e91193a83a79f1c53b6049109ad213caca38f392dee3c1ba0e74cfd0358f1238

Resubmissions

08/08/2026, 08:59

260808-kx9nrstdmh3

08/08/2026, 07:39

260808-jgzyysbp2s3

Analysis

user interaction
yes
max time kernel
78s
max time network
77s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 08:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml
Size 58KB
Sample260808-kx9nrstdmh
SHA256 e91193a83a79f1c53b6049109ad213caca38f392dee3c1ba0e74cfd0358f1238
MD5 cfc00507eaefac22ebc190b2afc4d005
SHA1 32aa806a0ed854d0c435176effdf34f4849e7528
SHA512 8ef2450ad5c7f50ba02d8995aabbc17f031013e2b4a0252c938721db2269b5f6f1ba166f730db7d60b88c687ebe7ccd3692adad3a2c29fc1df35a352bcbd4a17
SSDEEP 768:jKtYvg+lt68Nr0Gy/lpQ9xkZ+KgqssoMNWdZUNjGzEaZ5tE4vWd:xvwNGy/lpqkZ+KgqsZIaZQQWd
TLSH
T18E4339E16CE60771E4751D90AC0E7BD279737ECF22E1A085693C8FC6E929EE018D12D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
224	msedge.exe
1068	msedge.exe
5864	msedge.exe

Checks processor information in registry 2 TTPs 10 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306532645284164"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{F9CC6983-173A-4125-B2FE-FE554EFFB8FB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{9EA166D3-21F2-4E5C-B18A-44C6EF4A401E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{A4AB9439-C738-4EB9-9962-22EEE99F0D1A}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{C2BAF87F-659C-4E86-8294-880E3D9E405B}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
2976	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
2976	msedge.exe
2976	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4808	OUTLOOK.EXE

Suspicious use of SetWindowsHookEx 41 IoCs

pid	Process
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE
4808	OUTLOOK.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 2976	4808	OUTLOOK.EXE	99
PID 2976 wrote to memory of 436	2976	msedge.exe	100
PID 2976 wrote to memory of 224	2976	msedge.exe	101
PID 2976 wrote to memory of 4932	2976	msedge.exe	102
PID 2976 wrote to memory of 4932	2976	msedge.exe	102
PID 2976 wrote to memory of 4932	2976	msedge.exe	102
PID 2976 wrote to memory of 4152	2976	msedge.exe	103
PID 2976 wrote to memory of 4152	2976	msedge.exe	103
PID 2976 wrote to memory of 2912	2976	msedge.exe	104
PID 2976 wrote to memory of 888	2976	msedge.exe	105
PID 2976 wrote to memory of 2912	2976	msedge.exe	104
PID 2976 wrote to memory of 2912	2976	msedge.exe	104
PID 2976 wrote to memory of 888	2976	msedge.exe	105
PID 2976 wrote to memory of 888	2976	msedge.exe	105
PID 2976 wrote to memory of 4604	2976	msedge.exe	109
PID 2976 wrote to memory of 4604	2976	msedge.exe	109
PID 2976 wrote to memory of 4472	2976	msedge.exe	110
PID 2976 wrote to memory of 4472	2976	msedge.exe	110
PID 2976 wrote to memory of 5572	2976	msedge.exe	112
PID 2976 wrote to memory of 3828	2976	msedge.exe	115
PID 2976 wrote to memory of 3828	2976	msedge.exe	115
PID 2976 wrote to memory of 3828	2976	msedge.exe	115
PID 2976 wrote to memory of 2928	2976	msedge.exe	116
PID 2976 wrote to memory of 2608	2976	msedge.exe	117
PID 2976 wrote to memory of 2608	2976	msedge.exe	117
PID 2976 wrote to memory of 1012	2976	msedge.exe	118
PID 2976 wrote to memory of 1012	2976	msedge.exe	118
PID 2976 wrote to memory of 1012	2976	msedge.exe	118
PID 2976 wrote to memory of 1944	2976	msedge.exe	122
PID 1944 wrote to memory of 4872	1944	msedge.exe	123
PID 1944 wrote to memory of 1068	1944	msedge.exe	124
PID 1944 wrote to memory of 5128	1944	msedge.exe	125
PID 1944 wrote to memory of 5128	1944	msedge.exe	125
PID 1944 wrote to memory of 5128	1944	msedge.exe	125
PID 1944 wrote to memory of 4856	1944	msedge.exe	126
PID 1944 wrote to memory of 4856	1944	msedge.exe	126
PID 1944 wrote to memory of 5236	1944	msedge.exe	129
PID 4808 wrote to memory of 2780	4808	OUTLOOK.EXE	131
PID 1944 wrote to memory of 3924	1944	msedge.exe	132
PID 1944 wrote to memory of 3924	1944	msedge.exe	132
PID 1944 wrote to memory of 1052	1944	msedge.exe	133
PID 1944 wrote to memory of 3924	1944	msedge.exe	132
PID 1944 wrote to memory of 1052	1944	msedge.exe	133
PID 1944 wrote to memory of 1052	1944	msedge.exe	133
PID 1944 wrote to memory of 6076	1944	msedge.exe	134
PID 1944 wrote to memory of 5436	1944	msedge.exe	135
PID 1944 wrote to memory of 6076	1944	msedge.exe	134
PID 1944 wrote to memory of 5436	1944	msedge.exe	135
PID 1944 wrote to memory of 3516	1944	msedge.exe	136
PID 1944 wrote to memory of 3516	1944	msedge.exe	136
PID 1944 wrote to memory of 3516	1944	msedge.exe	136
PID 1944 wrote to memory of 2556	1944	msedge.exe	137
PID 1944 wrote to memory of 2556	1944	msedge.exe	137
PID 1944 wrote to memory of 2556	1944	msedge.exe	137
PID 1944 wrote to memory of 5308	1944	msedge.exe	138
PID 1944 wrote to memory of 5308	1944	msedge.exe	138
PID 1944 wrote to memory of 5308	1944	msedge.exe	138
PID 1944 wrote to memory of 5408	1944	msedge.exe	139
PID 5408 wrote to memory of 4388	5408	msedge.exe	140
PID 5408 wrote to memory of 5864	5408	msedge.exe	141
PID 5408 wrote to memory of 5512	5408	msedge.exe	142
PID 5408 wrote to memory of 5512	5408	msedge.exe	142
PID 5408 wrote to memory of 5512	5408	msedge.exe	142
PID 5408 wrote to memory of 6088	5408	msedge.exe	143

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://jira.veritran.com/browse/CRPM-771
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2d4,0x7ffcf21ac188,0x7ffcf21ac194,0x7ffcf21ac1a0
    3⤵
    PID:436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,10701646139563101922,2909124502584169123,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
    3⤵
    - System Time Discovery
    PID:224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,11529826958333638135,5827573024538098492,262144 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,4179291461273689726,3375260741427726930,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
    3⤵
    PID:4152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7823695100328961530,8479437608453136572,2097152 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
    3⤵
    PID:2912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7372854017487604743,10380402791134600717,2097152 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
    3⤵
    PID:888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,5914528816674984135,15244998512924259919,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:8
    3⤵
    PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,16482993546027335009,2835135732779038675,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
    3⤵
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9994712962054947933,6256420975059322398,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
    3⤵
    PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9994712962054947933,6256420975059322398,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
    3⤵
    PID:5572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6220,i,16592416640474115469,16863274068002661562,2097152 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
    3⤵
    PID:3828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,17110171435226108579,4071871296159046313,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
    3⤵
    - Modifies registry class
    PID:2928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,6775828196510790693,5717973529357696428,524288 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
    3⤵
    PID:2608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6828,i,11552156876060139262,8813482301462312696,2097152 --field-trial-handle=2240,i,3081976581264479925,12610947004302242847,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:1
    3⤵
    PID:1012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:1944
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcf21ac188,0x7ffcf21ac194,0x7ffcf21ac1a0
      4⤵
      PID:4872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,14721225460445425080,11772771810017599534,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:3
      4⤵
      System Time Discovery
      PID:1068
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,13617325296100961612,13320773360126854468,262144 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:2
      4⤵
      PID:5128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,5875635345392903851,6845949277713624476,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
      4⤵
      PID:4856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,16001921736016528765,12957437087984101063,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
      4⤵
      PID:4128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,16001921736016528765,12957437087984101063,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
      4⤵
      PID:5236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4900,i,6411641778087454348,5697991365385971534,2097152 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:1
      4⤵
      PID:3924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4904,i,17619363766908611229,17438572193601153075,2097152 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
      4⤵
      PID:1052
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,7989935589867921427,4257936104158079790,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
      4⤵
      PID:6076
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,7060551350813647179,10000480363080087248,524288 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
      4⤵
      PID:5436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5896,i,9172006849085507300,17556772038615512429,2097152 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
      4⤵
      PID:3516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5880,i,1208316897067056486,7623690357099632187,2097152 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
      4⤵
      PID:2556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4924,i,2411870461684472936,7103450806113959748,2097152 --field-trial-handle=2096,i,18279285803533805089,629215572084089771,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
      4⤵
      PID:5308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:5408
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcf21ac188,0x7ffcf21ac194,0x7ffcf21ac1a0
        5⤵
        
        PID:4388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,5387063513888595245,1977374548155807639,524288 --field-trial-handle=2816,i,2296778181339949703,6096060338331491765,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5864
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,7382552466536919409,5128862056391246460,262144 --field-trial-handle=2816,i,2296778181339949703,6096060338331491765,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:2
        5⤵
        
        PID:5512
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,17338467470409619893,12921792388107361765,524288 --field-trial-handle=2816,i,2296778181339949703,6096060338331491765,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:8
        5⤵
        
        PID:6088
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,11500399356546880058,714830665497759651,524288 --field-trial-handle=2816,i,2296778181339949703,6096060338331491765,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
        5⤵
        
        PID:6096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,11500399356546880058,714830665497759651,524288 --field-trial-handle=2816,i,2296778181339949703,6096060338331491765,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
        5⤵
        
        PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://m-economictimes-com.cdn.ampproject.org/c/s/fontshop.my/68VBt6YW9zcGluYUB2ZXJpdHJhbi5jb20=zq1wGlQa
  2⤵
  PID:2780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 110d3f52d5ee708e756475c42c9d7696a9f600de79d860a23196205019c54e9e
MD5 91d4e9de75d02eed75be1e704645d7f0
SHA1 d2e4f69a97b4cf6daaa2b363bfbcd0264f01b808
SHA512 469a7fd01e674783f481c9ad0d98d20f9afdc148ecb0a22e7831f840a2bf0931adb051c36568c96641584525b796852be513a5fb749693d1f60dee1ea4ac60a7
TLSH
T131D097F8691AB2A0E03D083260204600B22C06A228A3A306E1AD180CDDB800062CAAC9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 406e7c7edcfff381dae0011c6c736d968f75ef9fe94379575d6e7d534fef8a28
MD5 79c1fb19453a711f80a76228aa029ddf
SHA1 cc58c6b526aa44fbf712bd49a5b3d6b3629387cd
SHA512 2b533049efc6deefdf16676e9b78ce0a9da1e25ee089a31db9602002415956d2a0ddd2ffd8374c39023ba7a264569a0e38288723c0eecf7fca83f200c19fd673
TLSH
T136D0A7F8A746A260D12E09316824A610B76946A038A7D722D079680DA99D028A2EE189
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f4b8c7ef94f92966eadd78c8f7fef1dcd3f4fc4d95c6a380bed809139e3fc66
MD5 575d3e8d2a5579eae9a4e0a10f7dc4a7
SHA1 98e5d6048b1cfb8f106445c87113a4d3709e04f4
SHA512 8da140524ef053b64b97ea068954b18b3ab50fec2ceec94e6c35515032ecd8b4efdafd6b831b57c9351f3e6754d41df1ca10c703fff73efb87e8a5651f7ff1d9
TLSH
T138D0A7F4A746A360D11E09316864A610B76946A138A7D726D079680DB99C038A2EE189
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e71250c7b2abab8f58ef4336a9b227dd909e21ed8f38a46225a081c90b1cf0f6
MD5 425d5a78fb8d35252a7673de64572c97
SHA1 1f3ba567398f792ebc1fc5d39337b99ce47fea71
SHA512 426ec70d72c6df1ffbb465530d85f87ac7c5e2dcee40199b903a82662e1b9129761923fa8af40c34457284a7f2df14b3f8c7289c904624305bcadf14d5970269
TLSH
T12CE02B65CC65FC2708FD0719A04A465BE70013272A41495F3A3CA1088FB463A56C5D5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 50aa1f23aaf8b04ec5878ed5791c9bf0d5db9aa4d5ddd2a4defe4f86129c74ea
MD5 47d299a7d9382a4f1ed6cbeb74969eba
SHA1 b291aaf88e1c633c24435249403aaad9a3fdb04a
SHA512 0aaa8fbf1b0be3eb1ce672219cec08a979207229384cef21c43d191a5b6ad53dc960b778459bbf1041f07e0570f6b8afeb3cf1df2a17c71bfe23035ecfd246c3
SSDEEP 384:XbR17u6/e6dj6FqTpVxrJbWfEHgH5oU4FUKVbpQSMPMpHh5:TNeuVxrJbWfEAZorxtxX
TLSH
T18313A37E3A855EC6C6C2813C4E1B9A75233BD472F5C6AF1337763906572638A0A1EE0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0be856dc041ace40994444f6fe3ead48e89688f366bd50ff4cf56012a6ce0d26
MD5 d13cf7b172d1bb91b64a97600d0a6780
SHA1 df7ebe9fd41d310887f7e9a3fc0573a77a3919ac
SHA512 c0abb8070cd7f0c3e4b0aadc1d582e46e2f1b3d0a1db9a3f4196875c70b9a54a4329e869258775234462297a415da58ce7f7337fea1e1553c3a0ce0ea5a44d48
SSDEEP 1536:hRL/wvxL/+e2TOaW32Qe+XL/C8L/Xk+MR7//DKvgAg+6bm+04+qrrgmI9+:nL/UL/SOaWY6L/PL/VFEh+qrU
TLSH
T1674480F71941A05BCBA802F9D2123A3ED137016D7DE1EDE9E57C4C812825B32B6BDE58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 2a1f071545ba26d74d60d4963082e88c3604a53973d7fbb81df6d50eaae98f2d
MD5 846058454d5eb5b9db2abf8b88d6d968
SHA1 ffa768e5a5bb0d1eb9117edc929fd1e050c004c4
SHA512 50701fe7583542ced6ca17a53e4903ea1cfecab20ceaaf2301bfcf9f6f6d8dce715b73b83f827d1c11c6aba9fc6ca2756c9f2f7f0d8a315840431b4b7bae132e
SSDEEP 3072:2Df9y+HI5/uCBLp2b6aJN3QnlcZc5v5mfPnVLOUmrZjwUld6dQ:Kf0v52gghN3IcG5v58oPZbB
TLSH
T1EF2529EECB682C82CE6B877474E0D9077E712183B68CC0D39944C5D897D6B8176E92BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 787e79749405478b639f900affcb5f50f0520b25faf017ffde2e412989a5e62e
MD5 65a8eb45fc900077f8734b7e961e744c
SHA1 e7920baa8fa81d6975966b0200d98871a1f8ba6d
SHA512 0e4f9719c282f8a973650e4a97cecc9ee510efab89c61eb1bd2f03d3a46443325be5129374fab4c453dc538c2ee72429c8e211d8dde8dcf2626342e03c8d705a
SSDEEP 24576:oYIolGXCYmkVoA59F+LlPygYWAM9PJhe49JVs6uYYMXy/87PiIjKT:oYeJmksLlPTY+Py493sIYM5OdT
TLSH
T196867DEDCA6858C3CD639970B4F0E9977C7413C3F595C1D6885CC28402ABBC1BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 96ccbf43874fede30d6d2a7050ab7e832423e1cd64c2f86f3a9beb8a8b4c50a2
MD5 d36fdb9e1c2ccd3442f5025158de7a8d
SHA1 99268e5c55d146560cf303ade3f11fe39aeb70ce
SHA512 2eeac578f7aac84354662893ebfc00a9316c1d733ed2dc6a32c7eba1ab3edc7b81e3781c61ce4207374a9ddde41653649764d949c6bbd13ebfc1b725463e77b8
TLSH
T1F471A338399187E2EF21C2BD7CD50A60B4732EDAF5D34E1A11543CF9262EBA6C1562DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5939e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5939e2.TMP
Size 3KB
SHA256 0dc0903b558ff024ed70c27ac2921fa26d6c94272debc026341caa9cfcc2c9fc
MD5 d1906e5aa94f79e6f16517843281491f
SHA1 cf4228fdf13302ef72d38e26ab622ca32c3066f5
SHA512 eebbc09b90a95c2ff803b3a6df3bb0ff459a383c100c0998921ffb7123b6531ce1e462a93d2a3cc07a70ae889502c609cf9d4fca47c94e58e70fdca88b19a240
TLSH
T1AE51B3383952CBE2EB50C27DBDD4069075736EDAF5C30E6910603CF92A2CB62C15A2EC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 469f847f48ecfa05df2deb2aa9e69ca33e14df6ec7e7034f03b08e869f3ef4f6
MD5 275295e68cc4f15d8af85d899c0bf9f4
SHA1 eb261610631fe27d4b5f9238b4f7622d3c8cbedd
SHA512 3cda0da2780c0da28f85f2cd5a4e65a864ef8401bff56c74fc87085c7e8460248996cee63bd13ff7e439d64500d9b4fcdee3f69f3dbb622bd13d9540444ab46e
TLSH
T154E0D8D475CFC15D5E12B48752286B48C2C1349ADBCBAD033B04C8E47E42415F683A56
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 35bcc274d5df19789f08690366ee98e89d44468a82003bcce8fa7f5cec827bb8
MD5 70591a2322be1eeb5c2c04264162b9e3
SHA1 a0e944e68679ad4551538c350016128f56514f2b
SHA512 a62531168efe880368b3f7b74e2bc3be48b4af7c22a2421ee0ff91b07412522b071042e3c9bc2cf1a3c2698a2478e1149ccfbc7a291c2958c172c8bdf4d275d1
TLSH
T198E0260415CEC16D982B78DB966C6B08C6D2389BBB8839432708CC407901F49FAEBBE4
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 5b770625a3208589398a66f2eed0f351a2f0d11cdf966bede0bf77362b0e3424
MD5 ab574223d29942eaed669cc43a81d762
SHA1 41c97b0351c1edfb7dcf245d44eebcac11cd9a50
SHA512 91e6e9f3630b46a5fce55b2599f68250652672835c719a99881fb0e2386d61e8adada591adca7651c6832e8cf0683929f5b862fc68b6b48fade92b8709ac7aff
SSDEEP 96:JBC2ipwDvZRCSpAbstD3CriMGaxsixkevZRHyS:/TipwDhFhNaOixkehl
TLSH
T1BAB2B8A39D3CB616FF410A3E34ED107C7F36816C2FD15E14B13A1051A9BCEA5762826D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 ebd2e975cc563abd7b978dd60b3dee66927d0eae6b52eee661fcfe02dc9e834b
MD5 5c5c7650e3be0cd6a6468377a53c3749
SHA1 c547829435db24f2db932d5a040549314524039e
SHA512 4c0368e580be92294f5e02198d2d0cefcd2f39382508f6af0a8b413f8912b4d08120caed79ef0f191d88db3d08e920b2c0f01c18ea6351d21401fbdf55959061
SSDEEP 192:liIhdtFf7f+G83uy3Ct7XBBKZqhdiTSkt2tEtqtitdtgH7DXspU3iZ:VT/83uICtTBB37DXspU3iZ
TLSH
T10914766F5F742315DDBD813A38EB00E67D7CF03F8B525699A8720460CEE6A92A01C5BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_id.atlassian.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_jira.cloud.veritran.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 1KB
SHA256 ca95efb88e9d148814efb13b2bd62bfedad971ebc117fb2364f5a26106515ce9
MD5 7ae536fd103d0d7263e46715dc786932
SHA1 7c8ae55d9a1157efac6db248f4f5066cd9bf17cf
SHA512 1c5efdd4d5e36f73f7693c7151bc8432bc600f37a95e790f5f0b6fcee733bc9a40a597a58de7dd27bb3ccbfe9dfd0c248a935e2c1c9788913eb19e21035270d2
TLSH
T149316AB390289E34DAC795B910E975E8F332503CAED8DAC9E33FB6014B592B4A5589C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 b0c65a7a8af13c8207d10e6bf819ab46fe89b11710a28e74cd2761d7b857c104
MD5 249e13cbe1eae213018e9011b1052a07
SHA1 47123979e1484589f5417fbb67fd13ce5d24abdd
SHA512 c516d214c73e162ac0e50b2b82f0df63ecb7dddf38007ea722d00eadce6d2e148e545d26e77b0269b12725048cdf01467df6bd3c8ce6f961a9ccf35a595d1b46
TLSH
T1A2E0D86055DEC2AD5A05706B925C770CCBF1340BDB8A6E022B049841B40245CFBCA7D5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 c1d364ba75a7f961e98e17358238e7efdc4c6482096a1e6c258dd3162d0eb5c1
MD5 39fe56d3ee7922d497b56fffed11b874
SHA1 9115ac7350f493c2e6e1ba7eea83190cc7b85ef4
SHA512 6ef68c1d2458fd21720c4ad7963e4c2e487e4be14479b7d56ba0711be14bb626c80997f74cf7a6c1bda2f9885328d44cab9cf1a49e13bf50fbc4561b8975fe6a
SSDEEP 96:iSeMatUaAKPIozccfNlSPh7N8BCXp5OTutdbWWGFaA:iSLaSaHPIacoNl/m5DXbWWc9
TLSH
T1FB92C86E6E302125C0E7CE7584E845952E38142CE75FFF86B80E61B38E75746FE111B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 151203a9854cc7021dd2e677842a5db68ae721be6f6fd0cc56881b57b4da2731
MD5 0db87957fe06ca40787297605bf4de8f
SHA1 aea0583e303e0eedb419569d68304455d0795454
SHA512 c7845ca44152cd6bd81031e982a8f000679d827b8151dc48f9bc2f1b1cd9f0aa9a893441fbae34a3819689886552cc62692c3f814b57d2c44d94114f567e0e8a
SSDEEP 192:D1V6yRIRYd7e/h5fvdzaaij6RRGaH/xpV4EFdgeyUty+gF1MGT7Hk:D1VdRIRYd7Sh5fvdzaaiGRRGaH5pV4E7
TLSH
T19612A0B7D3E59A2DC81255F49B28BE2BCE1D0519822C3D2AC8E9BF57D3D2C31E10165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 5e9986b063d8a9550006495e03db4b71c8cad2a42202644b6aea2fd906eb7f63
MD5 2ba1179b0e35aad3bbd62a2dfbc2db38
SHA1 ddf887a856fe5569644bc734f9b2b95e89b06870
SHA512 b0920dc89f6e9d81834311ca831b1f0347957c9d4956e3cd5991ea49a1d9ec5d703d40b3cc241637ce8df6748db2a651758b37170e304fe7ee7eee33aa738603
SSDEEP 192:D1V6yRIRYd7e/h5fvlaaij6RR1LlaH/xpV4EFdgeyUty+gF1V:D1VdRIRYd7Sh5fvlaaiGRR1LlaH5pV4n
TLSH
T1D402A0B7D3E59A2DC81256F49A28BE2BCE1D0519822C3C6AC8E9BF57D3D2C31D10155E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 40074ceef9bc3181b53658b76edddaed05b7638b3cec44c64d4fb9c967a17718
MD5 11e27c44ab01cedc5cee588732a965e3
SHA1 8b872b99c5c25875cecbff3af8b5149a601d014a
SHA512 5c00c7b1158c13378d5bc89e231004a8cb42956085beff4262269d4e445bfaf57e8e5b8fc1b5ec19363412083ddfd1e03053429c4fc1e7c6ba458e3c7259cc28
TLSH
T15E51CC9BC1BEF56B106D9ABB2D043C0417A5B8351292E8F5EBA2816DF0C35F353118EA
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 2702744f90951b7402bd43bbe8785fb5e7e22ce5bc595c3de2fbaa451ffc9aaf
MD5 4c59ca2cef2c94fc1239b84af00686c9
SHA1 1a47ba2a2886e2059e79ff7fab3f8fd2544bebe8
SHA512 af8cedbbf574564b36a86112f3fcf8ba7f1fc73f3aafc417e1cee95fbdcd8c4df43cb49ffa5278bd2fc275594451a9daef6dbf3c5a56e85d1e730305557f56dd
TLSH
T117419B9BC17EF56B106DDA7B2D04380417A5B83512A2E8F5EBA3816DF0C35F367114EA
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d3b3f1bfb160e24bffa847af8b362c3b939514f3487056176b963c73ea499f82
MD5 675084194e19de56793c9f7341313f59
SHA1 d0dd3f21d1de1332c6893139843b74150c95ab9e
SHA512 6e4637a55c3deeb183590f625071cb2564a1f7c682d67710432c937cc46d0212a95a81d79eb5dde8ebd289b3e443611803cd2f83a817f064452c5797118788b4
SSDEEP 192:sxZ2ReyMqZjK1Ml8ujO/fQsAWpV28aZdIaRuv6zodp+3/HW6+WNMbLq0RH/BeTwQ:sxZ2LHO/fQsAWv28azIKYBcHb6/+bInc
TLSH
T10382F906A938697B8DD7D219F645BB53D3F9052691D04E44AAFC9E0C05EB7ED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 f6fd3e5217c584f07c3a287dda119cf48c433f9d705d0e8ee6c7391adc41b4c5
MD5 4620cba537eb9655ed59aa78154430b5
SHA1 43c22f1ebdf6d75a4ba259761fd1d9cc78eba0be
SHA512 e9059b7e78ac2df7e65108f9563960464166eb8493fcf74451c215123c8e0c88c8bb9aeb372eacb67cd197c3c44c67b972592e2a6777f5d8fc735c112fd87e5a
SSDEEP 384:sxZ2EiO/fQsLWvS8azIKYB3HbkZCV8/xeInc:s+hO/fXYS8aziHbkZC0x3c
TLSH
T13B82E806A938697B8DD7D219FA45BB53D3F9052691D04E44AAFC8E1C04EB7ED320382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2f3dee678a5b1bb6bbdab8df8a9aa2399f6e96fcaa675746943f625e453dd8be
MD5 1562828457b5f354880f3acb2a9823e9
SHA1 b8208501c2341cc1c97f7845440decd3a11a8cc7
SHA512 ba5eb98cb2bf76c062db39eb382977a6ca7470b8f83d42ab5dbad6056220d260e107de38be92e0c8b3d0c4fe06d77e4b3a6e606fbba0b9df25d841a3dbb7f6b0
SSDEEP 192:sxZ2ReyMqZjK1Ml8MjO/fQsss8aZdIaRuvTzodp+3/HW6+WNCLq0RH/BeTwvluFN:sxZ2L7O/fQsss8azIKYIcHbs/uUjc
TLSH
T18D72FA166938697B8DDBD21AF545BB53D3F9056391904E44AAFC9A0C04EBBED3203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 9d83f5f36443a0bc18dd9544202462eaec49e5f83837bb4d866c8acdf44e7134
MD5 b676d043086a437db31d31bac14df11a
SHA1 fa2c977d49b928c9b4a8214bf5ca571df2f900f6
SHA512 4500ae5c74f7c9a9dfc2c9bef27fdedfe4f9249fe1485ba347a5a648a3ec4280fc86a2043e1da6f65d625653418315ac14db015f7cf368572effb91d3b7bb40b
SSDEEP 768:ZYsv8OdF6ssi7pLuLnFhWvFvQX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYysy10LlF:eY8Od/HEnFhWvFvQXu1jaIt10Lm2NuPO
TLSH
T1EFF2FB3B6C0CCB7E4F844E9CEC2A7F8A6DE802CB5698895447FA844C02C76EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 08b9894232ada91e3c22d2f014e0dd1c04d8ef23c08212bf9cdf9c85cf1a9d2d
MD5 d024336b24f459fc458596ec54ca2d9b
SHA1 1b736bbb7e228d5c451dec240f1ef808a9b948bb
SHA512 2815909a4647dade0120a0b1e6dbeec84b2957e59d1c7e61494cad8e10634e596eacfc19894f2f7dac04a7f65e9c6b9e99e6b55f54ade0755ceacb05f91dd2aa
TLSH
T1C0E0DF9019CEC27D782670470A28A308C2E8B44BDBC839026F01D881A546904F9D3792
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 172B
SHA256 60c1304440a819304d1372b3e50629c4060aba95910c7c996334334050860725
MD5 8369eb93b384fef34cec8adf81acd1f9
SHA1 94d655732f7e12c862ec01a4e905a29a8bd2c600
SHA512 ceff7ab36a6602cbc6d9df3553747a51a42ac04f7664b1907785299a229c0b7269591c5c6ff29235288aba2e482810c8fd19841b5e63a789b86b23395e34a3a2
TLSH
T110C08C44BB88927ADEA127364A68CB49D201F08320694533C828EF34CE1A39C6E808E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 915755fc14d8f53f2f0dad27d5eba60b064b0ddcfeb2e35a780b9bc0d607e6bd
MD5 e6f1b9290cc4d8400d26f93f1299d959
SHA1 1f7645cb298b124584efec119e58ac93a083c725
SHA512 8296ab6240bd43af2e9d9f4991da9f29119572d924a7a7ca5d5294572943a81c75e26a776760406ca46b1992ba7c10f0313c5375243bf605db4ed3be2888736c
TLSH
T1E8E0D8B02ACFC72A694B308B6768F30D81E3B416DBC969127B08F990A206540F6C3751
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 bd9dfab28a14ab3872203fcfbc3e75520d5ee82b45472b3669479d9cffd8e64a
MD5 e543a400b3e62f9ee85c5a8f056ffa93
SHA1 64bf6c7a53fe11ce2ebd53ef8b22c0190c372a74
SHA512 9334ac3b2b252fecae386f0a74323e34b8cd1e107b87d9678fcd801ec39e8c5152015741cb74031299ecdbf67de0bf85ad79f5b9b7a4d63b88e3e25354b1ef1a
TLSH
T160E020F059CDCA396C017087466CB70DC2F0F84ADBC67903A7089445E602500F6E7791
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 874b6d9c702a8162e430a111a3f13c818a92ac656678716dcd27a0c5e4d9f63a
MD5 32900f343ea1686235ab91583a01ac58
SHA1 5ffaf397d33bc7e64c2e69fe69e6c4c4073d6e44
SHA512 6c2de5b4f3f8707f5631be9a5abf4c60c24534a674670acb236632bde1c3ee6d7b5f361a6d5d61b94449d3d23ecf887bb082e13c7d864d3165a91f1cf5b32d2c
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGA:05ppxnY753RNBvRJJdt7p5J9D7n4
TLSH
T109B2795A713A0212397E2948B39696364F4235A33058E4BF7FB814A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 fcba82e59b7c794977de623f4a301748d67ee2c5398298cfa66b374a7423e759
MD5 595120ee09d997cce166d27b6a18bd77
SHA1 efaa769f0e7415add285e75168687212acd2475a
SHA512 633e1a2f15c11122dea8e85d8f74d0ecbb94a47c5f956e1174a435ae86e1e650ad59219eabbf250572b29c86185368f17592569d65d7bdfe7ac16e8ce20380ec
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGW:05ppxnY753RNBvRJJdt7p5J9D7nQfpr
TLSH
T1B4C2535A713E0202397E294CB7A596364F4235A37058E4AF7FB810A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 fe1a7f19caf3aae79651e7ceaf83d06afa3aa3ebff35be9acc7857f56db993ac
MD5 d349c23be6a29e1b4d1326d6ce7d7063
SHA1 0f5304ccb663328ac2edea673f8ea109a3383de3
SHA512 f50aa61e4aa688c2f6010eea595cb245267f660f35e3855e59a2d88a5fc865db7cb0f98aa487b48e49a2f81d1fb86c37c28dcd53f47b98624bf030411734866e
SSDEEP 192:P+xWpAP3fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxQy3fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T12324730A6B747001EDE6E9721CB080771E3CB16DCF22A6915DB654698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 3e20bd4b49cf2e3aab1e8058f2159bcdd1315ca4564af19c7c9814db18ec4806
MD5 a9de5e87fb9d4e88c500a10a595335f4
SHA1 480b3c0ada51c4283d979dc2145ff35c8ce3746a
SHA512 e1b52d1244dd650d675b9c821685576ada46bc548041829478bf60ea942ec3f7d25f24cd6b3744075ef47947b3783d0c44d0358a25360471a17aada819ef8514
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBg+I2RJZRpWyyJUe0I2RJZRwW:DEtSyGhp22iSrvZRpWydvZRn
TLSH
T159524EBB9C78672AEED2833969E810D43E69843D8FC48B01616E31214BBD9843B1D48C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be47eba4-46fc-42a2-8fa0-d8f7b460df11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be47eba4-46fc-42a2-8fa0-d8f7b460df11.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 95071018771d7db0359ace9ae5f9f26635828bc9ca6be15a02adbeb19a5e56e4
MD5 c2be07ea1d7045c6c17541d27b4113f2
SHA1 b4540afd98cf93f0c7c6497025c149b16e38ac7b
SHA512 21f21f9dbe6558317ef718da14b72f6d5799dd7a3b5f6d623dfbca3e1136e9a80b12a362ff069926aafce6cdf60e3ecdcaeac77c49b21c88d9ac60c36033a2fe
TLSH
T1A25195C1A3ED50956F8BB985D21A5613EDE13E5B220E58B2B32D44F48F84C294E2FF35
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 1737e31ca9c504b2b7dbd11228fa597e05a5107a3323435b2c6046b580cc50f2
MD5 94ae8831dc040106e59caf00bd8ba5a1
SHA1 83b32ab52da2dfb14e07206b12609585a6070427
SHA512 a232c57eb2e488578aaafb371534565bae156a1229f49c2d52e189466f57bc5002eaa4f770b1058d40ec62724e39c40eacf8ea09ec73760cc9db3c70d6fb385f
SSDEEP 192:mQOA4AsBDl9HNCsMFP4flWQGIIIVbFMIMnuYcYCM:GAhsBJGscTQGIIIVbFMIMuBD
TLSH
T11B52722D67017B3BC05E2F7627564B589BD9E843027B222D31621C5F8EF3A5386C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 0e4eb578c4b3b0fa4792a5187b79d204d4c1a6b2240ba0185e1abbe3fab866f1
MD5 8f44be37afc5eab8c04152e07803e751
SHA1 3dea4c75f65a6f61f64ec4af75974aeb4c66b93c
SHA512 42ab9d583628c706c5fdc506722e8855339403f2900e69787c9eadb92b9848cab1de33387b80d2786b7e332e4c6b4b1af21ee18dc9932eb79ae18e1f20d52e44
TLSH
T1A3E02610BFCEC26EA815308F552D5B08D3C0380BEF8839072F04C884A442908FACB791
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 9076d2d08f9e16f1fce2b6c1e0054c131c8ebad4c117d460c8a06b104020e431
MD5 d85d342f1cd89b274fd249b91e71318e
SHA1 d22b956b503f5713b53853f7a8af0e8f6b99f093
SHA512 e5c43279f70ccd3b8feafeed6db241eac048a488e919183a96d2f6b5077eb6ae90bbbe56ae53b882882ea6d5ffb8f2400aa4594deb26a64a2b121b6f1762d209
TLSH
T1BAE02690FECEC9AF985130A74169A748C3E1381BEF883E032F00CC84A901949F6EF791
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 b4cb0f764d99247b247806278b9f6e35c1eb68bba2040402c3f04d5fba261a89
MD5 90b984e62bff6b0dee4a4a7e8e537436
SHA1 c194688f4331618c449bb605a6423e7aee335ec0
SHA512 2c7110bc6ec5927d9a715e9caa5ab51532a08ceb81b7ac16fadc162d83ee8b82e19f42807aff66571435bc35a7ac50fc79db7a24d7113f6a22f249829448af06
SSDEEP 3:MsEllllkEthXllkl2zEflNW1gll:/M/xT02z51g/
TLSH
T19F4404147FC01C05C74010345051C3507374DC505531574334D144335CC7544CC40040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 db9b366ad16b89d81da4f7bf6d2363a7d70aa4720d9045391ea5279894b76ded
MD5 9d19bbf2d434376d0b001e0e41780001
SHA1 f473453e6af32f6065da6a866a9e073ecba4e09a
SHA512 1d3a61e2dabafbacd06647905a8da7ac8cd756dc245ad97d633e46cc0fef6bc3b3b9022a37b0cb850d7944e458ec6257511bc8aa7b496aed5080fbd5a92a1786
SSDEEP 384:npviF9CcmyWCs3sNj8TUNTUlIm2QckCr9lCKphifGGY6sKmpwe4KV8p0lHrty/7a:p6Fccps3CwgbkUokFGYa3I8p0V7
TLSH
T155B25C36EC58D9BBEDE74F89B74E7A07DEE0112785989AE4CAD81E0D10971DC070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 08e1784139758a7210626840f3b6ca00f226fec41e129ae35bc11a525d831bbf
MD5 557a2c0f0186e6c52f89cc1c0ce6152e
SHA1 b58d930993aa911050f64bcdc36560da869616f1
SHA512 ed7e6a1d605443220224048e18a84087b76a289ec5c0642e0f1bbafb00bdb4ff14135227fb536864afde65d8983a19c0e234975172a3ae2a84261eb65b3f46d3
SSDEEP 768:pcFV83HwgSkaDFGYBCBwSglCK4GHCnewBKZOlf2:Y83ABxlMjgCnevZof2
TLSH
T1C6F22772D894ADE7A9E69EC9574AE607AEF01133859C4A9CD6F87D3D308F4B80307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a06a4d6c6aa33e755d6d042e9a572ee558b3f9b4300768067ce7b9023daac979
MD5 5e78eafe0f11f998505b27c4b07e27de
SHA1 72a56c83cbfd068ce5b206c3183f15dbb308f4d6
SHA512 13cc1d2950b6402038fc18f88398bc35ffc7d92caf6167333d6fdce6e18c3d5b0ef3cd29fbcb17b4fdd14a189dfec32645cc473d33497aa6b5af38f080bf59f2
SSDEEP 768:pcFVQHwgSkpDFGYBCBwSglCK4GHCnewBKZOlf2:YQAUxlMjgCnevZof2
TLSH
T1FEF22872D894ADE7A9E69EC9574AE607AEF01133859C4A9CD6F87D3D308F4B80306C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e72d676cba8afa47054d43872e2677a53ec11f39c0e42944a71055ea8704f58c
MD5 c0301f968265ecf734cd0651e27fa91c
SHA1 0c4ef07cfcd67762924e374b30f2259da84b7a61
SHA512 295e0096fe9de22dbfcc626f9062b051dcb5d7b1a13c1d527ecea710fffc12dbcfa1bee0a359fdf8b5aa2968348394a264215852058b17d45357584a56e058f6
SSDEEP 768:p1FB0owgGkoDFGYBCLPSZlCK4GHmvjnewBKZOlDY:D0nNxnMjgmLnevZoDY
TLSH
T1C7F22872D894ADE7A8D69AC9578AF603AEF04133858C869CD6F87D3D309F4BC4306C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a37fa5b6e5df9221b900c8253ca7cd478e15a944377bde40bce3648dc3f7d7a6
MD5 268659c5b0630643d243ecf3bc3ebf55
SHA1 5482e94bcd4612d229799a5429f1f884f9b996ad
SHA512 0749eb8d3068fc5a1c03e9c8e56f144881b1da3439684cb8155f0e95ce38c41be574114cc01d366ea95874707fb0f085edb0dc7e014c0b508d275ba99e8fb3ff
SSDEEP 384:npViFiZcI83sNO8TUNTUlI49QckCrbFNphifGGY6sx8rBmnTKwBODNZOCNUqty/S:pcFQ83HwgSkEDFGYBCBmnewBKZOlf2
TLSH
T1C8D26C32EC68EDB7FDEB5A89A74A3643DEF01163D8C88AD8D5D85E1C008718D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 15307806a8f7dbffd06fb36d98bbcc6d4b6d06757363763d7d46650e600fb209
MD5 8637d503267b1ef156fee83770a98340
SHA1 8eddb13d8f37e5af26cff070826ee6afeb524b7c
SHA512 88d544e60c4719a9a4b18ae1032dc32184d1cad49a7090c037b057e91c992814c94d42c0fffdaa8183d4d05acb68c6f44e878473ef3f803d3c08c5f2f054c08c
SSDEEP 384:npPiF9CcmyWCs3sNS8TUNTUlIm2QckCr9khephifGGY6sx8r/me4KV8p0lHrty/O:paFccps3XwgbkUIAFGYBC/mI8p0V7
TLSH
T1E9C25A32E858DEBBFCD74B99B74A7A43DEE05163898C8AE4D6D81E0D10871DD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 186fcbbb9832fd8ed6ae88d88a94d2c8cfc0d3a4580cff0f7022d9b3fddaa09e
MD5 d48b2c80c62f0e3f890c372f77ce03ed
SHA1 74c49ebd9b15f92fe7d058a2e45a7d8c9e106f05
SHA512 3d31cc934d5a6082a4bc10e8210994200e474e0b61825697d24af5e92bc7631b5297ca10237535844950bb5477d98ebbe1aac97e548460dfd6004ddbdf45d19e
SSDEEP 3:MsEllllkEthXllkl2zEflBOKtll:/M/xT02zg/
TLSH
T1A54404147FC00405C50010354071C3503371D454555157C334D544335CD77400C40010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
Size 2KB
SHA256 3d92b18209781e6de983be52123c1e72a58c9a87591753c597c199dede26eb19
MD5 3ced9e30f3fbafe4f650981cebd0aa91
SHA1 3cbf534e6c02e1e0ddda2932d0c0e86a683c8dd2
SHA512 9d4cf12e62fbc7303068054abbea203870a68407b55148a6e65f1aa66d87be136ad5153d1b1afa6335f41c3de51c011368515913f54972175b5c866fe0a52005
TLSH
T1C841F45CA6E91148B7B76F599BF6A86D487FBC771E07D55D00210D8E0622F00DCA2B37
MD5 SHA1 SHA512 TLSH

Submit Download

49dbe2955480c7f6ef8cec9c4320c9868d9293fd.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\49dbe2955480c7f6ef8cec9c4320c9868d9293fd.tbres
Size 2KB
SHA256 29f424610f2c548cab38b072e583032afd3949213a0ae69169941ccf14fd9804
MD5 5b711a6a17590c5c1a1eed5a0fa6a597
SHA1 2a92e9148792cff500e6b16da26464a51a1e73b1
SHA512 e73899a0b9fc81e58f62e880bae10419235b50154ffffe3ede4abefba7e51a94fe26d8f61c6d7131069e99b379e622fb66b6ca25f454d69406cc6be7aa766ff4
TLSH
T16F512C69BAE91109B3B3AF595BF6B9AD487F79372A07D05E00110E4F4623B04CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0459a0791d5b56257a4498906f829bca743cc19e357db2f1c69689d859b8370c
MD5 5771b2156fafd5e8f6ff131e51be3373
SHA1 75b2dc058ab475dc3d83b30f6f54ece264645950
SHA512 b58a5de6e226761fb59cc5e2068975bf224ad91077fd899ee77729b0ab96b8eee3f224b029a20044451761e71b973e330cb097b2ab05bbd77854ef9b124babe2
TLSH
T13A411859A6F91148B3B7AF5AABF6A86D447F7C732E46D09E10010D4F0B76A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 594a0ec14bf591181ef77ee614eddcbb2d67dda09617e6608b391aa2a8caea36
MD5 9c1e02ea9fda1016bc9da52d483ea9e3
SHA1 49b9454c4ce5e9cf14a465e3a8e84e081396fb9b
SHA512 a0a89dc953953dd88db754fc73614e2ba75fd17af81ad41ddf3980cf56bbecb1e9e76feb04c994d136953696c8118ef06c8a13a31cd2f71aa7930fadc58c5aa2
TLSH
T1FE514E6CAAFD1158B377BF4A6BF6B46D487F79332A07948D10110E4F0A22B44D9A2773
MD5 SHA1 SHA512 TLSH

Submit Download

CUSTOM.DIC

Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/4808-10-0x00007FFCD9030000-0x00007FFCD9040000-memory.dmp

Download

memory/4808-11-0x00007FFCD9030000-0x00007FFCD9040000-memory.dmp

Download

memory/4808-8-0x00007FFD1B910000-0x00007FFD1BB05000-memory.dmp

Download

memory/4808-33-0x00007FFD1B910000-0x00007FFD1BB05000-memory.dmp

Download

memory/4808-9-0x00007FFD1B910000-0x00007FFD1BB05000-memory.dmp

Download

memory/4808-7-0x00007FFD1B910000-0x00007FFD1BB05000-memory.dmp

Download

memory/4808-6-0x00007FFCDB990000-0x00007FFCDB9A0000-memory.dmp

Download

memory/4808-3-0x00007FFD1B9AD000-0x00007FFD1B9AE000-memory.dmp

Download

memory/4808-5-0x00007FFD1B910000-0x00007FFD1BB05000-memory.dmp

Download

memory/4808-0-0x00007FFCDB990000-0x00007FFCDB9A0000-memory.dmp

Download

memory/4808-1-0x00007FFCDB990000-0x00007FFCDB9A0000-memory.dmp

Download

memory/4808-2-0x00007FFCDB990000-0x00007FFCDB9A0000-memory.dmp

Download

memory/4808-4-0x00007FFCDB990000-0x00007FFCDB9A0000-memory.dmp

Download