e91193a83a79f1c53b6049109ad213caca38f392dee3c1ba0e74cfd0358f1238

Resubmissions

08/08/2026, 08:59

260808-kx9nrstdmh3

08/08/2026, 07:39

260808-jgzyysbp2s3

Analysis

user interaction
yes
max time kernel
114s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 07:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml
Size 58KB
Sample260808-jgzyysbp2s
SHA256 e91193a83a79f1c53b6049109ad213caca38f392dee3c1ba0e74cfd0358f1238
MD5 cfc00507eaefac22ebc190b2afc4d005
SHA1 32aa806a0ed854d0c435176effdf34f4849e7528
SHA512 8ef2450ad5c7f50ba02d8995aabbc17f031013e2b4a0252c938721db2269b5f6f1ba166f730db7d60b88c687ebe7ccd3692adad3a2c29fc1df35a352bcbd4a17
SSDEEP 768:jKtYvg+lt68Nr0Gy/lpQ9xkZ+KgqssoMNWdZUNjGzEaZ5tE4vWd:xvwNGy/lpqkZ+KgqsZIaZQQWd
TLSH
T18E4339E16CE60771E4751D90AC0E7BD279737ECF22E1A085693C8FC6E929EE018D12D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 4 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3472	msedge.exe
1912	msedge.exe
5840	msedge.exe
4936	msedge.exe

Checks processor information in registry 2 TTPs 12 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306484385965616"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{794F9122-A9C7-4961-AB6A-CC1F2C5B8C35}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{D0CFEBBD-1B91-408A-8C97-C9994CAC1CDD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{A726B1DA-9F11-4945-8FA9-B8BA3E1433CC}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{F0977A59-25A1-49A7-A626-87CD25DF6236}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{EC373CEB-5E8F-4F81-B12F-244C90D418A8}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3312	msedge.exe
3352	msedge.exe
3352	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
3312	msedge.exe
3312	msedge.exe
3352	msedge.exe
3352	msedge.exe
1376	msedge.exe
1376	msedge.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4648	OUTLOOK.EXE

Suspicious use of SetWindowsHookEx 31 IoCs

pid	Process
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE
4648	OUTLOOK.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 3312	4648	OUTLOOK.EXE	98
PID 3312 wrote to memory of 5124	3312	msedge.exe	99
PID 3312 wrote to memory of 3472	3312	msedge.exe	100
PID 3312 wrote to memory of 2612	3312	msedge.exe	101
PID 3312 wrote to memory of 2612	3312	msedge.exe	101
PID 3312 wrote to memory of 2612	3312	msedge.exe	101
PID 3312 wrote to memory of 2676	3312	msedge.exe	102
PID 3312 wrote to memory of 2676	3312	msedge.exe	102
PID 3312 wrote to memory of 608	3312	msedge.exe	103
PID 3312 wrote to memory of 608	3312	msedge.exe	103
PID 3312 wrote to memory of 4688	3312	msedge.exe	104
PID 3312 wrote to memory of 608	3312	msedge.exe	103
PID 3312 wrote to memory of 4688	3312	msedge.exe	104
PID 3312 wrote to memory of 4688	3312	msedge.exe	104
PID 3312 wrote to memory of 5868	3312	msedge.exe	109
PID 3312 wrote to memory of 5868	3312	msedge.exe	109
PID 3312 wrote to memory of 5868	3312	msedge.exe	109
PID 3312 wrote to memory of 2144	3312	msedge.exe	110
PID 3312 wrote to memory of 2144	3312	msedge.exe	110
PID 3312 wrote to memory of 2144	3312	msedge.exe	110
PID 3312 wrote to memory of 4320	3312	msedge.exe	111
PID 3312 wrote to memory of 4320	3312	msedge.exe	111
PID 3312 wrote to memory of 4320	3312	msedge.exe	111
PID 3312 wrote to memory of 5936	3312	msedge.exe	112
PID 3312 wrote to memory of 400	3312	msedge.exe	113
PID 3312 wrote to memory of 5936	3312	msedge.exe	112
PID 3312 wrote to memory of 400	3312	msedge.exe	113
PID 3312 wrote to memory of 1524	3312	msedge.exe	115
PID 3312 wrote to memory of 3352	3312	msedge.exe	118
PID 3352 wrote to memory of 4852	3352	msedge.exe	119
PID 3352 wrote to memory of 1912	3352	msedge.exe	120
PID 3352 wrote to memory of 2472	3352	msedge.exe	121
PID 3352 wrote to memory of 2472	3352	msedge.exe	121
PID 3352 wrote to memory of 2472	3352	msedge.exe	121
PID 3352 wrote to memory of 728	3352	msedge.exe	122
PID 3352 wrote to memory of 728	3352	msedge.exe	122
PID 3352 wrote to memory of 3380	3352	msedge.exe	126
PID 4648 wrote to memory of 3364	4648	OUTLOOK.EXE	127
PID 3352 wrote to memory of 4744	3352	msedge.exe	128
PID 3352 wrote to memory of 3360	3352	msedge.exe	129
PID 3352 wrote to memory of 4744	3352	msedge.exe	128
PID 3352 wrote to memory of 4744	3352	msedge.exe	128
PID 3352 wrote to memory of 3360	3352	msedge.exe	129
PID 3352 wrote to memory of 3360	3352	msedge.exe	129
PID 3352 wrote to memory of 1000	3352	msedge.exe	130
PID 3352 wrote to memory of 6060	3352	msedge.exe	131
PID 3352 wrote to memory of 1000	3352	msedge.exe	130
PID 3352 wrote to memory of 6060	3352	msedge.exe	131
PID 3352 wrote to memory of 1376	3352	msedge.exe	134
PID 1376 wrote to memory of 1064	1376	msedge.exe	135
PID 1376 wrote to memory of 5840	1376	msedge.exe	136
PID 1376 wrote to memory of 5024	1376	msedge.exe	137
PID 1376 wrote to memory of 6052	1376	msedge.exe	138
PID 1376 wrote to memory of 5024	1376	msedge.exe	137
PID 1376 wrote to memory of 5024	1376	msedge.exe	137
PID 1376 wrote to memory of 6052	1376	msedge.exe	138
PID 1376 wrote to memory of 5960	1376	msedge.exe	142
PID 4648 wrote to memory of 548	4648	OUTLOOK.EXE	143
PID 1376 wrote to memory of 2348	1376	msedge.exe	144
PID 1376 wrote to memory of 5328	1376	msedge.exe	145
PID 1376 wrote to memory of 2348	1376	msedge.exe	144
PID 1376 wrote to memory of 2348	1376	msedge.exe	144
PID 1376 wrote to memory of 5328	1376	msedge.exe	145
PID 1376 wrote to memory of 5328	1376	msedge.exe	145

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://m-economictimes-com.cdn.ampproject.org/c/s/fontshop.my/68VBt6YW9zcGluYUB2ZXJpdHJhbi5jb20=zq1wGlQa
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2d4,0x7ffeff19c188,0x7ffeff19c194,0x7ffeff19c1a0
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,2145091109601412315,13014327718273649793,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1792,i,4492745972649111284,11813334585586022624,262144 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:2
    3⤵
    PID:2612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,5619589148844544561,16424403761732754833,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
    3⤵
    PID:2676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,17045305910796213219,3945832273419101997,2097152 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
    3⤵
    PID:608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,16058080585958888045,10433244781613688687,2097152 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
    3⤵
    PID:4688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4880,i,1465727848298892249,7827766137336778661,2097152 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:1
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3396,i,1890200260338039885,517960959281132461,2097152 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
    3⤵
    PID:2144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3460,i,12151132022085974578,15929262560060189940,2097152 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
    3⤵
    PID:4320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,3249269628744310001,14874961799391140898,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
    3⤵
    PID:5936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,2927350118206165431,10806426695718927902,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
    3⤵
    PID:400
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,6289685364870732959,3406510388003310245,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:8
    3⤵
    PID:3388
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,6289685364870732959,3406510388003310245,524288 --field-trial-handle=2428,i,11039576390682878171,68525058547807245,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:8
    3⤵
    PID:1524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ffeff19c188,0x7ffeff19c194,0x7ffeff19c1a0
      4⤵
      PID:4852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,13412692682806098898,7472570055374782303,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
      4⤵
      System Time Discovery
      PID:1912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,11581199285952925685,16459914001276570357,262144 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
      4⤵
      PID:2472
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,7877281194848813212,2151149200690458915,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
      4⤵
      PID:728
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,18226133076904992589,7171467509799972851,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
      4⤵
      PID:4004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,18226133076904992589,7171467509799972851,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
      4⤵
      PID:3380
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5000,i,18379359996274142860,4826940709194636699,2097152 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:1
      4⤵
      PID:4744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=5008,i,13934878811355732906,16704551416521712644,2097152 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
      4⤵
      PID:3360
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,11073110943547527337,5326298027989302514,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
      4⤵
      PID:1000
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,5630893209334127816,15829749795838431166,524288 --field-trial-handle=2252,i,2006318981123461772,1966140112505841887,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
      4⤵
      PID:6060
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:1376
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffeff19c188,0x7ffeff19c194,0x7ffeff19c1a0
        5⤵
        
        PID:1064
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,1765577260598233785,7474064236348063884,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5840
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,10141292850511133544,682368308230712679,262144 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
        5⤵
        
        PID:5024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,14412750697878889222,2476596394335145507,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8
        5⤵
        
        PID:6052
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,1698855074073877803,8180833040933358824,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
        5⤵
        
        PID:2780
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,1698855074073877803,8180833040933358824,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
        5⤵
        
        PID:5960
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4980,i,9704815293679289345,3171470713547267380,2097152 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
        5⤵
        
        PID:2348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4976,i,14950754653431223622,3375138579198775187,2097152 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
        5⤵
        
        PID:5328
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,13244406773214534446,7569610942185173988,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
        5⤵
        
        PID:5820
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,6767191394777292476,8425104487207171507,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
        5⤵
        
        PID:3808
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6140,i,1310386498049059402,16624788621665048202,2097152 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:1
        5⤵
        
        PID:3380
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,11024724657456658840,7969537343031848057,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
        5⤵
        Modifies registry class
        
        PID:1580
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,644209123919827415,12300102429618650758,524288 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
        5⤵
        
        PID:2328
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6656,i,11755875026110253117,7738506475871386908,2097152 --field-trial-handle=2316,i,5059391207761612026,11094326085225729562,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
        5⤵
        
        PID:2300
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        
        PID:4244
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffeff19c188,0x7ffeff19c194,0x7ffeff19c1a0
        6⤵
        
        PID:4592
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,8150728044519263617,11984619567159160628,524288 --field-trial-handle=2204,i,13281960473170784782,4895170613685699024,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:3
        6⤵
        System Time Discovery
        
        PID:4936
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,15801500267897006440,4673802917540758693,262144 --field-trial-handle=2204,i,13281960473170784782,4895170613685699024,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
        6⤵
        
        PID:5012
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,5468855176426412752,15555186265835030072,524288 --field-trial-handle=2204,i,13281960473170784782,4895170613685699024,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
        6⤵
        
        PID:5328
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,6973595660591390839,6402446330092316467,524288 --field-trial-handle=2204,i,13281960473170784782,4895170613685699024,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
        6⤵
        
        PID:3844
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,6973595660591390839,6402446330092316467,524288 --field-trial-handle=2204,i,13281960473170784782,4895170613685699024,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
        6⤵
        
        PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://meet134.webex.com/meet134/j.php?MTID=mee61b1418a5445f08911d096f0dcc92e
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://jira.veritran.com/browse/CRPM-771
  2⤵
  PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e3dda413deb0056300d64212636a6785cc542fbbae4383b4383d4cf0ebbc4
MD5 fb1e85b1485d88ba9cec2cd1f023e621
SHA1 aa0fc9167f42bc9470e917c18515afaaad960620
SHA512 94193e242c6de1dd160dfed5c111ba549c783ae9bd7ef959f60c690664d2f3279ec6a50445fb7fe4b959e2c95eeb27fa56c5920a84e5d00761487e4265cb997b
TLSH
T1CAD0A7B61A1EB490F27D0A32A011C700776D16E32D52A305F32C880CDDBD0D526C66C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2173cf2412d68670f9f322e8505233e2e4759306d2b5e55aa4b778fa4b0431c2
MD5 ac947ec1a4a3babe4bffda6688bf0511
SHA1 5a0e9461959f66111a1f042ee663c147b264577f
SHA512 57cad4b9b7aca41668bb6aa5dd72b7756208773b053d09750ac2b71f255346826c74154bd7caa4169fa2db86b69ef0be9376829ed34680a176f3717370930148
TLSH
T1F5D0A7F557097150F26E4A31B413D70077AD16A12863D711E228980C98AD0A862DA1C5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 df7f84d8663838bb904b73e1ae01303eb18b7d1bdbb64ed09622341e15570186
MD5 bdd01bcc72413371a62bcc5076d3fd38
SHA1 ace27e67ab7522cc891bd8f365cb34cf5075f58c
SHA512 997a563139ee940d2ad3e304334f378c129d539b41adea41c9d2349b9086686d50300c5b261bfde012466abc74ebb74e127b71c8ccf0972525cc60bf24a32afb
TLSH
T1C4D0A7F557097150F26E4A31B453D70077AD16A12863D715E228980CA8AC0B862DA1C5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b34778c678be5b0ebc9b3d4dbba1ce3c443f254936817b7a492c546dfbe76ff
MD5 38d8852d25045d9ef5eeb92ef35fd359
SHA1 31310a03a09a81c50c5b585ed861039658ee7e58
SHA512 10ac85c168c32504345f7b5fc8cd1364591b31ccbed8e76d5c5c5f51a939eaa2312a267163148cdf7e4783aba96a1c1df6e65a9de7fa664bc100745b8af5133b
TLSH
T10ED0A7F4A746A260D51E09316824A610B76946A038A7D722D079680DA9DC028A2EE18D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

437b3d73-dd58-47fa-8828-d7bec0e91630.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\437b3d73-dd58-47fa-8828-d7bec0e91630.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 20a5798ceb7c1022df7ef363768e1c18cd8384cce5458bf6a7be5fd32d611332
MD5 0d367b7a28400c996f778cfe995ce3a9
SHA1 91defe44decc94896215b878e3aa26531051d341
SHA512 fa5db92f8d123ac321b6ccff03354a596629268b03f59f9003202f4648f3eccb8fa9b5eb49f6d4028dbcbd342f0c41335b2d874ba6b790f8526e3c6c36629f97
TLSH
T13AE02B75CC61EC2708FD0758A04D8B4AF700171736414A5F3A3C924C8FB062686C5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3574c24726caf1b146bd97e4b4d8acaec38c3b830a66cf1977de847b848eab9c
MD5 27ddec8345736ae3ca604cde9d49cf8f
SHA1 7fdb33fcddea2ffe0b389b63612d6a2d9c32e3e1
SHA512 857e64ba3346b3e59f56d97659b792b5bfe3a94774c62c56c35e25ae166e235cddaaef09ad9bf05d6cef6c42747617dba5dbd6cf6279885693e9fe5861948c83
SSDEEP 384:XN8Gx9pZ6vh2krZVSMIVxrJ1Bo1ngc8DhApG3rCz68PypaD:XmYZ6okyRVxrJ1B71Apw8PaaD
TLSH
T10913B3BE3E250DC5D6E3043C864B5A39AB7CD932FAC05F1777B239461326B125A0EE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 d251cadea0d5982485750baaf5f4b291edc8366c72d8d851b7fa6bd7b1b1c939
MD5 eb4c686a87d8422424b88b0288da240d
SHA1 e6da5d6272fcce40333259fe663a509ba43bedee
SHA512 2fc12bf5644dac86b05897c083e006d3eae4d8bfe97abf8ab59e3a797556d8f7b9cb6a8b0f483d04156ac2094300e859bd0e1bea3254942692b2d35ba7186b84
SSDEEP 1536:0PyL/M7xL/DzUEEOW/88GT7L/C8L/hKL/c5zCIZyor:8yL/kL/jEOWq/L/PL/sL/yzCP
TLSH
T111443EF70951A05BCBA802F5E6133A3ED17B055E7CD1EDE9E1784C812825B32B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 882cff574405d4e792aad9537ab6e770a673faf95bc7e54bdd70d9ba20985490
MD5 150158e6de87ab7086398bceccef732d
SHA1 80ab70b7bfa97a403108cd480de5df5d7f28872c
SHA512 76cb2927fc47cb71686a365c6551d1d6c295884cb221c1e759f0cfe4995b5e63157b8f3ced6a05ae753171706d59b2e58c95d2794f46a5a46d14b5d4cb75ea37
SSDEEP 24576:VYIollXbYmkVoA59FSLlPygYWAM9PJhe49JVs6uYYfjVVLRjC1AC:VY18mkgLlPTY+Py493sIYrzRjC5
TLSH
T1FA868DEDCA6898C3CD639930B1F0ED477C7413C3F595C1D68898C684026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7b712c446cfe8c6810fd4d6a6cc82c3de99b3977477582e9f4062c144a5f3a60
MD5 ec0bea02d3a4b6023dfa35e6e5dfd0d1
SHA1 3f695849a834f34fd9ec375c3ce291d48af981dd
SHA512 c57e03f3277c66a0aaff73ed19b5612dd9061bcf91fa63a93398a627e5b0fb4178127ea5bda6ec13d78ac28d9e70e49f1ea6644cb0082558a9e2c31519d26a1a
TLSH
T13D8119F819D214B1DBC006B292D126E83972CEEAF4979EE2DFC45C30121A7674DDCA07
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 f51d3b35ed05db98b586e80dbe7908e53e896da0ee4cedc513146f6360500051
MD5 346a9a063eaa844d5f25cbdc0dd6c94c
SHA1 a39a36d55fbe5a47ef9baeb314527788f6f58ee0
SHA512 4d9acfb6e4136a04b34531bf013264b3aa8adb699c5a00a3451d1241c18f3aade038df4083656c8451c4378849969a1f19f3bd550b0307604ab6ccd7d3383269
SSDEEP 48:FEI9xWkXm3Q8vMbaX+lZT401F05NTQrJDSzajEWKsl2HH6mRKQBt8mBqn:S0Wj3HMWX+XCLTQrJ2ejWNH78QhBq
TLSH
T1EA911DF819D314B0DBE406B291D51AE93836CEEAF4579EA2DF846C3011177974CDCA07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 be2b5d58d680d459519975f7d054886fc70e7febfbc276e15fc21bea17c121dc
MD5 5f31770a408388671708de556d02675e
SHA1 a0faea166d11ee0cad0abb87dd03107d8a7addc6
SHA512 bf013c328d9fa1d8aca61c4dcb49ca4e8d7253fde66456ed295fd1c34f5642748a4a5f1636e5c1f774ec4f687e668798b601807fdc37193651a4c746cb250c22
TLSH
T101E0D894E6CBC35DAD5034D795345709C2C53443DA96EF1357408DD8BA03111F6A1E9A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6a6ee7178d73d7381ea3457e21811677c7a6c5ba89d1aa417bdc505140d996fe
MD5 164bbbb76c57e8e7aab1f119b5f8be45
SHA1 ebf52df7053091f9355c47d3b1a0937a4e7fece0
SHA512 247931efdf31175ad1861142d263e36bda8e08fd0673fb52073bb61c6be8cf2bdba49cc2d876c8b535f0350d003f681201bae224e02ccad9513ce345ac90f4ba
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jTyIW5LQMK5fKFtIq+PAqYpq+w:Tyi+7f+UZD4jJ/BPfWxLCKFOqcATpqZ
TLSH
T1B1E2BC8D3B11F512C4ED733DB0C2C6E09EFC693C868DB170923858768C52A66B49F20A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 e14ee0372e2fac1a77eb6238bfff0158d1c4aef5d189de05651c4faf1392af8b
MD5 ab846f4d5e42d64bdcb9bd19711db46c
SHA1 5a7848e22e8b453f533989575549abf4ffb2a2a8
SHA512 ef863b2763f4fe8f10aa459e833982e1dbcd035c49fd9002c602f4e7e8b2ccc7311d641ec894c9372a12f141759bb4899ccb235e65d82e5fbf090db5cafab4ac
TLSH
T140E0262855CEC2299A54B8978AEC4308D2D2F40BAA883F2717188C546503345A296A93
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 4d1faf2aced1a39d26a7063d0c52c8efee32e335a116f3a86f2392bf4aa4557b
MD5 f015ff1e55346e58e250d530215fedc9
SHA1 d9d55e84042780d75328c1e4553afbc755a62511
SHA512 c2fccefff601792ce0df9817b31af1960c2de2cce1891b2567108f8530239ce730a7f24b6729a319228dc26aa457d359fe7ba050d93b55796d8bd23fa3d59321
SSDEEP 96:C/HIU+bGz83uy3+u4tgp4DLjGQLBze9z3+ZTdjBHMsDEuspU0wbtqrOQpPfR4J+j:Yf+G83uy3Ct7XBBKC/H7DXspU3iD
TLSH
T14614321E5F743721CDBD51762DEA44A36D6DF03F8B1366DA686104B0CEE3642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_jira.cloud.veritran.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_jira.cloud.veritran.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 261ef9b00b24d3abe14e12027f8bf0ab0424d3a995cbe6397980493e4b38cb40
MD5 ae52b704b67d0af5c360f92d255c56bf
SHA1 196586253fdb4ffc5ca5f77dedfad8370ae1f30c
SHA512 6e5caf4c514d3a448ffd634cda8b7b73d687d2318026f72175608b25b618ab6ce3325c7002af31277d765b9e93f5407285b1369acca985e3068bebcb5e037686
TLSH
T135E020A059DDC21D5584308F9A78B74CD3F1340BFA897F131B059844B546218A7819D3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 f9ed5c724d5263c1a837aba8bce2dd570c2c92b43b6efd55784080602b44768b
MD5 3f7f2d5b8d1782958d94011807def19f
SHA1 5250d3e0d934f210aceccea631bbc7db196c610c
SHA512 abb49b1c9e278d1058d4f6280abee2e050d1b34d32156f5c1e0babce72038a93b9f7429c51878ddac4f940e4b9a608d3a76e5138cffd401ae716f7ab7e379afa
SSDEEP 48:T2SLopFMatSaw/auUOt8BY+o9w/oE++tZjK2TAwH:iSeMatUaAKaMZ+92TAA
TLSH
T16192424E5F34A221D1F15B7BEDD085262F3C101DC3637A9AEE5520F38E9265FF1060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d0f483635a1f2a62431b2e949a32df7ea4aacd388f385434911f75d2e00c6f80
MD5 ecfa64e5340787d6297c33a93e60c343
SHA1 cc4f566c777dda5f7d281b00fd7e9f59cc723828
SHA512 ef8072818349009fd7984e727eeba805349758a2119f97fe382635dc30351ff67463e1cf346993801b9f1d9e76f9b6fa48658d3646018a9d157346af12bd3d8e
TLSH
T18551ACF783F4862ECA1195F0AB18AE1FDE1D0515432C7D6A85E0EF1B93E3471E141A4B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 4c107e2c29c1a156477074afff7a12186e350b36faf7eea1b46638c5e115d0ee
MD5 99a8cca3fd0cd1c0a549176b259524af
SHA1 605936d165c81d9ce21e607b880e3654f98e1a14
SHA512 9036f58600fc23edad827e7b2cb4c08f01d61aa2cd26115b2cb571749c604e73c36494318a26bf67576693a9fdd4f80f4c44ae334bb27628da4fce6654da39e7
SSDEEP 192:D1mo/yIiTmGz/Uaaaij6cMqiEG/qrh+h/pQ7E0PNyozDfn+6grPAg:D1moKIiTmGrUaaaiGcMqiEG/qrh+hRQi
TLSH
T10B128EF7C3E99A2DC91259F4A7286E1BCE1D0914932C3D6BC8E4BF5B93D2871E10164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 55f3a08c6d5426c468fddf16f93129a5923107a79494f6b43610a876676d018a
MD5 3d7d5f34bac35cedb984c277ac2971a5
SHA1 e119abc1477c63065c0b5146dda05b63832567b7
SHA512 f6081cfe9c4ae00deb8c163e787c4bbdf53433c964d211121ab6aa244cc93f5ca3415e2abc82ffa409f7d05d063c8383d35cda01983f3937950ec7560992d12d
TLSH
T1BB419BF383E4866ECA1196F0AA18BE2FDE1D0514432C3D6A85E0AF1B93E2471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 871bcbc558d4d62d383d59ef72b1b47826bb0b56b4a466d6656d27634fc3228c
MD5 b9693d5705e0ea5ecd3e7f4ad54c355c
SHA1 f9607ad7eabc4d92035998438b9587b1a06087bf
SHA512 2f6d01c91a016660305ba76e5c2b84c3a01d4828c4633e5e34ee9ecf8ec7f761c8216daad3293698a8dd7ce858b30cdc42d90740d7fa6bb3de995d938e30820c
SSDEEP 48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBlkk:eIEumQv8m1ccnvSrh7Swf5nFXs81W4g
TLSH
T11FF2EDFA07276505D98444B0A0009FCFAF16014B47B6B6EC76D447E3F7A21E2F6B9786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 b3065fc9c06e92e49fdc885354d21162a3959f605496e8070e54a12f06eb273c
MD5 2cddea2b2c01036827da21a2d024f7b9
SHA1 359a04544e3b811033f1f233196d39e1babfccf1
SHA512 9c82a0e989f800d29bef81cd26fe75c3f77350eb511009993e11d434e49e3171ceb86471bf1c6a38a4c7da3b2a324778b507d6464b8d72f43a566418f2da2755
TLSH
T1F121AC93D5BF7867113D08FF2C84B8852A7EE835069128F5DBA6822CE0849B75B16497
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 522B
SHA256 77cbc3ea2e148c932673010fcf47594eb6719167bde654d5695329b449d444d2
MD5 e7eee60e63afb15226c5b53d2a0ef982
SHA1 9a58b8938d722125b09d75521a0cf7282b45b1bc
SHA512 6c7c096782e5f19218e897d505c5033a06bb448f01ad48042c635a3a1eaa6662460117c9f5dbe43031f8978a475c13268ad8ae11ddda0881e392e0a11a34f169
TLSH
T162F05053C0FAB867013504FE1DD478805A7DA435015068F5DB99937CE1514FBA72606B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 c9f61413a41e23ebab710e176c81ef6ce0f03eadbe0b674677754203a93824e8
MD5 513548b91094300348295476e9e8a668
SHA1 98b8124965f03bda3315f5c78fdc65bca301706e
SHA512 ac1bcb90f8a8f74ef251907f672743b2ef4e52b33f33aac198524537bf403ee2c09fd6f34f5dd1c599ba561c468480ed601cadcb9823319b955ace043a0834ac
TLSH
T19961BD57D1BEB86B116A08EF2D44B8051ABABC31129168F5DFA7C12CF0C55F38B671A3
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 4e38404a6868df1cabfe4af056bceb57151bca0ce2d079b121b7c7b8322f3e60
MD5 17828bcbe4e033b04984fda912921f8c
SHA1 29229f3307f4abee39aa702847674edb6c1b5f9c
SHA512 c2edd96d15f8d55481c6f91a9ff82c858098012e2fedf58997e6dfdc9273d39c5044e6665e12e07bf16a3a067decf526c4290f51a55994c0a2f5056d56723cd4
SSDEEP 384:sxZ0A+x/fGsvWvqUazIKYWRHbH4a/bvPZO:s89x/f5YqUaz/Hbzb8
TLSH
T11C82F80669345A7F8DDBD209FA45BBA3D7F8052291915E44AAFC8E1C14E77EC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b995759594ac766a2c3f27e228092117e4d6a0d96c2feac7cd18697df4e0b3ec
MD5 e20df99ad657546d65f7b576a44a8cd4
SHA1 49297dd5f5b4a9c814f3047da25f0193e732108d
SHA512 8a37245eee8dd010af11a40e6d9d9098afc0facce86baffcdd7e51a6d76b0d239c9e6329a54bc5c5c544a182f94794bd5e6a75222e117e11d10dc75c55f3d3c1
SSDEEP 384:sxZ0HYx/fGssyWvqUazIKYdpHb5a/Uv7ZO:s84x/fyyYqUazSHbSUo
TLSH
T13872E806A9345A7B8DD7D219FA45BB93D7F80523A1915E44A9FC8E1C04E77ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 102639d1cf30cfeb484392d6dfc2c7db2f4de259f1503151726a6e922e96b6c1
MD5 2d082caa68922443cafc409d4f3742ba
SHA1 7f5465054c16906db2a5204563b794e3bb8bec81
SHA512 551cabf0432e1122a3178b5311a16ce484e31b3edb8a7f2da554dde805fc03d79a89cb5e4a89c963612ad541833457601f4f0b8e6809218a0dad1158b9276f0b
SSDEEP 384:sxZ02Yx/fGss0WvQUazIKYdCHb5/kvRZO:s8Nx/fy0YQUazLHb9k+
TLSH
T13872F8066A285A7BCDD7D219FA45BF53D7F80522A1905E44A9FC8A1C04E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 dd3f0072af3b5349a446b7b0c12f6022de5fcfc10580810600d21b48b773e26b
MD5 4375627461adb1c53a87beb06a996886
SHA1 c717f62a926462440afcab717e7c15b1e38a635b
SHA512 dcc62cb1d7e0a147e77fd4e57fd2fbeefa6be0a1fd5e14c664eb9307412730009187cfd6017bc05f0ac8cfeee7c49a0ffa807274fb6cd4e80bdfbbc1817d7ef6
SSDEEP 384:sxZ0H+x/fGsgWvqUazIKYWpHbHa/svgZO:s8ex/fKYqUazzHbAs7
TLSH
T19782F806A9345A7BCDD7D209FA45BB93D7F81523A1915E44AAFC8E1C04E77ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 d7c77c15e418dbe7355b4100ffdf43d4b310303bbdac136794904d315a476d0f
MD5 a6d15da98f838906922994eb9d24ddbf
SHA1 b0c59dacfb2d1833fee06a52a435e2bb4e026679
SHA512 6f11ae83e4651dd45a51f1bb94cb91d373227ca37a1af5ef2b661888e6579329cced48981eadcd927833dad6ae7bd950c6be13cfaa523b3b86b229232962e16f
SSDEEP 384:sxZ0A+x/fGsvWvqUazIKYHuHbg4a/XvfZO:s8Rx/f5YqUazzHbWX8
TLSH
T1EE82F806A9345A7FCDDBD219F945BBA3D7F8152291904E40AAFC8E1C14E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 9284b2038a16a76f373d4d140d94b6593a8d2368cb06c51a28ed6ebd4fe1fe84
MD5 aa225caab4d578416612392eabcf638d
SHA1 90eea5cb12cf1f951d186048f147cf1b374f5994
SHA512 d76c9cd5896a726ec93cdad869703e7fe20827719d017ed68d24852c7698dedd887a1ab4c9be3c7adb3dd7de9759e2c8124463802cc17d5f51f3eddeb29690e7
SSDEEP 768:ZYsv8OdF6ssi7pLuLnFhWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOysy10Llz:eY8Od/HEnFhWvFvmXu1jaKt10Lm2NuLE
TLSH
T1DEF2FB3B6C0CCB7E4F844E9CEC2A7F8A6DE801CB5698895447FA844C02C76EB56175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 1941dd5b231cfa7cee83ec360cf11de795a5d09e59efc752b47a19b2d04246bd
MD5 0b7194a89341f1ae7f4e0b14b43d0007
SHA1 25e8ba888f966c2d84309d1c801355b41a612e59
SHA512 d6a3643e0a8d4ccae7d97b4d523a2835bb2b8936ab63646523e4e076c5ef12aeebed9e0567f56523654bfc81f20c59c9f21a9cdf4cd3f12e88d5a00b7642a441
TLSH
T187E0261026EDC3BD64D570870AA4C308E3E5F417DAC83F232F04C8A86983E48B2B3993
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13430648441682542

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13430648441682542
Size 1KB
SHA256 1e1674e52c58753a600de9c912154bd64466de221d84a0ea7030f129a9c5331c
MD5 9baa473c4634b7879b0aed2ade04c3c3
SHA1 461e61677e9fe17d6c86729db8c929d17dc15bbf
SHA512 0d5f0c109f0e99a8a0fe0a1653f7530e086fa32938c7f39dcb8a4b5112cdd03a6eb92c19003b8be7163b241911ed4bef8ea08caefe5768f9506890a34ba2f431
TLSH
T14E21D03636F04760E3391EB94D68A5B976365F08F880DB3740B163A80966A11BE70F9E
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 fec1d8c05427124a90b2df57d5621fe2a1a04eaa8352ce5ecb9773af535939ea
MD5 42c4bfc497bbcbe2311cd70dcb02a5b4
SHA1 40fbf61591e8e83e441f7820cac80f05a3675054
SHA512 f7a9712fbd523723c825f83eb8f4a858fa0563e940a377ac43c1fc3eeaa5b57dd2dc58b93ac4f7e5cc3ab78008ae6aa6d3e6e5ba44fa6e810b44752738921ee0
TLSH
T1EFB012487F059A0AF6A6693F0380EF85E335F551080445134A44CF714C847583F41DC3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 9dd0de0e93e52ec78ab0e3870bd188dcd55e33b7a84b097b0cfa963dc1a7c32a
MD5 59573adf47253b1abbbc3fd5e1d2f140
SHA1 218b7fd8b50a26e331b60bf4694c4c7018ddec1d
SHA512 fcea523c90b517b40af4b38e2018346fccb63a20cec414a0e210c4c27503d947c17fc3615496a189e3dd5c6e5335eb47fe25fb1cd2547fd3713308a48b2ea12b
TLSH
T17EE0D86036CDC76A6185308B9664D308D3E3F417DEC96F377B0894847287284B2A3953
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 105bbed2326436078b21e198e05697d59875c0132a2af8d89f9312626c4f7dab
MD5 db49c3fbdca69e8d259fe4dfae23b51e
SHA1 5e57fd2cdcba85a7b54778951e8d79a4c955d668
SHA512 67de3e6e3dfc4381d0a016027c3d396ed71117a89308830357eb0554be6882d0d9b22019a00fe38344493677bd35df69d4317cf6469a56e41395a65258b85544
TLSH
T12DE0267466CEC779654870874AA4A74CD3F1B8179FC93F239B0C8484A542208B2B7D92
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d5c13578e424b855f93273b573033384e7145d496902c19df32eb34750efdbfa
MD5 934bffed419329caf4f2931162eeca1d
SHA1 0f3dd149f6a3c6654af9005b1257cd5cf7efcd96
SHA512 7a0f9f3e61f4df8c3f7ad9a7fa8d44e2d48c873fcf30df101436be1b5608a77512457c87d138cf1e12714fef110c14c289f93a64edc6d003ab56a11dad1fb2b0
SSDEEP 384:0LppY93PBZJPtN53TiRMNB7/zy/m1ZVBtTChBG7D:0LppY93PBZJPtN53TiRMNB7/zy/m1ZVR
TLSH
T19BB27A5A703B0211397E2988B39696364F4235A37058E4BF7FB814A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 440a4135f62ad40fafcd2c62b696c011e4185f8fa232ee895f617e10991d48bf
MD5 013d6184b89e3754024367ab5cb87246
SHA1 1b03bc625baafefec7bd9d8794f7f857b4ef0fee
SHA512 d43d0f69419eeca73ce5cd6a383b472319de51d0aabcad864ff2597340c1c3959ac6196016e85ffffaed828f26013a1331389611df02950e0fb09ec5d2675c0b
SSDEEP 768:0LppY93PBZJPtN53TiRMNB7/zy/m1ZVBtTChBG7G1ki:0LppY93PBZJPtN53TiRMNB7/zy/m1ZV6
TLSH
T1ABC23056713A0211397E2948B7A596364F4235A37058E8BF7FB800A24F67E225CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 e24e5d4b1fc20bf3f820abf00e6583b93df1ff97d20601c4a565873c354cc3ce
MD5 c1d426ce4247ba5b1219f058b1fb9309
SHA1 5f42eb989605cae3ef20112dde1fc493ec33d73b
SHA512 d2c08bf24af81aeb01159186caddab01b18189c43ae67001a7f79d469437fad2b67f489d7625d252caae2263e7109c2044cb25d0347b560341f8f21e48df93a7
SSDEEP 192:P+xWNjJ9kfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mx9fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T11C24740A7B747001EDE6D9725CB080771E3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 f9fe5e283afc3e70ef4e73d2ce1b1d28a6474c546c9abb03a9746fa99de22441
MD5 1bc119c77bf753aa5473209e835d3ed1
SHA1 b2a304a8a3e6a59bc1a466a6bee1e41a1eb9adeb
SHA512 1cf1c4be7caa8cf9a6f58ea6f4c59dcfa4399928882fe03fff01c459995bec9763007a7eea1f15f3aa5ed7efac21ef200bff5126b55fd6f13ca337984df525c3
TLSH
T16B51D6C0A3A95585BF8ABD85D21A5413BCE13E5B220E5CB6633E84F44F84C260E2FD77
MD5 SHA1 SHA512 TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 100KB
SHA256 50c0b9816a8067dcadce784f0bd2d99af58cddffa2f81fe9c88a8ef774dd4f76
MD5 9799199abf9eb7588d85686da8a07ba1
SHA1 f58b98000b7ac637b9e0b23dca253cfd4ff46fe2
SHA512 211f8b7fa031aeb0af4f8cf73cd9c93ab62e5ce02352f3be0ddd72c29fedffc01fe30786873142e8064b4d10d93c2a6788fc1c71b51f18344ac20a7b5e410564
SSDEEP 768:UBswAajVtRl1q1Y3ia71JPQWgct/VniiIRVUFVfzQIY/9SHl3MEnAwaWz60NCDdX:Uj5pPIz2BjHH6euA+TTq6GBXSh
TLSH
T121A340FB6C0A85E6CECD95B8D41BFF04457346218624D8E5AE3C08C37B78A02BD799C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 ff2c354a6197a9b4022b19b406088539f6283474e16b8b8fa9a574aa68516ec0
MD5 080c4a614f7e445ec6dc0ea889c58a65
SHA1 58c0f806ee5b71ce250fdf0152563b37c47c4ffd
SHA512 ce13f4fc19fd0ae47549ba75e2536eb13c9100cc80323cdfe72d3a57095a6090730225a62f9fcc549e65a1b1aa7e4f92afcf210d144dff82d42a085eef376125
SSDEEP 192:mQOA4AsBDl9HNCsMFP4flWQGIIIVbFMIMnuYcYC:GAhsBJGscTQGIIIVbFMIMuBD
TLSH
T15E52732D67017B3BC05E2F7627564B589BD5E8430277262D31221C5F8EF3A5386C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 da32ac875841c47a4c840bdeb8223c226d0409f7bcb84476b42085adcde38866
MD5 5442a9caff26879b9585036d51d0063e
SHA1 363b349a321ab4f58794256fd2ca871d821561ec
SHA512 7e2b7529a5cb41fc01ab409dfc7d49abd23458f71eb19802ef6b88d80ef45474fcfbb3eb7517b936bb821ad7317915ebe64ade3eea735611da982d3a572fcf7c
TLSH
T14CE020187DCDC25E7558308B1D559308D3C17403FE843F171F0CC4C864032447345953
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 f264b767b5a8c271b0802db9abc6793d284d82b90570002ef8bdf1ac224ab7e3
MD5 03e9e6638374281ceb4eea55df987b41
SHA1 865e78cbc9fa0eaf8f09f988f814e5b02765a336
SHA512 aee0903908a372b7a95000e458e163c491226306d605d60e0440d3e5928bf417e72ac9d1caa073342b0b4f9097265dc34d46736381a0ee5facd7b8f0d311733e
TLSH
T16FE0201479CDC65FA155309715A4A348D3D27803EE857F131F04CC8855032857347993
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e195adfc6fa59fbb44e52cf0618495fa119c73fbf9b397568659f4d339e8cbfb
MD5 9733c8705d1eeba56aa676de1b6f75e7
SHA1 9c151c5dbebe57d6caad91b1396871c63853af3d
SHA512 92cc28f2bab08a9f8aa92948eb8425cd5917a39c0364f23bf3fe7d35a88c60ed197d5f5317f8f0d5d2021a7f0d347531c3c56efa7fadfddf9db198685ec1b525
SSDEEP 3:MsEllllkEthXllkl2zEflo6Va/l:/M/xT02zZ6Vat
TLSH
T1224404147FC00445F50010344051C3503371D4F0551157C334D104335CCFDC00D40000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 165f0dc05dac174910529ec2523d4045951d9d56b11cb21f116b3bf4afb16a5b
MD5 6224c94cceb1be3a0cac1c82e9d668d4
SHA1 f06e8e4565dd0448200ae823793fd48d0ed51890
SHA512 6578a3d583df557ea0cbd834c5140c3313ee0e99cd62f6b6013f7d4bc60bd5d386583844f0729ee9a4cff8111daab7bf52d7214244f4367cc5748e3618f4a4fd
SSDEEP 768:p2FOcpPOwgLkAWoGgLggmXLiHDSAlCK4GHqnewBKZO92:0PmaeXB5MjgqnevZM2
TLSH
T102F24971E859DDEB98D6DAC8674AB543ADE00173859C8A9CE6F83D3C309F0BC070B925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 91ea2728d562986ff9f420e19b5e48b0f59466709fb5942746e1bce33795a798
MD5 1a0d9ec53598ea8b0172298efbca45b1
SHA1 e2c7def24645dbca735748ac34f836f14ef8c781
SHA512 13e19206559ebf8f7b8ea87c1f1108298d2cbde09385ab0d02b2262934335646373c59ad0b67861d33325f0c3c6b8ec1f0d7729a8e85483d1fd2e3fa08004827
SSDEEP 768:pZFjcpxewgLkpWoGgLggmXLRfSulCK4GHsQcnewBKZO9T:kx2VeXaMjgsfnevZMT
TLSH
T181F24A72D8989DFB98D6DAC8664AB503ADE04133859C59ACE6F83D3C309F0BC430B965
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 a3b24d8718d86aad2f979277ff3c5e6b55e87a6c118e2a139812069625d8401f
MD5 6293b37f96cb370f728b3d28e712093f
SHA1 638e0554ae1155da212973c03b31136140df7fef
SHA512 78780fe23359c8510861b7a2a9618e0c9ebd28dd8602aff1ac049f57e1804e3c3ebd1a93f2535f8879204bfa07fccc5ed84646b7e654fd2a0d9087dc0874d326
SSDEEP 768:pTFccps3DwgbkUQkoGgLggmXONwI8p0KX:Vs3NheXpwI8p0Q
TLSH
T116B26C36EC58DEBBECE74F89B74E7A07DEE41227859899E4DAD81D0C109319C130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 04007d4d1e482b26b080fdc70720ad600f3eea7e5496c2a5acdba44cbfac4efb
MD5 5798be8a1d8aaa113c24d7c72d64b121
SHA1 8863c5e40f15e7d184af0996a5c31c109b14e2dd
SHA512 cce21982302de91eeb51e5d5c0003fb7fea069b737699d215b1aa4cda95fe040d4375803fb55a63e43df1db896a5d82c153d84a32b4b9046912aea1545b2ea66
SSDEEP 768:ppFccps3ewgbkUhzoGgLggmXL0NhI8p0KX:js3wfeXLhI8p0Q
TLSH
T12CC26B32EC58CEBBECD68B98B74E3A43DEE41163899C9AE4DAD85D0C109319D170FD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 5c5bba99a085a04c1a8a7b1832ddb686a69c58a1eb57ea342e37658ee259b778
MD5 186b22d62219b76a3f749a139b5580ee
SHA1 e85c887ff91ec26faafe84d8301350bbe8681913
SHA512 dc57ba61d17e65b03adb453a3866ed6f29fce3272036f979c4169b0037cd94db29770dbf0984f2ffa64125976bbf025ce2d5b75f39f63b8ad021d9e4204ce1a2
SSDEEP 768:pZFHXbwg5k1WoGgLggmXL4VSXnewBKZO9pX:dXTveXwXnevZMl
TLSH
T1B3D26B31EC68DEBBEDEB9A84B74A3643DEF40163D8D85AE8D5D95E1C009319D070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 192836cf8ea9569d1cbde530fc1a5ee1fe5aab7425b8d9234a1ac981cc844556
MD5 730c92e21f885bbe48290c67f9adc816
SHA1 377e81dd9c2c657cd67ab92034246d25dbee75ce
SHA512 1f20aede0663a96333b2d5af096732a6400eb886d3fa25eeade55707c39b2d8be397c935279ffccab1c1ca0dd25f3945d37f6dd71f6504e811f605a34e888811
SSDEEP 768:pZFLXbwgOkZWoGgLggmXLlVSXnewBKZO9pX:NXcNeXtXnevZMl
TLSH
T189D26B31EC68DEBBEDEB9A84B74A3643DEF40163D8D85AE8D5D95D1C009319D070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a0895e995a20f376fa32b8734c6c93cd48fd29ea4e6f0ae00d5e50074c22a76c
MD5 8c49fa8f5c558f2a880e941e7c571ae3
SHA1 ceeb8155373c6a6a9f8624daeda21d48e0545d6c
SHA512 d6c5dc0bb60eb87ab663522d3abbd909d0a88ac8a3cf48060ff89a07336ad7cad5c1bf24bdaa504a4116b17ed74678ee94b78f8b619f74fdd848e17178a76b69
SSDEEP 768:pZFoVbwg5kKWoGgLggmXL4LSDlCK4GHyvCnewBKZO9pX:GVTMeXuMjgyqnevZMl
TLSH
T123F23972E8949DEB98D6D9C8664AF503AEF44133959C5A9CE6F87D3C309F4BC030B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 b7279bce86331b9f328a1d9b0db9e088ab70e7d537ebf4546889adbd89d5ecfc
MD5 fadbf4a84d7b8ab1bf7edc84c7b41c14
SHA1 da667906234767001f2dcbc728795b7152d0f7df
SHA512 781e3fd8c137827ea39d65b64647d5374b219485a5582f5905741d6e6230ad14ea45581de30a77e03489d5928e60e9f6b61e0d3b5abd5976d4128b781e78dcff
SSDEEP 768:p2FccpqOwgLk3WoGgLggmXLiNhnewBKZO92:QqmxeXbhnevZM2
TLSH
T1C5D27C31EC68CEB7ECE75BC8B74A3643DEE401A398985EE8D6D90E0C109719C170BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f131a8863be0ee1afc6f100bb09887a79d6d6a59f40840b58b749a865f9c2957
MD5 0bcb36d79d1a90514dd6643fb9234565
SHA1 a839665ff59ec3e1b88a7b714af85c4e62b82185
SHA512 fe0f44814ecdf39f8907a8de5ccaec89133a7dcef77a69b69456639cbd2fc2c7120fa73983d35b151fde992c7b981c7dd2ed1c6159e5829f9665743c9bc6847e
SSDEEP 768:p2FOcpPOwgLk3WoGgLggmXLiHDSAlCK4GHqnewBKZO92:0PmzeXB5MjgqnevZM2
TLSH
T143F24971E859DDEB98D6DAC8674AB543ADE00173859C8A9CE6F83D3C309F0BC070B925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 fd183d8d4cf929df2eb6b95554e194b41d2c5521cc867ac02cbc72d128e05507
MD5 8b13047a1aa9068eb803e39d35886351
SHA1 33e33c07fa40fc258c9aaf0287866fd305bacfec
SHA512 b9b15f3300a45635a9c6b7eea098bb50942aa9bb4d758a1c55139f4f45f5125e1e56825f9fbb55835ca94496bff18c1d599f87dbe1f2597fc5f9434f63d1805b
SSDEEP 3:MsEllllkEthXllkl2zEflsgtl:/M/xT02z/g
TLSH
T11944041CFFC00405C71015344051C3503770D4705D135F4374D114335CCF5400C00400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 353b62271a7ef6a96845edec334b89c88fa8f81cf02f2ecec5502868563684cc
MD5 4cd369d06b57f23a9ee63b30762bce78
SHA1 f962bcc5a299afe34d46b851a14b8ae1e221ecdb
SHA512 00e6dcf403ca742c9d200303a896fcc8abd62b9cc6ae1d925e60bc0779da7e6cbd82ec1e7b457ce4f5808668f3ba3fd0c8e52a98838227fab5b98ddf71994261
SSDEEP 24:U+4fbC5ftnqLo4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uww:5pRqp/IHRH34kWqB1kQnjhHmr6ITmUL
TLSH
T1CA42766EDA2CAAA2FEE00B3ED7D1D4127B3AA60EC2E4D9F1099B505746C440405DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 673e613c1a567c158146f74ce46b47838ae5fd7c095a57f5d6ccb078d5ac1adb
MD5 3d0f6319a57eb7b76da1893cf3053ecf
SHA1 67099e89521638274bd09ddac600dba836481e76
SHA512 8b9fba802d4a4691c31e4e170ba1e52b5f11b21fdaf92f145166f94b17b417cb02dc8b05fe63705ee53a4886b77a3e2e010b0f61d9f38a77a5813857adcd595f
TLSH
T11C412D98B6F92148B3B76F5A9FF2B86D487EBD772E06D45D10110E4F0626B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 34fd398506ec3e17a3a6983fb4cbde2dd0132952d777b951952248d7b0e5e73d
MD5 e2b558d73a77f223ea1d3794758243ba
SHA1 0335fde324360b8b47a6a69b3c8e470d4b017a7c
SHA512 493e47cba15578538324c450b484c9533e0e19ad53d3162d217e87dc5af7cf9a6b71924615ea7fb47b195a7bdc7aee777ad027c82b832f478d87047a2adc65af
TLSH
T10C516D5CAAE91058B377BF5A9BF6B85E487FB9732F06845D10100E4E0662B40CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

CUSTOM.DIC

Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Size 16B
SHA256 a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
MD5 d29962abc88624befc0135579ae485ec
SHA1 e40a6458296ec6a2427bcb280572d023a9862b31
SHA512 4311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f
MD5 SHA1 SHA512

Submit Download

memory/4648-39-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-42-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-43-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-41-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-10-0x00007FFEE5070000-0x00007FFEE5080000-memory.dmp

Download

memory/4648-40-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-9-0x00007FFEE5070000-0x00007FFEE5080000-memory.dmp

Download

memory/4648-5-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-8-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-7-0x00007FFEE7830000-0x00007FFEE7840000-memory.dmp

Download

memory/4648-6-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-38-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp

Download

memory/4648-0-0x00007FFEE7830000-0x00007FFEE7840000-memory.dmp

Download

memory/4648-4-0x00007FFEE7830000-0x00007FFEE7840000-memory.dmp

Download

memory/4648-1-0x00007FFEE7830000-0x00007FFEE7840000-memory.dmp

Download

memory/4648-2-0x00007FFEE7830000-0x00007FFEE7840000-memory.dmp

Download

memory/4648-3-0x00007FFF2784D000-0x00007FFF2784E000-memory.dmp

Download