb68ca69d8d
SHA1 4ab63fe2dbd674d26ec9458fbb5ea39dd54b08f8
SHA512 b2bda052c880cbed0c1a590b5cd36926d1acf30298e34cd39cc4806090c28b91a755792f6e779d8e40f832055133207c09a26f0894bbc421cf54886d0b89ed7b
TLSH
T105E0D8A1D9C9CB3AA29520974338F32C85A37802DFC92A523B49D440624A7407343340
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 090460cfdccbb9192b289a1709ef8343016583c8fe9e30268b803c651c5b1add
MD5 5389bef85360dd661d6716ee45f26d58
SHA1 58e467a02e3087ae8605ad748c94da65e70262ed
SHA512 a3532085b167b028956bdfe19afa661edb2407cdc63245d64133d4d2892ddee2311c2459665c71ff9d5484749e99d35bd57ca3a4e561b40212b0459e4084025c
TLSH
T1D7E086B0C5D9CB39A05460C74374A72D8AF5BD0A9FC83F977B484854B141354BBA6685
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d02186c47e825ef3fb118f27b52b7b0be2aff8b721cdd1924bee9cfe83d20dd1
MD5 0a83862e58db6caa79d6ea3b9a6647d1
SHA1 05a3f03feb71dfd53d46bf3a7c09a054d9d4f1ca
SHA512 0ac47b5d4c2ad23e65a46f4682fb8b04cb1455213b19eb75bad8eb94a126deb60f531c1464d5edac201b4962ef7a8e306daa019a8f965d29d93f7fd5a97cb64c
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGl7VyKeIyiqcKHKRG:Cm7KmgIIJ4tWGm7g09OGluBnf
TLSH
T170914206727E420038BD681C99B4C52B93C670B33569A47B7BE811BA1F6AF034DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 21236aca19a37d1aa30ff9413e3998b3d658f80220f755a27c5839f8358d06b4
MD5 0af8c4ad4d4849573b311b2e9353c906
SHA1 1b5a139b30583b8c2d3030f1887cdf77cc0f551a
SHA512 3ae2d312924cc1b212f809f34775703eaa32e183d17b82bead403157a67af424b3bbe7aa075dcde197878e1744e5d6d22c07f8bcfc6f0479056d3f0a7da92d88
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGl7VyKeIyiqcKHKRpf:Cm7KmgIIJ4tWGm7g09OGluBno
TLSH
T1F7913506727E420038BD681C99B4C52B93C670B33569A47B7BE811BA1F6AF034DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 441e09d51f65bfc87b9759d7db45ee05c1285d26551503104d25f2e7e98d5615
MD5 01e1afcaf78f54c945bf9cc7f783fa5a
SHA1 204a5492c22e954c23bc3af1c2b06efd152e704e
SHA512 d6e63ca0776c898c08044220e5ea087dc9b62eaed9f8870da059bea2c27df901db73bb7af998413f237dc083804a206522cd1e735cd235fefdbb9c508df44232
SSDEEP 384:DNrRZyCSDnxTIC7MEhIKyll7svbFKfk7:xFZJSDnilyI1l7svbF9
TLSH
T13044840A7B747001EDE6D9725CB080771E3CB16E8F22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 9a4c01955c789fbe44e513f90fe7fec9478bda9d066c26770bb39310e94ffd8d
MD5 b83951ac74bb3ec950bb7dd3aa19d586
SHA1 5866cbc64ae3135580c5753ceb65b062d233c2ab
SHA512 de2f61125995b8de88b74620ab4473a8a16eb30141679ecffa0a11e0fd9d416f9bc4495285bc981019a5999f3a27a166e5b92595679014fa8c4bdb735a517f03
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBg1B0AEX7mNm6xGt:zEK3tjkSI5IUltGhp22iSBg12XMW
TLSH
T1A652A99BEA7C3216DEEA82759BC102F1AE7A503C4EC5E61264DA10552BB4140F31E9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3fa2684-e68f-4a5d-b18e-7e2815da91a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3fa2684-e68f-4a5d-b18e-7e2815da91a2.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 642fd05bdf2c1176fdb6b68d26b0a648db778f23c00840147357951e00b7213b
MD5 40a6c3ef2e946f6fd23d61f8415104a9
SHA1 c37a8ae9aab24b738903d6c04e6bf79ed1705461
SHA512 29a7b720c22236773ebbb9bc06bd8469377760040261a903b5d311afc8d4f6dbe9244b2cf5300a2b6239912778bcfe12f9d1946c66c300cbf9ebd126f3b2d82c
TLSH
T183E086802339A490BADDA950E6246A03E1CDBD77250F8471339E85BC4B4C90A0E2DD37
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 97ea35c3243d1bf5a81988a979d40c82840dc21741d7bd8c31f2bf02b3a76f79
MD5 f7dc2571df8c8f02e677b454fcdad0c0
SHA1 44410eee1ef435222ddf4abec9e2d64419dfb4a6
SHA512 aabccf13d1bebdcc5a72d8023e8aabdb04ca3ce4e944b63e93ffeb779663eab3de9ad5c2b799a0ae6c26519dedb13eb349135d697481d851825d666baf74bca0
SSDEEP 192:TQrIII6b6MIME1YcYPqWOENAs/l8BuCsLd:TQrIII6b6MIMiBIEEes9Cs
TLSH
T13A42755E16052B77C2BF6F76136E86449BD888815072292E31623D1F8DF3E9786C53F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 4cbe76d0b66afee731e1df3dac1d82bd7e00d4085444253e33222a0165e7ffb4
MD5 1f43f09939a8e6bb0be09d4ecae161b6
SHA1 df6a2656524bdefc33eb29e6d26bb1e095db7d0d
SHA512 3c4599fbb9d4cf7217d2e9af5819717eb45f3995424d544155247908222917fcdf4b3f69e7bfcfb5410b1750a8464eca9a0161e68c3f58814f87713614478aad
TLSH
T1E7E020D0D5CDC5BFE16820D74234574C86873507EA842A452F45C4A4E409300FF45242
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6c46f98f322c24431d358abbc9c3bf7633e4450290b7ab10d43832d9615fd0a9
MD5 b62f59bfe0f7797c0a1a17c7ee23792b
SHA1 f286a17d893ef167a86257126657f920798565ee
SHA512 574f319ab1b54330ea8225accb3f1e3a2ad30bdff9a59de115ff6ad20b81e912768d63b7af43a7c1eac3573a2ea6488d7923ca76784c45d0a0e4d51959f338c6
TLSH
T1A121D695F330C149E15E867D943E9B3A1739D8568FBCED0F447920346E72B040E4B6E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 71a30bf1babda197bbac616d6d9a288b8849a3303556f27decdfbbd4372c4265
MD5 6394b30d5781bb43a9989110f2fc3e75
SHA1 6a9c18b9cc6248afbeacdf89f4b6e46abcebcf7e
SHA512 d311af73c44e482c4994fe74d44bcbfd142cc941f4d8a0c9cfa2ff16efb55c7bcf45a54aadd06295fa91085a3ae8977bc83923e8b7ac72c661bbd92fcadf27d5
TLSH
T1C4E020D0E5CDC5FFD06820D30274A38C869B3843EA842F013F41CC94D509242FF46242
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b074f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b074f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f0e4108833c0333b828de3878fc651d69b8e3d3afcb126eba4f6bc1fff0414
MD5 1f708d796e62b593e340148008f3d2f4
SHA1 bb90475a782f85aa32b582c926a0bd36207e4289
SHA512 777640b89ba316db50944d29dcf9a2ae7a11ebb118958b2829c3e68044e34c9661047cec954b7874296bcdfcb77210435d6a5d21a4fc5d9c9a14954e247f498a
SSDEEP 3:MsEllllkEthXllkl2zEfl4hqlt:/M/xT02zVhql
TLSH
T1364404147FC0040DD5003030F055C3501371D410051157C334D744335CDFD504F10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aef8800d1ebd44f3ee83c011666936eca065db1bfa65a6f307c4d122f08d37d1
MD5 c84ec50a8bc41a3ee5060e79ca6ad202
SHA1 e0f0bd1132db957568889821668c492e7de83fa2
SHA512 1b94b543754f5990367dfb4d8947c978e7fc880e97030805119fe75aebc44a3ceca35465dea31e2df2487ef76163edb370d840b2f9b5cb509cd7fa2dc46d68a1
SSDEEP 3:MsEllllkEthXllkl2zEflEUt:/M/xT02zM
TLSH
T1704404147FC0040DD54010304051C3701370D410057157C73CD154335CC7D404D04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fe2473062898e06cfb61f77503abd42deb2333632a72cb86470ad6999e5facad
MD5 545eeda82f284a7c1ff86b3ca3136a55
SHA1 9f2786a88bbf15bcec6c9b9aafa8b319e2ac56e9
SHA512 f8855af1a7b70ab007eb4ae4e208087b1effd071e0935934c3624c3cb5a911ee7ef67e3390ce057ff23907f8a67bdfb9282a0637dac05f348d6b9e3d3fd910fc
SSDEEP 768:xlj+943MNKLlYyr0d7Hucys6BRvi82oP4/z6himo6Gb9Mg:xQ943MN903imOz6ImoZb+g
TLSH
T1CBF2AF35E8558E72DCEB829DF54B3BD26EE41273458C1EC4D9D99F0D05C7AAD031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 60KB
SHA256 6a5a642596c596364cc7b618609cdb786fb81175870ad33acf5e549be2dc24cf
MD5 68fd6b432aabb0ee5d86b481515ccd79
SHA1 9074ece10e3882bc7396ca90f938a02fadb1bade
SHA512 0d02b1063f1dd0aa0b76c8e5ca7c9fcd7a405d0500c949e0e5a4be118d2fda9fbe65b0fd9c1101d975332b3637145209d5f6e1ceb775459d5d1c66cf04db8abe
SSDEEP 1536:5C9Z33NR3imOz6ImoYV9weQA0KLMVYpXckM+e:5C/dRtvIxwcBl
TLSH
T101538CF998D38A7AD8AE5787633D3E5659BCC227B1985884F7C41E0CDC925BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 210331c94f3544fdb9cd994e5a020763ea936dd01149393074412c8467488abd
MD5 4016fed46c2c6a0612dc45e0f1e3ed8d
SHA1 0b8ee20734f54a991eabd43f6ea624dd6b91155b
SHA512 06ed7e0bc2a12d59bfcfcf9aa5a1512556df1258bbb20ad0246f78b0b82a45c599dc46d39cc1414e601cfe8276a694948bfc403139f4e9b375b58a35f207b685
SSDEEP 768:xkrv+4UNbdy3MNjLlYyr0d7Hucys6BRvi82oP4/z6himo6Gb9MQ:xkbsbM3MNc03imOz6ImoZb+Q
TLSH
T12D13BF35F818CE73DDB78298B18B7AA37EE41273458C4E94E5D99B0D06879AD131B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c3fbdb3d7806d72a832a85973da0224427a695c08cf7232a978c982130e23258
MD5 d9576b07605f8753587bcc75d55fa6e5
SHA1 cf076c8bbb6261fdc7f0d1bc9b992d72a410e58e
SHA512 b30a90373ba00e734f471a6fac326e728985b1ba283405ed319bc015d685c2e5e210e616df35d2dc6db6485c9a9cbe4ccbe92267b635200ad82df1c5f7e74cd4
SSDEEP 768:xGrv+4UNbdS3CwplYyrq7Hucys6BRvi82oP4/z6himo+I2bwn+h:xGbsbw3Cu3imOz6Imo/0w+
TLSH
T1B803C036E4588D73EDE7C188B44A7A937FF4526345C95AC0D6DE6B0E028B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 41cd6e43b69f776d137236353d5f027172b7fb10f0a029e167cfca34da9313e4
MD5 a59996d2b1829aa1a9081a942f949ff4
SHA1 3a73a3da080ac10831ab12fe048789d60d7689f1
SHA512 b610a30f1b2089d94f6c484f9848cf4fce4d5629dd1bfc7d0e4b6109336858f77ce7e776b01ca98db703e26841e99f8215ffa0cf0f4a914128e69f0dc99c79ea
SSDEEP 768:54j+9Z3RN9LlYyro7Hucys6BRvi82oP4/z6himoxwM9T99Me:5n9Z3RNv3imOz6ImoSk9+e
TLSH
T18703BF38EC154E7ACCEB9788B20E3B667ED4033781D85C98D7E95B0D5593AACD316822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 8fa88214e220750410542f58756c12db4efdaa9b8f5886f3b526a003e51ca22a
MD5 091905b1d52c4e7d54877c9e252e38da
SHA1 c4260b5a559775311a9612f55f1f03cd5087ad12
SHA512 f235699b9f1076f8a571891dd3f5b65a6b97086b5c50ff0793bdfe6f9ae2759cee7049b4b39b5294f625e2d3b3d1da8184eb74c7be47eb0ae16af1858d7b00ac
SSDEEP 768:xAj+9Z3MNNLlYyr0d7Hucys6BRvi82oP4/z6himo6B99SBb9Mg:x/9Z3MNK03imOz6ImogKBb+g
TLSH
T163139E3CDC118E3E88AFB38CB24E2AA56D980337C5B85898E7D95B0DD57396CF716811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e561e7ff03ca49ef502e29b6a598c362477aff611277c244960345e3d0ffa07
MD5 cfe8314e7c99e8dbd2263f7db00b3917
SHA1 d578dc07b9957a3d692767faba32db0024333db6
SHA512 73d45a21d14bfff4ca105f46e34598850a9646d0ec1d5a8e4266c6adb3425092fef909e2778a6e4f09ad0174e3205875afd8c4a867ed505bf8dcb492768f420e
SSDEEP 3:MsEllllkEthXllkl2zEfl3eWKll/:/M/xT02zT/
TLSH
T1F84404147FC00C0DD51030344071C3D01371D4100511774335D104335CD7D400C05440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

9eaddb4c-87b2-4394-b13d-cf165fc963c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9eaddb4c-87b2-4394-b13d-cf165fc963c3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5964_945737949\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download