14fb2b4108631ed7ddba0e1886cfbf7d1636807b96d32ba2099c2e8616b8f345

Resubmissions

12/08/2026, 16:00

260812-tfvb7abl2s3

12/08/2026, 15:54

260812-tch5radf453

Analysis

user interaction
yes
max time kernel
45s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 15:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
suspected_phishing_email (8).eml
Size 83KB
Sample260812-tch5radf45
SHA256 14fb2b4108631ed7ddba0e1886cfbf7d1636807b96d32ba2099c2e8616b8f345
MD5 b912eebd264869a5d70bc4bf8562d7b4
SHA1 d962b2bf1f3f5a6e1684c12b1610aaf08e024cf1
SHA512 d1d34308006bb9bee388c5c005794f2e1253acb984ebbb7ee5a2ed2080579a5f790a3482e7fd0ce3d9c8d3080a322b6d15f0f57cd1d67cdb056a20b1855019aa
SSDEEP 768:/Q6bK17aOd9S88Ml2uhIOvmETrMfKUk2vKyiVlkd+PWJsb8kR8sO:I6y7VdgdBuhIz6lkcPQsb868sO
TLSH
T198830891E380191B59EB50CDE2137FBCA2F8809787721BB4EC553A7E525ACF215253BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4868	msedge.exe
5936	msedge.exe
568	msedge.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310237121837973"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{9BB9F28F-96F1-4FA4-BCAB-2DAB61D81B72}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{08FB19C1-E8D6-43DA-986B-027DA9DC4B0B}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1180	OUTLOOK.EXE

Suspicious use of SetWindowsHookEx 31 IoCs

pid	Process
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE
1180	OUTLOOK.EXE

Suspicious use of WriteProcessMemory 62 IoCs

description	pid	Process	procid_target
PID 1180 wrote to memory of 1900	1180	OUTLOOK.EXE	95
PID 1900 wrote to memory of 3416	1900	msedge.exe	96
PID 1900 wrote to memory of 4868	1900	msedge.exe	97
PID 1900 wrote to memory of 2524	1900	msedge.exe	98
PID 1900 wrote to memory of 2524	1900	msedge.exe	98
PID 1900 wrote to memory of 2524	1900	msedge.exe	98
PID 1900 wrote to memory of 2416	1900	msedge.exe	99
PID 1900 wrote to memory of 2416	1900	msedge.exe	99
PID 1900 wrote to memory of 3924	1900	msedge.exe	101
PID 1900 wrote to memory of 3924	1900	msedge.exe	101
PID 1900 wrote to memory of 3924	1900	msedge.exe	101
PID 1900 wrote to memory of 3764	1900	msedge.exe	100
PID 1900 wrote to memory of 3764	1900	msedge.exe	100
PID 1900 wrote to memory of 3764	1900	msedge.exe	100
PID 1900 wrote to memory of 4824	1900	msedge.exe	103
PID 1900 wrote to memory of 4824	1900	msedge.exe	103
PID 1900 wrote to memory of 4824	1900	msedge.exe	103
PID 1900 wrote to memory of 2652	1900	msedge.exe	104
PID 1900 wrote to memory of 2652	1900	msedge.exe	104
PID 1900 wrote to memory of 2652	1900	msedge.exe	104
PID 1900 wrote to memory of 220	1900	msedge.exe	107
PID 1900 wrote to memory of 220	1900	msedge.exe	107
PID 1900 wrote to memory of 4708	1900	msedge.exe	108
PID 1900 wrote to memory of 4708	1900	msedge.exe	108
PID 1900 wrote to memory of 1680	1900	msedge.exe	110
PID 1900 wrote to memory of 1680	1900	msedge.exe	110
PID 1900 wrote to memory of 868	1900	msedge.exe	111
PID 1900 wrote to memory of 868	1900	msedge.exe	111
PID 1900 wrote to memory of 2000	1900	msedge.exe	113
PID 1900 wrote to memory of 2008	1900	msedge.exe	114
PID 1900 wrote to memory of 1792	1900	msedge.exe	115
PID 1900 wrote to memory of 2008	1900	msedge.exe	114
PID 1900 wrote to memory of 1792	1900	msedge.exe	115
PID 1900 wrote to memory of 3444	1900	msedge.exe	116
PID 1900 wrote to memory of 3444	1900	msedge.exe	116
PID 1900 wrote to memory of 2128	1900	msedge.exe	119
PID 1900 wrote to memory of 2128	1900	msedge.exe	119
PID 1900 wrote to memory of 5584	1900	msedge.exe	118
PID 1900 wrote to memory of 5584	1900	msedge.exe	118
PID 1180 wrote to memory of 2128	1180	OUTLOOK.EXE	119
PID 2128 wrote to memory of 5644	2128	msedge.exe	120
PID 2128 wrote to memory of 5968	2128	msedge.exe	123
PID 2128 wrote to memory of 5936	2128	msedge.exe	122
PID 2128 wrote to memory of 5968	2128	msedge.exe	123
PID 2128 wrote to memory of 5968	2128	msedge.exe	123
PID 2128 wrote to memory of 6040	2128	msedge.exe	124
PID 2128 wrote to memory of 6040	2128	msedge.exe	124
PID 2128 wrote to memory of 6112	2128	msedge.exe	125
PID 2128 wrote to memory of 6124	2128	msedge.exe	126
PID 2128 wrote to memory of 6112	2128	msedge.exe	125
PID 2128 wrote to memory of 6112	2128	msedge.exe	125
PID 2128 wrote to memory of 6124	2128	msedge.exe	126
PID 2128 wrote to memory of 6124	2128	msedge.exe	126
PID 2128 wrote to memory of 2448	2128	msedge.exe	129
PID 2448 wrote to memory of 2112	2448	msedge.exe	130
PID 2448 wrote to memory of 568	2448	msedge.exe	132
PID 2448 wrote to memory of 4980	2448	msedge.exe	133
PID 2448 wrote to memory of 4980	2448	msedge.exe	133
PID 2448 wrote to memory of 4980	2448	msedge.exe	133
PID 2448 wrote to memory of 5080	2448	msedge.exe	135
PID 2448 wrote to memory of 5080	2448	msedge.exe	135
PID 2448 wrote to memory of 4316	2448	msedge.exe	137

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\suspected_phishing_email (8).eml"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Furl1036.imedicina.com.br%2Fls%2Fclick%3Fupn%3Du001.Ii5Nff34PsRzx5qAmNDL-2Fz-2F44UqS5nWTVfTkGURn0VCLx8T6TdNbNsmjvijk76UZcgxTuKNMGE5nEpZBTn8wvcgdKGh0HqDrTHhUCrDVNVmDVlfhIsgDW-2BiyUmQPTms44YJsC9i4xXgP6F4DfljoNj0B5eMEDx2lptNniwgQk69ot1Cj-2BySg6xKy6lQg4eowA5Olhsz8MLpU3xflCkSG42Ps3Q6ZVHke3ZW92qt9owIrMOxJaZ3V14Qv9vjj-2Br28G8i7V4Gnj-2FtDa43KfJFpMI-2BP2fLAp8ffJgqS5XQ4Hiyip-2FrWEP7LgBD5x6bD2bfWDDic-2FbxTF627bOpqFpn9U9MUJrJ8KrShkAdwR01nQM185EI8pFhNnq0M3sWMZGZcF9eX5SlMclccZIsrfvLhCBnVYDRH34-2BhNDY4amjWfFAl2XSYVGRmPEa3w-2BlZecy4dkl1TZgscxTQs-2BfY3-2B-2BTgXJ6uV1g2zcUQpaEgRwsQBjYemFMaq98wn7RoGED9ptTY4a7aATb3C4nv7rwnyNvFKR-2B202z11Zg57fxBvlOgHq5O8K4z1Q2KxN0pDzEPyM2MJM3Zl-2F-2F9-2Bz-2BboBFT3qXk-2FXo9PVIs4HRf57A4hmUIp7JmU95Kr3-2B07gDiFVtne-2FINN3qedWO17Kz6DxJy5DBFLUL6bquyV3hrCCJqWyaoGAfUON-2Bzb0eva9z39nOo7-2Bc4oUrUP-2Bq50BEiru6eI-2FORLtulEZx75UZxUg-2FVi-2FsSHQnszNOtf4eJkDmtcOi7bAaMEZKlC8ABdSy3FH0u82ZwsC4YsxDDSawWvWwrxQ-2FjcncXU1MreWSqLN4AtZ2m-2FUcfAHidJ51T8R5y4vUzrtJ5iFQkkkpWUP29sDzOuAEV-2BpgACVATLwcD55iEqb2myvtood22Tep3-2B8aUPM7TrhsdhySuycSNCBs3LfY51LB5LDnxG4cvyPPGUtfYlWQcIdH6AWIqoqE4j5zbUuQzlpUiCioBJosr0GLxg8TpGA8LX4KMJ2uydtTrHL0NKQHeJjhNCg4TTWIecLKi7YxLBoRiL4fgvwksJJdm4G32MlV4veEsaWvTock-2Fx4YtQ4XZSz5Na6dTJw-2BiG8clO-2BrKl-2FnfGszRb1glBgz-2BG4bQmVRToEi3MCxPG6V0X-2BFgbxQK4m7YXYhCVa0L37eox92Y8oAW8t-2B8h2GAYFF9ceUin4X8kv-2B2EW2UoTePXUTNp6gPbLyYB4x13U5UzhkwgD3I97ED3fsIwtBbv3if3D2fnImahBhtq-2F4gxvOyJ5YaJbfPK7eBwdG_HWAk4DGcP5bOseprwmP7vvAUDKRGt5ah39DgilZ2H8gcjG5RLrN318hi83rMxcW-2BPlbzIinN0mXhwYkDyEP-2Fz3ADEi7FfYVHkucz3mQed8GgguahUJh2jNLfiV-2B7GQciXiHFPahKbopLJ5A80R1598KVppdwuJl5sq8Fn-2FOzqZ7xVy2bZwHrezVC-2F0h3KdSZXGy78Jzurr-2FgGzG0hYMGf-2BZp28mQQK83URpGcq357D4-3D&data=05%7C02%7Cmatthew.dearmond%40swktech.com%7C0d861bcf343d40275fed08def8858dd6%7C6cc942d0e53b4425964660752315e4e7%7C0%7C0%7C639221449663435109%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=g8Kzq9YeUDZsJy58MwkM3cuLJ%2BTb0
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffd04e2c188,0x7ffd04e2c194,0x7ffd04e2c1a0
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,551351990933129220,18374616323463664221,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,14490190242105841212,17922236953742011010,262144 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
    3⤵
    PID:2524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,10483230796674712868,2321718366794540908,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
    3⤵
    PID:2416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,727739806216444355,17065412269381289747,2097152 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
    3⤵
    PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5241678920363571395,8279127105448458075,2097152 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,16419969053960246895,15918866826638608028,2097152 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
    3⤵
    PID:4824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,7347775941393590581,7152259030908859242,2097152 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
    3⤵
    PID:2652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,6745395261666646267,7831289318914245063,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:8
    3⤵
    PID:220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3960,i,11885191331699724120,2886909944743419595,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:8
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,696537092381337397,18013057827707143513,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
    3⤵
    PID:1680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,8326765133837297662,10610883337985140834,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
    3⤵
    PID:868
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14466066367095904753,4351736531957077339,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
    3⤵
    PID:1576
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,14466066367095904753,4351736531957077339,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
    3⤵
    PID:2000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,5932577147527057230,11370239841205464747,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
    3⤵
    PID:2008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,9084047473333595654,12226336350687457014,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
    3⤵
    PID:1792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,3477524315686725240,11502842826057931837,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
    3⤵
    PID:3444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,4480424409103291574,2271764272082872057,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
    3⤵
    PID:2128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,17522533509289588995,10035275152696655692,524288 --field-trial-handle=2408,i,2143353764885777242,17798493316461771344,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
    3⤵
    PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Furl1036.imedicina.com.br%2Fls%2Fclick%3Fupn%3Du001.Ii5Nff34PsRzx5qAmNDL-2Fz-2F44UqS5nWTVfTkGURn0VCLx8T6TdNbNsmjvijk76UZcgxTuKNMGE5nEpZBTn8wvcgdKGh0HqDrTHhUCrDVNVmDVlfhIsgDW-2BiyUmQPTms44YJsC9i4xXgP6F4DfljoNj0B5eMEDx2lptNniwgQk69ot1Cj-2BySg6xKy6lQg4eowA5Olhsz8MLpU3xflCkSG42Ps3Q6ZVHke3ZW92qt9owIrMOxJaZ3V14Qv9vjj-2Br28G8i7V4Gnj-2FtDa43KfJFpMI-2BP2fLAp8ffJgqS5XQ4Hiyip-2FrWEP7LgBD5x6bD2bfWDDic-2FbxTF627bOpqFpn9U9MUJrJ8KrShkAdwR01nQM185EI8pFhNnq0M3sWMZGZcF9eX5SlMclccZIsrfvLhCBnVYDRH34-2BhNDY4amjWfFAl2XSYVGRmPEa3w-2BlZecy4dkl1TZgscxTQs-2BfY3-2B-2BTgXJ6uV1g2zcUQpaEgRwsQBjYemFMaq98wn7RoGED9ptTY4a7aATb3C4nv7rwnyNvFKR-2B202z11Zg57fxBvlOgHq5O8K4z1Q2KxN0pDzEPyM2MJM3Zl-2F-2F9-2Bz-2BboBFT3qXk-2FXo9PVIs4HRf57A4hmUIp7JmU95Kr3-2B07gDiFVtne-2FINN3qedWO17Kz6DxJy5DBFLUL6bquyV3hrCCJqWyaoGAfUON-2Bzb0eva9z39nOo7-2Bc4oUrUP-2Bq50BEiru6eI-2FORLtulEZx75UZxUg-2FVi-2FsSHQnszNOtf4eJkDmtcOi7bAaMEZKlC8ABdSy3FH0u82ZwsC4YsxDDSawWvWwrxQ-2FjcncXU1MreWSqLN4AtZ2m-2FUcfAHidJ51T8R5y4vUzrtJ5iFQkkkpWUP29sDzOuAEV-2BpgACVATLwcD55iEqb2myvtood22Tep3-2B8aUPM7TrhsdhySuycSNCBs3LfY51LB5LDnxG4cvyPPGUtfYlWQcIdH6AWIqoqE4j5zbUuQzlpUiCioBJosr0GLxg8TpGA8LX4KMJ2uydtTrHL0NKQHeJjhNCg4TTWIecLKi7YxLBoRiL4fgvwksJJdm4G32MlV4veEsaWvTock-2Fx4YtQ4XZSz5Na6dTJw-2BiG8clO-2BrKl-2FnfGszRb1glBgz-2BG4bQmVRToEi3MCxPG6V0X-2BFgbxQK4m7YXYhCVa0L37eox92Y8oAW8t-2B8h2GAYFF9ceUin4X8kv-2B2EW2UoTePXUTNp6gPbLyYB4x13U5UzhkwgD3I97ED3fsIwtBbv3if3D2fnImahBhtq-2F4gxvOyJ5YaJbfPK7e4Hfm_HWAk4DGcP5bOseprwmP7vvAUDKRGt5ah39DgilZ2H8gcjG5RLrN318hi83rMxcW-2BPlbzIinN0mXhwYkDyEP-2Fz-2BP-2Bt-2B-2FF4W9L85TOl3yJK6SD2Vr2HVsBwI8rz56ToUOU4LG63egpN7EGvaeJfPekBX4X1POf4sixrkgufTxnvnmZi1p4roOL9gD6y4QSB3kyuBrpxVjkJvEJkkIO95aXZdekl834YrVZr3uwsHwmgoY-3D&data=05%7C02%7Cmatthew.dearmond%40swktech.com%7C0d861bcf343d40275fed08def8858dd6%7C6cc942d0e53b4425964660752315e4e7%7C0%7C0%7C639221449663450341%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=PPassGuE97RqJ8wfCw0l63%2F%2FvQ6UE
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x340,0x7ffd04e2c188,0x7ffd04e2c194,0x7ffd04e2c1a0
    3⤵
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,16861974945871689872,17930401721568662985,524288 --field-trial-handle=2540,i,16871160924416013900,15275275951057744195,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,1873030285721124456,16396750410832332219,262144 --field-trial-handle=2540,i,16871160924416013900,15275275951057744195,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,17240001860936233785,18418213998581475863,524288 --field-trial-handle=2540,i,16871160924416013900,15275275951057744195,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
    3⤵
    PID:6040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,3488180073433706467,721221013993250886,2097152 --field-trial-handle=2540,i,16871160924416013900,15275275951057744195,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10734949465045517319,10847246353508024532,2097152 --field-trial-handle=2540,i,16871160924416013900,15275275951057744195,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:6124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:2448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd04e2c188,0x7ffd04e2c194,0x7ffd04e2c1a0
      4⤵
      PID:2112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,5078817066702289054,5346024823568071396,524288 --field-trial-handle=2288,i,9988163072684168204,3857995228264990273,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
      4⤵
      System Time Discovery
      PID:568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1836,i,9939081618113836200,14640010635905119371,262144 --field-trial-handle=2288,i,9988163072684168204,3857995228264990273,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
      4⤵
      PID:4980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,398257979510698889,16941709962217636343,524288 --field-trial-handle=2288,i,9988163072684168204,3857995228264990273,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
      4⤵
      PID:5080
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,9644744296969327471,17963646755859281509,524288 --field-trial-handle=2288,i,9988163072684168204,3857995228264990273,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
      4⤵
      PID:5372
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,9644744296969327471,17963646755859281509,524288 --field-trial-handle=2288,i,9988163072684168204,3857995228264990273,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
      4⤵
      PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce6612fa5fcb5a512497cb33ab0a3f706834ad222b5696f08863894b1e22f287
MD5 b61a574baf562cd71b636a2b715fa711
SHA1 1fe7a2a795a9ea179937e2326d82f7d0c1f76cbb
SHA512 57b5f9e658e9938a2274a5d040d251b026a2fcdbd7196c08e91c9c8804e840797cfa3f824cd2d748b67ff79abda6aef8ac5f973bef648bd0029490924828ef28
TLSH
T141D02370B83193D0D219003C0450B5011218877236674362E140880CAD3200083C69D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d4dbbf8908a7c102b4a3051525bc59fb7da1ca18748d4beb4242744364952843
MD5 90fd2ca49cd0adb62a31f5540b14e014
SHA1 41a2af4386af75e362e34c12122e0afda9bae74c
SHA512 58931ef07d75f8208eb064bbce6c3a2acf293736ac7b8189415bfebd526aea70e2cd03efca0795b9f677f1bed17c6efb88a4943ebb5e4e68fd03605ba60d15fa
TLSH
T1FBD023F9B5268305CAC600367481B7413327897439AF9E73D1D6980D7A5255053D91E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2eb78c0a174fef8c1866ca049059c61131479810f0dbc707c761cc058223107c
MD5 dea08fdbe9c544d3ff9c328a75b99a26
SHA1 28de547678e9af1498c40e15b9541710c972b3b8
SHA512 e62d09f7aeb7bcce67ae2f509b575ce2d3d8031b64849002b5465044327b871af71c6e2c2b6dc323497da97e488e1f78cc4070cd13d1620e86fa8c499fba4c3e
TLSH
T118D023F9B926C305CAC60036B891B741332789B439AF9E73D1DA980D6A5255053D91E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

2e27c2b0-f0ae-4103-920e-00cc41e88ba8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e27c2b0-f0ae-4103-920e-00cc41e88ba8.tmp
Size 414B
SHA256 39082410218d621b04515220bcb493cf8a93b7b6e18b8c0d3dc4a90a8ffaa7c5
MD5 7454e60c6a095f4256b58bece485be0b
SHA1 9a27d25074baea9816b41469909b81115e118ca7
SHA512 1e6526e32ba2540350d94e40d6af33d9c54fae621327ca4daaf9fbc087d79cdd6c9a3e69158e2d552a7820206851d6ac3a08f2fdd85b05af8ce764264f2c6305
TLSH
T1BEE022ABDC21BC3B5CFC5B6990540F4AFB4513772B80995B3A3C820D8FB062E069296C
MD5 SHA1 SHA512 TLSH

Submit Download

3f0fc399-6055-497e-82c4-fcdb5dec17b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f0fc399-6055-497e-82c4-fcdb5dec17b8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 cb24f2e22afc21ded90b1b4087bc183395a979345a46fd1dea8bc641cafebba6
MD5 ba91f5ff07aebea520638395077f6c34
SHA1 5e6e6a974a8402ebd91ad7973bd3ae87c110e01c
SHA512 2e9562f422bb6935bc36738e28e93c31d30ad4c3de9f8b3cc440729e7ffde482ae1b0a43e1b53816fe5278c62f7e0eb0070e45aeb193e30ea3f1b43542d5a071
SSDEEP 384:MDblcd2FRsTWpPc8DORH9pOcJcMscfkcu4Sn8/wa9YT:MSY3pPcwOV9pOcJcMscfkcZSn8/w
TLSH
T12713D53D3A812FD6C2E7613D41AB4F3993FAC434F6C66A03723A71452B663866D5F026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 16e6a3c320fa9f5868c621fe0f08fe00585dd5c481fdcfcd9f6f1bd0fa342339
MD5 bf5ba8e4174b94d0f0f882a238fd4ab1
SHA1 76116f5751e91c40d46cb621e56d1ced4879ba1e
SHA512 0d96609630d7439231ecdc7c759e193da6b872ebe5586354b75c07add6ba5cd5c6f4e01879d0d1a401249d08383731c5ea779b2d9baa6604732158a727bfa805
SSDEEP 1536:6Bk2lqlrqZ/L/4mvL/s6NiQQbe1S3q4vDxgs4jL/WL/:6d/L/rL/3iBFgrL/WL/
TLSH
T14F441DF70951A05BCFA842F5E2033A3DD2BB456D7CD1F9A9E1784CC12925B32B6BCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 81df316d3a6b5aba27b281d8ed2b66520d71f77b4cead88aab83b151a45185bb
MD5 d6b0a51a922a3fdb011f696f4b2f787c
SHA1 ea3c8dc3a4b6cdc0f10949ef29e854a8a6c4c7c9
SHA512 6846c63afa156b10e0837e125414140d4339df83b4fe8628caccec81e375809d94d78f715ff2289dbb9d91b0f197975b20b44cb360d3abe1807e67095a58b776
SSDEEP 3072:jX5m0f2+HEdS3ua28HNEvVOoBbcrYW60qvWS4:jX5xf2bceCKurYTz94
TLSH
T1962518EECB682C92CE6B8674B0E0D9077E712183B69CC0D39944C5D897D6B8175F92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 e90b4bf1c2263d42dc6f902b4888e9704bbe6e432b2ef672f724a93fcf7c5814
MD5 95e97e86e9201bb09aa93e2ab7cfe966
SHA1 65713cc263549ec41bad0e24e5d8bdd8d70fcd9a
SHA512 249e5ce11fb878137332c4915d85a8c25d042053efb7d63f2d4e5675bd67b07000e45c9df731c890c936b55f054a24f09ac7e41ba12507c3c5739b95e7ed98fb
SSDEEP 24576:3uvUoljYOY9VY0cOHJ9sUJ5x3ALX61joJs0Z0F8QPC:3WYJ9VYsJX461joTZ+1
TLSH
T19E167DEDCA6858C3CD639930B1F0E9477C7413C3F995C1D6889CC684026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ac1395861574299c4ec00cccf5bb1ec40fb05e4ce29131aaa7cbea980b49d946
MD5 88a78142433cedddaaf7dc093db20863
SHA1 277c321ea67e41c9aa8a5ef517880a12e55ae5fc
SHA512 d2218d6de419ba99f6ea6e35458595bfdabb4f234fc553f6c4ffe190e04ee122e74dbae65472443e32b714f70da29c2c59112fb03b54947d0619ad0e5a17bbf8
TLSH
T1B861F8F404C276A0EFDD0E3190E206957EF784E9FBB3BE8910A499706E15761022B23F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 684B
SHA256 ebf65d839a9c2a53ab503763d44c3a0363d3387faf4f947b5959463833c3b75a
MD5 f93b6a29284b7e38dfd05af480d25ab7
SHA1 cde3c88c5dd5d4e617e8f8157c03d66d730953f1
SHA512 e2148554c1b5c2b97175e5ade1fe82b5a08311ce9d736907ac299f99c3580a99458d7fefc894f4badba5921dfda84f61117e1ae3e57b0063f127aaca6563e099
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 6d17ea47f3c17c97d1ba0052b85dca371f1e0a2a4c6cb172dc920e91eacdde34
MD5 526b68acb57c509383b3e2da593dce80
SHA1 5b6a7632b3f2fc3497f1f3fec24f517670e8a026
SHA512 0ec2966f4c3afeffd4c3ac497eab2a970f91b198322b15d5a4fd65549d8dd00e01f18b34b5cb66cc47d1e8c836d4194351f3607fefc9ff510b3f37d53aab7dff
TLSH
T198E0260804CBC27E9B96A9D782ACA74882D2358BB3C83D472B4C8C447109B89B287280
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 ff8185f7af948759474d751bd00d54e339028e23b64e455a01612cfe8434cadd
MD5 c8eba882443a566ff1af1307726bc4c6
SHA1 40a2e1b8a1866cae24b571a45734034ae9e7f3ec
SHA512 fbba853cd0ec790f008dbfc769f27a36e1372d3518b16fd3aec4214ab6a233b4f3153ae12d81f26196a8d5418f7a36403cf422ba6c0c3123dd40bd5b91d4a415
SSDEEP 192:eYL/kgOUQlJkUkgOUQlJkXf+G83uy3Ct7XBBKdL5H7DXspU3iV:e6lUHlUK/83uICtTBBU7DXspU3iV
TLSH
T1E214A70E5F313715CDBD51B669EB41B35D7DF02B8B2266DA686114B0CEE3A41A02C8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 c4a7ed6dc5ee755e7573458cc68ed391c22487934245ca9448d34055ea996c9d
MD5 797aa34d205e7bbd537cb64174559d6b
SHA1 6a3d2e2f73de1925faf45eb564806860309ff783
SHA512 798555f56ceb3059dca52fa3a5dedbc5fbc7f30c2afd25f23d8f33cc840ecd32b0b0feaadae0562a23018a0c4fa07ccf65d80f062d99659bc577cd050485d7df
TLSH
T1BEE0D86555DFC62D5E85708B52197B08D3A13407D7C87A852F049D50B059544E7921C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 126381dc4f918834810238a048e275a07d08f51246f82616fccdaafe934d5570
MD5 ec84d16d24ba92c3b377f7338a790b5f
SHA1 da8efe0427540ea3e4ab149b90a10b06fbc97469
SHA512 6216ec6fc9a0369cb11b91f538c6a7abc4b942cbfa15fc26b9faa9250dbd57f54949593afc291b20e9b289ae42ad113b1ce09ee8a8e8b963405ff23379f0ce78
SSDEEP 48:TtLopFMatSaw/auUOt8BMo3w9kBme8XI5kAwH:9eMatUaAK5PotXXAA
TLSH
T122924F4E1F346121D1F05B76EDD0C5672EBC211DD3737A49DE2460F38EA219BF5091AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5dd821b4e331218b68d23c26eaf8549467624e2d9d53af3e995d0d6e63b4b572
MD5 ac57fadd326e8b1cc0f1ba1809f2a602
SHA1 ff848ecc9121ac5358a896a2c1b636574e3b650b
SHA512 fa8ce543bf2daccd2b3463f1edde8375842610b1056e556d7ec03e62630e146aa2b933b3ce45c3a234f6e45e0735fd1d198fc408dca632725cd81dde09a03b46
TLSH
T1D241AEF3C3E8856D890156F4AB296E1FCE2D0A64432C3D56D9E4AF2BA3E2871E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 baae037a0543b83c62dd7c01efcda9aef77c86475d0a788d38a22361bda82f2a
MD5 633d521ccffc27f50ecf39e342772792
SHA1 e730f30279d8ed8360da9ab08e4de0aee6230d25
SHA512 41df95520a2fe94d2a0f186563cff5562ab81c73c95d25db29c568ed0adedcf3c3152f1cf8976c3f3ece96afaa6107bef24088bb3df27ee57c77e1f6244c9cb3
TLSH
T15C41ACF7C3E8856E890156F4A628AF1FCE2D0A14431C3D16C9E4AF2BA7E3871E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 46f96dac2a3a179fd57cf20c06c855fb9c9b1a61732a76aeb553588301ecbf30
MD5 93ea396d09d91e41412ee0d493d29b63
SHA1 2b10ef45f8efe02550abe4fbac81ad28e61c427d
SHA512 c815a2849fb020fd07b661f29cbfc2720249aaa430c083f4bf11a26c5cc92be6b545e2f7484a184fb149aeaad95facd5b84cf95b669973c460a24d6fccb66e6e
TLSH
T103E0D82380EAA877143D15BA1F8C7916AD75E83911B394B1CEA6827DA1D05B35E06437
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a13e32f4abc8f0acdb64e996afedc5dcab9f12ca317d17e86ee53f32850431d6
MD5 9c51392f68947fef383b66eebffe88de
SHA1 c09931594800a6feac0e3124262b58440d918249
SHA512 4cb2abac720c5d5993d2203f3b01fc8c69b33f5e6393f3664d91232bfcede21a0e315a2a97883b7a7909f7d8ec7c8b03ede1ff404a5acaecb20e74ab6b7e4d52
SSDEEP 192:sxZCR2jJ/fBs+WpVDAuASMIdpzeHW6+WNA0xCWd/YGAEi4EIgyJ:sxZCkJ/fBs+WvDArSVSHb9/2TO
TLSH
T10E42C9166E24A97B8CD7E219FA25BF13D3FA103291D15E48EAFC861C04E67DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b4aebfffb9afb346961eec5487e65cf41d6685cfca3d10f4b71e6867f7ed1a54
MD5 4b44b077af601f34dd59d7cbb1b0eebd
SHA1 7a963ae683ff76fb7063714bb34adcf6e6b66e72
SHA512 2d0008bca0227a98b3e1e47842875ad3e295476ae6eb44de2b19f1cc3b181c648c9bda3596bee073b92ca2198ca1791ea996eafa7927a824a4eba113382190fd
SSDEEP 192:sxZCRtjJ/fBs1WpVaQuASRXzodpzPHW6+WNAcMCmtfYfVvwEiEaIgyJ:sxZCPJ/fBs1WvaQrSR8THbYflVO
TLSH
T1D252C816AE24A97B8CD7E219FA157F53D3FA103290C15E44EAFCCA1C05E6ADD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9156e7b44245a03baa2df376f5bf010d0233e9542e03a7549e4a3ccb9aeded51
MD5 21d9822f003ff463b4cd2bff6bf75ae1
SHA1 db639a0834b057c1772ac5307b1a2368b8f703b5
SHA512 5917902cbfe84095b7e2f2c22d626b2bda888976f8de0675767a7387dfcb6e8210d01a7cf177ad3c9af8359df75e815f7346f094c92488eb7c6669fc613ea8b5
SSDEEP 192:sxZCRtjJ/fBsrWpVaQuASRXzodpzPHW6+WNAcMCmtfYfVvwEidEIgyJ:sxZCPJ/fBsrWvaQrSR8THbYflCO
TLSH
T1B742DA16AE24A97B8CD7E219FA157F13D3FA103290D15E44EAFCCA1C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 37107e5259f80a99a7325f638fe99525fb11c30e79a18f67bfca8873181aa328
MD5 8c6cfe6cee72ced00af2c27325448c3d
SHA1 01cfb496c66d714a74038cbb6c799d2072a406b8
SHA512 07d1f2c522b2ddd4d09c544c47616e457916dbbd79da511fa3b1dcbbd17b359b1a670d81c1a83aa0bd3abaf4fc845174429a014f598526aef3a9bda61c9a58cc
SSDEEP 768:/1qbUwY7pLuLfe+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVexbZLlRTKr6ro6:/1qbUwEEfe+WvSCs6u1ja7xbZLbWrx6
TLSH
T144E2FA3B380CCA7E4F801E9DDD1A7F9B6EA8028B9698C94447FD945C02C76EE51174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 9e244d8713de45678a9cbc5c0178395eeb217d9bc96e938798fc760265cda49f
MD5 a4679c5a53e1f269ad6e5832a6061622
SHA1 34129d71679580038c3befb28fceba12b3725cc8
SHA512 2375d49953b71379d4c56a781b58d04de1fe1b485643eaebee6c550547b1eea7b2afac198c671c1a77caaf948e9c9af640e9d94204948ef65aa79db114258583
TLSH
T1B4E026D405CBC1BFAB6667835228D748A2E5B947D3C83D467FCCCF40B14AA04B193180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 925B
SHA256 0c6831cf8198f5817b3bc37ae0e09cbce1242e39a9dbda8ce94119ea61daf0c5
MD5 e649c40444b88c10b405e7c5040fde4f
SHA1 ec8db5b1a33fcf7cad86fe2cad03333f6ddb374f
SHA512 86a444590e320a6c64955deeaf57bb3968f70eea8665656172fb8f977118e2d722e2362a3f3fd127673de451dacdeb06b4f27a12b7430f379906fd169db9d9f7
TLSH
T1021148D70F0CA46DDE6D8AF01CCA7BA4937382CC46C05DC7969C958A2D122323D1E497
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 319B
SHA256 f41a63fca8f88ef6cf6d75380a69652596c11f26e226f24c5444314a4798be4d
MD5 d75651eb14d5f054b5bec09eca73c590
SHA1 f7e5cfba795408c5b2a4ea0fd10681b24ce41f26
SHA512 675e5ad733df447cefc30b7ea45b649fdc668cb1ccd48955da583600979beac9ddb16e3888225991b0ab0d1e9a12212f7917acafde8731025cfa97855dabc5bd
TLSH
T12AE0266815CBCA7D6E93A49B02256B4C92E23403E3CC3E862F00C840B20D601F383181
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13431023714168544

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13431023714168544
Size 8KB
SHA256 94dadd597b0e1b512e159626b632170aa559112e0e8fee5b925c702a50db655b
MD5 be79ffa4c8a98aa86a50af6ac2385053
SHA1 63cb9307e9fb29093349481cfefd1b147683668b
SHA512 e4c8121517738096775ffcdaa38d1f7664c4298f64d95fa8f7b09c820a34942735a7566cc0b23b949801a53ed3a28a11acdb6fb6e6ab9f17163e05106a704501
SSDEEP 192:3bL/kgOUQlJkJeNcN/wRfqv3MpfQoxVhVYWVbMum08L/kgOUQlJk9:HlUZeGfqv3X6VYAbM0elUK
TLSH
T1F102962CB7FB100FF1B3FEB19AE961AAC926F59224105DA854C547024613D83FD92D7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 e1d6ba3a4603ee10d7f86f5f99102c1cfa49f0a55868583dc8979cda52f7b428
MD5 ea67d369df6916c59ce285003ee27522
SHA1 fc180d6480dd74499099a897008211390e306b3e
SHA512 7a63c01652e28bf91fedb20cff6870ee1f7d0b1fa9be7d014dc1b5b94cf054ba1eb7712c712b9920292f545e0eae38fe0ab57fae52621313c7c45f0159fe0db3
TLSH
T127B012417740E307E18E55722386C7805210F442E01009138956BF105E065783E43D94
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 6ce7527c9fcb3bbdc2a2b250c66948c65b032ef8cc44a659ec3287598e534df5
MD5 8280043bfecd94a7672844f07fc71202
SHA1 02503b199a73f80de5d60ae4dcd08647067c2893
SHA512 b00647246e185d9cfcf1b58dc72ba34e69f84597dd70c440a09c1aa61c6878bcca4758a91d208362d90fef19dd5a5a0f81a5648ad43191247766f22a51e683de
TLSH
T1B1E0D8641ACBC66EA6C764CB5214FB08D1A27407E7D87D557F489A40B20EA90B243141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 a1b49929d8ad2b50ae96cbca710d636cd42f86688cd9939fa9a99ee0040d62c4
MD5 0fd8efe1d5ea58260e5aefc17bc7d927
SHA1 7916347006624f45041b8fcbf591571432178ea3
SHA512 9dc764030c55e5ed0afb5ee23805707af2ff65fdfa5205d883ec49f002ca68ed89d7c312c77be4b77b50db6fd959b71f6b586a1c4fca7170563ae4ef90fd3ffc
TLSH
T127E086F845CBC67EAA45A9C39274EB0E93F5784797C87A8EEB084D40F10E654B3A7580
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e15466599e50a656e0134a22c1496faec6182a40715f1645b43f877a6b6bd871
MD5 a28523bd499a74c7be74d18fc74d0079
SHA1 99ed338cca870fc428e9e66c2085de87a4339b59
SHA512 d40ae560a4c8842a3fe7575b726f43a4f730c6b2360799f8a142d1aea362f5fdac511a99336db9e7cd6bb4c6651ad79c3c94f03993da7ff9e2c0ecab1db7fffe
SSDEEP 96:KQJSKy8KyOIKzam64YKBWC10JlD/rk7/qPptkKhBpLkdFlKDF5g:Al3jL+3g
TLSH
T1D0B14317313A42916C7E6848F3569A365F4235A33114E86F3FB808A21F6BE121CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 fa94ba533611e18d7615422d15277397884f28d8b8e560fb3e874ccacb89205c
MD5 ffcd4136ba79c454e30cbdb9234f7521
SHA1 68bd0e5587679ec018d1fe5b87d8c4d9c8d61d62
SHA512 4eadb858651fc75e94c95bc6c68d9eba14331587556d0602e412ea60857526f749d884315152cef287105f42d43b9997281ca5e7013b316f0dea93982527fa45
SSDEEP 192:/+5WwmYoifT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:W5fcifQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1DB24630A7B747001EDE6D9725CB080771E3CB16DCF22A6915DB254698EB3853A23D8EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 88KB
SHA256 ccae67c696c64eca2abf8f60d6e90ab74214c54e9eddf60d6ce681f7fa66d678
MD5 fcb99e9f6d7a034cf8319a018b05d278
SHA1 ff4c71021222d7f3c41eb41b206a5a36f6351c50
SHA512 05ee6a97386d9da4829bf8baa960182d8ca5128fac96283d79ad1c3f18fc273b6f33d727a7c3b0d0700d2c6240430bf49aeb84af38b9dd80e753b3b46924ad9b
SSDEEP 768:zIRERUsjVdkZGkRZBqVVYasTLpz/0QCLQSyaR1R6Vni740dxqjMwitV0CNsgSqpj:zxEhzAk54Z8Z0B9Z2Y
TLSH
T162932EFBAD0A81A2DDCD9178D41BEF43547306618621D8E5BD3D08C33B79603BDBA989
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 262d305505141844e00283a2b081609f3c9fc7d6f5697d54691da1d2d30da52f
MD5 98fef8f14761dd2010d3eebbe2333867
SHA1 4a1a3d4156347726c9b997232e69bc9037ef087e
SHA512 3a7adde8cb2ea1b9d276195f572bfa99bba26add8e293e8e71f18f19dadde3ff4ac758a9ac1b35ff8a72aadd080ba2cf452d5d4132c424aa12f96d3fe16e1c2c
SSDEEP 192:tQ2IIIBb5MIMbmYcY5wO3LAsplu/uusGLG:tQ2IIIBb5MIMiBu3EsrGsQ
TLSH
T1EF42A22A26055B3FC18E5FB61256C6A41BD8E8814870222E71A12C1FCDF3F9787D12FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 de57aed76b0f5432bdfad21528e925e8645161f0e9f254f7283bfd8b5a6243ab
MD5 2f9ece639afe9f7be93d131c3e4cd4f1
SHA1 8d534a82c6bf286902f814f07616472808985f37
SHA512 66f8fbe7407faa6b692a16b1c112c00e8b6ac495304d4f829988d80fe9d569caff589ea9186eda6099329f442682c32acff25867d2ae6c7c63669b433bedef91
TLSH
T160E02614A8DBC2AEBE6661C7112A670882823807EFC83E8E3F01CC44B20A780B297181
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d5bd99b912554744337f1f88d2f2a19c4a0602440f5062f2205b4a1d52698a36
MD5 758f0e6e8f5e32f98e13871c7291851e
SHA1 91caee5999a0d0d3e6b4167327e10742e03c8f21
SHA512 6fb559c7de36b4a30101135e82f374db48942fba8b12e706064aa4302ca3690535f0e598fd939bd29171418954f1b196a790f65d7e451ed6567ea8bc8305f8d2
TLSH
T1E9212897F334C269D645463A547EAB121378E816DFF8EC0F51B624246F73A440E8F2E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 f303092d0309e844746afc952c926611051dc3bc316229e526d7a3c019948a76
MD5 c8eb9087194c2b1ff74b89e4f4358567
SHA1 7f50a2fa39d766db52a638006b6665be4010dcec
SHA512 292bdd91dccbc0d1ba238f85b380f1d0dca2f32d2399b7be41e9514c4b41560ec2433392df1cb29569568aa59e43cfa2beac98aac5f829dba5b2010dae71a6a6
TLSH
T148E0201464C7C15FD66571C30168974C82923803EBC43F8D7F05CD447209B817257141
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b0eb602c3baca900b42344355901a69f857f567849fa3ea82348db439c8b4520
MD5 3334a4b2b1fb12485d19aae75c1c5713
SHA1 13b1159112a7b0b93715f879b7b4a88e852a7e47
SHA512 970c9aefddffa1733a7dbfecb0c3eedb13058f07e5c9164c0f1401bb08af2d9313e1f74ee567ae3f9b0e91aaae5fb8fb54135fd7585fbb4c8fc0b541abf63a66
SSDEEP 384:niZcIlsNgZ4dYmhEa+SdPId+24rNKAStiI7opRKOf8hMsRnlYY2:QlwKan2dlE3S8TKOf8hhn2Y2
TLSH
T1C7B25CB1D8A42CF718E5E1C6A486E5136EB8913785CD6A4CD6FCFB3C309F5B84326815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 d8d7e2143cac8f6e5078b8b84f54e40807fb99599951d7376c9887bbb03551dc
MD5 5b70bc0e559057da58c7fb476e030f60
SHA1 ef60ed037456d4f008ebece52bbe301e86c4c7ca
SHA512 014638b239f6b6222c82afc49cf321082a5067314ef9393f5acc3c59781731217d8de614d031c64adf5acf343a5fc976852e0c80a205502937aafe49f6d7727d
SSDEEP 384:nRZcIj3sN4Z4d4ahEa+SdPId+2VJpASPLoiRKOf8LMsRnlYYoJx/7IzM:5j3IKan2dlVoSsGKOf8Lhn2Ym
TLSH
T1B1C26BB1D8A42CF758E9E5C6A586E9037EE85137C5CD2A4CD6F8FA3D304F5B80312825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30989dcbbcba9d47309b52c1713f220af9aab6be60d30b500967febddb4ec5b2
MD5 e33301a0050cbc15c7b43f03966ead10
SHA1 470be2a018628f6c4486a344c0a981d5c03fff25
SHA512 9cab1573e77363a48b74f10efc104dda747d040bc50bb20496dd86ab8047628d083040780ae16aedf9f49263e31f404141123ba16b8ad31b71fa5af873907611
SSDEEP 192:NONp6DbqQmiUyGkTBa+jx+FdCYHodX+2kNz7qDlVU6:NONp6uqTBa+SdPId+2kKVU6
TLSH
T14612E7346838AC775DE6B555F8C736A39F9820B79D8A6F45E6EC4F0C00D765C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 601a823a511a281e9897eadf0db7c604408b5cc606abba421ae667c80ddf4fde
MD5 5b6ed7fc82c012c5f009501edd3f33d5
SHA1 e939081560377aa8376087d2d5fdc0896072c344
SHA512 8bc8ff360b624601cddba1db5b977f09ffd210b3beea2212e51d0b3a24c1c5d83c5e2a8ad0731d99516157109198ecdbe83d85daba502e86a1bac5b0b04aa70f
SSDEEP 192:vONGV6Db6QmiUykkHBa+jx+FdCYHojRg5ipU6:vONY6ueHBa+SdPIaEpU6
TLSH
T1A602EA3568786CB79EF26E49F8872B239FD41077D9962B44DAEC5F0C00D765C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 f23c23225c1781f4a913a02a8e1f38844f5512c1bc065c47e9cd75453ce05a8c
MD5 2fed7bcd5f491da17bbd0ab11314c985
SHA1 bbd45cb8c079fb7db92d11c5b5cec52d35a7d66a
SHA512 01b77feebd0b28fd27fa9bc3a11a4952928e6ebbb9e1b4623f0251503fe3cc2824da625890f1b44a3658571beac5ec8e6d463d8c538790cc268d15e998fbbc90
SSDEEP 384:niZcIlsNgZ4dYzhEa+SdPId+24rNKAStiI7opRKOf8hMsRnlYY2:QlZKan2dlE3S8TKOf8hhn2Y2
TLSH
T126B25CB1D8A42CF718E5E1C6A886E5136EA8913785CD6A4CD6FCFB3C309F5B84326815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

0f1a0538-dbda-4d10-af18-99694215b107.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f1a0538-dbda-4d10-af18-99694215b107.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6fead72f71d70cfc277f8dcdc3af5f4629b23f9faf219f8da24042920ab0fe38
MD5 65ea0b922e8afa59436bf15bc2a03d1c
SHA1 d701dd66867bcaf3581a6f2b992fbb7f1dfdcda3
SHA512 7c5296366728e37daa8affab11d709e4780e35d16d2424d5bc977d490fa09448e3ede99578817e6dad9e4fb1785134238e18c41b688d8a001abb20100acc36ed
TLSH
T19241D958B6E91148B7B76F569BF6A86E447FBC372E06D49E00110E4F0B62B40D861B37
MD5 SHA1 SHA512 TLSH

Submit Download

05d48af4-31b3-4f40-ae49-27959d5e8f0d.tmp

Path C:\Users\Admin\AppData\Local\Temp\05d48af4-31b3-4f40-ae49-27959d5e8f0d.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb54d62f-61f4-4671-a871-7ed667f05bdb.tmp

Path C:\Users\Admin\AppData\Local\Temp\bb54d62f-61f4-4671-a871-7ed667f05bdb.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1900_1186883454\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a43e115b-fea4-44b2-b0c2-df172b59d10c.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1900_1186883454\a43e115b-fea4-44b2-b0c2-df172b59d10c.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1180-13-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-9-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-14-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-12-0x00007FFCEF9F0000-0x00007FFCEFA00000-memory.dmp

Download

memory/1180-11-0x00007FFCEF9F0000-0x00007FFCEFA00000-memory.dmp

Download

memory/1180-10-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-8-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-78-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-2-0x00007FFCF1A50000-0x00007FFCF1A60000-memory.dmp

Download

memory/1180-6-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-0-0x00007FFCF1A50000-0x00007FFCF1A60000-memory.dmp

Download

memory/1180-7-0x00007FFD319D0000-0x00007FFD31BC5000-memory.dmp

Download

memory/1180-4-0x00007FFCF1A50000-0x00007FFCF1A60000-memory.dmp

Download

memory/1180-5-0x00007FFCF1A50000-0x00007FFCF1A60000-memory.dmp

Download

memory/1180-3-0x00007FFD31A6D000-0x00007FFD31A6E000-memory.dmp

Download

memory/1180-1-0x00007FFCF1A50000-0x00007FFCF1A60000-memory.dmp

Download