hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
1138s
max time network
1122s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 03:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260801-d3pgfsdp2v

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-bg.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-nl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_728370197\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-de-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-ru.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-tk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_155053006\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_372917782\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1620342511\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1096965835\v1FieldTypes.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Mu\Entities	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Sigma\Cryptomining	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-fr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-cy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_314374684\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-af.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1998079060\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_83691229\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_841783344\arbitration_metadata.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1096965835\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Mu\Other	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-as.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3328_989976477\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1126803706\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1096965835\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1401738867\passwords.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-uk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-hi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_822801983\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_85863378\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_314374684\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_486942864\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-da.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-te.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_320518269\well_known_domains.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_822801983\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1801588203\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-it.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-ta.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1998079060\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_83691229\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_486942864\crs.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-es.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-lv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-und-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-la.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-ga.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Sigma\Entities	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1401738867\female_names.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-hu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-hy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-sv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1401738867\test.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-de-ch-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-ml.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1126803706\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_841783344\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Mu\CompatExceptions	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Mu\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_728370197\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1401738867\surnames.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2124	msedge.exe
1132	msedge.exe
2320	msedge.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300287568498433"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 16 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F8EBC4B9-928A-46F2-A67C-4BEB29037363}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{A063FE77-1013-4AE1-AFE0-B206D4F6B3BB}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{5E8DB21E-87DE-4858-B9C3-AB94A4736CA0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
5940	msedge.exe
5940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe
3328	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 3752	3056	msedge.exe	86
PID 3056 wrote to memory of 2124	3056	msedge.exe	87
PID 3056 wrote to memory of 4372	3056	msedge.exe	88
PID 3056 wrote to memory of 4372	3056	msedge.exe	88
PID 3056 wrote to memory of 4372	3056	msedge.exe	88
PID 3056 wrote to memory of 4964	3056	msedge.exe	89
PID 3056 wrote to memory of 4964	3056	msedge.exe	89
PID 3056 wrote to memory of 836	3056	msedge.exe	91
PID 3056 wrote to memory of 836	3056	msedge.exe	91
PID 3056 wrote to memory of 836	3056	msedge.exe	91
PID 3056 wrote to memory of 3208	3056	msedge.exe	92
PID 3056 wrote to memory of 3208	3056	msedge.exe	92
PID 3056 wrote to memory of 3208	3056	msedge.exe	92
PID 3056 wrote to memory of 2184	3056	msedge.exe	93
PID 3056 wrote to memory of 2184	3056	msedge.exe	93
PID 3056 wrote to memory of 2184	3056	msedge.exe	93
PID 3056 wrote to memory of 5008	3056	msedge.exe	94
PID 3056 wrote to memory of 5008	3056	msedge.exe	94
PID 3056 wrote to memory of 5008	3056	msedge.exe	94
PID 3056 wrote to memory of 2412	3056	msedge.exe	98
PID 3056 wrote to memory of 2412	3056	msedge.exe	98
PID 3056 wrote to memory of 2412	3056	msedge.exe	98
PID 3056 wrote to memory of 4588	3056	msedge.exe	99
PID 3056 wrote to memory of 1412	3056	msedge.exe	100
PID 3056 wrote to memory of 4588	3056	msedge.exe	99
PID 3056 wrote to memory of 1412	3056	msedge.exe	100
PID 3056 wrote to memory of 3068	3056	msedge.exe	102
PID 3056 wrote to memory of 3848	3056	msedge.exe	113
PID 3056 wrote to memory of 2224	3056	msedge.exe	114
PID 3056 wrote to memory of 1540	3056	msedge.exe	115
PID 3056 wrote to memory of 4404	3056	msedge.exe	117
PID 3056 wrote to memory of 4404	3056	msedge.exe	117
PID 3056 wrote to memory of 4448	3056	msedge.exe	118
PID 3056 wrote to memory of 4448	3056	msedge.exe	118
PID 3056 wrote to memory of 4448	3056	msedge.exe	118
PID 3056 wrote to memory of 3820	3056	msedge.exe	119
PID 3056 wrote to memory of 3820	3056	msedge.exe	119
PID 3056 wrote to memory of 3820	3056	msedge.exe	119
PID 3056 wrote to memory of 5000	3056	msedge.exe	120
PID 3056 wrote to memory of 5000	3056	msedge.exe	120
PID 3056 wrote to memory of 4912	3056	msedge.exe	121
PID 3056 wrote to memory of 4912	3056	msedge.exe	121
PID 3056 wrote to memory of 4912	3056	msedge.exe	121
PID 4700 wrote to memory of 3328	4700	msedge.exe	125
PID 3328 wrote to memory of 3148	3328	msedge.exe	126
PID 3328 wrote to memory of 1132	3328	msedge.exe	127
PID 3328 wrote to memory of 2192	3328	msedge.exe	128
PID 3328 wrote to memory of 2192	3328	msedge.exe	128
PID 3328 wrote to memory of 2192	3328	msedge.exe	128
PID 3328 wrote to memory of 2136	3328	msedge.exe	130
PID 3328 wrote to memory of 2136	3328	msedge.exe	130
PID 3328 wrote to memory of 3480	3328	msedge.exe	131
PID 3328 wrote to memory of 3480	3328	msedge.exe	131
PID 3328 wrote to memory of 3480	3328	msedge.exe	131
PID 3328 wrote to memory of 4372	3328	msedge.exe	132
PID 3328 wrote to memory of 4372	3328	msedge.exe	132
PID 3328 wrote to memory of 4372	3328	msedge.exe	132
PID 3328 wrote to memory of 3284	3328	msedge.exe	133
PID 3328 wrote to memory of 3284	3328	msedge.exe	133
PID 3328 wrote to memory of 4952	3328	msedge.exe	134
PID 3328 wrote to memory of 4952	3328	msedge.exe	134
PID 3328 wrote to memory of 4180	3328	msedge.exe	135
PID 3328 wrote to memory of 4180	3328	msedge.exe	135
PID 3328 wrote to memory of 4280	3328	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,8150011657832153819,2913507138068289998,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,9581909366844291990,1044262980654589735,262144 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,5521922269637083557,12486914092017049116,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,9502138956264694760,7833751244384263387,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,16353569693506668152,7242418064886558200,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,7395941565475229255,8907254508985002881,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,12778168982868134056,6477995004663455835,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5048,i,16305114559966451942,11760611134478810780,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,15514741565696678238,5359046522129218605,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,14576422019123043228,18271337528105816457,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,4768720633896268421,6724655581666704214,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,4768720633896268421,6724655581666704214,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,17087556448250388699,18320879713657903181,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,8581758153917677216,5825964130280401861,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,17627101967080594771,720049511887595062,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,10013361221447333296,16682364786624898889,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6524,i,4866518437881768807,9617659891625700526,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5788,i,6629767457629207464,11923371452688974683,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,8707712196087731947,571743151705922785,524288 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5144,i,9934181964073330987,17815074443391924190,2097152 --field-trial-handle=2332,i,11738451046698920274,8313958757800941313,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
    3⤵
    PID:3148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,17864148863106400454,8835554216585781162,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,11458331490227918536,7750034160919420669,262144 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
    3⤵
    PID:2192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,3264042625168688495,14343916646317284296,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:8
    3⤵
    PID:2136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,14939820798997570564,9569562687440421092,2097152 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:3480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6603163993772447828,15060007494374944256,2097152 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
    3⤵
    PID:4372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,7087609899750594817,10653732375780431505,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
    3⤵
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2457235458904883305,16862160120633666701,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
    3⤵
    PID:4952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,11027077425122799336,2061689135260441167,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
    3⤵
    PID:4180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,11425131574944479857,13649369159176912930,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,14821875413144549459,3468913878026943131,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
    3⤵
    PID:2512
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,14821875413144549459,3468913878026943131,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
    3⤵
    PID:3268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,3065348536410361542,13003344100773652795,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
    3⤵
    PID:2232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,10718951636514704431,449852829382180600,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
    3⤵
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,3335645822950323053,7266886480469753548,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,14359309101737449023,6593887758104114406,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
    3⤵
    PID:1648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,8950220866981401571,12772419191055790075,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
    3⤵
    PID:3264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,2602407995261711148,7928454499656722142,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
    3⤵
    PID:5928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,15348853110690922005,9325435280996312483,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
    3⤵
    PID:5940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,4845450719662705303,17646250460606724415,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,4936275995062064409,10207025623231400845,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
    3⤵
    PID:1648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5308,i,5991502595582508751,11514005029350438000,2097152 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:1
    3⤵
    PID:3908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5512,i,2084023325160089972,2277383468451210741,2097152 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
    3⤵
    PID:468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,10580241347021255358,14272571311006327388,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
    3⤵
    PID:5472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,7925374949220103987,2156201627362680955,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
    3⤵
    PID:5708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,11119716005117620195,11036772235284298816,524288 --field-trial-handle=2296,i,2898427770784345112,16632801788423078949,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:8
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Loads dropped DLL
    - Drops file in Program Files directory
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:4864
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
      4⤵
      PID:2036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,1576436912120440499,16709689720422301705,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:3
      4⤵
      System Time Discovery
      PID:2320
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,4678849116139470482,4955784817705286568,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
      4⤵
      PID:2240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,12338087213153011184,14396914379783661789,262144 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
      4⤵
      PID:5264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11324122189847144836,5434983500072691759,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
      4⤵
      PID:5604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11324122189847144836,5434983500072691759,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
      4⤵
      PID:5644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4804,i,11342738113776394680,9975147296202439126,2097152 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
      4⤵
      PID:6028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,6022021795568064830,13663916333332746362,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
      4⤵
      PID:5996
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,8635667033825873831,7174185736506486541,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
      4⤵
      PID:4916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5564,i,11143019490140369681,7219321543446534086,2097152 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
      4⤵
      PID:4196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,7099144288869356618,17496029945369995094,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
      4⤵
      PID:4992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,17845474068369379069,3377146930618360342,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
      4⤵
      PID:1324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,13814773614090820378,11018137881898788555,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:8
      4⤵
      PID:5744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,11597903403980234765,2680644649281922790,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
      4⤵
      PID:3016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,12390601295401096908,561814896215435273,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
      4⤵
      PID:2192
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,13615647345100482705,8579325948734781272,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
      4⤵
      PID:4660
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,3490636445736159555,15811246538466997613,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
      4⤵
      PID:3832
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2124,i,13236898130163756712,14748984120635159877,262144 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5940
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,13096461483429480161,13141428990104041088,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
      4⤵
      PID:5960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,148949973024125727,8769646686988438735,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
      4⤵
      PID:2152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,10395169120293776755,910878101924154486,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
      4⤵
      PID:4696
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,16744700783596184198,8947584264029746253,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:8
      4⤵
      PID:1148
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,10196750812790479226,13043818129978679688,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
      4⤵
      PID:3184
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,9478927291462070532,11060821396520558707,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
      4⤵
      PID:4524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,9480385116228091891,9058591714426871769,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
      4⤵
      PID:3448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,5669366605043718757,184235161775022273,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:8
      4⤵
      PID:1804
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,3361581175919846423,1583790946104328969,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8
      4⤵
      PID:3432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,9001062469582372051,11529821578638979384,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
      4⤵
      PID:5552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,12344435677874269585,556691045335599406,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
      4⤵
      PID:5856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,18345905085015466878,878223663957950268,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
      4⤵
      PID:4436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,9956472473959809539,1970834494542692816,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
      4⤵
      PID:924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,12401467554263807209,15718994753903729,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
      4⤵
      PID:3184
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,17246651336484839057,4048167972635408225,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:8
      4⤵
      PID:2440
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,986231005872090075,16454019751897267872,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
      4⤵
      PID:5740
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,12011336687427375502,5869400755631186412,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
      4⤵
      PID:2632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,320670865490419690,14372315852007636627,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
      4⤵
      PID:812
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,14986227806287619859,7258282257101554511,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
      4⤵
      PID:3224
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,3262452049154853927,10761181773694925955,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
      4⤵
      PID:2264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,12062177819796922987,17581500431691056914,524288 --field-trial-handle=2524,i,3981158497448494894,18349960633955355264,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
      4⤵
      PID:5516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3328_989976477\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1096965835\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1126803706\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1361518187\manifest.json
Size 118B
SHA256 a50a524184b2420fa2d050e10c7ecc90ff3ddddbc1d39dd7f6ee65aea7e89904
MD5 0839dbc235945a441183b3b1c54e7cff
SHA1 7d50cc09092601adbdfb99927ad0cea8f9b5be01
SHA512 5ef438077e1f23aa36d9abd6639769eedbdffdda85ee368f386638c288893a1b80c8ecac9eb9659b5559296a189c77fc24a7b716bb7914868e6744a30e7bd50e
TLSH
T1EBB092B00C0AA03B22819B60ECA0668683F81218E8029B1A088036482F8817880362F2
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1401738867\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1620342511\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1701863107\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1801588203\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1937782353\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_1998079060\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_314374684\manifest.json
Size 72B
SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
MD5 a30b19bb414d78fff00fc7855d6ed5fd
SHA1 2a6408f2829e964c578751bf29ec4f702412c11e
SHA512 66b6db60e9e6f3059d1a47db14f05d35587aa2019bc06e6cf352dfbb237d9dfe6dce7cb21c9127320a7fdca5b9d3eb21e799abe6a926ae51b5f62cf646c30490
TLSH
T154A02230AC20A03330880B300032838383B02C0A2020FE0A0F0B2080A28823E20B220C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_320518269\manifest.json
Size 141B
SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
MD5 811f0436837c701dc1cea3d6292b3922
SHA1 4e51a3e9f5cbf8c9c96985dabe8ffc2de28dae87
SHA512 21e7bf2f8333b2900bcbcb871ede14684073249597d105095dc7d3f101e7ccc326068732f11d4a167365f245a3f2205793f520c7666d7f948e70919b40b43d35
TLSH
T134C04C5185005D72509D87781D6C97054B12CF4618947509DDC68309EC1DCCB64B234E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_372917782\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_486942864\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_728370197\manifest.json
Size 53B
SHA256 551c5f7ed9a2139eab8089f6fd9724b0b38d226b369209cb2ac295b3884571d3
MD5 1bd4aa2766777b47a4fc061677395793
SHA1 5e88d6015511963e10083771e9747459117b0eba
SHA512 0d7d7b5d8f5ea16308268e5ac5986195d5238bf5f30465fc541c70de8dcf8b3f87bb1e2bc38e837119df1d52a78072088d5c822836d04490027a8e071f52db0a
TLSH
T1519002604424951716C10F5065B0BC819391765995850D1D0545155902A546CE054298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_822801983\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_83691229\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_83691229\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_841783344\manifest.json
Size 238B
SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
MD5 15b69964f6f79654cbf54953aad0513f
SHA1 013fb9737790b034195cdeddaa620049484c53a7
SHA512 7eeee58e06bba59b1ef874436035202416079617b7953593abf6d9af42a55088ab37f45fdee394166344f0186c0cb7092f55ed201c213737bb5d5318e9f47908
TLSH
T178D0A727EC008DB611B207580AF5A742E3B1630F7C012509377308CC0F3D1744081285
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_85863378\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4864_988255854\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e727382ecdcb4f12c794c7f516dddb0ac1f76ed28e763ccab143dd383b3e325b
MD5 591322b721977b1eff58fea96b192e5a
SHA1 71a2265e483858a4d4010f03fedcc8d80264d243
SHA512 3786e6cf7834dbaad1c18f83fccbdec40511989f69608c2e52a1138b78467bb33d5dbd90373e2bf64afd251734a0246ea5fefb4504329fe17d7fb57bfe37d519
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7/:fwUQC5VwBIiElEd2K57P7/
TLSH
T10DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c6f6dbfac4af94c94c915841ab3b25c901e88a7b1b28cd8491522ed4b7d67c64
MD5 3b90cf452e69f70433d34335f71641cc
SHA1 632107012ae0624b2d681f90570566b98c551a00
SHA512 d8bb5729680591ad3193116589be611283f7862bda4a1fa0f4cbaa7a9b0fe559859dc7ebbc67cab4fd46913ec91701a7a37ec27648437ab02a27ec6fbca89036
TLSH
T1B0D02370B5A9ADA0C82C0030803002016E66867530DB9B032045880D98B02C0F2DF8F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1b3741b2c017ae955db0f30208a1d3afe754e8c00d8db769c54942ce14e6dc0c
MD5 18d8e9dd4514b2347b9d052fbbc08875
SHA1 1d83522b835b5a6b0c1161882fb63e7332fa1f72
SHA512 e2f2dc1ca4561ace0962869bb1640d1b958621c23765d95fa76bdb809fbfcc08e7f691e9ebaf5cd196b660b20143d7cd8278f221d40938e8c5724d72fe4548e7
TLSH
T1BCD0A7B4A3859E20C90D08319861A2526EA2866830EBDF235055941D6494294F29F066
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff297890928b1cb68957c1b87199f4fe5622c8b87aaaa9a40d0137fd508b5177
MD5 8e3d07c8c9639116c9282a561a84c591
SHA1 97b962e051bad60bcb9dcaf0f7417b3981cb256f
SHA512 0cdb788604f100917d3d6c5412f871cc992d4343c8c660d58c4138c0223f6dc24b202671501decd88c38f9c2004816a1010c69798d595369e190df59e8d1686c
TLSH
T165D0A7B4A785DE20C90D08319861A2526EA2866830EBDF235055941D5494294F2DF066
MD5 SHA1 SHA512 TLSH

Submit Download

0dfe6e62-ac53-48be-8b3b-63683b1d4e0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dfe6e62-ac53-48be-8b3b-63683b1d4e0f.tmp
Size 414B
SHA256 417faaae9690347fa48018ace1974b5ff61fc3a46d01c06ffd413bac41e8ea4b
MD5 a365c702c9560ac7ce5b386faf0808b3
SHA1 e3eba1d23a33eb8e1d7a97f7c9f02e090300be1e
SHA512 1374cb47ccc1c727f4e9b028cb81fefa4d05fb6d1533ba23e049eccd0e420109629b37590f57fa5942dfe472b2d77f180bcb222334416ece665ef8bbfae934eb
TLSH
T1BDE02BA9CD32FD371AF95718A091874AEB40133A2751555F7B3CA20C8FF1636058595C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e2ad02632c45c4566af6751f7062b4a0da1340fd50826d3ca5388061740acccb
MD5 f9e55deb2ae3636a840ce57d12200bec
SHA1 ecc2f10a80fdea9aefd3b7ad89af7271f9ac559e
SHA512 eed958a56cdd64f8a767059010347a0bb277ca6439f173e54a8bca8df97e554f271390ce6894181448a03edd1ae750d247244b13cff447ddab1cb6ec583b161d
TLSH
T10FE026C918CCC22E9601B58BF1684B4CC2C0370BABC8FA1F3738C8C83401294A697BA8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 91bb23093088b2f346810b12c2805c46f4f0b19af529dc570d18cdd65eb3497d
MD5 62e74df8cd750f8a732020d7c75ffd05
SHA1 c7f3f0226154fa8c4dab6745aa43dcd31529c144
SHA512 aea8296dea9530298b3aeb60f0a6ed81db17fc98497f9fa475293ca30cc7c880d0b2f93914f489e5bb0d465a62fdeb04363691d88fca06f6118d88f5dc7f9868
TLSH
T109E020D505C4C37D96006AC7916B474CC1CC370FD7C4EBDD2724C8C83401480E299D71
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 0127ea2955a5568dbc694f9e0e976b7670e081cde99a4cb3dc65d45918ee2f5a
MD5 17bc95d3cd8994ebf0b2936901a987bb
SHA1 364f41a1a2c2110ad592cc72887ef6e7e59f6d8a
SHA512 0251c77bf1d1a9dae6deeceefe7ae4b88be9cbebd3de813b847b6a23bcd17a10deb642124fdb2e8dfc5c5e823d0c1a896cb5dd15f693c818e1168fff517e5ec0
SSDEEP 768:pK966kr6sthGS2emQ6ppd7XpLh85fXLRS8vZ:pK9k+syw63zh89Tv
TLSH
T15E13D53CF2705C73C6D7A1BC955F4BF56339E8A2D2CE530B2726B20D92A239B494E581
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c310cdc206846d5735b5e32ec27a590bff14a612635b536fee3c6b000d99013f
MD5 0e2a261149890964ee10908e012da74f
SHA1 043f5bc44cc92df53c3da3acc53ddcf705fd7063
SHA512 b7faf887d12cbc98b58396fef4e05cd5dbb5d45940b832d980e3738458af049c1fada982eed1c7fcd1a243b9d6542808e33c40b1d69f5b5a19cb3c09a8d9ce45
SSDEEP 1536:kL/9w3L/w6OZkgiWfaWmr+Od69FR5787fL/sL/MszkIcFgX8cFKVXKJGASF7j979:kL/CL/CDzr2L/sL/Msjo9SEJf50
TLSH
T1EA4460F34950A01BCBA812F9E6023E3DDD37055F7DE5E9ADE6380CC55865B3266BCA80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 49KB
SHA256 f5510eef424b664d97fc29cc862307147c2c326fc02701b4de647507e025c90f
MD5 249c77c1352dd7177c2092bb59bb799d
SHA1 473818dbadde6b1a8edc719edcbc2ee0bac116ad
SHA512 4ca5afb2ecccf3dac8d3607c1dd86786d84e17b6713bd6157d634240a942b7c04f190154f746d9fd29335a36c26af38fe1278548242a5ed5224b472505ba75c6
SSDEEP 1536:Z4TBiXU+heBkeZjYtXCKRpA0yEJZXkUsDN85R5E/szUr:s4he1ZMCepA0b56K5v8szUr
TLSH
T13B3302FF66329EBEDA0D808320EA13AB11D16495AFFC95DC4C2012BD4525F67738B5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 204KB
SHA256 461ba7944ea6da5da48953e7a50b830ef5466aa499fb63b6e94eb4835255b6d8
MD5 6a2645a5f4bf625b35da468f4fb8192e
SHA1 17897ae9d376b99e14ea9605bc76557c6b08efc1
SHA512 c1d0b9b340f935f4adb6ecc06ad87035834a0355ea225b4f0cd1dec4ffc7b912fbce1d683e9a8fb484bba8f711fb39fb1f883ec674540abaeaabe200d7744ec7
SSDEEP 6144:7HLEicWh9Kkv+6350IMWER8jGTa9PLk0hBFXXyeFj:Tnh9Kk2s5Ms0kI0pya
TLSH
T10014228432AF6623EE518165671F66172AC044C8E0D1F5A1FBEB1F83AAF9FB012354B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 8ff35bfe5855c05e174853bb28c4e4eae4082fb7d1a064702835099bbb5e7845
MD5 1abdd61b423a676427aada86c590f861
SHA1 94db3396d285e42ecb69f3522fdb11d5a6b4467c
SHA512 42592f548c7e084cda05e4e30c13f750f3263b48d0b8e5f2c32dfa7de2d3e0843b318c115a88db8ba18845c957875bcb6abcbeda5a1903ad8e90499acb905a6a
SSDEEP 48:IkZJ2H8tMriUrW4QBrauhAGjoHytFgEsS/+cgn0W14Ta6acukEYTYtriaEVOIFVS:IuSSMDArbjbhV+zF2jEYc58ooOz0Av
TLSH
T1A0A1D75443ABCAAADB102371E0EB2AE4FAF24F950EEFAE85004057BE59F5F6C109150C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e23014fa154eb8b206fa652a2fe08c7adca01add9c2630432b05277c5228233b
MD5 a9ae2dfc40a345b4e06879f56d168e7b
SHA1 28c8fe1845955cccd7a1d7fe5f0ab1469e38b63b
SHA512 e370dd3ad57ff6c7d322efa1cec235d8cd05b018c601145d8020f8873a7b383e4f95ae990553381ee595e77dccc8a14750eba534284d399670f4dbb1142fd254
TLSH
T13B71A354126BCA6AD7110731E4E321B4FCF28FA90EDFFE84118597BE19E1F2E6126448
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 fbc633336060e839b2001293086fed9fd92274090c1b90af70e10758d6a687e3
MD5 88fa119408304f531ff013ab80fa84e3
SHA1 e0f77972e0cf8647d2ca70236b05711e33e7c889
SHA512 f46757261e5a57a569a2dbcaf14758c4c54dd4de8c5895487397692aa7fe73f0461385a2c5d273e32e4e43179a508fe500ecedd09cfeaf728fd9ce04273e28e2
SSDEEP 96:lucVrPd2V/IVLIc+w0F0eVtQoyItUWkNH2LFDxVvf2OT7UBwWGpbU8agL:lucJuC+wYvttH9VvjsBapbz
TLSH
T1A3F13308839AD9B6EF105674E2EB1DE0BEB18E505D8BEFC6014097FD48FAF8E549142C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 f87cc3e527d23dd7b83b5b76b332703c547a700ce1583ca503be4c043b7cb8be
MD5 2d8d92a9d1ba591dab8326b65d8bd488
SHA1 ee5945ffbcbd7c4bc299cc0f1b1bd4548c571ad5
SHA512 3109adc766b6184cbadd450cc94cca82f8ae21b204160e40bd029bce69d7f6bf4ef3933079f76175590d1d3fbe1a2e5f72d39d8db2c04d63dcd23566246e9ce8
SSDEEP 96:8mrHVV/IVLrc+wWFKeSQiItLWkNM2MxWxmvICOk7UBwWGpbK8zl:8UPp+w0xtiXImvAVBapbf
TLSH
T17EE1650C839AD9B7EB101B74D1EB2DE4FAB25F505EDBAF81000193BE54FAF4A94D1428
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 25a98ffea11559ea30902ef60ad351d46725d13db1340069208643bc5edfff55
MD5 8df71380c627da4215a3e6380ee8a5b9
SHA1 9ea98a3e981260176da6de7881c7105f3ff00f7a
SHA512 62e585fefd398c1f6e6a81b790eb8f748f97f112611879620cd76748c84469e69e479d1164073c0776fbc4064e588fc204fd8a460271bbae1d8f5f62ddd237c4
SSDEEP 96:jIC+m2l2DRKPYE28k2FIVVp+W7+99d+7PxQBKgLeXfg7/ERZdM/:jm4DRA6GIvTBPeBKgcA/
TLSH
T14EF13014439AD97ADF101774E1EA1DE0BEB18E501F8BAFDA014097FD49FAF8C549242C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59166c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59166c.TMP
Size 3KB
SHA256 ae7adbfea2a8f1a06ad273615e3c40c860622a027e5f958caa1ace02553e13e6
MD5 dbbfdf9b13cd73f76a598ccc787d09b4
SHA1 fb9aff433c47125cdb73c6850cd653042fba1d37
SHA512 dd54f9635df53c14cf9eda2720b94dd4d7b959bfbd66db5b50898dd51e6c294d85d0254dae49db511ff6fa83a020d768b65bdeeed7951cea37630d85660a5c67
TLSH
T148719118126BC99AD7200331E4E33174FCF28FA90EDFFE8511855BBE19D0F6D612A048
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 edb87bdb118d16584e14923fbdf07061a5cac59065dbb28381adb498ce9437a7
MD5 f7c5afb60e583fe9156ca8c548a3664d
SHA1 9ce1ba7e39e2f823a87144d4e6dd3eb8d27f4ead
SHA512 4be309c06cde90a503004697b4e812a39ee760161391d5a5348c54e5ed36a2f49603a00832a021369463a4e8763d25d02ec060b87f877b398f9a195a11757def
SSDEEP 3:MsEllllkEthXllkl2zE/l6Lal:/M/xT02z7S
TLSH
T1724404057FC00C17D74411304053D3D01370D410071357C335530437DCD77C04C00014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 bb0ad83f9beaf2a9c3b7d546f36ce5fab2fc4738db5e44d9689a52a4c9cfa65d
MD5 bea745e448d29f2fbb3be58c0b18bf0d
SHA1 59676bcb46b8adacb69573ee626fc4b3d4e8d426
SHA512 2e9ef53cf87447f3400a1899519ba0adcb78ff50f455962df27b8ca8de8c13988e78eb098bb4aff73bd78bce3438c6595460add9bd008803684d719ff763c168
TLSH
T1CDE0268445C8C12ED454B8D7C369C308C3D03603AF88F94A172CC8A46102E41A38A7D4
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 7cba98c61dd92a27cf1eb8cb68d1e1bec19ea862f251103e8cb5ea9963620999
MD5 501fb3139c0845e7b64115238a3f210e
SHA1 129d5b37351ba75199fb091467ed2a15396f8dc3
SHA512 166fa6119058db95b6ed5140bcd4868d9e252a3b928137f27d83d5c53e57b107b8edfecf487d2c557f12e84a4ea0ff79f5e5bcaf56adbf9d421ea4dd90d397e2
SSDEEP 192:Ea3TpPP9IQRAtXUAlOPA149BCkmAWxrbr1:TjpPP9j4Uu8K4TCk0xfZ
TLSH
T124D23ADF2F347813EF0A1D7D216999B4ED37D218AF968D9C78044C240CF8A56046DAAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 c1c56c0d01e07e5c45ec97e5a3df5f40dc82c337a0450c59f2eeb4b3215a3d5e
MD5 6093d0fa0ad735b1c656dd1bb8b0595f
SHA1 3becfaef77723e61a74f1797f4763005d51b4db4
SHA512 033dddf6f1aaa610640e86dd04c584a42bf7b6bac9e644608c7861e09866d522d73b71df6280447062cdbcfb3da4e506832c63f6f8a749ef3ca9c8fe4dc5c7b0
SSDEEP 96:763Y7IU+bGz83uy3+u4tgp4DLjGQLBze9z3VeNljBHMsDEuspU0wbtqrOQpPfR4w:m3Y7f+G83uy3Ct7XBBKg5H7DXspU3iZ
TLSH
T11614305F5F353711CDBD917669E748B35D6CF03B8B1266CA686104B4CEF3A42A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 32KB
SHA256 6f512026ef9c2ba0ace018d5f4d3886773d76dd580d022d1a294c05359e84f83
MD5 a293d1163acab11ca131edfd042ed768
SHA1 0fb6a04083430416be972f5f1010804125a80cf2
SHA512 1809b74adca3a0b8a86f058d63511bbf629824729f541fa76634ec5e62b12872ec9df45b0975a1ee02400b9406f13933be966b68b0ba22a898b0f90019a87988
SSDEEP 768:JuCrRFo9+yhyyJvkDZya8JpRpgiXf2vOxahS77U7AZR53pjz:dFocyV2WxOypjz
TLSH
T1DAE27A61B5F9160AF27B5E7BA8B617964C7ABE862D04DC1E6860224D4C31F40CD73B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 16KB
SHA256 15968cdde6c0424d7c268db919a4119f9b717e6a24a1d98987f3db9da4eeb1e3
MD5 a23754cd29848f8296b5f211042a3884
SHA1 4eb19bcd8b997865d335ff91e96f54ed746159bf
SHA512 e74ab1475da04ce2faa1a8921ea395bc589b6dc836c3319709594f06d24059245c200c1a20e052ad8c0c1e6a70a1ec77c6a0c463a7aefecf637d5572a22acf79
SSDEEP 384:72aksI2Mb11VXwT8Y0UeBt47dSVoZm8E/LLz8oCJlbaDzIt:7VksU11RFYUwC//cJlbaDzIt
TLSH
T13D724C7B7AACA8587A9640D1B9857DB9886A543EFF71385DFCC46F0800D80F07EB1617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7ab8500d450c1fee96536b71a9b287986e2789cc70f30726f1c382a42d0d3d88
MD5 4989bca9997815e8b0fd9e3a89ea2e0e
SHA1 0fc4b0f9f6961070eafe799d49ded17970ca4215
SHA512 bd2638bfa03d0a04420d33c64ff555f859563baa476a5b381c46d6e4981eecdfee72fd4166285ccb76b2cfadc33b8d4685ba8777d14878774fddf9bf46b025f7
TLSH
T1B8E020A044CDC11D561421C7D22CA70CD3F03907DFC8BE191B34D844BC82108E785BD7
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 464150bb555a061e516920fe45b401f6b6c40006a7e6f318705d557cd94ba63b
MD5 0ad976d6960045d891a339baf2c4563e
SHA1 e10790d029b94210cb5bcb72898ab1a4b41ff92a
SHA512 b23f28baf7927de761f6bb07ad5c2026b9158f5a4e8f6a80b8df87242858b0f821d6a94f35a652ce946ce7e700c93aa0111aa75b295e4fef01a127d230867464
SSDEEP 192:DOWT/j/sVHADC4Z5MuPUB2uAn1fHv1ntIC2nFnVzZ1+RMn1:DOWT/j/sVHADC4Z5MuPUB2uAn1fHv1ng
TLSH
T116E1C8F3C7E9822ECA0252F4DA157F1FCE1D061643283D1A85D8AF5BA3E2970E141B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 7d29e443c45104b5dac420527e4ea5912a6081f6af5615c273cf025d5e381edf
MD5 941db6ccb7fc6e05f8cb03c1605674fb
SHA1 5dac6ad1108a9773f9ae826e696813fe4b309686
SHA512 3f149219b71c761b742803861226a3baf3cb46ba39647847f5f100b46f9147b560b766516c716de0558282d0f93ad3a401916dd547ddcc5af58285b9d582e6aa
SSDEEP 192:DOWT/j/sVHAqgvegQC4Z5MuPcuAn1fvN2nozMnyntwnIi017m+RnQn7lnYnKGbSU:DOWT/j/sVHAqgvegQC4Z5MuPcuAn1fvB
TLSH
T1ED32CBF387E9462FCA1192F4DA153F1FCE19061653683E1A85D4AF57A3E2970F180B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 2f65a4b8e0a406c6f6b75525dd81e3df62dd4d9743c16b560373556c785bef50
MD5 a682cc9acdd67965d969591caa0231e1
SHA1 6b795732cb6e1a28e879953132a377c79d4e04e3
SHA512 3ad8d7771dae1131b5b474d57cda82f8f0439e6d1f92282eda937bd22e608dabcb5bedfed50012f58845d2f1dd88b4c491bfc4580c75fdda6d07904a37618990
SSDEEP 384:DbVIkm7hTuNPn2eLOlvzV6C4Z5MuPcuAn1fvN2nozMnyntwnIi87m+RnQnJnYnK2:2k2qBB0RAkp
TLSH
T1DC62BCF787E9422ECA1192F4EA147F1FCE190A16436C3D1A85D4AF57A3F2970E181B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 e04a612d0f77e423a290a109602d755030332a2648c9fc47afa2fddce9628c9c
MD5 ddf4eaeb7d3ec7e03e4c2472766a7ead
SHA1 443ab33a62c87656694c67bc85be5a08a3135994
SHA512 98954d552485c2f6258d4c9bfcbecc71d7f686b58d68657bb2414427c5db906958d661c6980dc981434a6ef576a6518a3ac5e46da4e1e561f0fda53fcd2eadbe
TLSH
T131717CEB927FB86F502C5DBB1E057C065A7AA4334252B8F4CB67C56DB0855F70B1202A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 27393c112fcfa437a47c0fe5c074ab6d61c3ad2d86d63d308c9f8f158cf2866c
MD5 afc35fbb8f3ba27270a30c6cb3718298
SHA1 ddb794571540e55d3f81fae21869413f1b8b7546
SHA512 1ed652569c3bf294f9072c4829f7f0b1e55fd5e3e49d92429d9e949efcf6a50cc18dfd3d6e84f85aabedc3c9f4acb66268d8d479e3899c56377d8b5e7eaebe2d
TLSH
T1E4717DDB927FB86F502C5DAB1E057C06597AE4334252B8F4CB67C56DB0855F70B1202A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7807c0ace76f0e56fbf3e4cfa3e5617df505834fe998b07ea0efe5caaceba3d3
MD5 3ec19d2755369a96b8317651b0350174
SHA1 1aa15b5de8a5624626c44333db8b68b1df61a6f2
SHA512 e05fd35548a43c2ee5dc9c1db1ffff4d4be2fd04afaf157b0fe257bceb9838626b87829b5a67372b984804b4d319ea316610de83aae2ebdb9232225b9423d3db
SSDEEP 192:sxZ3RC1yM/jK1Ml8MkZ/fpsJ93IdpqwaHW6+WNrSg/Ywm+lgIgrJ:sxZ3gMZ/fpsJ9YaHbB/29
TLSH
T1C85209066B349977CDDBD208FA55BF53D6F5053292950E44AAFCDA1C04E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 26cd30472a3d3cb62630e30480c06b1e06c10439e563ac2ceeae325263472773
MD5 199490fc3661f1760d27dab812c76648
SHA1 af140d75737acaebf87998ba8965a19ec72ef55d
SHA512 ec5798d063f08b27e3cc055f50a5d9b56906852047ff59c3102ce3b109ad3e0ad98fd9189dbea0c977a77a8c02731861d238f8c2221389ca609495cdd943cd98
SSDEEP 192:sxZ3RC1yM/jK1Ml8dkZ/fpsyWpVFNfIdpowICHW6+WNFuIQkjn+GTCbXYIYT4uIY:sxZ3QrZ/fpsyWvFNQVHbFKWTmbXEV
TLSH
T1D762F8166634997BCDDBD208FA55BF53E7F9043292910E54AAFCDA1C01E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 41b634f245e3171a652322267d550d08e0ed7d12784f6576a309ab6b1d08745f
MD5 975476d4f3a9abc88066f2529444ec87
SHA1 de3ff2cdf05b6e329048b0790e52d9de3860f498
SHA512 3af70ee5db246de7b44c5aa20d06e93a581401cfad3ae784f7c3a5c12e66846cb01a9c3952056e02006a6bee31c4f37cc0cd39333c07c81b4511c7367bca259b
SSDEEP 384:sxZInstpOZ/fpsQWvWNuTMg0HbFKWuCZzmbX2lk:sqs6Z/fJYWNuTOHbFK3h
TLSH
T122820806A534597BCDEBD218F946BF63E6F8102396944E549AFCDD1C04F6BED220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4b2a1570720485de190437d1553e7f3754342fb55868b64df99f6fe32c77d4eb
MD5 00334c367e27683ca837d8691edc68f3
SHA1 77a48f4cae6284e79f2129cb8c3e02a7887ba521
SHA512 1988c1e1bef1708ff4309f44090c493dfd4e39a324c71545567008b70171a6fe0d435ed2cbdfb43a9cdc60b9d6d869eea581d508159953b5a08286d840c47dd8
SSDEEP 192:sxZ3RC1yM/jK1Ml8MkZ/fpsdN3IdpqwaHW6+WNrGTCbXYwxjMlgIg5XJ:sxZ3QMZ/fpsdNYaHbimbXT3X
TLSH
T1795209166A349977CCDBD208FA41BF53D6F5047292950E44AAFCDA1C05F6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 db5265600f8511851258aab55cf07d7e4ce0f734f9f43c2134e341a939e2b0db
MD5 9ea16fab1a265b92e4c541cd5c0db9c4
SHA1 705bf771a921ccd8f0510bb5eeda3fa499f48026
SHA512 e05c4edcc16a6e5243cef42074d21cfffa8b94092486f93103da9b7eb81d4718646d718806c4d83541a2535427b4e503075204834d270d15fe1429a6a0f8e14a
SSDEEP 384:sxZInAtpOZ/fpsQWvWNu3xEJgHbFKWzduTmbXHPk:sqA6Z/fJYWNu7HbFK0s
TLSH
T1B682F906A534597BCDE7D218FA46BF63E7F8006396944E449AFCDD1C04E6BED220391B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 7ae5d88566213cd679189f6907ef8843ac1b9fac1eede4b9172956dcc0721e36
MD5 568d45ec4dd783d25ef2b41d558f092d
SHA1 112efa38dcbeb20326e9965cd514217232759ab5
SHA512 9bf336c4ca5a188c493add3ce1d322709ddb8af1c4edff9286ce5acc58b656bdaca23a235f8df38dde18ed7b239b106eeed2440fe10124409440b836f529980a
SSDEEP 384:sxZIn2tVZ/fpsQWvWNumMiiHbdGPFxFmbX2MT:sq23Z/fJYWNumIHbdGAFT
TLSH
T186920806A534597BCDEBD228F942BF63E7F8102396844E54AAFCDD1C04E6BED2203817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 dabb3d9fe506124da9a225b86728a631e6672796333f42bb291dd3ec3ede1e6f
MD5 6f50e4ad8995e89ab41a1a7a5745d92f
SHA1 bbcfbf22cea0abccb997948d99fdfe59e68b2654
SHA512 1087770f1bc9ead5f5bcd1719c3f3167c98fd366ece5e450f55cb73b769ed6d2621dc8e6dc88914ce5b81c9dde5252421575f7afacb047d99b2a20c9f73749b2
SSDEEP 384:sxZInBtrZ/fpsQWvWNu3MiiHbFNPFxFmbXQk:sqB5Z/fJYWNu3IHbFNA1
TLSH
T1AF92F806A534597BCDEBD218F946BF63E7F8102396944E54AAFCDD1C04E6BED220381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7e2f534396f06bac3efcf5947050f530e9ea28b620c381e2bfd6cd098a8ee52a
MD5 40948ccfa08a6a6c7ce736eb9d5db60b
SHA1 35964e9804007af99db880ef06dfc0e0fcfac48f
SHA512 d384bd56e81541364ee33fb4893f1c7e7161d0f8354becb0fdfcfefa9369ce3616bd67c197844e78f014dd6ee47972e486904b3a91564aaf528f1fbb6f863a05
SSDEEP 768:Z64jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+durohRc8a3:Z64jeXmWvmKLEu1jacPLZQdl8f
TLSH
T110D20A3B284CCF7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 431915359c1b6fcaa360a4fa3cd048a03a3a4332cb3e4806a487ea00d136e1d8
MD5 27be0d7433a16699b1288e78d3f0ba33
SHA1 130a8f418d08943f96626c0c675df1ddf79867fa
SHA512 29a4e0ec0bd89600922effe4d606841317d285545e9ef98c10f21fe5e181f4fb6140165cb5c0cb929e9f21b225c15b4ee912536abb8104451a837777fad2777b
TLSH
T13A3160498E809C5FE4A844B305B3B8F8737089CC5721E7238C2C62323E1635A1A5B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 3KB
SHA256 be4babe45bcb04a2509f4f9c42459c40ff5f0f662064fb1271f1aa71125eca60
MD5 b4a0ebe4465025451fd14d4692d30d8b
SHA1 5dd360b132bfe38d94a62c8125d278f6ce8a762e
SHA512 f630f41745ca8161ba1e9fb3496a004f5c068d099405d15fc17d8db623a2297da375aa1a088329709d984708a145532e1174ff805f2ccfb811368041ce61d1c2
TLSH
T15D51D84E4D4A29AED9AC14B32CFA15943376ACEE4A85DE1B6A5DE1303CC33392E19115
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8195.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe5a8195.TMP
Size 1KB
SHA256 a14088106c8a644a163bc33585b98aae3b02947cc7f946f5a326b84e16373389
MD5 3e1f7130a4bae8322d4b5d5c6374f2d4
SHA1 91cca011239a7fdfa8a73de5c90acb9eadea1fd4
SHA512 75b61732eb4c79104ba45a9f63dd0776bb011a0fc644cbc347845705f8f7c175629d3ef1ca2226ea12d294f836e1c4eddd2c6b2e9a05ac56ec0227c293efa5df
TLSH
T17531464B8A948D1BE4D450770DA7B4BC733589408312B793987C6239AD21B9E1E5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3c00c727-a42d-4dda-8781-27462a00dc28\index-dir\the-real-index
Size 72B
SHA256 44506f3c0104914caee35af1cd0f07485591beffdb78f1752c5f490b7f2e5064
MD5 b5876d1d7d4e22925a689aea36bbaf1a
SHA1 25668bdc8979b92b76af771b36c2b2844dbde6c8
SHA512 44408359e166030c1ac4d65e3f85714134b9172f8a2dd3a0c4d4a14446f1ed048f2bb05114ddad438a7b2134216365b55e9bac80b9d1aac5745152836715a90a
TLSH
T10BA0022422D94072D115A6F8614211A42319EC15151947058DE00C65DD5965A862206C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3c00c727-a42d-4dda-8781-27462a00dc28\index-dir\the-real-index
Size 72B
SHA256 39ff03e1545f2cb6e3d913481ce79c82cea855b92fe51e1ddb64896ce065f23a
MD5 e618fdd62ed8d4a034afab9a917c2c57
SHA1 bd5ff9c03e8238eb69ce8ae2f994cd91750645e9
SHA512 17c25ec0d9ed653ddd7ddf193d76bb3ec5c0a5e1f961f41f362a4bccac0ec93da31983cab473b61b30284c68ef2f6d347f0408c54ea76cd021ecc97e18e9d15e
TLSH
T123A0022022961156C44107B16142A2A8B315BC150315574564E22C578DA92585D01144
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\623cd082b6202da0_0
Size 61KB
SHA256 a61b4416f0c819347c06bf146b036e459513b8cb999a45c89e545485e250bbed
MD5 63906c5657c7a7188c77e0552b8fbd23
SHA1 378334cbb442765f6483017b78601578213e51f2
SHA512 d3d17e6d3e0321e85df7b0bce5c4ee13793517e050b083ce0b9840ed3a09e4b1a55a93641e20526565210ed51bd912dcad67db442f50273450261f988d463d0c
SSDEEP 1536:VufSruBHKut3JWWOQ7Dt3/YdslHqty8l87E/Eb5HPwqpzGI/J:EWukgMgDtvYdIKBuh/J
TLSH
T15B534AA7B2226031C7AD21D5A49A7F00F12B17561904C9ECF0BD76953F18E8B56B3BF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 a2da2d117b6d430d6cba7f8f8beea1ee8b39a4b58fdd2d49d3cf2f7fc9731cc2
MD5 9f16b882a799ba3987b6e7e48fa21bdd
SHA1 c1535950e63d2b85b4b5eba6455d23cf1d573b20
SHA512 ddebcac45d1bc9f7dfcefeddf0b50b3c7a4f330d04e17cf4e4b37527cd010178dc9be04bcdec6d15a0b57796723fe17175660613e0f845cc9966be03a04db602
TLSH
T1BDA00214EF918046C05721B5595303455320CCB81128130740A1014CCC506824D4500C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 c8cb6e2686c2445e597cabec02c2e75d8e05baed2846d127e4a26723bd37dbb7
MD5 0a43a4c5690351ca21a6e89722c53c2a
SHA1 a5e31b94762270e65ac35f8b4d4e4c49b33e713d
SHA512 58dcdfa3917d35fae6ee9a4946a6997322949fd46fd40a4b051999f969c75dff2f98a6dad585f7caf4b0f69c2b34cb0c4502add60f1a043bd6f3edee58be2c59
TLSH
T1F6A0021B83D0401FF04292B025BA0186A262CA18C30117056190D444CD645478E6100C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f3fbe3b-9767-41ca-a6c8-17702821b69c\index-dir\the-real-index
Size 72B
SHA256 83cd94a43ac5e7d08a5f6254b8eb26123594e096f410964b9afd72683d1e56db
MD5 56b781541ab023a6cd2536cfc87ada5f
SHA1 d7fb4987610726a6f44d0660934bdbf97253b9a1
SHA512 3b72c05e2f17d8995e77b99218c33163a4492a8c6c88169599ec3eac09505111ec9e87e1ef68bbd43ed271441829642a679dc3f3b01b8584fa8cf92f0263a163
TLSH
T1C3A0025502D0203DC0752BB1114741B126205C692605031341D50097ECF425957991C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f3fbe3b-9767-41ca-a6c8-17702821b69c\index-dir\the-real-index
Size 72B
SHA256 b31b847b8d8d56cd7deb0da2338193d37d395333aeae2bc1a419ee9439f15a03
MD5 c3ec674009d2664ec3f8908770eecb74
SHA1 b3163f972fe015cc062cfd53a30fcdbf1ef3cdc9
SHA512 92b39b29caa5c8de90ea122c66913b118c817a6719ba1741368ee447c013ef3b2c3453982f5820c3d4d0a79c672a37d6b32d1e3a0c663fbf668ffc73a37100b8
TLSH
T1CBA002114154D035D4A267F4105B8580225048A4162A422186D1B1FA9D982E57679419
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b0df7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f3fbe3b-9767-41ca-a6c8-17702821b69c\index-dir\the-real-index~RFe5b0df7.TMP
Size 48B
SHA256 7a18e01d490449247d9041cd186d24d6d3e47b22f32103c1171743d44f6d5ecd
MD5 48f68d2b1c8323a463bff59cf3ab282a
SHA1 819a5546f2221fe4e7a7ded77c30ef49b7e2ab30
SHA512 1e11c1aea2989f5e5e480a6d532d57902bc307edc520ce1b19473898b2e57650244cde4ab28382303ad6d638eeddab377af8aec652de75743bc4aa9cc79b6690
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 a98cd1331347cf4b487a9da2a7a9d99c2d442ca0de46106b09762d6276d22907
MD5 454c750c60af982841831702949bc0c4
SHA1 77d2d201c68f52e23947eff7f352a850718fdc77
SHA512 95796b2b6a99a6e8b7f7e0c0c2991d8179327ed538a046c4a6050a6c4b2028b557febed41c22ee9bb5ffde6e95a25bd1abfa5eb28d258c757b90c7ae618f0efd
TLSH
T1B4F027F66EFB2E20BCAF83D5287244B80149B46DC561ECAF2416A6E7D1B1228106AC61
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 3340e62dac88a79e1b35cb972b15811fdbf474948b7c140ac22fbf9642e81e70
MD5 dced5442c75d34cc19d2f0782eb605a3
SHA1 c496b4d05791df0c5be1e5651540cc7610a1ebd9
SHA512 05e53df475027a4caa64305c002ebcf00e6d22ecd08f39731ddf472a90785783781540ef7684876820f9ae23317d958c6680c41b995edc90934c80310b963a72
TLSH
T101F027F62EFB2E20BCAF82D6287244A80019BC69C452ED5F2412B6E7D1B1328105DC61
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 745ac4883f22e3f5cb109f3b061903e3889fa0d17180aa37ff263abab05a0ac3
MD5 dc15ab3d47385f59ff838e80727cbeaf
SHA1 74d8243dcdf1abcc2aab94a5c04d1d1d0e4984a5
SHA512 6840d828340285a5029e3f1824f3da172e71787f026591baad7e24cba6d5345b894ac23cde35471cd8eaa270bc586f1fa9bb6771177887e0395218501740b2be
TLSH
T14DF02EF62DFB2D20BCBF83D5247244740105B469C461ED6F1412A5E7D2B12181059C61
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 9736acc9eb8b0be863f7cd003ff210bd0f8c27eba93092025c660545116a7fe7
MD5 0874a2e60c73ecc1be4797e5a5118b0e
SHA1 9ccc65c71a305bf9aab1afe76f05e90585b688de
SHA512 cbf4b16adf165e7f1c48e4a809b329c7b973a8b0fc656ae3993b217fcfbf703fdf2944753d63a5ef5eb7971063382f1a6bc4920770beec5c435c546f7537cf49
TLSH
T15FE0DF9405C8D1B9705620C75224C308C2EC7E87DFCCB90A2F24CC896657A04F997694
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 c5e80645c211f3b79752eb8b7f5cd09bd74213260d15ea6ba505335e6ca6cf5f
MD5 647b24496ba9c0f76de9dcd6ea80ab5d
SHA1 7697fd23bbcbd692ea2b3ec224ebdc546ccaac26
SHA512 91d6a6b741088937d7bf4b41dc3185f71164e694ccdb9e10c62d3f09f1b9158fa1fdd5f7012b1d2e39bcab6a159e263615c91748cd09c07d018951ac7d209563
TLSH
T10EA00236C95C81DAD0104670906112C4A2108CDC6629236145AF5364996C14045DA518
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ad6ca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ad6ca.TMP
Size 48B
SHA256 55a89cd17e56249aba70772df2e71b3a3997caa4a3fda80c9dfa3be0b3ab2c9b
MD5 406ed0a9c19389661fc49bc478718595
SHA1 caf7e7a2576c3d5c4bc49310ede17dbdfbf94a9d
SHA512 4d1fd31dc5f8574945d8508e9caf6f81cc0dd588f26fd7e7a614b0aafe09927e71052c6b54f5a7a52ab79c22f8f49b7d3c84141742fd462445c6e5e221df9256
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 3KB
SHA256 bae0eaf15f1be4261fd4db98a258bbd2dbccaa92dd884468e8c6f997812dcab8
MD5 3be8b8573c8d76ac85c5b6dca6e8fb20
SHA1 c7b123d6b487ad359c0ae966dac1d5be6d25f1b6
SHA512 d5d6d3fd6d2d4fadce1ddea77529df615f87ed0d765b1a265e7951b126cb5ddd54b5938c29f83309c0ede3034b9099553be2b3878b8752e8ea3946e2bf6d2ae3
TLSH
T1F97101EB594CB020FD7D85F1A8B3755CD13261853B58895B4F570F8E0833723966682F
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 319B
SHA256 eb8de44233a0f6f86b242f540e0464149229208c7ecfc081c4dfe821a4baf630
MD5 8393fad536db8dbe4d00117ffcb8a34f
SHA1 89fab599edfb80796dfbcc9c5c19cb6279ca063c
SHA512 d38eef3ac97a101f0f5206942b69c4fd8240fc4b2bd07cb4541d98cfd1134579bc088e9a3fdd21c2e9cb4fe069f7cfa23a10ef2305b5e1ef1d2de0f1cc7432e9
TLSH
T1A9E026A446C9D129626175DB4239930CC3E03607EF88FD4A1730C4446A02905BBC66E6
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13430028828154278

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13430028828154278
Size 5KB
SHA256 b2cd4681dfee1ec127220387b2d2eba89272543e1ed9f2be12ea4bee771b6d6f
MD5 da97c576cca0a5e2386fdf8c75f7abef
SHA1 c3ced5c187c8977635d00e6bba085b1c83cc4cc8
SHA512 8a3154e9b54575e86e53957289d972521a2c83a9bcfbbc8fb3a28813c529ddc51a36955bee39e6238b57acd61ffdab7b93a51ce822bf727188f3ebfd9dcdad32
SSDEEP 48:3uQY4wDaU665uDhmdbQwDBTdfK96R1ajOOk7e3e7bSdleHe7/C8eDIOlsT:32aUP5uDYV9K0R16OOc+7eDIOlsT
TLSH
T15CB10063AEE4053FE67E8274E9F911F57A707A0135E08E0F486186080C73713A739EDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 271188a12a2142cf7ace991312ac8974d503c5c6e73e191781fd667f6d1c4837
MD5 8ef6f47ef07bd514e8130dd1e6e6e208
SHA1 382b32899e12ab0443b385869aaa4829f6531bc6
SHA512 66d08141e592153d45a1c134b5708713d8425537ea92f3bac8ae2c98eddc043b9bcef708616997bbd70f153f17207106de7f14a2015afa9ce0ead973db084fb0
TLSH
T190B0110A08822E32C80083B220C200CC323288A03303820302E82088ACA322AE08228A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 9601dab36027b40ffb08c6e89c8edfa6f7b24dfa55be2870da5e492c38b74eeb
MD5 2412dcdfd9ba6a49c8f689d1d6a52fe7
SHA1 00ff9ea1932dd0e4485a2242a90311cfc050a47d
SHA512 7e084cab8032b3f7de8b349b85ac6b2f85ee6f7fcda7819a61a5810f2799158f1a6535326ddf121660da3809f70daa4e6dff73fc89c55a0be86bc1d3d18c6af1
TLSH
T140B0120600903E70DC0102F54AC4C081238144301305C60314F644405823C47F1C6301
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 3532b0baee18907f224ad7cef2048ffb51d2b29b5f52868a9d7839e75c36525b
MD5 db4d61de85cbe3dd440bf0270b96d959
SHA1 383a3e9d97358c9b03aaf4212253ea4c7911bec1
SHA512 5890d876f9de97629ce44aa27a3076fd1c62e961625d98f3500de1aefeabaa2845edfa3dc821d1686161fe7720271c48742cbf852601b4a71bb4cf761d9de50a
SSDEEP 48:T31OIy4m1b3fbULv8qHByQrBXIBPMFMOIirY7ZqBz+:TALVKyQrBikps7ZL
TLSH
T1FC1363EF2D047143D2A986B1E595AE6F4D3B210D8FC3A8D995B01AB30CD1829291B4BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 172B
SHA256 447c7870a62293ba60eebc5f28d13bfb052c065891e42be976ec326631afb931
MD5 ac73603053b84a09e7e667e79f2a6a1f
SHA1 ee00f0c61236cbed2657236b4004e5b76abca393
SHA512 340fb3288a6ce2a904f658140bf9839a81092273292a2fbb5a791470230ed3fc5ea53672a0add1ce746ab6b2ec864e6031830472889c04941c790910c51a8469
TLSH
T124C08C8877207208E888053C05C027C45A00F022186414B39CB40B108E47A222EEACC0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 35b956aa42fd917de256023731b2237cd08d8d07a06b364e127979497fca00a3
MD5 b847e953af0a2d39c6b4609fe10b9ed1
SHA1 b4338bd65f2f2bab3af17528def24cf28e06aa17
SHA512 609f2b8d178f490490873c149fa81f44f24f6924f5f5f584969ff22afc014678c3f3899f485ca02b879301fa4320bcac72d1608f97710f2fe761835abb373b46
TLSH
T144E0D86415C9C72B718620CB9219D34CC2E37903DFC8A92D2F2CD8847607340F24B750
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 fe9e956351f6ea7948a38255ab835fdb51b1ebb7faa1bfd0b62a5bde98998850
MD5 aa3a486d9f74c98497663a1446724e99
SHA1 39bbbd25f05205371c215256d93786188cefccc1
SHA512 ac0d00aefc12ed18f676587edbe2553daecccb37db50cde37aabe818d6f79b138047414798546cba9f27224c66f58e10550f3d4f95bb36cf4579d8f77d882be3
TLSH
T1B3E020B495C4CA39540560CB9265975D82FC7E479FC4B94D5728C8847D02310F36B690
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 94fc0b0f7e8038e455a806158ac18a240577b152a307e9bd29a1f60607ef9c9b
MD5 4ea737a2c2ebc775e3a6ea3a7de31922
SHA1 9160d6c4bba3d391ca46d1b248106d97cf47f91c
SHA512 2b3488b57f00d772a19fbc35089356a8e19902c439ed392444b074de6ae8c6cb978f24ffc7f6d6655962e1551d073f0e69e38ebab6afeea4cfdef0ef90e99c16
SSDEEP 24:KdRtfRoR7RSaR3dRfR7Rz4RLRv+RCIjRnRzKiRchaRJRz1ER1RjSmRdMR48R7RQ2:K88I7KZiEzyNdIpKGkcOjIlKcUojy1
TLSH
T174910E6672BE53122C3F680CDB50A667064272B33518A42B7BE804B34E67F284DBDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 136KB
SHA256 a2d65d4dbde8fd645825abdc695003df7f560a54b2454822f0d3f5d42af47dc2
MD5 cc858f5c049d60c6d1342d392149e3c8
SHA1 4ac2d5f308c0556c99a00a7974bf5f6f7ab6eb1a
SHA512 29869e475161847e33ed3c39d852ebc1d6a8ff8dd075baaf5ba09fb8e1d03d530c7b4e129dbc7013a9ad48a03044e253f855d8f4831f25b86fd40e184932eae1
SSDEEP 1536:kzXr/g72qpItL5t3isLYD/v5AODQzobrOLU1f2VFxM:b1I1D1UAa1iVTM
TLSH
T172D351FB6D0D92A6CDCD9174D81BEE4940731361C624D8E8AA3C08C73B7960AFD795CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 cfa82ddb6d1a048f360c0cf7a8b1d900839321e0b432b37567c0828ba26fc161
MD5 2a7b72029492ca53f69d209cd17a97f2
SHA1 fe49281cee4554a16ac8bedb8fc751fc7a4c6a92
SHA512 556c4af38840b225f0ee8551a9168064276dd0f1d4998c877e126060a5fb31ee8006c5497fa52a83e3214329848f0e67694a7357f697d69dbb5709ca518d1c07
SSDEEP 192:oUQDxIIIEbkMIMevYcY/oOO6Asxl9HNCs+b2:oUQDxIIIEbkMIMqBqOTsTGs
TLSH
T12642731A12066B7BC2DE5F7A935285446FD888C24172212E71736CAF8DF3F9782C12F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 e390a9d8799e476665c5214b3f9260d770cc9875606d53a1a30e6c8e9bca5a8a
MD5 1519a4de52bb5b4e16371bb6e4987acc
SHA1 3e27cf7af06e2547caa252dbf4ba8b13a7e9eb5e
SHA512 ad1560771f25229dc00b955c5098ae8042e7bd4fb7c5877a385e0131d204ca1a5d7a7bf8aac100f4f782d5fc796ab1e1dc84873d440009800f86116f7cd94c7c
TLSH
T1B6E02690E8C8C16EE4D561C751A5C308C3C83B03FF88E90E1F30C4A9A407900BA8A6D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 4ec885853c83bb78428d875974fef3c671bed9ad79a5ee5e13035972349d8d94
MD5 87cac0bd00efb938d020aa0ea5c0c47e
SHA1 2ebce39894217a0e8f525db1c58158962f14dccb
SHA512 55aa495d5d6c0a789ad5177d7576a232da48907086aa8bd62493a56188de2c5d44e18f4b0aca168de5ae623b3d2d51ea18f0509fb3c0cc4049c4e66dea8e6a00
TLSH
T17E21F592F334C245D54985BB147A6B161338D8069FFCEC1F547A24A43EB2F450E8B6EA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 3c72390b0ea8134456873dc41da3d624cba7f67270ab3e18cd5b1948b3290a3e
MD5 3deaf2c22b8e707ef078853ae9f1c41c
SHA1 520fde0651083417d50ee1d908762ae805d6f3b4
SHA512 e299e0db7e69203dda4c66159fbc4955ff47bfcf0ac69b87f4aa164806af7fa5b778b5d4f40a86f86e9f263ed8aab6ff9bf4aa6f80245a593b6d5f01058d23f0
TLSH
T1AFE026D0A8C8C1AF909160C34165C388C3D53A03FF88EE0E1F31CCACAD03982BA8E6D1
MD5 SHA1 SHA512 TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.19\data.txt
Size 150KB
SHA256 e589f794c343744314bb92dc03cb87b0aabe1a0e4df61bd77327638125d6e1a3
MD5 67a2e4e53750b6b992e203c4e98608bd
SHA1 f84203baa2f63c3dd4e3e6378e9d74faaa27a35b
SHA512 86c77bc809e6e9d80b1e1c16ad97f6a3e9fad6b010f322e0e1146c8cccbb9c0f71146a87e1e6094034c0adb5c2e5f9229a90551bea00b9df975a4a6c05246a6c
SSDEEP 3072:0PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEEn1dm//OKXXJ1RxGfI:YX1aI5aZoKzMJ07NC1d81xGg
TLSH
T11BE3F210CAC41FECDEA4262C60FE0F1D6790C78D883B6A89D7A7FE4A5F9750895274C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599551.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599551.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 be881108d25fdc0f0705986f389668fe09d879bce3012773be15dfcf913348e9
MD5 6d2c28750df4c4642f7c7927e733ae01
SHA1 d7232f828face621c96140275f70125348d6428e
SHA512 747cfd8b573fa7b70be873c85387b8d692395af00dcca0c57ca562929fcefc26686bb3e9b1aae4d0662afc7e6ddf635340ec82a4b0abb1ddb059872cf1308709
SSDEEP 3:MsEllllkEthXllkl2zE/lnVbLKt:/M/xT02zybLu
TLSH
T1454404057FC00C3FC54151315053F3D03370D5500713574334D10437DCD57404C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 7d8815b90b46b1c7a911c0095788308d7222e05f46322ba68eae9ba31302615e
MD5 965940c93c46a34bfc57eaacdb7f51d6
SHA1 2404f13657cd7eb60e35dea4c5aa3ef33eac1899
SHA512 c80c9655229f957f36750aa6d1ec7aabd7225cd32ca0fd3a991304e1f9ffc19d6876b346bb9f36433c93e12c78fa4333cfe57458c67f004275a313e77123bfcc
SSDEEP 3:MsEllllkEthXllkl2zE/ll4:/M/xT02zr
TLSH
T1334404047FC0141FC54071344151D7D01374DC10071357C334550437DCF5F405C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 aad6b0803a74f4606ba3710b2e9bde10be0d289ee53ae768258a2fdd109a11a2
MD5 9660b45c45a37302ecc8b7cc27f67936
SHA1 b2a4201ed498616f303ba9128c075db1ee391c87
SHA512 9ef14ee24feb78c008ef3396f83b1b4563215b2d24553184a68fd23c406e4ed213c30e2f47f2d48c62addf80205e996db23afb822d978b4da4b00a8b246c454c
SSDEEP 384:wZcIhsNBetIzTtJ5wduf+98RUlXU+2mYFPnTKwBODNZOCyKDQ:Oh525wgqlUlmGPnewBKZOxj
TLSH
T1D4927E36983CAC779EE2F644F44735138EF84163E6D92B94E6ED6F1D00996AC130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 dad4d85731ffbf87e7b216462cb3e43b27a2f14bf9637df80af505c3ad1526e3
MD5 1e4caf5e3a86e2c53fcafa5e1a1d89c3
SHA1 303d7488fdfc3bdc84cd72d58f0dcfc858262c1e
SHA512 5efa20271a56ecc965d05dfbc5fc765aa44d62d59bc3904bc3ab19fd175b7342f7189bf19ca33f3ee3207accbb9f523e0f600781f4ee59a7dc033e91a457d728
SSDEEP 768:FzFR73bwgkQ7+ofwJIxqmyr29kD/ewBKZOxL:t735GFD/evZoL
TLSH
T198F2A1F598D799B7D9AE87C3A73DAD025ABCC163B0885498B7E86D1CDC461BFC302811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 d7774421f60a623dcb794f3af2d97bba5f8d4470e9684230b10285884dcc16d9
MD5 f11bcd8a7b2057bb046fe77606b0c525
SHA1 5fdeb1e2bf3996f286d6e55fc5bb5c2ef8a04ddd
SHA512 005d85d22987135c4265c5c515184d2aaf49fd79d9dd7f01c3f636f03f89e9a075b3438fe87c8b5ea70ba4eb64124d8a1c41d94c91a0751feb7339c52b64ce8d
SSDEEP 768:0yFJGYwgbL7+oYwgqlUlm7WSdNqttnewBKZOxj:PG/pob4ttnevZoj
TLSH
T130F29FF284D78CB6C89C97C7A37DAC0259BCC133B5995558B3E86A2CEC5A4BFC306850
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f7dd9e794ae78ecccbf04d50be19ac6c394872004a7cc21de57b42ca333e3f98
MD5 f66b2a8ca69ea4858f5688695e3f1da5
SHA1 365ad6d57f51a64bfdcbf3ef42b6867a791fc5a9
SHA512 4df22f7e97467441d1401f0f5a358912d97acad12ea5e9e84977f92bb51ca51a381f731648a85339fd288c4aaea3878a2bdab6ded1eeac1d47029ea4b52b381d
SSDEEP 384:yl3iFiZcI2zsNT8TUNTUlIlbtIzTtJ7+ofwduf+98RUlXU+2m+FPnTKwBODNZOCK:0yFQG+wgb27+ofwgqlUlmwPnewBKZOxj
TLSH
T190D218F248EB9836DAAD9B43E77E2D028EFCC163B5956650B3985A1CCC951BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b2337008f1baac34bfd6f5b1eadda08d0d7e63facf50f7a130245b7be27bd93b
MD5 d3289bcf60ef6ab74a6840681a9ef18b
SHA1 4315d4178cc0d0c244599252fb9e0f50f06ddd96
SHA512 3cbeeb2726468c28724352feb67cbd19dda649689c80bf096c31967fa7a45975fb0a1c57efa1c979d21918082f979c449047fa08c41717acae435cdb5e5abc5b
SSDEEP 768:FXFR73DwgkQ7+oVwJIxqlUlmu2aHc9ByynewBKZOxL:973jpoE6yynevZoL
TLSH
T155036EF584D69DB6D89D97C7A73DAD0269BCC123B4885498B7F8692DEC4B0BFC302811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4d8c06baa08cbd3f969ee0b92c9610f912b95ec8a7e97907474ced5354fe06e5
MD5 0b0203f2d6a91b61c8c68540f8257073
SHA1 239ad7cdbc4d1e0483c4ca288c5770631dd431e5
SHA512 805a63a65a0b157e5a7dd37ac223c4d0b114804c6698c9c0a8c4bd97e75e0fcd0733a6d611eef4b6dea92f657c58e81138e7755e8fbd5444e4c229d0384965d1
SSDEEP 192:EONu6hZ0QmiUyBBpc/+jVnjzorRUY5wOZdzU6:EONu6o8pu+98RUn2lU6
TLSH
T1AC02EB35A8786C778EE2AE45F48727235FE5112BE9A56F84D6E81F1D00C779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 42e5d2972031a552dd20313ab3b359bf83fa8f0993264d2853a5196d904e6e2f
MD5 d2e0e00792dcd6e5d1391a11f12b002a
SHA1 7528ad386e96a287b5f003bfd185884617fe89b3
SHA512 f57e263661c58a0bb5fe0c9c0e335460c583ce01ae13f8caa6057b64789acfae25cde4076d9a367c9946961aea5b70502cf5ba1e0a2a084a046cccd591b0530d
SSDEEP 192:dON86hZ0QmiUyTMBjc/+jVnjzorRUlXU+2mn5cOqyqfU6:dON86os6ju+98RUlXU+2mK9PU6
TLSH
T1D1120D36A578AC675DD1A691F08732139EE95217DADA7F90D5EC2F1C00DF6AC230AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 5400dde1bca83c658be43c58822a99054e55a9c2d6e2ee1f4be6a676eba4c21c
MD5 c6aa92c482a573c90629f9301eff71d6
SHA1 904e611e0795a9225c265d706c2da6bdfb92b00d
SHA512 512cab06e407afc86552bddddebdea8c9381796c872ebad00224787b45c77e12746286a4781fe53be4c68091b4a54b8998ae50a953644f7637d1e60005408af9
SSDEEP 768:FyFH+Dwgkt7+oKwgqlUlmhIpnewBKZOxL:a+5poqpnevZoL
TLSH
T1D8D238F648EB9876D99D9707B77E2E029EFCC063B4856A50B3E85A0DCC411BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 161ffde735c4875ada3b892ddbfe1a5fb90f10bc82c2e51f8efd0aaf2b1a65f3
MD5 7d911c1b1dd90fa40021fa86da613bab
SHA1 9de77af2396280b6d8c23aec4ecf85bc4c6f54f2
SHA512 218034c7e427fdbcdc8f21940d63477702c409817ad5e1f7a671fa7f98844b8545f8026a0f8a601b3726b54e92825bba6e389fba20357a20e73928f2d9cab03b
SSDEEP 384:EZcIhsNBbtIzTtJ/wduf+98RUlXU+2mYFPnTKwBODNZOCyKDQ:iha2/wgqlUlmGPnewBKZOxj
TLSH
T152927E359838AC779EE2F544F48735138EF84163E6D92B94E6FD6F1D00996AC130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 9bf90dbb792e8580b84b83100b7a4e88a656ade2e9b07f7aa4e82d7cff41a53b
MD5 5ec4c7d1dc52bf871b5e97b13a514df8
SHA1 116753916922e46e0b3cc84a5508afaa7abbedbb
SHA512 b79e57c72354479fbb25efa5a97dea898a273f2cb9f025394cb21d45dd5b9860d6e347126c11ee64f1aad5970c611939f66954cf1969f4424267171c8399db41
SSDEEP 768:FXFH73DwgkN7+oJwJ9xqlUlmuIpnewBKZOxL:r73hpoLpnevZoL
TLSH
T11CE2B3F598D79936D89E9383A77E2E429EFCC163B4885994B7D85E0CCC421BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e6b3ca289f458c3f6c8443af8d6f86bc3503d77a9d04238b942925e031081c69
MD5 b7397311eee6bba90ee04851173f512d
SHA1 f2a62c709c8b884f98642b0441f06afb4705b839
SHA512 f1f3d31e92634056252995b9e2efd0e577cd09113dc819e8192f3cc8ce9280b8b51290920df507b85248dea8ae19117469b0f53d264a7968233513842d4d00be
SSDEEP 768:0yFJGYwgb47+oYwgqlUlm7WSdNqttnewBKZOxj:PG6pob4ttnevZoj
TLSH
T155F29FF284D78CB6C89C97C7A37DAC0259BCC133B5995558B3E86A2CEC5A4BFC306850
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 13a25d062e03990be74f9fa0337fc546e6085f32b3287064cd8e26f155130c1f
MD5 18a44c770dc0dc352db2767d560a6aab
SHA1 29180cd9aef95211be6285a1d919b60bfeefefc3
SHA512 ffa28fe2bed030bca20724e7b8a56b18a9e34dcbdd3fd2ea7488196a3daeae04d913ef10ca0cbba378d14f62ab4683d372cb0dcf48448da8091aa16367138471
SSDEEP 12:TLyeSjPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isZQQtyd32qzQdSzUH:TLyT5UOl0afDdWec9sJRPZB5fc
TLSH
T1A992AC276D252033E8DA4B3AB98349D10EBC12AEC9A7B844DDD049620DA1BC1A2991FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7db7d08a556aa4430e0b1ebc4bd68016d10fb7210c1d93947331f6353fd35dce
MD5 ba43c522a062cfc4e27a1fa0de9dc6c2
SHA1 f8302310a06d390045dde6603ba5b4ddf0b360c7
SHA512 a38262d0b5a3ccf58a0b13ff3c5aa6ea0a213dc31747f56243610ad3ee33a9bedaa0e5249f1a78c2b31a5a111ac068af51dd5b5fa6ad49b0169582240d622a84
TLSH
T1DBE00203570042EFC028033050E356203BF6C0A506B2870A891801642D133211D74F84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5e69b04db3b1a714cabbc45726f4653b9aea1635d1448a5483dd6bb82afe0038
MD5 3888ba59ea9cb22ee3eae2eae08a1114
SHA1 54b36e7d2b83faf25f227112ed5d202706501eab
SHA512 094a797df88cee20f59e1e1c2033ea6c80576b849792afe0629ac986820a3fd48970517d4cb3b5cb9ff78481a8ff9062d1c6c28c2512d1b94fe99dea844c3d4a
TLSH
T1F8E002029600428BC014033094E356103BB5C0950652470A851401643D113211D64540
MD5 SHA1 SHA512 TLSH

Submit Download

safety_tips.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
Size 163KB
SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
MD5 bd6846ffa7f4cf897b5323e4a5dcd551
SHA1 a6596cdc8de199492791faa39ce6096cf39295cd
SHA512 aa19b278f7211ffaf16b14b59d509ce6b80708e2bb5af87d98848747de4cba13b6626135dd3ec7aabd51b4c2cfb46ed96800a520d2dae8af8105054b6cd40e0b
SSDEEP 3072:K1W97njdmeMAYV2ig7ARGHNxmfltItcGJ97WgbT:K1WVZyArBmbI+IfX
TLSH
T1F7F33B49F85703A06F1780C98FAD62972504B2F47395CDDFB3BFB6A5AD40C9B10990BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
Size 3KB
SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
MD5 17c10dbe88d84b9309e6d151923ce116
SHA1 9ad2553c061ddcc07e6f66ce4f9e30290c056bdf
SHA512 ad8ed3797941c9cad21ae2af03b77ce06a23931d9c059fe880935e2b07c08f85fc628e39873fb352c07714b4e44328799b264f4adb3513975add4e6b67e4a63c
TLSH
T1895130C109286CC63CD599E71D55BA08B61B0DE846F9C3C2CC7E80894F4548362BADFD
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 4a7d5ca3c13fed50d9f13258d36b169297286411c04886749f2fd18ba43ac508
MD5 9ce50ffc63876acbdb2813c68561992c
SHA1 490b7e9d7f81c86820261910c5aeff26efc8190f
SHA512 474152024b95b742c0264e3687419256087a091149e8c4092d73f4a93bdb60069a6ff751403d787bd95520605bffaec3a6bbf64612aa5aaaf4b0af3b63b01088
SSDEEP 3:MsEllllkEthXllkl2zE/lBL+/:/M/xT02zd
TLSH
T1B54404047FC00417C50011304051F3D0D370D5100753D74374570437DCD57444C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.7.29.1\typosquatting_list.pb
Size 927KB
SHA256 8da21018e6a6063f029ab8f81ef3de28adbd1740594d43934a231e9bc8458496
MD5 21617bc586960af1751aee4ef90d7b7e
SHA1 8e44d591d02917d5470a382ba5ecb31d03f0cec3
SHA512 75afeab96c768f0647940e940d0e842b2ecd422628a9c0adae06442dc6a27020c85ab03580e6f56382cc2dba3c6cca1f3b8b3e42194f5d27c211075a1faffb27
SSDEEP 12288:a6q8A6KIEJiCG5sskil3XYXHm+nQBfjvG605F0:jGskil3XYXHmyQT
TLSH
T1B215B5B9DFC00194DBB8112D20BE71D8181412A540E9EFEAFE7C855F2BC29C977E85E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

well_known_domains.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
Size 572KB
SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
MD5 f5f5b37fd514776f455864502c852773
SHA1 8d5ed434173fd77feb33cb6cb0fad5e2388d97c6
SHA512 b0931f1cae171190e6ec8880f4d560cc7b3d5bffe1db11525bd133eaf51e2e0b3c920ea194d6c7577f95e7b4b4380f7845c82eb2898ad1f5c35d4550f93a14b6
SSDEEP 6144:XbBXgDO9CyiiKPFv3GPkDNiTHoIDiXkCBIvzVXCfwX5pWr+W1gUe3h576:XbBQDwi5FvGPkDNirYBIvzVXCoXWiWr
TLSH
T130C49E02B7D846A8D07AD0748A574642EA76BC950F74A6DF02E0B27D2F77BE45B3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

ranked_dicts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 b39f9f1d1be5d89b97c4aa7aeff11ece6fae65ed9b99f7505123d6a9cbc7f65f
MD5 67d02598e36336f52a4ea32100059fb0
SHA1 de12df25f897ef7000bd8cf7491fc839a339db36
SHA512 1b69be4c8f87920bce25ee491a51c4b94141ee0713118259e78317cbdad8f3b25299201dc5bd1cbde66c7799992a9518774382d5b53c526520bc2096d05ce504
TLSH
T10DD02E80593E0EC1F7A9062FE80A0AED80CA0902B0891869889FF869B4BF0863019C6C
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 ad5d3035a1eaad7a8307261b69bd7a46d0aaa2df9844c8dabf508d149eec43f7
MD5 4f0833f106d6bc5b7169d16679fa95c2
SHA1 3e2a5384eca5b907ac37ebae69a9112c68365e21
SHA512 6c48e934f2b4fc981556d50cfc2eeadcceb770f4fb5e31fec9b5ba7481e01769ecf5f164d0f2017457583d0233b5ffb59dc028105e56ab657450308974d9c3fd
TLSH
T1B9011ED11C6A1EC6E67E0EAF604B2AED84C89627F2E430B91C9AF92495BD45D240187E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 f366a0b3ba2703a6e652c652346499688800d9a236744e8809c820ae2a33f9a5
MD5 3987c253d6920d94a5132b1bbb4b65be
SHA1 09630f3dd7c60e97cda76fd2b430312a5ef892f9
SHA512 e9b2da2dee88dfdfa27f50e4d8df9945961050d1252e38e29e0784e14dc45f0f712b65ca3bc6145ff24dc95ffd2bfb6c61bf79930ecf8a0866ce0f1347091893
TLSH
T1C21112D1182A1EC2D17D0EAFB4873AED80DCD216F1D030791899FD14967D55D111187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 aeafbf741a31779df28e66924d9483ca813c7448270edb60610dbf755e2c9459
MD5 89b5c9311980e57ae2cabf4b0f33c540
SHA1 2324a5c8c2a9fb09bbf3312e45d0f74b40e62853
SHA512 c87cbd1a1061fdc0c1a7b20f56cf39628a480d8ae06f7bb736e325c05ed98e509bf405130a5f1b788285407f83a24c58a5ef20ceb67f045377bb43c446ec2324
TLSH
T1E4F041C10C3E0FC7D2AD0EAFA04A2BEC80D99513B0D834791CCEF868D5BE40D245182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 096f39b72529dc3a9798e1f62e76fc02239fa792ca01a7e68010126ab5549887
MD5 4c722b744b84f526fb704c6e0c7773ea
SHA1 a64c2183a42a274e3781b5680dc00d59f7c2980a
SHA512 fa735b83ee392a500db0b37710aa159bec25a4afbc190d88cf6cc8a842c03340a301bbcd642cec6fbf39e1e8e7cc7a973fb2f18f41c8a734f22da9d227e23e81
TLSH
T1211110D1182A1EC6D2BE0EAFA4473AED80D8C316F2E430791899ED14567D55D201187E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 d3e56363b8d42397c650faa708c2c8e1cd448df052aa1cb990f6e4cecd7315d2
MD5 be687fac112179c4713cbe4c32517511
SHA1 e41d56a361ab1531912da5e0f1be59fbd50bef51
SHA512 0ff6de894ae2d2243e4d7cfef75108f903ff6226c2aa2e2ab0aa34b9cf67e8db5622cb63425bf7913fb773380982edf8b797d90341356b770056b8541c00e9a5
TLSH
T1CC21FEA1182A1EC2E17D0DAFB0572AED80DC8212F5D034792899FD68967E619214087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 b291074f2e3e8198f737de300b1e02abb1a4a9404765629b084a6999f5dd785a
MD5 4348252d5e0d0acb8f1e74e121b7f2af
SHA1 750bbe5155ee2791ea79caa1b8b9f780ba88147f
SHA512 20811fa1a105a4d9eee0d791895f468b8f1945125eb1e6b733164c3912dd4024b844df704985f906aeb4028447bdaee3e0a0f1a98edaacd2b4b0e69cc70dac10
TLSH
T100E068409C3B1EC5E7A80B6FB8050AED80D95A1370C5287888CFE568A9BF05A21158AD
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 499dc40289ac5285a0ea98e85bfd66388b81b4897463eb4199064e37689a7ae4
MD5 dca3e06a5c3e0d4c034c40e79a6599b7
SHA1 dc9cbeb5144cd17c59be5dc6378f54f26491bbe0
SHA512 3e5520e58ac90b51fe63814be0f115c09a35d5a2179ee069cdbbf881916560f902108fb982554afc7b3f1fbacac9ca1d06e869f9d9b482d00681851290b5d970
TLSH
T1A6F054804C3F19C7E2AD0E2E64061BEC80D91603B0C8343448CFF968E0BE04D201183D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 4e7f9d2cc311a6a5534efd94b8f30b2eef267551ab66b08eb9e069be86117744
MD5 d929bd1b8045253c60f58843d1533047
SHA1 c64c210774ae7f25ba11634d302c3e1127f76646
SHA512 3ef655c7f9bf4b2baafa7216a87279bfd247bc802868f28c485a80f1d26bb25e95c0507a341bb47690d3c12608bc0ecb11fe8d1b2a7afa7e72545961b944e99d
TLSH
T1640144D11C391EC6D67D0FAF60462BDC44C98117B2D534B61CDDF82495BD44D304183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 4a9754f30b523da09bd92990587772842e9ff57924f6384a2146ae5baafd0cba
MD5 6720a9327d46ed4b3b621d903d1a1f18
SHA1 f3bb7d25f7ffd484a1a26234e3c1d4aeecdc612a
SHA512 e1fc37807ff9ec1e9182b9f8bad2cd718210e5b5b877003568812c0c0ad72bfd3f5918daa3fad39ee70d464d86a6115f200e5f12a173f9078a780736deda3e87
TLSH
T1082120E1582A1EC1D17E0DEFB44B2AEC80EC9312F1D030392899FD685A7E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 b90e833804e14a4762e56a9c37c3b80ba017ab0e5f7966552d8edc171366c60f
MD5 7c195701dec59360dde5bdcd9aa1a0d0
SHA1 d4845220ccd21c281a637a67c460840fb69a5162
SHA512 71555bac7d5a87540088754efb0cc3a8dd135f56d76c1edcf171b09983608a676b820f6fbfccd2ba39f65448bbd1262575f685ff9aa9250ca28260da937ed5da
TLSH
T149311CE158391EC1D5BE09AFB45B3AEC84ECC322F5A030396898ED58567E65E254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 39c28873804250d6667211d0eee5ff443a3efe6e13600b45997ee04b9e818bc0
MD5 447ea4d6bf731c21215711c8e1578891
SHA1 d2ba41c39a71372ac0d69bd647283036629b0d18
SHA512 ecf96fc14a960341136df8df7f06e9f2ac5a33d44eec04cc8a271e589f4b8ba7c6c6d561ed340937134dd8998636e7fd0b4ab4aaabefe8922fac705c14658224
TLSH
T1B64163E04C381AC1D0BD0A6F749B38ECC0DCC722F5A030797868EA585A7E64D354483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 154af423a1855612d154c3e1f66a101dff255f69a6d61dbfc890ed7c4ee5e3bd
MD5 f2444adaaec469073edd8258b50ace22
SHA1 198fc317971bd7fe4541ce01edd6782c4ac58938
SHA512 2e7e6ffc61bce8385c9c18d7a4f4da6f3b40aa6a2485c82ad0a0be964573f1d1a6a94e984d1df43af933f0289e1aaedbd4b7d1ce157121c1afc2f83a8a590e26
TLSH
T1693171E058390EC1D07E09EFB04B29EC80ECC322F5E030392C98ED585A7E55D214087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 f50eb301972fcf8efc98fae2dc0adb70e20b21444633cc9842709054568c9465
MD5 eae4a84147f4ae3d2572ddfc5e461859
SHA1 ac593ab367c9b1726a381b5576195a92eaa41ae5
SHA512 bacfb93d51eabca19422d7b28202c52500babf6f73cde7140086849c4e04455d2f97471f970702465b66c4666943ccabcf2f2d1e5c8aac435cc09573908d8531
TLSH
T1043120E05C391EC1D5BD09EF748B39FC84D8C322F5A0303968A9ED685A7E65D254083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 980eb6de3c19d9d2e1bc90ba7b22dd7c5e8dd0217487541a0cdd4b7d3f71c6a9
MD5 f92b860fd28de900e17d1bb7b81896f5
SHA1 6236ecae0b9ac5a626a1c7f2aa7316e63158e6d2
SHA512 523ef0c561503afe90ae42c533f04a3c49a29236205cad76bcbef2c1030a323019233e76a8192819de434fa7631779a8c314ea652bc81c91d98e6918246818e2
TLSH
T1EF312FE05C391EC5D4BD09AFB48B39FC84D8D322F5D1303968A9E928967D65D254483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 95b021a36298d4555a6127955f3bcf9f7c28b368eae17d592e48c3bb752c363c
MD5 decad02f82bae3942617d25de1701acb
SHA1 37b4ecfde6a2aff2a02815cef0d77e5111995627
SHA512 d43ff8f9856e2c8b3ccbc04e5d510c4ff815cd77745163359cfd482bebe3efceb869c02755ce74affd077e7443fdc92ebb40ff853db14d185bb7ebc54b16d4fe
TLSH
T136414EE04C391EC1D4BD0DAFB48B39FC84D8C322F5A0303868A8EA289A7D65D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 26c362fed226c1e8d4bdd2cf7cf25dfc7aa0f86dab8318a00d629406cf3e5b02
MD5 7fbc311af6b6a88537787980c78b72b9
SHA1 ee03498c91842a63e2f3436586616ab256f1b2ed
SHA512 41e1e83450fa621757d2bb7bf916608fa1caf5baf3f33f1682d61c20195de045aae8a5b29a5c11efe2d69f48adaaa07816d189f5992b744246cdf0a720a27652
TLSH
T155413FE05C391ED1E1BD0AAF749B38EC84ECC726F5A0303968A8EA585A7D64D254483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 eb108c476c0d7252277af4412dadfab60e0aef9f899c90d6b51e909137dc1e82
MD5 9022961b2fb53d09471aa81dbe1ebc9f
SHA1 9de01aec1a9af1750a16733509a914a240e77cbb
SHA512 81b2b37534855c0d367cc5a69b613bfb8c928fb68b250eeef04b26c57b5385d37bdff47efd43f41c4b6d53941694e7c484acd70d6618e30b0c97d3d8f4d3d68e
TLSH
T11D413EE00C381AC1D1BD0ABE748B38ECC1ECC726F5A034797868EA585A7E65D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 77ba826c1f849821f77b51c1e9ef40041f55bf5e7664d199efb21d7a82bdace5
MD5 d3507c69deb5c317678f817489ba78e3
SHA1 2d46e1fcb9f8a098f0e2d06238d1163bd4db5df2
SHA512 e07aa17efdf4bf910f2131783a51bd4d814f0db0f62c12545b55466eba378a913b6014cb5bcae68ed6c1a2c0c00a482513c488e16228e639481b5f01f9a459a8
TLSH
T189414FE04C381EC1D0BD09AF749B38EC84ECC726F5A0303978A9EA585A7E64D254083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04454101b5c3c7dc5678a2af4ede36b4091adbc25bf1528f4471149073809fd3
MD5 c02ce6895a9074ae39e6f46af603843a
SHA1 5273113fdc01049e6d3ae87e2689557f88c36a17
SHA512 d77241a10928313ba9bbf97be691b6c5394e0d7af71e2bdd1a78e1e38df29adbc2d0c66c98d957ae5c8b9283c69ce82a93fb7f52aa73c7b633bd9de303c929d0
TLSH
T1EE412958AAFA1158B3B37E5AABF6B96E447A79372E06D09D00110E4F0673B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

726f3a73-6bcf-4c16-ba93-29112bf49274.tmp

Path C:\Users\Admin\AppData\Local\Temp\726f3a73-6bcf-4c16-ba93-29112bf49274.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

ba9e14fb-6033-4c73-8ed3-0e281ddbaf27.tmp

Path C:\Users\Admin\AppData\Local\Temp\ba9e14fb-6033-4c73-8ed3-0e281ddbaf27.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0696cfe5-1dd6-411c-a3fa-61e96c56d763.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3328_1221039226\0696cfe5-1dd6-411c-a3fa-61e96c56d763.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3328_2015085885\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download