hxxp://cdn[.]discordapp[.]com/attachments/1011869655566135407/1114645483009364028/Nighty[.]zip

Analysis

user interaction
yes
max time kernel
899s
max time network
900s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 11:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cdn.discordapp.com/attachments/1011869655566135407/1114645483009364028/Nighty.zip
Sample260730-nm4xbage93

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1600	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1456627459\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1336570960\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1286168630\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1039299071\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_94747424\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1039299071\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1557574891\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_611492940\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_806994402\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\CompatExceptions	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1201989277\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1162100414\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_586025940\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_632200200\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1336570960\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1286168630\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_2104531463\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1040369790\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_94747424\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1286168630\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1749849288\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1557574891\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1336570960\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1286168630\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1039299071\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1039299071\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1456627459\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1749849288\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1557574891\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_2104531463\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_806994402\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_806994402\ct_config.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1047741342\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1557574891\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_2104531463\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Sigma\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_632200200\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_632200200\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1557574891\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1162100414\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1456627459\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_2104531463\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1201989277\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1040369790\arbitration_metadata.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2864	msedge.exe
2716	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298847314284327"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{11C68C6A-7EB5-4F4C-B5B6-441830B09625}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{9F3E42D5-040C-4F01-B618-9A540831892C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1600	msedge.exe
1600	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4636 wrote to memory of 4684	4636	msedge.exe	88
PID 4636 wrote to memory of 2864	4636	msedge.exe	90
PID 4636 wrote to memory of 2532	4636	msedge.exe	91
PID 4636 wrote to memory of 2532	4636	msedge.exe	91
PID 4636 wrote to memory of 4080	4636	msedge.exe	92
PID 4636 wrote to memory of 4080	4636	msedge.exe	92
PID 4636 wrote to memory of 4080	4636	msedge.exe	92
PID 4636 wrote to memory of 1540	4636	msedge.exe	94
PID 4636 wrote to memory of 1540	4636	msedge.exe	94
PID 4636 wrote to memory of 1540	4636	msedge.exe	94
PID 4636 wrote to memory of 1376	4636	msedge.exe	95
PID 4636 wrote to memory of 1376	4636	msedge.exe	95
PID 4636 wrote to memory of 1376	4636	msedge.exe	95
PID 4636 wrote to memory of 5184	4636	msedge.exe	96
PID 4636 wrote to memory of 5184	4636	msedge.exe	96
PID 4636 wrote to memory of 5184	4636	msedge.exe	96
PID 4636 wrote to memory of 4908	4636	msedge.exe	97
PID 4636 wrote to memory of 4908	4636	msedge.exe	97
PID 4636 wrote to memory of 4908	4636	msedge.exe	97
PID 4636 wrote to memory of 4472	4636	msedge.exe	99
PID 4636 wrote to memory of 4472	4636	msedge.exe	99
PID 4636 wrote to memory of 4472	4636	msedge.exe	99
PID 4636 wrote to memory of 1760	4636	msedge.exe	100
PID 4636 wrote to memory of 4292	4636	msedge.exe	101
PID 4636 wrote to memory of 1760	4636	msedge.exe	100
PID 4636 wrote to memory of 4292	4636	msedge.exe	101
PID 4636 wrote to memory of 408	4636	msedge.exe	103
PID 4636 wrote to memory of 1600	4636	msedge.exe	106
PID 1600 wrote to memory of 4284	1600	msedge.exe	107
PID 1600 wrote to memory of 2716	1600	msedge.exe	109
PID 1600 wrote to memory of 3188	1600	msedge.exe	110
PID 1600 wrote to memory of 3188	1600	msedge.exe	110
PID 1600 wrote to memory of 1316	1600	msedge.exe	111
PID 1600 wrote to memory of 1316	1600	msedge.exe	111
PID 1600 wrote to memory of 1316	1600	msedge.exe	111
PID 1600 wrote to memory of 5720	1600	msedge.exe	112
PID 1600 wrote to memory of 5720	1600	msedge.exe	112
PID 1600 wrote to memory of 5660	1600	msedge.exe	114
PID 1600 wrote to memory of 5484	1600	msedge.exe	115
PID 1600 wrote to memory of 5484	1600	msedge.exe	115
PID 1600 wrote to memory of 3200	1600	msedge.exe	117
PID 1600 wrote to memory of 2180	1600	msedge.exe	118
PID 1600 wrote to memory of 5876	1600	msedge.exe	119
PID 1600 wrote to memory of 4980	1600	msedge.exe	120
PID 1600 wrote to memory of 4980	1600	msedge.exe	120
PID 1600 wrote to memory of 5932	1600	msedge.exe	121
PID 1600 wrote to memory of 5932	1600	msedge.exe	121
PID 1600 wrote to memory of 3296	1600	msedge.exe	122
PID 1600 wrote to memory of 3296	1600	msedge.exe	122
PID 1600 wrote to memory of 1548	1600	msedge.exe	123
PID 1600 wrote to memory of 1548	1600	msedge.exe	123
PID 1600 wrote to memory of 3348	1600	msedge.exe	124
PID 1600 wrote to memory of 3348	1600	msedge.exe	124
PID 1600 wrote to memory of 1168	1600	msedge.exe	127
PID 1600 wrote to memory of 1168	1600	msedge.exe	127
PID 1600 wrote to memory of 5996	1600	msedge.exe	128
PID 1600 wrote to memory of 5996	1600	msedge.exe	128
PID 1600 wrote to memory of 2828	1600	msedge.exe	129
PID 1600 wrote to memory of 2828	1600	msedge.exe	129
PID 1600 wrote to memory of 4664	1600	msedge.exe	130
PID 1600 wrote to memory of 5884	1600	msedge.exe	131
PID 1600 wrote to memory of 5884	1600	msedge.exe	131
PID 1600 wrote to memory of 2184	1600	msedge.exe	132
PID 1600 wrote to memory of 2184	1600	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cdn.discordapp.com/attachments/1011869655566135407/1114645483009364028/Nighty.zip
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ffa962ec188,0x7ffa962ec194,0x7ffa962ec1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,18378760673011228339,12251743064613141873,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,15336395043920231016,16481124860165534909,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:13
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,12499900910241759907,1580010377453339013,262144 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,15769732477906817682,11207483506056437527,2097152 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,12743303854553358734,11829861428632895179,2097152 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,2368776855031211888,16526044000780531594,2097152 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4420,i,3693692396825340149,3841712776813537137,2097152 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:9
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5388,i,1998983341115190232,3349677552393343381,2097152 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,8617817281974006076,14786150239240073770,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,17125301658671787749,11605181712535638025,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,11086216321341156978,9493318535806869448,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,11086216321341156978,9493318535806869448,524288 --field-trial-handle=2120,i,341316342509558739,8275379948865609766,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x288,0x7ffa962ec188,0x7ffa962ec194,0x7ffa962ec1a0
    3⤵
    PID:4284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,17634961122804691727,9992380506753152113,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17049481683377055082,8084482100601830253,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:13
    3⤵
    PID:3188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1912,i,14762381294614547998,2046474503006286923,262144 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
    3⤵
    PID:1316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,7619358320431224386,10738063450697054234,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
    3⤵
    PID:5720
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,5002849930774823009,4899877484544488525,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,5002849930774823009,4899877484544488525,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
    3⤵
    PID:5660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,14285493748994719115,12870780332591832939,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
    3⤵
    PID:5484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,5136502969405606771,14420317883912068594,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:3200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,5859570225729157196,9667135357276085384,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
    3⤵
    PID:2180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,7534805015555923465,15795468133316484241,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
    3⤵
    PID:5876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,1067930822273211827,17098958441213266605,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=1452 /prefetch:14
    3⤵
    PID:4980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2816,i,6760985766258953595,2801020949024384641,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:14
    3⤵
    PID:5932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1432,i,7308639417240804881,16861991133871966394,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,16150011090486682761,10309363536081361884,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
    3⤵
    PID:1548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,916345012815732707,14400241334191227119,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,5732526648694990215,17254336629800229748,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:14
    3⤵
    PID:1168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,4922988870934595000,17583753697059273119,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,13258325743724245278,4211441299791978880,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
    3⤵
    PID:2828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4392,i,3155106079466396672,6808972656614190535,262144 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,14611072152237176931,10443600768208939615,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=1256 /prefetch:14
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,3579578389696580778,17997895353353770674,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=1100 /prefetch:14
    3⤵
    PID:2184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,4514270226944808297,10347149443655214487,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:14
    3⤵
    PID:4480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4092,i,6584210108787795404,11075259528846943623,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:14
    3⤵
    PID:4404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,421806461807514101,4248755881744265451,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
    3⤵
    PID:1088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,16940833160128782460,14921793750196256986,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
    3⤵
    PID:3440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,10651324805754344530,16872073455685556444,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:4244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1208,i,16366720041844931677,9854635817023891661,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:14
    3⤵
    PID:1012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,1293065694211726373,10911164905912022418,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=3896 /prefetch:14
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,386722876103024876,18247020203686357931,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:1568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,1462667424886731669,6047776008362823725,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
    3⤵
    PID:5028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,5733560997831127258,874795609852301271,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
    3⤵
    PID:1456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,6361772988106458929,15266479512574282374,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
    3⤵
    PID:1312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,6842913308498121217,6213569676370012753,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
    3⤵
    PID:1108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,18280988657888209306,8255230845233276577,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:14
    3⤵
    PID:5940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,8906307353883457134,8508037067529312044,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
    3⤵
    PID:4292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,17164165381184269483,16269049840421350156,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
    3⤵
    PID:2884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,10737714967005450381,10003977414163864234,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
    3⤵
    PID:4008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,5316297583881397968,778895750647620192,524288 --field-trial-handle=2496,i,12995914535874321163,13418466717695402546,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:14
    3⤵
    PID:1572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5272

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1188

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 75b70bfe773b6848c615c985e24a94bbb6fb1891c7c38f3a7b806bde93df88a3
MD5 49156155eb7717768f6f8b0445615022
SHA1 12f7158f649a31b169d57f53ae427b9a0a074ddc
SHA512 4ffeeef4a9913b487ff25e2584caf57a84f6b43baacb8e2192dd763a0626de24d773e6c519d9cec75b951fbaa7a3a5ba38b2fc55ef48144664893045f01cc94a
TLSH
T197D023707D55FAC9D6451072A5F14740A2154A52B952D3495100F51DDC780C177FFDDF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9e0bf591013cbad21e2928ddacfaf9aab18d4f8889ee31555429209c2647b1d6
MD5 7931d4cd98de5582c95bb76449e55400
SHA1 dbe0e2d423306f5955cc028822d5a995bdec5556
SHA512 3228c648c3af66ff14c57f6e35a013253fcfc21708442c894f8ea8eafc164a40e9f8db2f9008b6c1a77bd5a07630b37816c70e31d1118aca0611d46ccffbb6cd
TLSH
T1E0E02684C6CAC3BEE21874579279538CD2E0364BA2C9AD5A270584857002880B3836D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 5bb8d7f2d37430db0bcbcefe1944e33aff375cd7ebb0d3ba8b9d834489793f19
MD5 998710cfc6fccd3d74bf80a02383e103
SHA1 b2272e66bfcba82becdc0beb87c1fb94010987e4
SHA512 eb587c4c244bedc5a2ec312456d15790b0725708d3d0e8b323eb46bd56b617e1a073bf0f04d6c62ae49e675186f15aa0eb0bd6595d9a2f123be661759dbfcdf0
TLSH
T195E026E8D6C8C3BEE28C749781B8938CC2E0360AF2C9AE0E170184957042880A3C37D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0e08c1d1cbc5ec021b900448002c8af1166e1d0ac95bc66cd8c933d13a7f1116
MD5 8f68b675cf8b19fff6eba58fadb4a34d
SHA1 f8ac57a8a40985fe8cea00b8b892e21ade4aa23e
SHA512 0d9194e22fdf98bae5a232a30305d13fbac8bd17cc7e34544fcd92ffcb2b0efbe4fe90cc38f26e2f89f681dec9cc7b22bbcce717fc59eba44bc87925205b50c5
TLSH
T1F1E0ABAAC864DC2708FC0BB860648B45F61913276A00880F7B3CA10C8FB067A468AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 8dc38cacec6f510823c04eb21619715a6aa777dab992f3f7bf9c49173651473b
MD5 66d15a7375421f11b68d916ba5cefb0d
SHA1 6039aa153c3bbac0d0d45658a832360eade040cc
SHA512 e1148be7c552bb6de9e8f97fd1840b648026d9dc65d02e910ddd731919397dd019683154cd20b55fab856e0f06c0efcb3247c41b3519ce639c877145cb298ff5
SSDEEP 192:VtUe7/GYLN4/liEAg3qDIsOQDKXZfDijmnJcxRKSECjtgx2mBUmuJauIcCst:z77/Gp/MEeIsOQDKXolkDhUmu0ur
TLSH
T1FC13E83DB3118C26DAEB117C0C5BAB7AE335E929CAC460E3833631686715F9159CF85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 bdd74eeb3833c5262b183a169b5217298b02db847111c83a2a066f4df8f34ad8
MD5 3c69bd6f4c9d0af8557eeed6ec324193
SHA1 9c985b6e3469396727fd8f698e3d2b61b058c27b
SHA512 16373221a7a7f2b69f22449c96e9a7d97aaadb87e425bb41ef2c601470a6dc873259a0b57914fa0fcf5238467fd5579350be002c31f80dc9360c6708fe631725
SSDEEP 1536:5aswL/TlL/rqUX8DvVLX5s6mGgrbPjdLWqL/JL/QL/:5XwL/5L/eUM1hyb1L/JL/QL/
TLSH
T1FA444EF70951A01BCBA842F5E6033E3ED17B851D7CD1E8E9E1384C952825F22B6BDE85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 2b7c578e7518a64b98269aa3bfa4051deb4a22b918d39af97b4dbcac0e61105a
MD5 2c74efd86077ba28b905695d03513e51
SHA1 d4fb9ba70e52d395dff131a061ad6ab496358a6b
SHA512 360730dd46f6fd17ab2ed5d61ef653390e0b6956f9b9d484c68985d25d02e06ead662c211ce0d62d966f1e7eedb199ff8531e086a2d1d2d2b45dcdea7944ba7c
SSDEEP 1536:7i49G+PNaMuANdbg1tWkjIiHMXhJDh8Dz+rWRepIHl13YFloShZbjgGOsfdGjdS/:7v9G+HNF7JiHv6K42b770g79DkbOJR
TLSH
T1002529EECB682C82CE6B877074E0E9077E712183B64DD0D39944C5D897D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 3b774687a7bf7e608e968637d15b1204bfbc5d88cf9d268795705daa44f0c628
MD5 a8a9cdb228f31db76ea12362734ff5bf
SHA1 bca76c5c3c5991f2dc4d6c846cc5cd580793a799
SHA512 4e89586158ec41efe8e37d17d207d2bca24a6976db9971269c0fcbb3c0d27241a8b75e04dcbf727129fea7e9c3a3015113d184507d0397854b82c9afda3ad45c
SSDEEP 24576:qH9yij4MP0StZl84JIhZZ4dKx29v9HE8qRQJZc:qdynMP0huI/c9VHE8qyD
TLSH
T12B167DEDCA7858C3CE639A30B4F0E9577C7413C3F594C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 40d92a1857d226412a11d4d4e3dfbc3fd61c38e3b5f774fff4090da8c61f5de8
MD5 15e21ca612386c73c49779e977c4d5bb
SHA1 3db4f49514884ba1644ba58a08a3e859040dd084
SHA512 b0dcfcbc196abda86cad06c0d1eb64a1884d30d60a3a3d88b161198164b6996ac0c5da3c8cc65f8319a1a0adaa843aefbe5bafb122099816eb17b991d8bd4c57
TLSH
T19561D65623634DD1DF7744BD52E96898FAF4A495093B2EC06054BEBC48C6F4BC0C32A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59747a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59747a.TMP
Size 3KB
SHA256 79e7ae38ebdbb9e1c956e31aa5a2e401daee25296fce049c7bce27131b7e73e2
MD5 b6169d34e46aaee3240f3a326122013f
SHA1 92f9192ff32f7a72e4b616f7203baee0925464fb
SHA512 f7b7a2ec1f7e9a179902b20d412b212cc85f947d437b19f56bc2f8a1b8e40ff0e4a70d21df345c8a064dfefbbd3caceb4d695911aebdcbc0e3603b9cca331d3c
TLSH
T1BC61C45623634DD1DF7744BD52E96898FAF4A895093B2EC06054BEBC48C6F0BD0C32A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 453e330205807cc0aca32600d8d837322efee8021b16478706d46aa1ca7520f1
MD5 ae5d9427d48459cbeaf7265d4d335d8a
SHA1 ccba554f4cfa72fc358df1b50b54bdc51a29f4d9
SHA512 3c0242af0628efdc9fdc18241e4d89c45a86aabef20ddfeb6e31ec0b9486ba9d9b79063a67284d817ec07d840e4b6e57b81620cb71fdfa4c7bf32c1ce5167635
TLSH
T1CFE0D8D4D6C6C26D9524BCC38234678982903597D6C5AD433B408CD4B646016FB895CA
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 71909fe694169cbf7f7a84c9ad0c71d4b14f42993be135c05e5b0e9bcad22635
MD5 75835a2a09bc94a98edb6df2b28872aa
SHA1 05bd1e7e377069112832c046e7cbfa91a8012a26
SHA512 f92511403d420d8779b866c3edbe8eeb442041f95dcbcf2b2367689f17b698d2e023a2b65a5d9cb967ff16b1a7417325a2c0281ad9255a476888635f369773cf
TLSH
T1DCE086A884C9C279D01DA897C26C674886E23447FBC87D12278ACC517152645FBAB2D8
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 cfc6e60aa93d6ea776548d577e4d34ca98494422ecea9f480a8a6e9ee4c436e0
MD5 ad0f05317a892696d315338b7fdd1810
SHA1 d67946107f0d67bcf5199776bec2af82d150f304
SHA512 670997adb652b4b5c380454b26f08c1908feb678cfed8f3b9cf374ccbb9f1d09d3227a312eb4b806ce5bdbaa5067156e9310077af7ebf0493bd75e9df74a5ab3
TLSH
T167E0D8A0C5DDC2AE910C309B8274774CC7B03407EBC86F01AB0A9C50B441504EBC52C5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 0b57451041ab5863a937aaf0955aa82e3bbbba4a2062c8fea0321172de9ebdc5
MD5 5e1793d5c24a6a9053f02e161868138b
SHA1 7226c7b03142288d55bbfa2ae003201e4b500b48
SHA512 8e895f5e1a6f0b084639629154b8c81533b9ca008dfc2bad8f80d9dc81b560ad50424de5e8e9ae0d32830abddfdf46adae3d69cbfb99eb503e154b8335dfd910
SSDEEP 48:Txk/LopFMaty423w/a9NUuTTBIoQ0JOW4TkV:qDeMatha99pJOWc2
TLSH
T1D5B2214D6F306214C0F85B7AEDD089632F7C101CC3A3278AD91864F2DEA35ABB61547A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 af472c094027ecc65776dfeb7f5286de2c04a64469b52d9e60080e79cd631397
MD5 65e6e65f0ab92eaf53fbad2975f76dc7
SHA1 33ba8bf072b83c9f8e4d54547ea8e8b6a3ceef93
SHA512 e28e6d8b0867e6ae7b2c658fe3f16a198e0446d46991cbb872f014bd9231bc2da690c009cbb0aa93929ebf5021ea10dc9b58543047431a5195e2d86fd8528591
TLSH
T14B418CF7C6E4866DC90146F4AB142E1BCE1D0958436C3C6BC8D4EF5BD7E24B1E141A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4b1c052ba3c9a58b8193470dfb33b6cd44019df45821097f34e9378b452256be
MD5 e0aeebaffd3395260e3c404817d278be
SHA1 68749cdca1119e4a70f679e46e773fdc44349288
SHA512 aeddf02676c8e316cef31eb8163168c5f95fbac49d0f2edb655e9b1813451e76d02980aae18eb239e85be7acb39691c036f0a7fd0d8f0e9eac6312f344b32dad
TLSH
T14451ACF3C6E8862DC91146F4AB147E1BCE2D091883283D5B88D4EF9B97E3472E141A5E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 7deeaf83377f3383df42b591bbac297a9e86db3b382d5a3e5475c61a9b183427
MD5 a4e8a4ee9b196d68b51646b06ba006fb
SHA1 239798c09f0fbfc6186f1b70ed330d8d5b1daf9f
SHA512 77f71d0315844b9f17b0cf7b02cc37d5e2c8ee97a1be4fd43c29f31a86e46a971abb2a824125a5f4459b86d356d0042c37933ed5da8548589bb43c0f9ccd52f8
SSDEEP 96:OIEumQv8m1ccnvS6l0NdOtfTznF2jQ4m+K4g:OIEumQv8m1ccnvS6Somw
TLSH
T1D6F202FB07275606D89444B0E4009F8EAF16010B47B6B6EC76D44BE3F7931E2B17575A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 00f9827034899b2ffb0b58021227e1a51eead68404a52442f839a74cc216c1a6
MD5 4b8d5c66698d01324727a301f1366385
SHA1 ec42690b1f6e120858c8da211bdd16bb994d700c
SHA512 d5d2fb320ab18b972d7f5c37d98fe1db0920ca86826a779639e45dbf28af2cc4f091a0ca9ef28143aa19c9eff916af069862c4ac904ad4520a4de8f88961993a
SSDEEP 192:sxR61bI/fUswWpV5TcprQ5qzoA8p8kF/g6+WN5c1BkyA8/YHbp0hI2GukIgtJ:sxR6tI/fUswWv5Tcqz/554n/ySIQI3
TLSH
T13A42B8166A28AD3B8CC7E21DFB55BF53D6F91022A1D45E44A6FC9A1C00E77DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a2cf251e3418354b1c6fe24ca53a57f6ce2fdf7875eb799a2ad60c75bf9d0ef8
MD5 84d36f90970bb00b8187c386f451472f
SHA1 c9af934d7a2cdf374a53e6b1650bdbe0d242d88b
SHA512 4fdd0610f6b4438f25e61ba6eed397cd8ce4f6818b782d7e6c295c5f0fe34b0b34659d2ada55034b79a6f021de119cd9a87c26670086446e9edacf8c88b70c8a
SSDEEP 192:sxR61bI/fUszWpV5ZDyprQ5qzoA8p8kF/g6+WN5c1BkyA8/YHbp0hIYgukIgIJ:sxR6tI/fUszWv5Z2qz/554n/ySIUIs
TLSH
T1494298166A28AD3B8CC7D21DFB55BF53D6F91022A1D45E44A6FC9A0C04EB7DD230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fa6e9f3aa8e69596a654f252f04bd9109b2197e4789b9155165fe53f208fe045
MD5 9af4ea15a9c4f426d1f9c6edc7ff912e
SHA1 aea44314477706115914dbfae715efd29ed597ef
SHA512 9003fa88521de826f1ca59617ed2ece4b678b71564ec721a073346d935facfde30d8e54a18285206ee82f52354445270820dd2821bf8d8b4d5b2614da56d12c6
SSDEEP 192:sxR61bI/fUswWpV5TYprQ5qzoA8p8kF/g6+WN5c1BkyA8/YHbp0hI2GukIgPJ:sxR6tI/fUswWv5TYqz/554n/ySIQIR
TLSH
T14242A6166A28AD3B9CC7E21DFB55BF63D2F91022A1D55E44A6FC9A0C00E77DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 abac68fbaa9ae7700ab8d09d90c7b8d0ebb7ab707240f5047802297aca1210b5
MD5 8c1d7a20a0e689ec6496137c680a105e
SHA1 49452a15af1e4d7bf980eac9dc380a63e25d0330
SHA512 f59dc5f642beaa2b84c2a47150a9a4ac45484c0bc34a63a1f5bb5ec1ebe224ce07a05040bd7436213bad93b394bb16f0a181656b92732b5b543c38d54910a458
SSDEEP 192:sxRlrbI/fUsXZDyprQ5qzoA8p8kF/g6+WN7BkyA8/Ynvp3hI+GukIgIJ:sxRlPI/fUsXZ2qz/57n/4RIIIs
TLSH
T1CC32A6166A28AD3B4CC7E21DFB55BF53D2F95032A1D45E48B6FC9A0C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 064a5e504faa1c5429f5efd7544505d54254fc31749459844801ef1b64ba6c3f
MD5 81e78edc734650768f9f3ce44ea7e9d0
SHA1 c1a2fd5aee9e4fa1a3a6d157be0f14cca8b7269f
SHA512 570548029c6ce2f7cad2a482d4e62c7f3344c4f67572491dc137d6a6e8b42013839aab050e9de6783d4f1ea5d5c37bf6ac4a8d6287bb1994c71558ad7a668e2e
SSDEEP 384:sxR6tI/fUswWv5TYw4HYez/554n/ySIQIR:s2tI/fIYJYB4Y/554/ySIQc
TLSH
T17342A6566A28AD3B8CC7E21DFB257F53D6F91022A1D55E44A6FC9A1C00E77DD230380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 88c937725a01a4a52a3132ac3a90b0870d0fd024db44d826cd87c3b5b51b66e2
MD5 5150462472c9f68e1338a91dc58abf77
SHA1 3070ee12c147c7b8938965f3b874977e97f0ebf1
SHA512 de5c892404a84e512f6faf03b5dc48d7c53a0ee9455db0a578db163f399931a72de3dea4c22dc678b5a6d59e7f685050eb4544a12e6721299031e25cc7c06dbb
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPJsrohI:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vd
TLSH
T1CEB2DC3B604DCB7E5F800AADEC19AFDB6D9802C79A948D4447FE990C03C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 6f798a4f6ce239e3954d612c8c56aca6b8a6dcb588113792eb342a5fbdca70be
MD5 58aef4c6e18c1c812ddc449b7dfc81a7
SHA1 d01cb9634b8043633b99d4fff283e872b4292b16
SHA512 7f6ee58b4e178864584a314d72eaf02fb784f2c145a50c8ecf54ab3f0d1e9cc0892fa613944bf9ca8aec75d9799a55ce76410df6495548f6b6c69b51b224d3da
TLSH
T13DE0DF60C5C8C2BAB2193647C229934886A47407E7C83D022F819C646147588F39A1C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 6c4de683c7ef60bb84fab8894deb333a2dfbb2fd9e03418db271885ff14e6a86
MD5 dc4d94590341f3c33fb736c0377cdc65
SHA1 2d2a252e86d867d6f1d7ceed0d857e2823dfba5a
SHA512 1467ab74eb2f45a743df018fb0e0f83251f9aef9fc2d79d591097b230a68da4be3eb56e6c8a279ba7b322c43f59fbb6d919c987eb57e6a8f270156fb8b2596b8
TLSH
T1B1B01201BB0052C9C49D053201F097D0AF11F51380017517D81C8F204D19154FFC0CFC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 ee1917e968173c3b5aa4737609398e5fb70ca54dd811c5d8bd95acda3e9a3e39
MD5 62bb9516b249222fdd006ec56a11522d
SHA1 7185b7a49f15e9fd54285701c948648566c4b0e6
SHA512 bcc0aa5e3ab35785d55adbb2aa6fcb30737110e288431c78982482eaa52aa99b62f84c9abffd3cbf65488b0bbec6016d8196fd957183aa387b1c0fc654a2f840
TLSH
T1C9E0D87095D9C3FAA259608F9235F34891B3F417E7C86D117F0998406286140BB975D5
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 6bd19da07d703d53eb26c7b264c42c109a323971c4bd90dead45fcc98c16fd70
MD5 cdac78e6dcbe7d5569275d3b57ddbc2f
SHA1 2d5b854a87a0b5240091d0af6e04c705b8381a62
SHA512 31971f7e8fb43f313a724ae9f13b58321001ffdaf4143de7966852d32459930c4085645e87b7eaa7099fb2ed1b32c351181d58971ce30c3e465fb41abc47bfbd
TLSH
T1BFE086B0C5D9C3B9A018B0878264AB5CCAF17C07E7C97E4767085CA0A146144F7AA5C4
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e901b1f62e17453e4547d8632053f3dee075cb82f736019bc6b6cb2713e1cc06
MD5 51c0bcb60a529b8f5741dbd9bd46e8f9
SHA1 cffd14a7d8d6d9671284440da4a76e01324523eb
SHA512 e65e81882bfa334943fec95b6b203864270a2061886f446f72c5eef64a849e33de869d88f60ac822aa47b598b786ca10c9f997bb4871d95a2893727d3e913e43
SSDEEP 96:KRklQUuSW0Wyf/gc0K4xgW0cUUfO0pH7kh1DZpVW9yogdVK4kgzVcbDRb+K4cq+z:CklQUuSWLyfocIxgWbUUfO0pH7kh1DZi
TLSH
T1AE91F546323B1290383DA91D98A5C91E96D27C727218A93F37E985B60FA7E034CFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 b9c0ed1e6227a2967da60d8be08e2ba274c4384ca6edd5d227494ac9bd0b7bcb
MD5 abb21b04f5e2e62bb7209cbb00675ea7
SHA1 eb62eaf58fa40ccd47409c215a2293d98a374603
SHA512 985c39f11ccbc844f90fd3b3957ff490fdad643bb19e66f76f723aa2fb1a610dccbaf9c02061077fa8363ad246c4632a042862e2a78ea21dcea0111745637a7d
SSDEEP 96:KRklQUuSW0Wyf/gc0K4xgW0cUUfO0pH7kh1DZpVW9yogdVK4kgzVcbDRb+K4cq+R:CklQUuSWLyfocIxgWbUUfO0pH7kh1DZ2
TLSH
T17BB11645323A1290383DA90D99A5C81E92D2BC623218E93F3BB985B60F67F024CFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 640d33675f67e7028e2ea401de43e37e0b611fedd9bbba2bd79087ecdc9667d6
MD5 08f16a205ad19397aac3904d8fe3393f
SHA1 f291a790024c2bfd8b39bc965a2f7c209bcdeae2
SHA512 3b10b4e4ecab43c4bde98a09ff35c2d0af5e43db4fe1aa775e77e9b7f662382e48a6fb0c6b5e03fb79177ad3c6a184d1b1618e4698471ba17ed65725c6e1eb53
SSDEEP 384:DNrRZyCSDnxTICIMEhIKyll7svbFKfk7:xFZJSDni8yI1l7svbF9
TLSH
T1ED44750A7B747001EDE6D9725CB080771E3CB16DCF22A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 426B
SHA256 ead0dccdc9fd8cceac1851614d4b506a4afb24b7aa608dd40aaf63f56291e171
MD5 3c3036a5d15b6cce7686d2ca25a2d56f
SHA1 90eb8b64104fe30efbea747660aae35c58a89c78
SHA512 e79db5434e594c8f308c2e9b8bdea2ddd4d7317a744f31713c70d36bf310e0cc377fddc678c2f58552e1d46ca4820fa6ad5b8ec82f45a74a6a725874ab61c0c5
TLSH
T125E02390131520D47E4CDD41D5195803E0D47E65330DCC71336E85F44F4AC0A4E2FD75
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 9ff8c38dee30a985a4beedf3639305770a25134f02eaec4683536e7779b7cb94
MD5 0d6a10143405d3c81c9c40ba829d9e9a
SHA1 77b67aaf169b98d4f8d3cc63d885ff972e2f8c6c
SHA512 fdb807506002df94673933df48017cf276faf0c82405dcc719b1f09e47c66563e8f4bdb80eaf23c0042c56ad792cd469b92be4be8f5ba5826e4800484d4c19a6
SSDEEP 192:+QfIII+beMIM45YcYIBOt8OAs3lrQPrsBT:+QfIII+beMIMSBet83sVus
TLSH
T16E42B65B16151FB7C09FAF7613638246ABE85882403225AE31522C1F9EF3F9787D52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 ce9bafc632b6444c45f2730941cf471f8a11c707b0bf7c5e701107b0bf7aeb14
MD5 c3fc889ae70a34916e0ccbe16faa83c0
SHA1 d59c6f1ed263552995f97416dd02a2df14bce203
SHA512 7c211c6c0b7ddf01e028a566a7b57881dbd7b5e819f1a3dbc222dffcab4fb91cd211ccfc94c5e116751f8f98d0cf51ac5e0a4423847abcb4380eb00e40640035
TLSH
T15BE0DFA0E8C8C2FEA059309741245388C6A43807FBC8BD06AB0588C9A002501F7CA1C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 13f2fdf5b3fc3f3a6dfac3d1fb31f7771f2357f797f269a26a8b2369b4ceeb84
MD5 d176a7d1260f9704c12efe4cb4e49fa4
SHA1 34050d8fee1ac6f8afb689a131b92941840919d4
SHA512 4faeff98ce9c696dc1a5de4ef15f668cfd87db9f0677835b0f836d163f7bea30a98a95b9ab8b19860a1756b1c9c6c8448f48687e911e629e33a771a46afbd666
TLSH
T152210451F330D108E54E923A607E9B260338D8438FB8ED0F44B670792E75B141E8B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 1e8633b19791d2efe46ddd8f3661c9092f909fbe48f64f6ec521ac9d89feff6b
MD5 37a4f3f53fbfd4718ed578ab6d4dadd9
SHA1 7aafa0f0a0e3a7dbe0f0c4e3b76f76ebf6bf2469
SHA512 7f5d1d74459b0629dab964cbb86115a056fe5484aa68a554de3fe95f7d9a7a0d2879e479b89f008afa0b5e01134a95118fc6d65d93dfff986b5fee3e45c97fab
TLSH
T107E02624E9C8C2FFD05D60874178A788A2A23803FBC82E022F01CC44A106141F78E5D9
MD5 SHA1 SHA512 TLSH

Submit Download

d3a2f3be-f227-43cc-8a46-4e1617746bfb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d3a2f3be-f227-43cc-8a46-4e1617746bfb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 5ce4b70714a14d6edd3984aff6ffbf91500bc469237550e8fd2812a4b6ad0e23
MD5 c2cc02209692a818860bc7cca262985b
SHA1 eace9a5e211534271e6c46edbfb65dcd62031ffd
SHA512 ba7e89b94315fd7c09b67a6a9ad133e4c1b566da570f2096d931cc8263bac30d4f9ec28d491e3f20ed22b7bb5b71ab7037692a40d790e4a0d5292d02fde33f58
SSDEEP 3:MsEllllkEthXllkl2zEflxI/:/M/xT02z
TLSH
T1B2440404FFC0040DD50010304051C77033F0D4104535574334D30473DCC75400D74440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 9319a453c459bfe130c27749277bb17b6e06ca48999e91ed97badba972a4c84c
MD5 e0e3fa179d9a9e2d1c1aa98b7a29606c
SHA1 099ce220046b005d8a30592c9389ddc390a15145
SHA512 ee3c0d1e3e88e8ad601cca2a03cc27ab3b013e9892c2e153444ce9876a9fadcb7f4aa1ee7ac916c9f131d5840c06b5d14e85689b8c93f79fc12db5066c77dbdf
SSDEEP 3:MsEllllkEthXllkl2zEflWhEt:/M/xT02zb
TLSH
T1C0440204AF808549C9001430406183602370E45505115743289508229CC69C00C14010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ba6c1b367807c0481e0fce59a5f59af6185b164e7c4ddc7308f224a1d22bf4b4
MD5 d3f70b518192714ee989a42ad8413fb7
SHA1 f3ba3216386e28f48ac2681e19342417992ca3a9
SHA512 3f4fe9eb43af7b6cf47922f3efd1c38999eac27f35576ff99fc2143b77889cc3b098ec60887482b5de412a6279a40cf69153053dedfc40da01cf670d389a1bf8
SSDEEP 768:Drv+4UNbdN3gVhCDZIO0ZQRIWsFNzc4ReyIsPRtr:Dbsbr3RIWsFtc44bsptr
TLSH
T1D803BE32A8289DB3ACF6A685F10736537EF4511BC2C91A94C5EE6F4C468B5ED131B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 15190ff8bcc24aa35809417c2ec7104e5d7aeb3e4de9c7bd15cbe06709c0b2e6
MD5 08316c42af81354ba6fdcecd5ca00a5e
SHA1 3b8cbe9c22d25432f416cdec9a1bc625aca0c534
SHA512 b3089b5cccf0bf56c971cbedeb4b62cf179a4ec88f8661e803da9c9228bd556e1456a53b933819d242e293af3982f5f307067d48ee16fe349e044db1d5e18a79
SSDEEP 768:Grv+4UNbdN3gV+CDZIO0ZQRIWsfNzc4ReyIsPUnbGxtr:Gbsbr3SIWsftc44bs8bGxtr
TLSH
T1CC138B3DAD28997F9CAEBB45B10E6A223EB8113BC1B40994C7D91B0CC53659DF357822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 a990fc71e75db3251d55b550a8889b1e61e07c74816bfc3d59d3cad82173a50b
MD5 6209d0f6861e5c4459953c421555518f
SHA1 58f5de99b196eecd8d4b93ad44631de2e86bb16b
SHA512 82f9c47d206f202ffee87f19382882d0240b7a329b8c8c6c37989e9364751f30078a54803804959c452c2a75e585a3d86e8566e3e4af1ef1b586a18867f1938f
SSDEEP 384:nYZcIm38N7HqTV3bhZunJDZNfNoXOVSUUZQRYEOWs/ETRzcoXfK86sfxEZxxsIjR:mm3vVdCDZIO0ZQRIWscNzc4ReyIsM5a8
TLSH
T1A7E2BE72AC65CD33ACFAA242F64636927EF46127C2D81E84C5EEAF0C054339D171B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 c4a1cb506b021fecccc595cb3bd812205a7f44c8570d4c6258df5ed2811ab011
MD5 045ccfed199b893d60b2891511f8fbb6
SHA1 e423956dff0438fe34db6de14c2453736d57fbe0
SHA512 5a4735f4bf5f01c0e390542c179beace26a4e2231f3d8c6640c1b0dac8655b78d3299b92063047f4e8bd89df391973fdcd7b4acc4467381808d4c29c7e30ad38
SSDEEP 384:nwZcIm38N7OqTV3bhZunJDZNfNoXOVSUUZQRYEOWs/ETRzcoXfK86sfxEZxxsIjR:Om3yVdCDZIO0ZQRIWscNzc4ReyIsM5a8
TLSH
T121E2BE72AC65CD33ACFAA242F54636927EF46127C2D81E88D5EEAF0C054329D171B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7f2590ca2b703ae7d0ecf283985e532672a798690cc807d4eb32a2650d53fd03
MD5 866ca36fb1dd0c73aa03d68b39c6f2e8
SHA1 0e8e5bfeda118107b7c32e8262b33e4948dcf869
SHA512 7d8ca281256e77a0419ee46e05b64a563fd523b85fbccb39753f3f5190201941ff25ae5d3948c67e6c5959d4f8618082cd15a63fb0a6b833e822ce46689678f3
SSDEEP 768:+m3vVdCDZIO0ZQRj7Nzc4ReyIsMwp96a8:+m3Kj7tc44bsLma8
TLSH
T190F2AF7AAC258D3F9CFEB746750935126CF4813BC2E85D98C3ED6B0C856369CA31B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 53KB
SHA256 b20800c4018abcd76b08549a5d59bc56d00351e9fa4f1aec33dc4f30ff7e9518
MD5 3a4258bf5402588a590a0b99b3b2af5d
SHA1 490d778a32876987e407a99e12f836cbffcaf40b
SHA512 669bac1a7c6ff0044ae0fd19998ebfa9da90c74d180068daed5382d53af97fee86ef3462bee5afc80f098a788396cf18818df2b8dad1a6dfddd27381a56575fc
SSDEEP 1536:im3utc44bsUKTbhKNR+WZCdQHk2fKrmV8:iYuWKTltQoIMn
TLSH
T1E1339D3ADC60DD7BACFA6B81B60A75069CF44237C6EC68D4D6D92F0C406769CA30BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e9209430d742a0c797ead4f0318dbc6d92c69e10b70c1d67230e97793cf82427
MD5 804c7c896d51f652bacb2081f443c0c1
SHA1 9fe8821c1f588619d7e05521830a8dc209916a2b
SHA512 3b91c45c53d193a375f7c90b56078d4dad4bee0b4839f8b8c7d002ceeb0a7bb24970f4dc79bb5286a67f2d19fee4ac438e0a6d1532bac211cb3ed5cd912af17e
SSDEEP 768:6rv+4UNbds3CODZIO0ZQRONzc4ReyIsXCeVH1S5D:6bsbS3nOtc44bsyEH1Y
TLSH
T1EA03DF33A8788A77ACF6A686B14776537EF8512BC2C81E94C4DE6F0C464B5DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 72c3f5f1fb1beb08acb09ec468b4f21775648c6dc399b96e636e03c37f5c8199
MD5 6fffbb37a25451ca0fd1ce8b982bd702
SHA1 ee40866929229bc347edfc804e39a3c5cc43adb8
SHA512 12428583e6d01cb824604849c36a07a1e8fa4e989833b90dfc76b8ca17621c72308867209d2c01fca5956783d24393968b7668b119a1b1b6b86c4bfd4ec73707
SSDEEP 3:MsEllllkEthXllkl2zEfly:/M/xT02z
TLSH
T14B44040C7FC11CCDC50034304451C37033F4F4500511574335D10573DCCF5400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 8bbdde884f76a239161544bdc5dd38be45fcd38b4172bbe8630dd3f69056c302
MD5 bc4b668c701adc7329247ed782c1bd46
SHA1 ebe3892787b431850782dd1a2d4b5638859a4845
SHA512 23913959b3ba221f4eb9dd87ce08a8dd49eff4e204107e1b5ec8a1119d6c33a533fdece0909b21f80ec9f35299d0ceaa0c3f040332f3101b6a955189a380ac25
TLSH
T179311DE058391AC2D4BE0DAFB48B39FC84D8D326F5A430386898E968563E65E354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 51fa2add3b372e4d932d6926ca9be223a98d6ad3b63fcf099338f199d0a4ad28
MD5 0bc15719fed893a50e7e1a0840cebcc2
SHA1 b6b38e62996bd5e878b8bdb423c8908c2c7952d9
SHA512 e8025d1cc226ac64ba4fa534aa9a692475cc6f90a825329d6a12e01c23821f5e08fbdc188e3ec58612b5fc7bedb6f5a7f294d0f22467098763b8949281bee090
TLSH
T1D9011ED158391AC6CA7E0EAFA0472BEC44C8952AB2D834B908CDE8A4957985E304183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 756ef3483952cd4f6f9b80821083dfbdf9bccdec392e28a2854f00ab9fd415ee
MD5 a5d8f3ba10a699f2b50cc8c1ed38bf37
SHA1 6d425c4f51f9dad92dae1d394bd3ee6fc81d3e6f
SHA512 8f5ea964e29453421e34eba8b37e4acc6dc0b4b7c5f89b5fb9aebe6b034a36a6e8a0373193f023de0a7f66ab8862ad8ffd7ce6177cf2d479f623e035d2160c44
TLSH
T1512111E1183A1EC2D5BE0EAFA0872AED50D8D216F1E434791888FD54963E55E215187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 7f131d386f527dab6f8a4235038935e733d69317d35dc5eb69c52d96bf5b75d0
MD5 dd06dac0059d3cf25ad6de81afc96289
SHA1 38918b3e27aaa6d6adbeb99998847d2ea5649c09
SHA512 2cfd11f573eb223b18eb9882182d481ed6dbf7ec2357286c8210d4285f689d38e1e6cdce4e81f7880da9e59d1f0a7873374a7a32a0d86f20fb288f86fad7ac5e
TLSH
T1DA2142E0183E1EC2D17E0DEFB0472AEC90D88216F5D434792898FC64963E51D214087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 6bbc409c6c8e5287723de210e3463bc9873d0adfd3542a753ad8169fa6342edd
MD5 a4942446efe6c44ae76e03f049f85743
SHA1 501f2a79ecaee0f14e1e17bbd93516fc73cb8cf7
SHA512 b8cb3908d88cca44b260e44c81f0a093cb6b4c92d9225a93390f336b886fd571202edb51f98654dcb7c80c411f600f090de5af458ffd3adcea3b636210b7b69f
TLSH
T18F1150D14C3A1AC2D67E0EAF60472AEC40C89626F2E434B808C9E854517945E314183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 e56e2e8c12c30aeb3647379105e6cc00fb874ae60db91a7e65912c81acd272cb
MD5 4fd39e59059f75a9ced12b25de6be901
SHA1 d942bc4fe9fe1f73e1bbe6647bfa093ce7449556
SHA512 23ee132546b4ee2a51fa5a3c985b815d25beaa211114e7bf11bd3d405e3225c8d2f048f8c898338119b29d18f39f785fc26810ae2e4fc11137d14bf0526a1121
TLSH
T12C3122E1583D1EC2D57E0DEFB44B2AEC90E89216F5D434382898FCA4567E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 3a81a4eee729978393cff7718a9d8a74fd3f6f122297e9c12a11b4658834411e
MD5 fa6015a8dc98e735976dc38a0990672b
SHA1 5f2e6427fd32691058b5ae21d18f6695efe6fe87
SHA512 d3f3db3b730235d6df3b555174dbedf1b51d5b0f5b0dba88e7a6cd2e8de59ade2baabb191a30d0a6b914411256972c8663b48057a0b017df2de09a08c241d930
TLSH
T1FD313EE158391EC2C4BE0DAFB04B2AFC84E8C326F5A434382898ED58563E55E214083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 15d589c36d26b879ab9b6778f60b9708da588ead5d56887eea839678186b9c93
MD5 4f07be8d4ba4d971cab71ddafcbe2b70
SHA1 6b8f42628a5a5c3db81fa91582701e76515de3b8
SHA512 2c411a14d28fec7bc9545e9221d04287e99da7781dcb97ca1dcf40a8ebba498aeb75f2232eeee0851cdc4a254934c31244648cd3f0051c71edfeffe0192349b2
TLSH
T1D2411EE058391AC1D4BD0DAFB48B39FC84D8D726F590307828A8E958967D65E254483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 4064f883ab03274d942d9669bcd8d2fb6cdbe53cae07e7c3c45eedb4fa0ce127
MD5 3d7f13d024e13960d589424710ae35af
SHA1 84cec1f45f7181378af3169fa664f2ef1630e695
SHA512 7fc51183bc0811cce4f00965b6c8a3874b0fc32432865df5d92b419cc72889a834c7d01b69720d627448553d9bf07e1f20998b00e93d2170e102da3db578bf2f
TLSH
T1443120E158391EC1D47E0DEFB05B29FC84E8C226F5A434392898ED98567E55E254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0f4851d2d08fedaaf8104a0fbdc543c6f5a7c82fd67345db7d671b449362cfbb
MD5 77f71a1a262c4e86361de3a90207fc3b
SHA1 1c96628f1863ecce746b8e03e244004ff89393c0
SHA512 d32e215753da8220e7f2c1bd8d9b9f882706314869fa45afae698cfc032947bf8759f3f403076a1d8f69bb591edca53da629484ac186d9fd0c6d98d19b36c6c4
TLSH
T19A111FD1183A1EC2D5BE0EAFA0873AFD40D8D626F2E430B918C8ED54567955E215187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 f02a7bd3b771879961428f883cc74267f62795d12233237f35bfd3c4c48dce64
MD5 720cbaa1daf0bfa34c779a917c251458
SHA1 9a1b20164d36666ec94e22b20126dd9575b62556
SHA512 0164a6059883ed2f1bbf4e316e5808af07034fa8105cecf6f0e3fcc82f35ae4b4d501b06f2759e8b2f3529eead2bd23618f463372eb60c33d1e955e2903b6780
TLSH
T16B4141E04C391EC1D4BD0DAFB48B39FC84D8C726F5A4307868A8EA58563D65E354083F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
MD5 e045e65cd8ef3d083617318874fb79ea
SHA1 c2fa643f68ddf8df9e99d41cecc7525e5a2c08c3
SHA512 23c380211a66716c26bb85d47c8d82531cd1ed92636bb91e281a4abb9e2e2123967e8b4761d830c99c8fabdd7d6e7526165d78111e0ffae97194ce7a1195dcb6
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfL:TY/IHRH34kWqB1kQnjhHmr6ITmU9L
TLSH
T1C223886EDA2CB9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 4KB
SHA256 97d89aa097b18be95944905ff1d1ef855abc35c7b425557e5e26f621f67419c8
MD5 fcfebff426bd3e46b199eeffbd8e1019
SHA1 bcbbdadd08f999b809abf6c8294144e28d0e9d80
SHA512 b67cb9663af700a77e41517c07d493f1f84e85716243c1299c435fb3182e032499bfeb292aa3bb09cc4879f07593d7c936167d8ee8cf39a275f9dd70d6d27a20
SSDEEP 3:Jl/R/lFllQ/8QuQll/lDAL6SlreqNcSFYojpuyOV9RUIU:e/ZlCzetGy2
TLSH
T1059112831600C877DCC4273F35C2009EBFF339000F81EC044074886267806087A0892A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

288b14a4-2fb7-43e9-9dc5-fb6e99656e6d.tmp

Path C:\Users\Admin\AppData\Local\Temp\288b14a4-2fb7-43e9-9dc5-fb6e99656e6d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 413bc3dcc62848569cd2d2c48dc4ac79ffb1b1f02911ccfc2674b418077cf64b
MD5 bdaa19ff0e56d9f9685515a068f6c17c
SHA1 8f680e12dd62baef2f46d66ffdd55c93cdeacf56
SHA512 7e77bee41b34cea75162e26d101e34fbc9eb3599aa7effd2bd66d367e1c58521fe3b130491864a6ec6ff5567847e71fb234e8a084dc8de8ef780570f3171fb56
TLSH
T1DD21F5913936727B07C687E8E0764CC56810F495533F5A9CE91BA435FE2CE90A72E3CA
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1600_1732357556\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1600_1380339280\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download