a66382364d132a593cb0c0f88bb4eefb68ab275cd73a7db317ec6a00fa81e429

Resubmissions

01/08/2026, 15:36

260801-s16ehszbla3

01/08/2026, 15:34

260801-sz841sssfy3

Analysis

user interaction
yes
max time kernel
147s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KittytrapV2.html
Size 42KB
Sample260801-s16ehszbla
SHA256 a66382364d132a593cb0c0f88bb4eefb68ab275cd73a7db317ec6a00fa81e429
MD5 5e1768926af9dde6dc077f003d0dd525
SHA1 a3f0d2e079f712ee90943639404124b67e44a0d7
SHA512 0d9d44f7a3a6490328f30442cf2a833b13d58a9dded8936c671eed166eeff28aa7413d3c3d9286d54bb211a4107bb3923698dfa8d20451cb2114798ff2a2b53d
SSDEEP 768:/TD37bG5qWvEwYB1wEDgZoJsRib7xyfgV+:XReH8Rkg8
TLSH
T12613C833D410EE0601A1ED56A2789705D6B2D87788ED6814B64C4E4D0FCA8EA37BFF5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5648	msedge.exe
4360	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300722065349416"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{95575582-E0A7-4196-8176-AB4D00CF80AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
824	msedge.exe
824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4552 wrote to memory of 1864	4552	msedge.exe	88
PID 4552 wrote to memory of 1240	4552	msedge.exe	90
PID 4552 wrote to memory of 5648	4552	msedge.exe	91
PID 4552 wrote to memory of 1240	4552	msedge.exe	90
PID 4552 wrote to memory of 1240	4552	msedge.exe	90
PID 4552 wrote to memory of 4848	4552	msedge.exe	92
PID 4552 wrote to memory of 4848	4552	msedge.exe	92
PID 4552 wrote to memory of 4564	4552	msedge.exe	94
PID 4552 wrote to memory of 4564	4552	msedge.exe	94
PID 4552 wrote to memory of 4948	4552	msedge.exe	95
PID 4552 wrote to memory of 4564	4552	msedge.exe	94
PID 4552 wrote to memory of 4948	4552	msedge.exe	95
PID 4552 wrote to memory of 4948	4552	msedge.exe	95
PID 4552 wrote to memory of 2996	4552	msedge.exe	96
PID 4552 wrote to memory of 2996	4552	msedge.exe	96
PID 4552 wrote to memory of 2996	4552	msedge.exe	96
PID 4552 wrote to memory of 4164	4552	msedge.exe	97
PID 4552 wrote to memory of 4164	4552	msedge.exe	97
PID 4552 wrote to memory of 4164	4552	msedge.exe	97
PID 4552 wrote to memory of 2012	4552	msedge.exe	99
PID 4552 wrote to memory of 2012	4552	msedge.exe	99
PID 4552 wrote to memory of 2116	4552	msedge.exe	100
PID 4552 wrote to memory of 2116	4552	msedge.exe	100
PID 4552 wrote to memory of 5928	4552	msedge.exe	102
PID 4552 wrote to memory of 1264	4552	msedge.exe	107
PID 4552 wrote to memory of 3044	4552	msedge.exe	108
PID 4552 wrote to memory of 5380	4552	msedge.exe	109
PID 4552 wrote to memory of 2740	4552	msedge.exe	112
PID 4552 wrote to memory of 2740	4552	msedge.exe	112
PID 4552 wrote to memory of 2404	4552	msedge.exe	115
PID 4552 wrote to memory of 2404	4552	msedge.exe	115
PID 4552 wrote to memory of 2404	4552	msedge.exe	115
PID 4552 wrote to memory of 3556	4552	msedge.exe	116
PID 4552 wrote to memory of 3556	4552	msedge.exe	116
PID 4552 wrote to memory of 3556	4552	msedge.exe	116
PID 4552 wrote to memory of 824	4552	msedge.exe	117
PID 4552 wrote to memory of 5820	4552	msedge.exe	118
PID 5820 wrote to memory of 4992	5820	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\KittytrapV2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff9bdf0c188,0x7ff9bdf0c194,0x7ff9bdf0c1a0
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,11840470752287984063,8888897295073034837,262144 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,13398993403095714665,11641174086438616062,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,2301143870804795189,16935195479271400956,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,9112845648510171859,10183451325321980470,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,8360921474863675864,13620817408381612991,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,2549472463018179417,5458290529894038254,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,2765594001042431402,11108464405440211478,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,14076681461527136111,10475472192524632823,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,72318122692243758,13863066677480076314,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,4876552718478283051,16981437696222410106,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,4876552718478283051,16981437696222410106,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,3759296767795964592,8140222593003565008,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,9134373501026599970,6433666049624528432,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,9367060116524888887,9372883739168399089,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,18191631996885850106,17244181081574663456,524288 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6688,i,7062151126970165523,15816420449004860887,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6812,i,8013030314451480602,2878262887927917510,2097152 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6244,i,1005040815080331053,17765083197213439566,262144 --field-trial-handle=2312,i,4710030159328022353,2860204337906520072,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x240,0x2d4,0x7ff9bdf0c188,0x7ff9bdf0c194,0x7ff9bdf0c1a0
    3⤵
    PID:4992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,17971467908471989165,5620432401643821561,262144 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,8678027680621386926,16358640211026592623,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,15037936177331429314,11433194856188066012,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:13
    3⤵
    PID:3396
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,12007373047346880131,7967208115139403360,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:14
    3⤵
    PID:2396
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,12007373047346880131,7967208115139403360,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:14
    3⤵
    PID:3708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,8169654127475827959,17286086696372987547,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
    3⤵
    PID:4588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11324920882481948067,9256357048647086098,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:14
    3⤵
    PID:4792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,8293646784269951832,15046655355759100973,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:2588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,6648143780576062113,9226110633211148989,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
    3⤵
    PID:4268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,7440997073419032885,13997724120894165872,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
    3⤵
    PID:5276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,8659409461057154791,5736752528145168395,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
    3⤵
    PID:1540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,16004558971555709403,16033276821622760730,524288 --field-trial-handle=2272,i,4070874737358105581,8306780697441170965,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
    3⤵
    PID:1532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3500

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\KittytrapV2.html
1⤵
PID:6072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4256

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b50b98bcaa03b9b90e2d0c335d8f75c46e3a86545a9eb814c9bd297b2766a244
MD5 6cff3fb88b933ff101e0c085842946c4
SHA1 8fe9302eb764d43cd3c531487c644e64c21f4553
SHA512 67186e6262e7c79370a020e13b2cfdce7b4028045c9fed258022a03e3c3b38aa501cafc93e081e8b74459f964f19df5ace9a7a13721a64757648b2104293a44a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7i:fwUQC5VwBIiElEd2K57P7i
TLSH
T174B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2923c1222ce49db187e097dafa5245e107880e380c2d4c3c042ec4c5e21d98bb
MD5 da1d8185397a8ac0bd44a31e4155fa93
SHA1 7c2bea94dea010a070c12a44a8464f7b1c541abe
SHA512 87ca63d88bf02a3c244ee505ed09f102c1f20a53c8d7854e1a9e11961db009f99bf7a7a5380ad49ee5b98c2e3c4196c803c521d754b64bb9070c4a8694487664
TLSH
T1DCD023317929F3A0CA1C013040100A002126447171A3435138E6180CCFF40C047CBEDA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 651be877889335a4ad7198a3507e3930ef716ac9998484096808162e5a711a96
MD5 1745a08c06e165957f34b3d9192f62f7
SHA1 c716e9b951730b0e1d8021f0dcd30da5b8b60857
SHA512 3424db9f5b119014f7384e2240c729411f703bc2e259553479022878fc1cb6089a7995fb50a5299710a6f412569129b8aaab29e2b3f773b2bd37afd65e447a75
TLSH
T1FDD02375B345D720CA0D55305811E7512273457070B7C77268F6644DDAE80C893DF199
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c9e71e2577db2b2f2fe304008fbd1fcb611a41e0ea047aaebcd0f3beb36bef0
MD5 ae1a5ab0eeba9f7f744a886d113911d1
SHA1 e0756c55c9a26a2024a14352dfc40a3f1791fec0
SHA512 9a6d484baa4d59f61364dcb279272d3916c2223e98ee97b3c804f6afc4c2e7c13f098dc542339e3f930a5508719d8e51b46dc271ad921e6c92c5b673d671aee4
TLSH
T143E02BA5C831AC7709FD476950904646EA5013272B51492F373C920C9FF113A469AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 e8c9f464fee7ceb8a59dd89bfabe9435001bdfac38077b9de652dd2aa56befd7
MD5 600fffcb320139b9aa9e10603cd9f9be
SHA1 530b8f83b65cde880d46f0d7fd3345ecc73b5a1c
SHA512 3ef27e3723a83f7ee01fe86b9cb56339e20a34aec16be294f4eed74c5e4453282debf20d870fd3a1ccf91ba1a3f6fbec391bc61f0eed55caa752543d7fba75cd
SSDEEP 192:O7Py14dFGw2NTnGaEbrsqtElJd8RPwSC8OovXghQZUrUdARVLZuKVGHyTjLi+d/:u64dFGwSTnGvrsqClJGVuJgghp9uKgA
TLSH
T15113D4BE32200E63CAD6463D829B4F756334D969C3C0418B6B7671A5D351FA7A8CFA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 dd88adb50f3b27177f58ec6291d8dd64bb89c4b8a5c7e969c7c0658deab2141c
MD5 0dfaf0dcce411398d1f49a6f8f3523ae
SHA1 c46ae6dfa6129221d23a6cf505423f05b8f69d3e
SHA512 428182af51d3b6cea47220bc15ddb289c5ea343004a51db0462e01f1bbfeb34f046f9d831beff580125f8a176034e2287707a3c6de72df3b32878241f65b4aeb
SSDEEP 1536:jFi9/SL/XqL/t/sujCUGiz/XT5ANhGA3ruGnLWNRaUg0L/GAgEj6BC9:5L/6L/lspY9FL/GTo0
TLSH
T15D445FF70911A01BCBA852F6E3033A3DD177845D7CE1E9E9E53C4C856865F32B6B8A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 e781c4f0f2fa13af095d507c1a77f654f23c4fc87aa7a73cacef171603911511
MD5 0e19a8c6cfec41c3bef524432fde89d5
SHA1 30b76cc71d5431e149833becb477052249d658a3
SHA512 a87b1a1f1bfa68c5a04699ecd16f2e761e96a0b16d2ff95256e444e4a7a0ad35b9e95d38b746a5c3b1c8662d5fb0a5e9c140aa26b395dfa6107d01429c53288d
SSDEEP 3072:jv9G+HNouhiHGZxaxcA0cO1KdDkq6jbQ6ay7WfmEkbN89WXGL:jQ8Ouh5ZUmAdfEbQ6aKWeEkKL
TLSH
T187254CDE8B782C42DF67CAB0B4D0D81A3E702182F69DD0D39945C5E957C2BC176E82AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 9e02b14858c9a05284b1ab88bbcbbc86ece21c454a0ecf3767503c0a058a53d4
MD5 7dc4cc8f997a95c87f27f393e76e7050
SHA1 43ed56135d0bedfb22281bd4374e51a711be8fbb
SHA512 f8f65e08e14f4b5bf110898b4feb35f1b0c1dcd524c8d62527bdc1a1968d48d9076089a307449b6236be716bedfb27232f80d31f257338dd4a7693eb579bcd8c
SSDEEP 24576:aFH0SwOa/nWUvol59X+JV0OG2UypIZEr/wATPgxAUR:aFUxV/WUg9X+r02UyN/wATPgxvR
TLSH
T1EE167DEDCA785883CD639A30B4F0E9477C7413C3F595C1E68898C584026BBC5BFAB669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ff6f66ed901e52d476f47f8eb76144f8472b6ac8e74e4f5e710e1e65d93f2db4
MD5 7c9adbf35a730aee3baa0a534da10945
SHA1 ca8037637b7749a382f2159f6405a4f184b53ba4
SHA512 c0803f1f3181515cea6fbd80210ec5d489beed322aaff03b18956d14cc79c42ea88b93b3bef0030baf08f1bf216014a28f411e5e967f8b92716b921a03d92393
TLSH
T10861921433258AD2DF2C6EB117E0A02837FC8E582507AE1968C2ED39EC82F7873D011B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c25dec70a5a5291141cb388a0d78c864bdd966c2d15a5eace09560e2ce6d3875
MD5 96cea2521f9b59ac282b1927066b34b7
SHA1 fffad2327ad735ea8833cbcdaf87a404c4843001
SHA512 7ce4f55e214caaa7a381d7e2e168194efe8fe3ae2fa2c22dd5cedff2dc419031723b786449cddbfa94853213a6131e56c74c4c2e89ea1ffa0372260805051fc2
TLSH
T12371A42433658AC2DF2C5EB117E0A42836FC4E582603AE5968C2ED79EC82F3873D151B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599a90.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599a90.TMP
Size 3KB
SHA256 96fc20644c13074738ccdad79f9cad2959bc90a627c1ee090ce88d06968f9eda
MD5 b7be6359b889cb1d205b9f0d17a961fe
SHA1 e4d778f5ac764f50f7b3ded0ecfa226ce0ad6f17
SHA512 e6252d787250c151e6391ef3a51a36b481b3f6c0d5a0af3e1e9bd2d05307dc71698cc06fbaec4a5964e579ed4aff2c19b3b9a9f53e668f44eacf520481e2cfdb
TLSH
T11461921433258AD2DF2C6EB117E0A02836FC8E582507AE1968C2ED39EC82F7873D011B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 4c6f031e71887850415f09d72b76e842d296dcdee88cf6b524703aea8e090545
MD5 8d848fc0ed77b798231f039c6865da42
SHA1 98e91fe0a3d15fcdec7697d635a7b079e91c45cb
SHA512 8a92138468527273ebc4605f6827d766990dc6534d4a8984619d46e069e9969df08babd8483b08b1097da2562518bfb1e1a8722d03c251b57657b556710e36e1
SSDEEP 3:MsEllllkEthXllkl2zExllA:/M/xT02zP
TLSH
T1E444040CFFD00405D50013304017C3504370DC101731D74334550413FDC55540C00410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 c557ecfd0eeebee20f6f653e11e841cf76d39fb350a2e1fce83368dcf156a099
MD5 cb5f093b22f7e1d4e4c7be4fefa7ea12
SHA1 a60025c4a60d66129387a69d850168c3a3ccb011
SHA512 22e07bac45695b09e37893814b463cb90714cd71d056a0aa0b9389125ded918a3612eac52ff36b84eb58d19dbe3b7442d5f5ae36eab6818bac6267cb787c7f5a
TLSH
T18EE0DFD5A6CBC52E6D3478C761B46F89A2E83443DA89ED07170498C0B68A812B786A96
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 bf4d4e877632d91f3f1c3d0a1ee35899e14fa11754716482a864ddbcc60b16f2
MD5 400155ab11b438d0382313dff7e478be
SHA1 550b5b546c19388b64efa4e745d9011c99b6a567
SHA512 2d9cfda86fe6f3007f7fbce021f56f66c286a57b6e8be7fae5ac84b6c44b1d7cd100b7ceb2fe3280b36a9e95ac4fb16af357d32cea88d09444d7bc2ab11a3aaf
TLSH
T18FE0264865CAC12A982E6CDB826C7B4C82D43447EAC8B91A1709C844A101B42E387694
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 dda812ee2c7b6c81508ea7846b23e7e7c7000d3102d2fddcfc8adc101774953a
MD5 4ab8fcd260702793927c85b595dd16ae
SHA1 60e8838f97fa7b0c96879c24e0bb57b46a729195
SHA512 51b68a46784d95e90a5bb78db5d37a1193c2868471547cb609b80c22837a42b866b6e16b5cb01cf04171fa35e275795cb1fe8f2f0b1a0e8ac95030a96b6ad917
SSDEEP 48:IzBmw6QU1PzL5V40EwG3qKdPbJxwqTwpHo82CEIPBuDOrHu9Sxz6KqTFhIWO6Ox7:UBCxLct/bvwZpolC3BuDwz+JvOvF
TLSH
T1D8B22CDB5F31B812EB990D3AB5192574C97BD22C2F969D497418405059F4881A0745FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 3b23624c6b834466257081e8b336f9b060b022efe4799fbf2713d68599f3bb9c
MD5 8465e38383dc38d233708e70ae5c16bb
SHA1 bcdffea039dbb10591b69c315fb2f3108a084aed
SHA512 e8b00ba225b8c0f5f9cc936df9431346741644886a8722105643eddf00992b2036d0c801bfee0a4b53ff6e29fe0d09e7138bad4f8d2682b92119c72531a5bced
SSDEEP 192:lm4WTFH+bF+UI3iWGVoWN3qL/Mb+VVV63:lAIkUI3ijVoWN3qL/MaA
TLSH
T16124230E5F353722CDBD813669E744A36C7DF03F871326DA686114B4CEE2656A02C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 19B
SHA256 ab5c71347d95f319781df230012713c7819ac0d69373e8c9a7302cae3f9a04b7
MD5 0407b455f23e3655661ba46a574cfca4
SHA1 855cb7cc8eac30458b4207614d046cb09ee3a591
SHA512 3020f7c87dc5201589fa43e03b1591ed8beb64523b37eb3736557f3ab7d654980fb42284115a69d91de44204cefab751b60466c0ef677608467de43d41bfb939
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 5cdc22e48857abbabaa172e5b7222557ba67df8cba42406507e74a775f4e5453
MD5 8ccdecbb0d8ee43fd7b4b1ca91cd90b8
SHA1 4b90e66a39465a6c8d66d0fc81df032aea14b792
SHA512 5a226f43590c54fca8975434f56bda13883fd06353283dc521a49ae3cdb9ad9cfe4cef3b2ec01858435176571dd325698ff8bfc4aa840c8e673a6ea14ea88598
TLSH
T155E020605ACED15D660425DBD3187B4CD3F1340BDA8CBE46AB049CC1F505684A3C15E7
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 83709654d714ff59ff2ccb266c825585d862f134ddcf466be0f885b1180011ab
MD5 0005e3bdc8ca01cd283f3e3146537056
SHA1 1d057c38c5bdbe50437a8bc8374f599da128e95d
SHA512 f5eeb78853d7fb861a68f2136c4917b33134dcf2fe3d3fe7876376db6993c5cc61a9c13bd330054b5ddb0a7079ad38d29a1599809764daaad481d1573f0389bf
SSDEEP 48:TUf/LopFMaty423w/a9NUuTj0+wL7FyNSo8wechQVf8hh:aDeMatha9W+vcwQVf0h
TLSH
T1E9B2540D5F306113C0F45B76EDD544663F7C100EC7B339959C2854B2CF9665BB90A2A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c600f6d977318fc99963978ecfa62e4aea3207ef567cb116c6dd333714d887b1
MD5 7287b7a60a9ce2a2e3d0fc1e9b8998b1
SHA1 3c009dc8d7cd838cc44a6297198b92207773784d
SHA512 75849e0f6db271c8bd8fd3649c610a80ce2964512087bd78d8c638423d20a9015c6239a5c3d847d13c455f3eae7dc0a7078c68accfc679c6ca0f1090e6811882
TLSH
T1CE41DEF3C3E4967E890156F4AB14AE1BCE2D0915432C3D1AC9E4AF6BA3E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a1442d3968e7af4c3bedde4f35be01b5e78747cfba1796715c001fa00e87bb78
MD5 fd1ce26e9709c102e440d575b782baf3
SHA1 972307f448a4580cd017ceb9cbf52665c71046b0
SHA512 cf965a2b09cb0b641cfa5011df6efc0f0698a52d60b56973710172a9b0ca11533d6383c409cdcb65c4bf2715ac6f0af82163d849507e1e2085a246a5dc1be404
SSDEEP 96:DmOu3GRvXiZMzBw2/6IkXH9Vh5d/f7isgA:DFu3GFXiZM1f/6IkXdVfdLisN
TLSH
T160A19CF7C7E49A6ED81152F0AB143F1BCE2D0A55536C3D16C4E4EE5BA3E24B1E180A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 7716cce51a65cc2d7d4b7314d72ab299183f7504c303e9155a0274b7f7ff2f99
MD5 bb287901b3d9852ad19f02c9ee87bd8e
SHA1 32f9e2acb29705f9f1208a9372275b0844a4d3f8
SHA512 cf7a0c99a48ba7d78b8c127658ec01a6b818e5a91632b1fe2d76fe99465eb776f42eac9f4b7333bc0584bf86e14e5f35a02dbb8accb628e59e67e5dff6cda680
TLSH
T1BF11ABA78AFFE427102C9D7B9D407C05163AB871214268F0CBD182ACB0819F71F12477
MD5 SHA1 SHA512 TLSH

Submit Download

a584f9f4-594f-4976-b7a9-afb5a05fa799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a584f9f4-594f-4976-b7a9-afb5a05fa799.tmp
Size 4KB
SHA256 8de99dd3735636b08de87b5649d8961c227993b958d4bf2e50fdb4f4332ea672
MD5 9ac19c0451e7081fb7967e0f4e8457c9
SHA1 b5e8f586bd0da62235e960a9b5bdf06045ff59f7
SHA512 ed1bffa715ee96bca4483089f168ab9b483d2f5bb824faca7e6f3c78a9600bf7708d27e13a362fdfafc054975ceebc30518c22ba88b0947660e49ddae6162a2e
SSDEEP 96:DmOu3GRvXiZMzBw2/6IkXH9Vh5d/f7Fgsx:DFu3GFXiZM1f/6IkXdVfdLFHx
TLSH
T1CCA19BF7C7E49A6ED81152F0AA143F1BCE2D0A55536C3D16C8E4AE5BA3E24B1E18094E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed3d94f0-3cdf-4d30-958c-dff6b44743a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed3d94f0-3cdf-4d30-958c-dff6b44743a6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 342a0483d116808b43f55b389716da6121947c72f532423dc0c99f09a016bd67
MD5 3f60b31ecb128b410b899d70bf442aad
SHA1 db44598a7cb95006de83542905ee2dd0b6093e18
SHA512 383f5dca827fe08a7f132ba57089c43907776eef9c52afbfc4b607cad40d550d44d15fbc916a01264c59a0f3687d002271fb0f19032e589d0e78cbf47d689b3b
SSDEEP 192:sxRAR0bk/f8sOesKCA94/szoA8p4T/g6+WNIYD986SHGFFIgIJ:sxRAAk/f8sOesZ8i6/5ISS6s
TLSH
T18732C6166A28AD3B9CCBE21DBB15BF53D2F9503361D41E58A7FC960C04EA6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 80382135096bae65298190769e1ac53052e3807a822dae6ace4b457f3c3d5eee
MD5 4a12a1d758ab9aab8786b87a10e4b1aa
SHA1 a12a31ee7f2e446d3625e3c080210e96d1f617d9
SHA512 e85519f540d4a5e699491b5c054f6c7f9f5acc1abe8c88f37e893bff06aeef8842218e108b25717d778651d460d3ceb49cda5127da2302d727bb282bf33694fc
SSDEEP 192:sxRnR0bk/f8s2elKCA94/szoA8p4T/g6+WNIYD926SHGFFIgDUJ:sxRnAk/f8s2elZ8i6/5IyS6s
TLSH
T1AE42C616A928AD3B9CCBE21DBB55BF53E2F9503360941E18A7FC960C05E66DD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3f1553d113c69f30cd1154b8ab7cc91b63e3300b34908499b212371d4933bb28
MD5 feaa48ec342f90f78d3aae71b9a58797
SHA1 43efb92d39eee4317d41341af628a3185842380b
SHA512 4f484f29f8b180c0ae8b25374845503e4d02ad239102af06b4bd79fb5c861f24870deb56280fb81b3cfe6437f20c95393c5f824fbc89d620a2990647abebbc68
SSDEEP 192:sxRnR0bk/f8s2esKCA94/szoA8p4T/g6+WNIYD9J6SHGFFIgDOJ:sxRnAk/f8s2esZ8i6/5IrS6u
TLSH
T1CA32C616AA28AD3B8CCBE21DBB55BF53D2F9503361D01E58A7FC960C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b682f5fc7b7c758a38698410fcf294865c05011f739e5cddf2c8e045bbb3ae1c
MD5 ea9f5283e58c88ee6ac4819441911d50
SHA1 0f701a7113a1a3ada6644b92f7da621d3eebde6d
SHA512 e67fc019f468b86915060549527e309d9b1078688e485e5f00ccf4c1a185b347bc3b215b69c675fc971bd76e0572e0e5678ad730046b85723b39a5a6165d9944
SSDEEP 192:sxRnRcbk/f8sLWpVnelKCA94/ozoA8peyC/g6+WN+O3cj/YD9T6SWgFFIgDUJ:sxRngk/f8sLWvnelZ8GW/56/XSLs
TLSH
T18952B716A928AD3B9CCBE21DBB55BF53D3F9103261D11E54A7FC9A1C01E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e007c822a15ab8aff41cb6ab1d09307ebba9a6729d3c31f55ade039e6b336084
MD5 eb11fa8584ab102dc47f44cd2f7ad96e
SHA1 3bcabc99e53cfac8273b6df6b15c6cb4be2ffe6e
SHA512 8620fc56e24f82199f2849031f9f12335e4f79b3cd7a96650041e6acb90b01d638863da1d9ba6a4ee76c5def97e4e577583e9125cb80d265db770cf5c89f403e
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcRropDb:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VK
TLSH
T16DB2EA2F204CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 9061db0adcaf6486373b488b8b0d5db54c6fbce21683ce6bfc615c9b6f603d87
MD5 185a62a50584fdfc108778f951f196a8
SHA1 28ef8d0dd6d8a5a686152d76fb9815c3eca71936
SHA512 81b4ae14f9429d991873e0569b1b5cff194f07a61bb969442af67e1f151f9d6066c2e5e11487620c54ea303339d9af496b7c893215c4b0c44402688b7ce695f4
TLSH
T198E026106BCAD97DA45620C71224D748C3F87887DAC8BD066F08CC80E142D09B2A69D0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 4ebc0ce4a0fb1e77301f500f3953cac051b459896e8a01a1a0f30d28eb7d4a3f
MD5 6abc6c9c1aa3787f04b06e0f61f8066c
SHA1 f6d6d10b47f74b4f0a2b870e827c735feaa93da5
SHA512 050ba1dc1e2582b880cc53ef7758ab0344a0232f67ecb90088f97997202a6aa876d3d57c7530cf36e8625c09284ba03e5c49ff0efd15d449758cc1e39c32d765
TLSH
T1E5B012887F00809DC408063319805F8023A0F0C2515BC10B8C54DF746F895ECEF032AF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 09ab5d050c159a936ec2494cf7c2ca90f78ee41a76418f20d915c15b357fd4c3
MD5 4e026672a80881dbc1a2323c8d9ada22
SHA1 8837f46fbe5f9d5e98a49e4823acc9714bc79865
SHA512 79a6727315874e1fb00a4438e451ecaf0a629aecc7c3ccc05c02459fbca9ab2fdec7ef91519230bb7ee2b7ed77fb7cf217379bd0056e724e7decb312b7f392b2
TLSH
T1A5E0D86427CACE2A614720CF7324EB4CC1E67403DAC8AE1AAB089D40E20A555B347990
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 b5da65804961d830e044769943c9189d1aca3a501b921f10977b61538d056b95
MD5 bff1c0f2c6a8c25affcc2eb364c3ce20
SHA1 2b448c6c47527a9172ac764269a4a67a023a533f
SHA512 07d9277d363f940442bcb4cfef8ed4a2af5f4d82a7bb64d3f6217c6b21c5e496150982ab96c123723e2bfc6189c619d477df06947ac3e4a3f99486ae035f5e43
TLSH
T1F2E0867466CBEE39950561C34374BB4EC3F47817DBC9BA4AA7084C80E101656B7BAEA0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 0bf56353ae06d7de1176398bd7b28657010c576a097692dcaaf3a129729dbc67
MD5 5f541dca065ebf85092a237891080f47
SHA1 a3d17cf87eee72bc77ea344dafef551faf2e6234
SHA512 d8d6a730df5af33778d95e88ab1692271f952ae5409f732e72173f8dd3478dc569d4814f42b37872b35ef47b2b39d1f6e153d0b75b00032331ea1741952e80a3
TLSH
T18181C410B1FE06503CBF6A0D81A5AD57534178733219E62BBFF844A24A57E264EFDCC9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 2b6c38df065cc2476befaa1988c94eb59aa28cf626185dfc78a65bad05c49028
MD5 2fa8186c6af42780925d981b7b2cb007
SHA1 762ae8a45f78036f119631a648c4e066bac33874
SHA512 c85a2a1badf605090ac8812a2ade60068f48649b3c2cbcb12633d37df538167338ec36fc86844f186201599da5702c4915421825dc98a2f27f09b669ec3f415f
SSDEEP 96:KRLURlTp5FWtC4gNF9I4KZaWKIoKxOnfqK0ga6z:CLURlTp5wtCZNFSTTPZi
TLSH
T165B1B110B1BE06503CBF6A1D81A6AD5752423C733319E52BBFF844A64A67E214EFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 3186989844b69ca3ce39162c416d6bbb37f0192c39c99f68b4859ec5d4c00d3c
MD5 19e4e7e5d0a0296576f220b2214a18e7
SHA1 128b144dad961cb27ff52c1b9b8dd24614d6dbfd
SHA512 e27ec89b0b9798866086fbe546fb498e197d00cc77cf9d11084e954555afc392d478752cd04f0b192927f7cff5cdf871ba80ba3fc9baa3e3d29ced00ae92f424
SSDEEP 384:DNrRZyCSDnxTICIegMEhIKyll7svbFKfk7:xFZJSDniBGyI1l7svbF9
TLSH
T17644840A7B747001EDE6D9721CB080771E3C716E8F62A6915DB254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 537e1f253efcb1e55f9244d9eb5a10b958413ec9cb94866e160b06cdcea81a19
MD5 a70013a5d52d3b4197b3cb63f8465a14
SHA1 faa52a3eb65dc78905056867e237b8fee12768c0
SHA512 b5ad7c2b614eb4bdd713f3c02da0dd54238652f41b2695f7288aa9b0964c25a565f255fd0cbf459ec6dd3bd83deba96a3e979153b875f92b7d5b8082438a0735
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBg//nJPvbGt:zEK3tjkSI5IUltGhp22iSBg/FbW
TLSH
T18D52CC8FEA343133C9E943729AC042E17E7E503D8FC2E71256E954111EB4651621FA9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 e4ed0ac92c3a90f41c93a595c47ab43f9d4ca8a7bd6e46a640157d20c4d9a8f1
MD5 f332c7df2b8c4db344a0188897ea3b2a
SHA1 041613fa7215238ba9dbc0a2c4da1419a7ae4aa7
SHA512 e48cd9efb7deb20f93292d2306529d958c9e172c1f6624b315156ed1f93bf58bec16cf4bd626937682a2488840b3192c163f4d38fa386d17383e50259f562c4e
TLSH
T125E0485052DD35E06ECB9E54C1063C0350853DB7170D85717BA945998BC88394B6DD3A
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 abbfa15298e53c147936b6b9d8baee364c494b5c0f879263832c38db94c3f38f
MD5 c4b96669bd7f301eb3bd51335990cff7
SHA1 f1024aad4b93320f01fed097809c49e69959daad
SHA512 95c5dd5b9b1b9a37157e0b5117cc2bd1295c8226c084a62e3fab9b60d5892dd33e6f76986ed1a96357c0b1076a1f86c63a51ee3464727d8656d406685bf31c34
SSDEEP 3:MsEllllkEthXllkl2zEjlM5gl:/M/xT02zHa
TLSH
T1C84404057FC00505C50010704055C3D04370DC1C4D1357533C51D413DCC57C07C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 64508061868bcc5b841a4867a4cc9f5e0f5fc5d34d155d85eea82da430966904
MD5 bbf8ec946fa2a07714df2005b06fdd68
SHA1 32a7833c2b3fe9dbc5467c78eabe9050a0a2dbfb
SHA512 0464160fe8b4e71b721d0012c73a88d063bdafbc8b88e6ac1c8e82a6bf280d311aed24e7b7764b5d5e7d1864bd60d2c230e8ce6833bfc56a7adadeac2f320279
SSDEEP 3:MsEllllkEthXllkl2zEjl:/M/xT02z
TLSH
T11444044F7FC10405D54010704155C3504370DC100D1357533CD1F413DDC5D407C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce918ecb7300835efd08f916a4976133671d85ba0a6d3408989de3de0b70728d
MD5 48cb7f67bb7cb8e3437bd7085dc99ecf
SHA1 611964a8fe5b1f71d09d0be11d509ec114034515
SHA512 5818c04eda70bd6c0d96b3680713ca7dc92fa26e786303ac14d0e1801ddee148f26310cc6b4a42022b81a7e3cd1d1bc1bc3cb926f4cc758f9f989c457b5b3add
SSDEEP 384:eZcIB38NcXQWjf+MWZlf8hyEGhWVFeWnzbIy2rEoajo4cdR8eHhVODjYPNDUMv2Y:cB3Qli0tZogrEnjN3Gac1Fv2ewBKZO6P
TLSH
T143F2BF7568689DB38CEAE385B5037603AEF447A3D5D40EB49ADDBA0C11976D8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3ac313a3d4c00c5f6323088de5a418636fb729718204d502e0f927f56949728b
MD5 8440463610410aaf44e1bccf41241862
SHA1 6492458ae51172854ac8e93b775603d0914bc771
SHA512 3717721d7332ced17596ce593f7256fadb1850c1c319dd80e766bf63acc9d1fd5c6a45343876a66e5c42bb44c79bba30283e2300e3e50a055f911f9699c2dc56
SSDEEP 384:FZcIB38NcKQWjf+MWZlf8hyEGhWVFeWnzbIy2rEoajo4cdR8eHhVODjYPNDUMv2Y:9B3dli0tZogrEnjN3Gac1Fv2ewBKZO6P
TLSH
T1DEF2BF7528789DB38CEAE386B5037603AEF447A3D5D40EB49ADDBA0C11976D8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce57e068c571819a93c1005115dfac7e1a2158ee49609326d159c2df21480455
MD5 97af56a49e2892fd16ceb983fa2b872d
SHA1 02abe7fb7c4e9874f4ba46b26b4858a025e12875
SHA512 492c402c11dea058479a903987222c6632cb37ae4bb3de9b2d8b2bf1cb6fa9e1ad5a709ed993b43a6cb3b769f9ec0c61c08c2f964776ab48e8c044b205b8bee9
SSDEEP 384:oZcIm38NcXQWjf+MWZlf8hyEGhWVFeWnzb222rEoajo4cdR8eHhVODjYPNDUMv2Y:Wm3Qli0tZo2rEnjN3Gac1Fv2ewBKZO6P
TLSH
T1D7F2BF7568689DB38CEAE386B5037603AEF44793D5D40EB49ADDBA0C1197ADC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ed44d03ff55d7308c2932963b6db3c2d4b0dd0dd961425a3dc56c0b903f31b15
MD5 46c690f69cdee05d7af44f3ad7ba7ab6
SHA1 52f5a7181692a7bf7b7ba890084c17fd089379b3
SHA512 b91d9419d7f5f033df7e40fd1b5a4155e50d5ae266ee3913897e755b4a18649952c555cf847fa88bf35ea8b957a78b46a1f0d1732259f03d4ed93792d53148b0
SSDEEP 384:zZcIB38Nc2QWjf+MWZlf8hyEGhWVFeWnzbIy2rEoajo4cdR8eHhVODjYPNDUMv2Y:rB3tli0tZogrEnjN3Gac1Fv2ewBKZO6P
TLSH
T15CF2BF7568689DB38CEAE386B5037603AEF447A3D5D40EB49ADDBA0C11976D8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 15051977d4aa81858cffeb87f11b73fcea3bf514af38a5392985028a9348609e
MD5 5f0f55f46202299cb97094e26f932308
SHA1 6a763e2ab64fddcb4f22308cfe91fbf220edff28
SHA512 b17547713a8ae34a73ff725d0c46799a78d489c6c8c4f634cc3f53d866b36dbb7065fe31dbfab11367956f0634eaadc0c584c7ed96935fb034efc1d7671aa5ef
SSDEEP 768:fm3XJi0tZo/rEnjN3Gac1F2Q9Ni2ewBKZO6P:fm3nE/QnjMafoi2evZrP
TLSH
T1DD037C7C6D249D7F88EEFB45710E6A129EA80277D0F409A8C7D96B0CD173998F307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 19852903505504945957cd833614dab6fb5048044d36b2bcc78602414efccf0c
MD5 4423f997bf3d80c5bbbeb747312a9942
SHA1 cc3c6e6f560abe20d9afebc072e36bd2c22fdfca
SHA512 f1b2d4bbba8021f8eed808313cda87db7879bac8ca4606f6c85e04c72d0e0dc154f3fc8535eaeedcc802b1dbe9648dec265b099a27b1fdbfbd3f88048ff900fd
SSDEEP 384:FZcIt38NcKQWjy+MWZlf8hyEGhWVFeWnzbIy2rEoajo4cdR8eHhVODjYPNDUMv2Y:9t3wli0tZogrEnjN3Gac1Fv2ewBKZO6P
TLSH
T149F2BF7528789DB38CEAE386B5037603AEF447A3D5D40EB49ADDBA0D11976D8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 110a19eca0e5e01f9468247bd140e0c5c1590b7194e4727c06de95045d0d957b
MD5 8e02d19908e0c5bc63ff274df6064ecc
SHA1 07c484e59361fbdcc0dce07eaaf8495657179e31
SHA512 31171b0d9d93c641584ec57284d070ef441978786acab57b80d04f288ec384c633894a7e6a644b8cc765af61d99094d04eb2dbe5e0a6620e6284aa4849d8ef7f
SSDEEP 768:rrv+4UNbdS3Smi0tLrEnjN3Gac1ZseVH1SCz:rbsbg3J9QnjMavEH1V
TLSH
T1B203BF3669B88AB38CEBA38571877A037FF4525385940BE4CACD6B0D06975EC130BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 003cb1c2f5e50b0bbc715f3cda915eed4d8c02440ad1e8f5d46796908ed299f2
MD5 93eea5d9f7b8951825b29c06e51db575
SHA1 3258d68dd0970fec6dbe86c3922df7de9f941f0d
SHA512 0f98e5733fb45f408f61951b526f59e18f55afd6344b653e9c08c223d66b826c8e516ba85430898beefcb93ba8a007aa1d95877c9a1549e28ea0ee615a638663
SSDEEP 384:VZcIm38NcXQWjokIWZlf8hyEGhWVFeWnzbEG2rEoajo4cdR8eHhVODjYPNDUMv2Y:tm3hJi0tZoYrEnjN3Gac1Fv2ewBKZO6P
TLSH
T1F7F2BF7568689DB38CEAE386B5037603AEF447A3D5D40EB49ADDBA0C11976DC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 4966919ff57743003512257795bc880fe3f658f8c757e7088d42d9e32e211955
MD5 02287d12ea215dd6b2c91e845f7dd004
SHA1 be9b3c4aba05a01762eed367f93bc9be936470b8
SHA512 790271cca354e839a3f36d6aee054d403c422b797176210a2b93af6021abd5d1af68a96dc9778dd3a41c8e723d2d803468e548c7c7caa2c4f98a7880fd953b71
SSDEEP 12:TL6KeJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isnJazbdLmQQtudp:TL6Rj0afDdWec9sJVUO4pe1jy
TLSH
T1A29202276D351033E8EB4B76BC8349900EB9135E89A7795499D449220D71BC2A2952FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 08b739b1f8f2ff04a3f03ee957fb938153e13f1b701505c4a3ad8c1748d840a5
MD5 4632afe32e6b62460609221767bdf11d
SHA1 9dcdde5d05a67515ebe93cce149d25dd33ac867e
SHA512 4e68e935c78ff3b3e7789876463812f378b78402bcf595ff92361fb6cd5b3c3bed1b8f6ca52ecfc4b7934c0d09839fafcba801698215630d8874c515c0e4be6c
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5a78ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a78ac.TMP
Size 392B
SHA256 2dbbd0f0c3889ea3d808318a430928c87a16576c6d5cc642c0726b1ddefadb6e
MD5 ad1dd457c149612b39b9c204bcdf84a1
SHA1 6e6f72c0847cc550f55fc584d2327ef5d5f46e45
SHA512 53fcf3d50906a46a57daa9e5179af21bc0261fb6a834f4dd2c32b08f41d89fdf46d34fe07b9049971f66e54830398da307439ebfafbaf1f1966cb3263808704a
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 e32ebd84c8e1a056c1495462cd2ba9ec935b4111ab9f1f61129a9179dee8d85b
MD5 6cb4c73a1a18092b1ed90522e76fc18b
SHA1 53e4ef948a82c47c0fd6e7a656653e8739a33403
SHA512 63c55e5c84e846f28e0e91b14668ed414aa640223500d208953583ebd658dda118b462a825413a84d50cc41e8e0ede1856d125c9b3776fa9be7cdbeb9340260c
SSDEEP 3:MsEllllkEthXllkl2zEjlP:/M/xT02z
TLSH
T1254404057FC00405C5003370401DC3D0C370DC1407335F433C51D417DDC55405CC0010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

09046775-a5e3-41a1-b765-dee39dd7413f.tmp

Path C:\Users\Admin\AppData\Local\Temp\09046775-a5e3-41a1-b765-dee39dd7413f.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5820_64515777\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download