d6c8a16150bc4821d1347a46e6795c653aa30346a8bba60a9e61c0c90c531938

Analysis

user interaction
yes
max time kernel
281s
max time network
282s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 06:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
moadh.bukhash_2026_07_22_attch_1_of_1.eml
Size 46KB
Sample260722-g84ecael3x
SHA256 d6c8a16150bc4821d1347a46e6795c653aa30346a8bba60a9e61c0c90c531938
MD5 fe450c87bef355cec09c4cccea2e827a
SHA1 400b8c5e06b0ffa059868a91b624d2d4473205e5
SHA512 297b6fdac1af7f0723bdc609ccf7c2db028161a48fd9b9951f41a2467fcd49e15daa817a9a544a6d522a18afa7b80024dfae5a70e6f42f35bdbb1d88a19416e4
SSDEEP 768:U18YM0o+1lsg80jV4VoLA/EwvzexdQTcxDHLovtSVL0pgY04I:U18YM0oglsR+YoL4EwvMdocCvtStAgY+
TLSH
T199236EA157913AB6EE605981DC0C7E87B521F987A0F2D0C4597FCF8AC2616782DE3C2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1618904961\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_843360777\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_145289900\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_315356208\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_315356208\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_843360777\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_145289900\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_846228705\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_843360777\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_145289900\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1618904961\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_843360777\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_145289900\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1884_1870209243\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4468	msedge.exe
2576	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291754352944066"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{0FF9B0D7-9FEB-4B01-97D4-4A264CEEB5DC}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{F69C5692-5985-4CF8-A47B-DADD5856695F}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
1884	msedge.exe
1884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
1196	msedge.exe
1196	msedge.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3968	OUTLOOK.EXE

Suspicious use of SetWindowsHookEx 33 IoCs

pid	Process
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE
3968	OUTLOOK.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3968 wrote to memory of 1196	3968	OUTLOOK.EXE	91
PID 1196 wrote to memory of 4844	1196	msedge.exe	92
PID 1196 wrote to memory of 4536	1196	msedge.exe	94
PID 1196 wrote to memory of 4468	1196	msedge.exe	95
PID 1196 wrote to memory of 4536	1196	msedge.exe	94
PID 1196 wrote to memory of 4536	1196	msedge.exe	94
PID 1196 wrote to memory of 932	1196	msedge.exe	96
PID 1196 wrote to memory of 932	1196	msedge.exe	96
PID 1196 wrote to memory of 4224	1196	msedge.exe	97
PID 1196 wrote to memory of 2224	1196	msedge.exe	98
PID 1196 wrote to memory of 4224	1196	msedge.exe	97
PID 1196 wrote to memory of 4224	1196	msedge.exe	97
PID 1196 wrote to memory of 2224	1196	msedge.exe	98
PID 1196 wrote to memory of 2224	1196	msedge.exe	98
PID 1196 wrote to memory of 6056	1196	msedge.exe	99
PID 1196 wrote to memory of 936	1196	msedge.exe	100
PID 1196 wrote to memory of 6056	1196	msedge.exe	99
PID 1196 wrote to memory of 6056	1196	msedge.exe	99
PID 1196 wrote to memory of 936	1196	msedge.exe	100
PID 1196 wrote to memory of 936	1196	msedge.exe	100
PID 1196 wrote to memory of 4572	1196	msedge.exe	102
PID 1196 wrote to memory of 4572	1196	msedge.exe	102
PID 1196 wrote to memory of 2460	1196	msedge.exe	103
PID 1196 wrote to memory of 2460	1196	msedge.exe	103
PID 1196 wrote to memory of 1740	1196	msedge.exe	104
PID 1196 wrote to memory of 1740	1196	msedge.exe	104
PID 1196 wrote to memory of 5692	1196	msedge.exe	106
PID 1196 wrote to memory of 5212	1196	msedge.exe	107
PID 1196 wrote to memory of 5212	1196	msedge.exe	107
PID 1196 wrote to memory of 3388	1196	msedge.exe	110
PID 1196 wrote to memory of 3388	1196	msedge.exe	110
PID 1196 wrote to memory of 4568	1196	msedge.exe	112
PID 1196 wrote to memory of 4568	1196	msedge.exe	112
PID 1196 wrote to memory of 4568	1196	msedge.exe	112
PID 1196 wrote to memory of 2912	1196	msedge.exe	113
PID 1196 wrote to memory of 2516	1196	msedge.exe	114
PID 1196 wrote to memory of 1736	1196	msedge.exe	115
PID 1196 wrote to memory of 5872	1196	msedge.exe	116
PID 1196 wrote to memory of 5872	1196	msedge.exe	116
PID 1196 wrote to memory of 5872	1196	msedge.exe	116
PID 1196 wrote to memory of 896	1196	msedge.exe	117
PID 1196 wrote to memory of 896	1196	msedge.exe	117
PID 1196 wrote to memory of 896	1196	msedge.exe	117
PID 1196 wrote to memory of 1884	1196	msedge.exe	118
PID 1884 wrote to memory of 2684	1884	msedge.exe	119
PID 1884 wrote to memory of 2576	1884	msedge.exe	120
PID 1884 wrote to memory of 2912	1884	msedge.exe	121
PID 1884 wrote to memory of 2912	1884	msedge.exe	121
PID 1884 wrote to memory of 1756	1884	msedge.exe	122
PID 1884 wrote to memory of 1756	1884	msedge.exe	122
PID 1884 wrote to memory of 1756	1884	msedge.exe	122
PID 1884 wrote to memory of 5560	1884	msedge.exe	125
PID 1884 wrote to memory of 1572	1884	msedge.exe	126
PID 1884 wrote to memory of 1268	1884	msedge.exe	127
PID 1884 wrote to memory of 3396	1884	msedge.exe	128
PID 1884 wrote to memory of 4232	1884	msedge.exe	131
PID 1884 wrote to memory of 4232	1884	msedge.exe	131
PID 1884 wrote to memory of 6060	1884	msedge.exe	132
PID 1884 wrote to memory of 6060	1884	msedge.exe	132
PID 1884 wrote to memory of 1568	1884	msedge.exe	133
PID 1884 wrote to memory of 1568	1884	msedge.exe	133
PID 1884 wrote to memory of 2928	1884	msedge.exe	134
PID 1884 wrote to memory of 480	1884	msedge.exe	135
PID 1884 wrote to memory of 480	1884	msedge.exe	135

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\moadh.bukhash_2026_07_22_attch_1_of_1.eml"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.uk.m.mimecastprotect.com%2Fs%2F2RNjC299qInAmqPSnfxf57nv9%3Fdomain%3Dthearabwomenleaders.com%2F&data=05%7C02%7Cmoadh.bukhash%40purehealth.ae%7Ca91782c0e7b74cf7e2bf08dee62c6e24%7C6609531482d748e8be7c967c923aa1dd%7C1%7C0%7C639201275676792375%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C40000%7C%7C%7C&sdata=B9H3hPA6lUFsCGM3EFMQQcTJleVtjgY4F%2FFy%2BWqnvj0%3D&reserved=0
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffe6273c188,0x7ffe6273c194,0x7ffe6273c1a0
    3⤵
    PID:4844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,2112177260017626048,4414342854454447818,262144 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:2
    3⤵
    PID:4536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,14136993905929649291,15416102165080846620,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,6981252185642592268,5314306012738447079,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:13
    3⤵
    PID:932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,10842949556871932084,11206176737797090748,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,9291940539330920743,8166659357908486939,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:2224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,7492484219529925667,9265360056305862143,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
    3⤵
    PID:6056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,7116928583274051650,11478861595504897227,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
    3⤵
    PID:936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,1359986706809603643,894013897396118068,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
    3⤵
    PID:4572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,9917494468560981534,6174245427157874109,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
    3⤵
    PID:2460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,2417169686849631983,1930386998177039549,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
    3⤵
    PID:1740
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2485121553013248035,10006926052844490278,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
    3⤵
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,2485121553013248035,10006926052844490278,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
    3⤵
    PID:5692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,4412312312096508953,7700862849180232361,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
    3⤵
    PID:5212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6612,i,12505701643377283543,15716957440939647049,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
    3⤵
    PID:3388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6408,i,15269073299550680225,2813554872269986128,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
    3⤵
    PID:4568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,641626846197906202,2572140600498774032,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:14
    3⤵
    PID:2912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,16173109067160184074,6256794553946141810,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:14
    3⤵
    PID:2516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,12772630468568474748,3914105225420905252,524288 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
    3⤵
    PID:1736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=1300,i,73511205944839711,992612798766704820,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
    3⤵
    PID:5872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6848,i,17777577511298755939,3422638226456904451,2097152 --field-trial-handle=2716,i,13125945733688116664,18120891662282366080,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
    3⤵
    PID:896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe6273c188,0x7ffe6273c194,0x7ffe6273c1a0
      4⤵
      PID:2684
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,13537143787030549506,6948913005904427787,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:11
      4⤵
      System Time Discovery
      PID:2576
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,4459596229942901931,1327352800757694838,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:13
      4⤵
      PID:2912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,6067226933261946924,11292455950574344706,262144 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
      4⤵
      PID:1756
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,9451748921568689262,8104418004135341474,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
      4⤵
      PID:4688
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,9451748921568689262,8104418004135341474,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
      4⤵
      PID:5560
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,15874073971864229571,10807679715650990627,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
      4⤵
      PID:1572
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,3168735780768802244,8201337318575402270,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
      4⤵
      PID:1268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,11771265043543221032,5813951847789988040,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
      4⤵
      PID:3396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,12153628183984717095,13775733791321570399,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:14
      4⤵
      PID:4232
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,1917814576239639336,7841919647284988795,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
      4⤵
      PID:6060
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=804,i,17231919164224975408,8260796684939194542,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
      4⤵
      PID:1568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2880,i,14009911542686592959,2885630866614802222,262144 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
      4⤵
      PID:2928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,14359664472867564277,11715809193617649971,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
      4⤵
      PID:480
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,4160221397313881222,981695243722119986,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
      4⤵
      PID:2972
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3976,i,11603051618838666991,7726854414189862369,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:14
      4⤵
      PID:2148
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3916,i,3440207501550122038,15661842110186592695,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:14
      4⤵
      PID:5408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,3480285011734898443,2180401658961285598,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
      4⤵
      PID:3000
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,8567873698341466214,8542169241178670625,524288 --field-trial-handle=2196,i,12049808560424162793,2753712165402884633,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
      4⤵
      PID:1264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2016

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4916

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b8c99024ad3a25b5d717681418db1a849ddd053c3a900c307c286fbb1cf51cd
MD5 3e0211077e4c91ce3ffea95e85a45e88
SHA1 a36b6c18dd48faa26f79f23fda30552d10b7b666
SHA512 bb921d57a206516bf9b03801bb597d498412862d4f4faa72a9637bae27521c3b2fb56d93bf14fdd6a3eb280d3c5f2290991b2ed125aa1de2563347025a39900a
TLSH
T1A5D0A7207A396AD6DA2861759421CB00B625426736565385A140840E4C754865BC29D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ed253711ed3d205930d2d276d3ed35146f870dbe2cb512d82b5b59e90f869c6e
MD5 82eb754116b4864e21cbee5612310336
SHA1 535ec7a2388993e6704722e2d675ab4b728d3bad
SHA512 83e880a6d8de75e7eeb7f7f0d4eeb6349f03cd2cd81b094de7259d6fd1e306cc8fa0b2449554f4d3fef13685df8708738728a9f5c97721020f411f6ccf5dad76
TLSH
T1C6D023307F7C6D96CF16B530A411CB15B76253657A45E7D19110500E5C754D51FCB0D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

65604144-269a-4afc-90e9-59a90570f656.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65604144-269a-4afc-90e9-59a90570f656.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 05395ebd77ea0be8ec9772fab53beef0104797c78870540488100a25f6a8c277
MD5 a4b481cf81e5f68c9a6864bdb4d06731
SHA1 a033730fc67bd443717367bab80848038a76851e
SHA512 2aa55b14d32bdca7e1e249529dd19a600dd3036ffe922ac0a2ba46fa00b0999f7761b4f1bcd55720491f5bcc412cbfcd0e34b534a85cef82a7570e735928f8ed
TLSH
T136E022ABE8219C2B18F91F5864650B4AFB1053462781E94F363D92098FB1B3A42DAC2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 abfd04d7fce90df323173f2125545492ae383144846b04c51030c848a510082c
MD5 97cc46763651f380687c1f7e30701747
SHA1 d0987f4841b61e79c82e4d7ce0f74c5f153eff91
SHA512 63e9a4849b401ccdff7dd1bd74d8a3bf5a1f7e5eb15ef8cf3237af9328a37b20f7edfe60b6a335dcf2613a905331425294b9e3441592aa817ed003d39a1c344b
SSDEEP 192:q1gtIxwDxzUCwdRMbZwx45jl2SDt+vRZtdfxos/rxemO:MgtIxwDxzTWCbJQa+pZ/M
TLSH
T1E013827D2BBACC16E6C710BC8A932FB66B31EAC5E6C9505791B171452230F2D1CCE627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ea4bc81b43d39955f1f281f4c7b6c7398ed35a6dd6712d983aba2d8bfc1dd5d5
MD5 9e2045b02beb27faf7c6118aa2c419b8
SHA1 508826824958ea8f499af157d0d1d2dc1e68047f
SHA512 dd76186a5cf1f8b8a6d20529e0c2ddb62e2696445e58791a8e93324b05a0d1e49ff1ca690dfd8eb44474b034d0ad428560c88f7cae8ba98c4d222d474a97d651
SSDEEP 1536:SD+1hL/lwL/sx7oG+o0DO7wmKtAfl5nO8wVG1+LL0gpo4YaXx:P1hL/iL/O+DG
TLSH
T15E445FF71921A01BCBA852F5E2033E2DD17B459E7CD1F8A9D1784C812825F35B6FCA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 544b07df2905e44d786898d4e820645839a8b44d925c564a67e8aae2cc8c4036
MD5 c752a0a848420de2d8cfb9a240ebd2b3
SHA1 4df7d409c047e39c0fd85bc1b5388c7ce0265a3d
SHA512 3f4b98f305a012da157cae5c036034fb8fffbde04979408be580c995e29a72e336864aa545b42dfcbfbb2d57a5865c42edf5244ba1807483d16cf3de5feac287
SSDEEP 3072:sv9G+H4NioAS6a25iHOqMeWYmlVkE8NJmXhcwYSz70oQuQdDkqz:sQ8iA18ufpJOZ
TLSH
T1212528EEC7682C92CE6B877070E0E9077E712183B68CD0D39944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 725be49df7f22f549e5124f75b4af908c984af42260a106bf8ded8e4dd3a8c20
MD5 1fa86835b6fe9defbf0d6d65b8b8beed
SHA1 08eefbd6316518f358f8d681b4c3e368cb58d540
SHA512 9e5a7a292d73ad67aad828996030b7c8fd3cb1a3b48f5f2f1151f04f657d964a5b633fe659c94c2459cd0ab72690fa0cb6ad4eb3fcd6cc03e2ed8fbfc5aab873
SSDEEP 12288:p2HMWjp6km5FseXm3aCwu2epKqa/8BhvFHYqwC6e6jx2uxUbuc6ZPjfISkvp33dV:sHzXYZcuWznOVOOyLVp5lADnZQ0xB+5
TLSH
T1F2167DEDCA7858C3CD639A30B4F0E9477C7413C3F995C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 35c9240a7955b4a82efdf624dc45073dbe1b70be094f6abfe25b54761d44e572
MD5 01c421b5e6447a94b969577bdbdae232
SHA1 646929e44ad74f9cba8ad6b53f5b7a6e5a7ed945
SHA512 0ee7c4a3db9b555b4f649e24ca3807299b9acf34596cbcb4c0c1613ebf4c826b37f7a6fb035afa6ab56be08d828e6e544ba9343d7c5b96f5ded15dd8f7ee9826
TLSH
T1425145095373CAE1E79592F951D1C7CFFAF884D9E2872E30090BAD386A5BF4510D1053
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a7a61.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a7a61.TMP
Size 2KB
SHA256 844488116403a74e8f7b2658f9f10472fe0b2f46b23d94b71378b18067ad24b1
MD5 0c874ff08594577a215d8ad6d00717c7
SHA1 ccd563d5edaa96cbd594c6746c52d78163e80d4c
SHA512 8246113d8607cd5d0e09ee3ad4f5a98e12f29344bd0e1357e7f09cb1e2d23af44bcb09d1a60d00b86131934400c511d3b75a4cbff48da9f079114f41ad3ca550
TLSH
T1E75141095372CAE2E7A592F952E1C7CFFAF884DAE2876E30490F9D38691BF4510E0053
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 e13f40e771ada2c913430312a77e5833500066768303d1d5bd247021c31c717e
MD5 cbf6a1fde27b08bee179a529df870a7d
SHA1 790c3daf08f3f9fe93dbdd4b19bef23f570d0539
SHA512 76e1933a813060db89f5db90d047977bbb66cb2be410f617e1abbe611e24b14f277b15d0d0b106d7b55207fb3af563bcac1912e8fdc303e40c4624499d6f0287
SSDEEP 3:MsEllllkEthXllkl2zEklzsa/l:/M/xT02znb/l
TLSH
T14C4404377FD04545C50150304451C750F3F0D51405515743347504335CC55500D43104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 f125df03036cb63feeff7fc1ecbe409eaaa63ae4e1bdb2481a22378c2ec487a2
MD5 219a93115af11653bdfc9a8c3137c162
SHA1 747ed8252c3cbde18b54520add3e3a117558056b
SHA512 b9ff81b4148995fd5b565d36b3dbdc6e10b139e81e82039ab3ca937740a21ee3994af5246b7e0df28f37cc1da0a11429e2564a1f21a4142cc95ad2e39822066a
TLSH
T120E0D8E464C6C25E956438C25628DF08C2917587DACABE47171488ED7643006F3929D6
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 1425e61e4082864fba37e7ea1de797ae5b6c1cd36ae14a10b57fbd3eb9accfb0
MD5 5cb76d64bb5f40a3650ecd5a734f0b93
SHA1 80344451fcb07d979a11e595c1702056b37a7bdd
SHA512 f34c917e2acd95d2428208e82ac2d253e9ccf61eecbae75a202c162cb27b5919e3aa8b01d43b01d4afd620ba077626d7f7fd8e0280f0f3412ac2a32ae15de609
TLSH
T181E086B404E9C62AD11CA8938A785708C3E6B987A6C97E16171D9CB46106645B3B6688
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 dc13cd8377f386e3c1c9e768e95d9cbd2196c0f65e0c9870ccfacfd51433c973
MD5 ca4231b35f78c9719a3cb8504eff8a68
SHA1 f05dd5cfa502c78d419b572e4a860b26d2a0f207
SHA512 8837a5e30aebc332ea6021cdd3fe5e52acaa779979a0c2d35cecf74d2279a63c4a1c4a9c663691c57bd307a31402b1f96a8ddbd4753d0eb1362e8a10ca636f19
SSDEEP 192:HaikEztFv7gF9kFYKQ0nVNFv7Kwwi72Lr7BuY6i72Lr7Bu:6iRTo96ph5TKSarQ0arQ
TLSH
T19DD26D9B77B23C37FAC696793126FD3DE13BC1695CA0DE98212840224A60489D5424AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 dd06a03c621b99a28eadf3cdf99a58136179a12ce65321d65ea512a7f688db61
MD5 409618d507353cc261b0470b16110818
SHA1 d7785297fd45d2de63d6306fbb7cff0be48c470d
SHA512 7145a17edde0e4150b53f1e1cf0b2ad7c1c1440b8a67df953f239baa3b909bdd69eabf95bcc02910ea50a8e905e9067b60c1c254b2c97552fd20159851dc2d38
SSDEEP 384:qT0P7arQoIkUI3ijVoWN3qL/NMCSeTUAcarQ:qTTrQF4i93qDpTUGrQ
TLSH
T1BA24095F6F612722DCFD913568E794A39C7DF03FCB1266CA68610470CFE1642A41C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 dbe0af8bb4904f3283438b96180e6bda57bde6129738ddd5191d0be3e5797b0e
MD5 bb7f3f947abe7b4b09cfa6b8f702c4b5
SHA1 6b9eaa7505b3a92b1335607a9ab98056d358f93f
SHA512 c4322bf1fe77acc5a0358fa911fa66d32f0dbc02cbaaa5edf390d6c66486cf1eb5ed1d87f0a4733d35cd0b000bf7f485ffba2f43a50a76d97fc16c74343ce7b4
TLSH
T15CE020B046DDC21D9318E0574634AB0CD3B13947D6C97F051F1CE9A9B483004B3915C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 122f2d17a9f718f4a07137c5232932125455ff258398253d037e7c4f36347423
MD5 0ff8fdc66ab216b6f88d92aab3cda70e
SHA1 a8b4776997a38fa6101a0ee36acc7b5e57e98a3f
SHA512 8fb31da0b95b735e2935ba2e1649e3e2ac4952072dd3cd031aed46251e519b49695445b7ca45d1571a5c2350df501b75c6d76db8b9a1eb529d89c086e825d70a
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAwn+o0wobdUs:qDeMatha9RANzdUs
TLSH
T15AB2004D0F306211C0F08B7BEED188662F7C111CD3B73A59DE5460B38DA29ABF50A57A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b90d0f49ae1cbeda2cf147537e9842cd66397b385e3d249e7ec67746eadd91cd
MD5 52d1cf98945d00782ef6f35221ef7745
SHA1 80c3ae58dfae628724616f528ea93fbb27505fa1
SHA512 c98637a633fb7df71d7f2c4c0903abad256efbdd6380e2210791dd2c7c71a477c1a848abb9ac0ecadce36824aca0341128b166eaeb4d3f7e765052d1fc2b12a6
TLSH
T105518AF3C2E8866D890196F0AA186E1BCE2D0954832C7D5AC8E4EF5B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 689B
SHA256 36476b7255217daa5b6f67d39f9e76c912767af2bbf7f0ececf9b1c7bd5b2856
MD5 cabd6c1d245ab51223b86c61229a4da4
SHA1 7bc8382f4e33741e40aef28184b82869e6d2b59b
SHA512 1466078cbc388bfe5f0835382d42cc856f00ab65b80faa53a1f25bc346207d67cba53b69abc74135ed5151296bc064f3d2b9a2e18bf714d52f2da520336e94e5
TLSH
T1DE012B9B90BEB8AB14780CBA0E88BD06757AE4354121D4F5D996D23CF089DF72A1B41A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8e52ba1d2557fa85326e74a18f94e0539983228cc5a5285a140eb74586694920
MD5 c0bf305ff2b1dad4f079721bc05bb92e
SHA1 ebecd699be546f161873c32479c387da81119f02
SHA512 d82572ace3fdce0917b09b7651bd3cb66a9592682ea7f6ed29121d963790b83e319894141222d2b79eccc2523f88aaf536bf9563c1ef89a6160213031e8956eb
SSDEEP 384:sxRu2hW/fUscWveL8GAFwM4x/5U8XFdMs:sS2hW/fEYeL8BJE/5UiFdl
TLSH
T1FA52C716A9689D7B9CC7D21DFA55BF53D2F91022A1912E48ABFC8B0C01E77DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3032fc4f8929d51f58f6dc7c646ac3fd90226edab7d03bc711882fbad55c4333
MD5 6894f12b77b8b04b55570333f05c3a1d
SHA1 c17514ab40e2e52758662c7f4b842eb59a864b73
SHA512 be95b420aab6c3744d003056074973757184ff31dffc2fd0613048c46f8a24e97c7660d10286c30c61d8da67dd3e0066836542f2daa87398f8e1a54380b0d221
SSDEEP 192:sxRFRGCW/fUsWLhq4ZAFwMRKzoD8pi/g6+WNIY31LXGZIgVTJ:sxRFDW/fUsWL8GAFwMIi/5ISST
TLSH
T1C132B716AD68993B9CC7D21DBA65BF53D6F95032A1902A18EBFC870C05EB6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e61557433acf6d2218aeb18b406e6be3e0c89870a46239050e013ac7c3bbf53f
MD5 c8a9edf977f779226da80d3a63c36bbd
SHA1 059c1cb692059ed50226cc6a795ce506cf599c2f
SHA512 007ae0786409507001c83efd43d1b6bf2855526600bd6c29dd28b1a3e1cd51e1c8bf6c48a77005cba010b92f3f19d597460300893eca2c74805506500a093351
SSDEEP 192:sxRuRGCW/fUssLhO4ZAFwMTKzoD8pfS2/g6+WNhVrXY3nXGZIgD4TJ:sxRuDW/fUssL8GAFwMSx/5PXPs
TLSH
T19742D816AD689D3B9CC7E219BA55BF53D2F95032A1911E48ABFCDB0C01E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 db916d7d62383ac9663c311d3b2827640faea87b360cbfac23aa06cef422388e
MD5 f140093837365164d5bd2578b57bcc3c
SHA1 9a7f130525b66ebbc74d79f476abd4fb314df040
SHA512 4f6ce00ce3d72bdee1f94541a92948ad67206ecd013c15f8041a2a2d90c75e55c27b78fab5155d78f7a06887e08d809acd554099ca4dcb27cab8ad2e226fa195
SSDEEP 192:sxRuRGCW/fUssLhq4ZAFwMTKzoD8pfa/g6+WNhPH/Y3CLXGZIgDiTJ:sxRuDW/fUssL8GAFwMSy/5V/FSG
TLSH
T16F42C716AD68993B9CCBD21DBA55BF53D6F91032A1902E48ABFC970C05E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5c84017721eae8acfeb1de5981918c27ecccb8a0c278fe235607de4e6873008b
MD5 1b77f44c235a50558dd7fd6b3cd9e44d
SHA1 fe78d66dfaecf18aaa252cf29bec42a3ea10e94f
SHA512 409ab233aed5e6a6fd8051867561ce817be0b8910a2bbd336e468c4c0abc1c5088d543f2150d3e64604219e82251325151395c876fe89c29dcde6d7dd79d9606
SSDEEP 384:sxRu2hW/fUsJWvoL0GAFwMBNcvx/5U8XFdEjs:sS2hW/fRYoL0BJjcZ/5UiFdEw
TLSH
T19B52C816A9689D7B9CC7E31DFA55BF53D2F9102291911E48ABFC9B0C01EB7DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 16cc676c65350ab9e37a4144d44366dac91cb9c6c6019420c2448f6ddddbb9f6
MD5 4134b6fc0a3f4fd174c64c94852ec649
SHA1 de4b92d20e928ad663183eaf0df45902c9f61ffe
SHA512 c93b7999b5297da06d8e032c058cace7cad72d4614c315fa9163b4c87c421e2b5bd40d4f44caa8e4a6ac16fc7c163c3bf64c0781a37dc1962cb26867e5e56483
SSDEEP 768:GTEbpo7pLuL7lkWg0CfKs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVfngMWc8roDMdik:GTEbpUE7lkWg0CfKsu1ja4ngFcnDM0k
TLSH
T1FAD2EA7B640DCB7E4F804ADDAC19BF9B6D6802CB9698CD4047FE851C02C6BFA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 f87e8e6ad9ea290ff534dd04601418ee7fceea845e7f9b7c871db79d360fa4f8
MD5 b998e47030c97b563309d3161c5383b1
SHA1 5322edcda8edc74b82a0696513b7a54da30b3752
SHA512 93d4ecde33ae23bc77c4b1b66da3cc22dee527e2451d2cb955cb3ad7a54108af309ffc973ab36401516dcea852bf330219cdb5f193c7c2f6a82f23ba44cd4c34
TLSH
T137E026A449CAC2BEA21D22870B398708C3F5B94BE2C87E062F2CFA446943544B2B2584
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 172B
SHA256 5f1466b159d7899a634942e91f5720cd4d60554843ea21a720ae91d6d626fd53
MD5 169d34a1512a7adf26c2dc711721205e
SHA1 2d9a787fb4514d3303958f663fc49b24f5c0d83a
SHA512 900d19fc18541d4e6805b51e941b234d8f58e301d86bc26fd927dfb52fb9e4438a9cd647aa15ede00b5ee83939d80f557b7fc7d74cd7ed8452ba27b35bf3b9a5
TLSH
T129C08C48A308543AEECA4E3700D2EBC09320E402049040778CA49F849C1AAF52E85FE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 fee9138dc484bb478b525d1cc7133458478ce6ba71986560204b673ccfe16ac3
MD5 96d7b189a020725364db0aa42bbfc856
SHA1 258d95d2b6a61e17bfec0a06662801352ffc6abb
SHA512 d02bbf033129c56d9ff056fde82d78603c2f7066e33d9179778095503ce74ca1dd4d61123b338480c3087cd2d1ba2ef74e5442fbd786a08f6741e302df6994dc
TLSH
T19DE0D8F056C9C32BA24D70874724D70CC2B3B943D6D97E252B2C95A8A20B6407363540
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 e887655a361b459f41ad3c6e6b6044d86588a180e6631e765b14638a9c9db444
MD5 465df20cf422e4a92dfff3f37b7b5ae0
SHA1 bbe40b3a22ab69e425079e279680bd0c456b3b2c
SHA512 ae0fe997c3ecfc1607e54ce004a26dc4c5fa50411502c63f92d0bad9532deabf5147230c5f9e292c676ac8985576466dc9b54b575fcba66d8041977fb3eaab77
TLSH
T179E04FB046C9C3B9E05870C24A749B5DD3F1BD4B97C87E6A571C8858B103554B3B6980
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6b022a298bc4ff665ab2a0296666995b22d24e92b54a8dec150ca05e0022b743
MD5 b5c8ba6ea938367114b0b534ff61a20c
SHA1 9653b410113f24a9af20dc45c88e83398b9de19f
SHA512 965c394d654f6888c72f8e4a885c1887b575007f8e7dd63bf8678d24dd42cea45b822e947b35819c3900be0133c70a3b79bea672bc403c71a41aa0cf08b38ba5
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHdqatGKOgqCMIKZOpM:C1i7PF/DWrwfX9mgpct1o7zsHdq5pzSM
TLSH
T18EA12029317B2311397D690CD0B5949AC2C2B5AB3028F92F3BAD55A50F27E035CFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 f193ad3d901026203e6b5aa20ee49f01e3e3c1ec629c2c1e5f0ad1345f361d08
MD5 1b100007b47049fdfaf63e6579c94de2
SHA1 4981bedc9ed4ae2103500a6735f798202fd30ab1
SHA512 d55868f9a5e0fa592fd4a087010f1da15114049cd7b222e947c7e88ef83a0056b9d263baa365a1681d0ed4c72917b4a341d175ee35d0cb766882ad20a6208eb8
SSDEEP 384:DNrRZyCSDnxTICkMEhIKyll7svbFKfk7:xFZJSDnikyI1l7svbF9
TLSH
T1F544750A7B747001EDE6D9725CB080771E3CB16DCF22A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 ad0675be992ebae115d77b260bde875583fa5cf6f8fa65350acb98f2b7b20399
MD5 f8b560ab98787b18a60eee18d36b56fc
SHA1 346fd24401b699f298c002ace3fbdd74bdc7a3cd
SHA512 b274b9772f24aaa9ed6aa319440c003723f3d15d5ad4cdb82dee67dd354fd522c9a4d3b5cb090cb9f90222d440c08027d9911bea722e3d63da707f7212dab31d
SSDEEP 192:iQ3III2bGMIMAhYcYk/xiO1XAselrhNCsrp:iQ3III2bGMIMyBJ1ws8qs
TLSH
T1F242B51E1A822B77D05F6F7A136781445AF849834072252D31522C3F9DF3F9B86D56F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 47ed4b5ffd0e7083c6f3bd40c6743668254e469a541797090a994d64f2431009
MD5 45ccd33ad125f5196e48df455016cc22
SHA1 032d8a3a94856ea45b8de8d111ea032dff8c3828
SHA512 12eb04f11de4f813fef4bf9e68dd36d43360795ce4e869a0d15ceffa4119a60a4fc734b75e9329726cb49fc3218a9fbf6f1a351f2e3f9ec667817fe04530374b
TLSH
T16DE026B0A9D8C26FE12C608709354708C3A6BE47FAC83E0A1F1CC8A8A006500B3A6581
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9b6356a594ca2694058ba2d889612cd5d4229f8948e4be78658bc887fcd42e79
MD5 d28cedc895ae5622412dac847826f08e
SHA1 50f2413bd6650fa482a8331c1b575599d777aec5
SHA512 947f99dc075332c3f1f3eb7a8c1d3d019e6f3653b184c1ea3f31d20a1b67717967f7246ebee768c34a0c6138280bb95987dcc4e0d476f6bf2c912eb87510a0d2
TLSH
T1E621D655F330D109E149827EA47F9B291738D816CFBCEC0F547920756E72B440E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 c1441528bcb2eb490ba05f0ae2f1031fb4ffab0daebf20ea43610bbfe225e688
MD5 260ae5c2070a7546bc8f27480e9e3573
SHA1 8d36887bfceb4025ea037a7c653686c86747bfd0
SHA512 fe2f52b22d438bb905dfac3f6330a67024c271d8ff92054ba91f00c82477155eee3d68bb4144d761c5c96894eca6f892ef720c76240b63cded4c86ffb5a2f442
TLSH
T1DCE0207064C4C25FD11C60830674C788C3A67D53EAD43F051F1CCD5851065417356941
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b8123.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b8123.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 2e704e9589a57eeb50caf68bc69275a9598ed4ccce68a8575695bb1b8ba52349
MD5 c9d7fc1d646c1b60247a22fa50b25c09
SHA1 715461495b93bc931458024534f5e28f7fd5774d
SHA512 663a685783785ff5a163e8855c024347f0bab8c6f283b8d8163234f807552ecd0c164f75ea38e3463eb2a81f600b980bdde3aa066163700c4739bdaa0a28a843
SSDEEP 3:MsEllllkEthXllkl2zEelwfXl:/M/xT02zNwPl
TLSH
T12E44040DFFC45507C53450304011F75053F0DC11051357433C7544135CC75440C01110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 456a931c9a79aece03c8f91491377b75e9167615803074a7b7aa0a735bd1169d
MD5 41b824f7668aa9d4f48597147f2cb155
SHA1 264893f092c00423d26782775d3c7d62f3d56c0d
SHA512 62539b609f9edc98a654530ffb99a549a77f7d2e52f78bde446a288cb033ffd8f3d116f2cb5888f828df54f65c2836159ef2b86179083ec3754fa7cbb198ab9f
SSDEEP 3:MsEllllkEthXllkl2zEelFktl:/M/xT02zNFktl
TLSH
T10A44040D7FC45515D51450314011D7505370DC1005175F43747104135CC7D400D01110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 a464d9427c390bb8676d9996c8094618834671dec59a4e643e2bdc7eea9936da
MD5 7648e539635be38e58b8d6789c8807f8
SHA1 7ff7ea55383c8c75c5be2585d325da211d346a58
SHA512 30142736ca7826c447ffbac12b05c343923531eaf08186a9724ee57a8bf5657ca8a87361b6ef0aadafb575c82911acfdca2cbd9e835145e2e6cfa56cb2aa9197
SSDEEP 768:8j+9qq36+Tgc+wfZOkfdvShCQaxmJMbojhGjt:b9qq36+2wf7fdvSMmJeoNs
TLSH
T1C203AE39DCA14D3B88EAB349770E6F16BD941273C5C80A48CBD85F0D41A37ADB70B869
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8ba6a6787d2c8b70d65f612be8971fe6f936cc39c04fb2bf97a3c5342fa288ea
MD5 0e66860c7e933d55d8e7085e72e77f34
SHA1 b544945fae2f50c352fe99cf9d614710e0c6d246
SHA512 3d1120756ed9e4936bf25dfa6ecbad8a6c6c2f854aaa76a367a3ce0e136f2a2db02034bb79270a760c359e4f4f05f407b9af840b42e7a04eb915bbb328edc0a0
SSDEEP 384:n4tNn/s3n9Sh38N//pFMRrcHGfd+UJfRXOVyS5CfU2tJvfUl66H9vShCiDBTayph:4j+9a35gc+wfZOkfbfI66dvShCQRUMjT
TLSH
T12FF2BE75ECA41A73DDE286997B0A7F02BE946263C5C41648CEDD5F0D02C33AE131B939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 57027365525bd2c1e1b968ab2e082e57ea3dcf10a7db9720435daaddf708f190
MD5 e0a14f93f500564a6c282c3942936a46
SHA1 756b5a295c3307766c6e13e8c694e01af4397d45
SHA512 a766abca6a6da84bfb0e75b42de7dbee67dc8faf19fddc3ea550f7e6d65443c120912c9bf63ed61807b722a6e972f11d5a482042256751553f38fc7d8675aedc
SSDEEP 768:Rrv+4UNbd43h2kc+wfZOkfcvShCQtm2bwWV:RbsbO3hrwf7fcvSq0wO
TLSH
T1FA03CF36E8A859339DE782487646BB637EB86163C8C54784DACD0B0D429369F370FC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0ba46caae4e172b34081eb6bd5b533666e59658db8616de74d1e52d2d82a6980
MD5 555a02d9285747231ca64fb38e4b49a1
SHA1 bf6f2ea1c6eee4630e3d3eb37087a0f1cb45ca45
SHA512 ad8031ba8eb394191579c415448db6dcbe5c0af790e1de94fa6dee4b2ce5b3281d117382f36d98ac80ca53cecd0be884a1fdccaae74debd52ed19bc788a753c8
SSDEEP 384:n0tNn/s3n9Sh38N/SpFMvrcHGfd+UJfRXOVyS5CfU2tJvfUl66Y9vShCiDBTayph:0j+9a3Kgc+wfZOkfbfI66evShCQRUMjT
TLSH
T1C0F2BF75ECA51A739DE28689BB0B7F12BE946263C5C41688CEDD5F0D02C33AD131B929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a2324909b3d223670e6875231918a919c46b82bec6e7321e1396ce029be563aa
MD5 f606ac280d4e1e58e88c4db70460e49f
SHA1 ed00c89f44dcffe452eb2b8513788b61fc7d9152
SHA512 8705e990748944e078e6115003b6257c1debf32487dffabfd6ee41356ca90f1171e9df0d9d3464bc1a398e51ff86813b83907bf41e4d71932dc41b220960d942
SSDEEP 768:rj+9qq3STgc+wfZOkfbfI66dvShCQRxTZMbojhLMjT:+9qq3S2wf7fbfb6dvSdTZeoNLQ
TLSH
T166039E3DDCA1593F88AEB348660E2E26BD945233C1B41698CBCD1B0DC1B36ADF317965
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 60KB
SHA256 fe062dc8ee456f58f43ff71201f7967d2166dd164c56dbd41e0fd14409846621
MD5 1eb9e80cc47f6c7d0ad87b4d5c671a8c
SHA1 114a8bed0e5c2951e831120f537463923df70741
SHA512 8fdfe745dd2b910b8a655e740ecc175d65abdc5ca19d8744b63ebded4087fbbe6457149ec2da1c273950188c385cb4e96642d4d304fc61caa664eeef570a6da4
SSDEEP 1536:x9qq36PkvSJMc0OiNO0XNXVtNH4emJeoNd:xL2GcjiA0zLaJeUd
TLSH
T156536BF998D7897BC89E6387673D6E4669BCC163F5844988F7841E4CCC522BFD30A850
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 90cd8b34fdae9aa07786422082acb9a97dd394487bb4cbc97b897ca4cf694493
MD5 1967542ddec7e5eff1b5b79d3b97ea7b
SHA1 1ae353510986d183c1f25280885b0243d4f18c7d
SHA512 6fca0ec7db77b71230e2db5bdd20d886bcc963980a6c29c8ab0fcc381d3448766d130d08f581a119bd333050722fdcc716eeeae68e0903452f74c2771baba664
SSDEEP 3:MsEllllkEthXllkl2zEelkInql:/M/xT02zNkjl
TLSH
T13944040D7FC4D707C55455315015C7517370DC101F155F4334713C13DDC75501C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
MD5 c20138f2b92ee0645ce99eebc563daa6
SHA1 8e20392ea25dec3d3cef957c8ebbe1a0c589ea3b
SHA512 151098a27cb44d715d48210b12b95a9d1341beb7ca1de3096edc0434ba70c3d274e446604c7692d7a4d92af7b41872166747a30fd452fd0279407a6993fc02c0
TLSH
T15DF00CD28C3E21C2C5EA0F7ED04B2AF884D46507F0887439088DEAD4C17A80F118247E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

43720370-5dc7-4be2-be9d-c81107443d46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43720370-5dc7-4be2-be9d-c81107443d46.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1196_398489470\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3968-14-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-2-0x00007FFE4E700000-0x00007FFE4E710000-memory.dmp

Download

memory/3968-15-0x00007FFE4C410000-0x00007FFE4C420000-memory.dmp

Download

memory/3968-13-0x00007FFE4C410000-0x00007FFE4C420000-memory.dmp

Download

memory/3968-12-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-9-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-11-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-10-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-8-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-7-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-6-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-5-0x00007FFE4E700000-0x00007FFE4E710000-memory.dmp

Download

memory/3968-1-0x00007FFE4E700000-0x00007FFE4E710000-memory.dmp

Download

memory/3968-0-0x00007FFE4E700000-0x00007FFE4E710000-memory.dmp

Download

memory/3968-657-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-16-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-4-0x00007FFE4E700000-0x00007FFE4E710000-memory.dmp

Download

memory/3968-3-0x00007FFE8E71F000-0x00007FFE8E720000-memory.dmp

Download

memory/3968-46-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-47-0x00007FFE8E5C0000-0x00007FFE8E823000-memory.dmp

Download

memory/3968-59-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-89-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-763-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-90-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download

memory/3968-339-0x000002B2A44C0000-0x000002B2A4790000-memory.dmp

Download