e7376b28060f02ac5720da5bf27e010c8eb3311f1c6eef5e96685ce1554e0792

Analysis

user interaction
yes
max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 00:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vipexyz.dll
Size 722KB
Sample260816-a42avsae37
SHA256 e7376b28060f02ac5720da5bf27e010c8eb3311f1c6eef5e96685ce1554e0792
MD5 bfc791dea7bb5d1dadd59e1139b9c22f
SHA1 0542a7e949383c9c7e82570b28381bec42cd1ed4
SHA512 98fb1a15259a1f3577bc282965d1dc3436fa7a4a2fa1321f4ae1307394b6bf75bf6053928fbe4748ddd74c34bb999e0d817e5d1d1157bc172a47f53fd3126375
SSDEEP 12288:OdKI0qySxtHrpkWB/3o/H3ZjfvWvumly+dOE15ldP:OdKIVygtHrpN4/H3ZjfvsumlZnxP
TLSH
T19AF47D05A7F811E9F1B3EA76D9B21512EAB27C850B70A5DF03E0499D1F337A0963B712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5000_574178244\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5000_1869451014\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5000_1869451014\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3836	msedge.exe
3428	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313148685393832"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{C8734C9D-FFB9-41AD-B6FF-9E7BD6566F54}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{B141802D-D876-4772-A432-B17770EED8B4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe
4784	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4784	msedge.exe
4784	msedge.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4784 wrote to memory of 4764	4784	msedge.exe	95
PID 4784 wrote to memory of 3836	4784	msedge.exe	96
PID 4784 wrote to memory of 1952	4784	msedge.exe	97
PID 4784 wrote to memory of 1952	4784	msedge.exe	97
PID 4784 wrote to memory of 1952	4784	msedge.exe	97
PID 4784 wrote to memory of 1352	4784	msedge.exe	99
PID 4784 wrote to memory of 1352	4784	msedge.exe	99
PID 4784 wrote to memory of 2708	4784	msedge.exe	100
PID 4784 wrote to memory of 5672	4784	msedge.exe	101
PID 4784 wrote to memory of 2708	4784	msedge.exe	100
PID 4784 wrote to memory of 2708	4784	msedge.exe	100
PID 4784 wrote to memory of 5672	4784	msedge.exe	101
PID 4784 wrote to memory of 5672	4784	msedge.exe	101
PID 4784 wrote to memory of 5472	4784	msedge.exe	102
PID 4784 wrote to memory of 3424	4784	msedge.exe	103
PID 4784 wrote to memory of 5472	4784	msedge.exe	102
PID 4784 wrote to memory of 5472	4784	msedge.exe	102
PID 4784 wrote to memory of 3424	4784	msedge.exe	103
PID 4784 wrote to memory of 3424	4784	msedge.exe	103
PID 4784 wrote to memory of 4820	4784	msedge.exe	105
PID 4784 wrote to memory of 4820	4784	msedge.exe	105
PID 4784 wrote to memory of 2764	4784	msedge.exe	106
PID 4784 wrote to memory of 5932	4784	msedge.exe	107
PID 4784 wrote to memory of 2764	4784	msedge.exe	106
PID 4784 wrote to memory of 5932	4784	msedge.exe	107
PID 4784 wrote to memory of 1060	4784	msedge.exe	109
PID 4784 wrote to memory of 2716	4784	msedge.exe	111
PID 4784 wrote to memory of 2716	4784	msedge.exe	111
PID 4784 wrote to memory of 2716	4784	msedge.exe	111
PID 4784 wrote to memory of 2880	4784	msedge.exe	113
PID 4784 wrote to memory of 2880	4784	msedge.exe	113
PID 4784 wrote to memory of 3600	4784	msedge.exe	114
PID 4784 wrote to memory of 3600	4784	msedge.exe	114
PID 4784 wrote to memory of 2608	4784	msedge.exe	116
PID 4784 wrote to memory of 2608	4784	msedge.exe	116
PID 4784 wrote to memory of 2608	4784	msedge.exe	116
PID 4784 wrote to memory of 4880	4784	msedge.exe	117
PID 4784 wrote to memory of 4880	4784	msedge.exe	117
PID 4784 wrote to memory of 4880	4784	msedge.exe	117
PID 4784 wrote to memory of 5000	4784	msedge.exe	118
PID 5000 wrote to memory of 4500	5000	msedge.exe	119
PID 5000 wrote to memory of 4236	5000	msedge.exe	120
PID 5000 wrote to memory of 3428	5000	msedge.exe	122
PID 5000 wrote to memory of 4236	5000	msedge.exe	120
PID 5000 wrote to memory of 4236	5000	msedge.exe	120
PID 5000 wrote to memory of 700	5000	msedge.exe	123
PID 5000 wrote to memory of 700	5000	msedge.exe	123
PID 5000 wrote to memory of 4776	5000	msedge.exe	125
PID 5000 wrote to memory of 296	5000	msedge.exe	127
PID 5000 wrote to memory of 3108	5000	msedge.exe	128
PID 5000 wrote to memory of 3844	5000	msedge.exe	129
PID 5000 wrote to memory of 4344	5000	msedge.exe	132
PID 5000 wrote to memory of 4344	5000	msedge.exe	132
PID 5000 wrote to memory of 2200	5000	msedge.exe	133
PID 5000 wrote to memory of 2200	5000	msedge.exe	133

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vipexyz.dll,#1
1⤵
PID:3428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\JoinOpen.xml
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2cc,0x318,0x7ffbca7dc188,0x7ffbca7dc194,0x7ffbca7dc1a0
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,1358546182764469431,11369826467251679084,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,17327273551768329550,7156659660860574244,262144 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2768,i,3294470573588260334,7445118424702597881,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:13
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,17417466812717877509,16392862480842696487,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,9665121068250448675,13405118808925975914,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,13010048196408146829,5346674628216819475,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,3622893421833551598,15982506767461957396,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:9
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,12306950893980533997,5217174638361832581,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,4756706311279091413,18049133709381359923,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,1848479513206592703,11953158461421955777,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,3709500287750871742,4572547525849788166,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,3709500287750871742,4572547525849788166,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6316,i,5436629263575014547,17357499930942667045,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,17522333638499474625,12488113119805389388,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,9297014002260112741,6532542860248349948,524288 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7064,i,10427449659361679591,9801018161776435574,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6512,i,4238709051621570491,10819356386154093241,2097152 --field-trial-handle=2436,i,10072446581244820104,2610346712227856862,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x2d8,0x7ffbca7dc188,0x7ffbca7dc194,0x7ffbca7dc1a0
    3⤵
    PID:4500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,13532666002638910497,9244432307017763311,262144 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
    3⤵
    PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,2796643038029120045,3406975839811804196,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,7472716381351168202,18218850779519296419,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:13
    3⤵
    PID:700
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,6795697871889134156,8105382406478675005,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:2868
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,6795697871889134156,8105382406478675005,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:4776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,2172352202134665296,15102084806554053676,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:14
    3⤵
    PID:296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,6822236611484534077,13697043690985688598,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
    3⤵
    PID:3108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,10521103332178585578,10397040462063293722,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
    3⤵
    PID:3844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,16447686320699249205,9303426923743862322,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
    3⤵
    PID:4344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,13460811131750182818,16899682050992597410,524288 --field-trial-handle=2276,i,7252663877780018103,1717469043257227848,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:2200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1244

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ba39e449b0b6f939171018ba737eb6e1b7a8a70693dd27046f4781faf2e9a2e1
MD5 790d895123e52cdd5a430ce51833a81f
SHA1 05b596a08273db9dded20d225ff8a813b3dc0edb
SHA512 77ed339e7577d855598afaf78baa9acecf19803ec496352a3e888a2c09492f37f39537839bc22e8967d3c00d678bb34a4a96ec9d5f99620d68107076d11e7914
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P70:fwUQC5VwBIiElEd2K57P70
TLSH
T1DEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9bb02e5c3df0fe5da83794bd9fdfc835234bd8051ebd671dc536fc72b521c60f
MD5 1518285c968ab72392c86c75a8ac2a2a
SHA1 8fc3874d30c34841870f1b306694e5b4ff0ac295
SHA512 908df4f740c1becb3f92cf0fc9a04e433e63c9c814f694281b9aec9b65eb60564d14d427617215ecd3564122c459cc98464217d15b9dd5cbf115803275a43a97
TLSH
T12DD023B07529EB80CB0D003540245A00322A82323CC7032399917C0CCD7D800D3DBBF7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2fe78430b2c63ead7a7929983636f23866b400b5b34ef3f327483354c158acf5
MD5 ade6862f2a885fb93e66dd66216f9b3f
SHA1 7f82be08e9eca478fc6f9fb0ee334d2ea0b17d9e
SHA512 a7569a60d53bd0d678993ad747850dd488d320db49c0872e090fd74baebefa24a6008f9d5d197462f588c768f9be94ec946843c4e7353e226f34d20b49e01604
TLSH
T13CD097B8710A8601CE0A003290085740332340303CDB5E33C9E6780C5E69800E7DA2BA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

327f08ad-08db-45bf-a6d9-aea207e31165.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\327f08ad-08db-45bf-a6d9-aea207e31165.tmp
Size 18KB
SHA256 62cafc16e32c1f08413942203d646d740ff5906d3518b8c469fd8326bfd42b31
MD5 4d13c23f04cfce5ec0738761804e5b84
SHA1 3dfdc75fed670d1ce9e92790ce615a3c3314d8c2
SHA512 4c4afccddc8140acee2e104588d2d4d8c535d9d09c2355cd42de4a170cbf60bcef1c976ae87159d268e151a83d9b7fb6a3cd68cba5da230c5107ef63dc9db3e7
SSDEEP 384:sxRbjcm1w/fyseqFg7wHuxP/5yJ/W0d7m:s3om1w/fEMQtd/5yWkm
TLSH
T16382E71666249D77CCCBE608F9257F63D6F8147399505E4CAAFCC90C04EA6FD2206C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 306a6c50c6e063ad6cf1a0de672887ace61f8d5c3de866375267e7933e7139c9
MD5 2a8494f4e96ec23702cdab06cb563c85
SHA1 ce507c9fe591a2f8e2813f946b04eb1ba5d486db
SHA512 b2489bfa4c6048537b875ffb7e36f93951a952034e9ef1e2380b0667dbd088b9d915da1d6245ddea03324da23a233e85693f72e9443cab76c0d9324a59979b65
TLSH
T116E02B96C821AC3718FC2B1C94514B46F78023573A91494F3A3D910C8FB053B058986C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 4361b00a7ac8970d6941a91a5f41cbd3c46bbb57a948f0d5cc51cfbea2c9c16e
MD5 b24c9be87cca8ecb385ab33b64c64aef
SHA1 532f505aa8d230cd7d1fbbccbcd78c836fd44a12
SHA512 87c0024325692864c0536fbb76e3f05ab0676e8ef1b99185e41a127c734c64a8d8cbccbada2ab675bf2a7f9ef7334c75031b8ce3ee7c3486dc457000b729379e
SSDEEP 192:0oTPCBnRMYWIlIHyPvI7IuU5ykQ41fUaogOUXyX7I9xyAZe/Q5y7cv6x1srEMc:JoMYRvI7QhQwsDgOUWMLdy7cREL
TLSH
T19F138F7D2A411DB6D3CA5A3E029B3A79AB32D1A2D8C5551F123FB1D1061BF5268CEC33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 7cbaf4f13049082d9c6568a07f3422ad4cd68fc063a83819a25bca267fa64d71
MD5 f6b8fc5e3b72cf4cc8e4b1cf28a640d1
SHA1 d4eb0245d81640441a9494f9e8a8558f57253967
SHA512 295726b5b2d50e56062d80cf8de07d4ea626318ac152d32a274f8d643dbbb092afd87c23779d4cbd3f8bf35431988426abdd4d9971c45c2ce318aff1ae53195c
SSDEEP 3072:MFL/EL/iEfpayeYagVP9InxwbL/nL/uPlL/:gL/EL/kwbL/nL/udL/
TLSH
T172443DF71961A02ACBA852F5D2033E2EC177454E7CD1F9A9E57C4C812825F32B2F8E59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 dc83c3e83e8072496c67e122a804a8bba88c422758878b0024195b2f0d91578a
MD5 e67464c1c31c09cdb89651bc7b1cefad
SHA1 5ee1f5d1afaef5b341379c382c9430de1c04a011
SHA512 ff2a33bf6d3bdb5b3412b5f4ba76623f4888948ed65910fbfd6ccfbb96fd45819cff74060b93bac1a0b5e77a0692a83abed681b65ee0aa5087c4f9c312112aa6
SSDEEP 3072:Jv9G+sxNC4vIh9snlmvdDkYmVrU80HJLmCA13Q7:JQrxNLvIrzaU8SJAm
TLSH
T12C2539EEC7682C92CE6B877070E0E9077E702183BA4DD0D39945C5D897D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 887e365f6f09bd32ee7ee8d10c5e523485b034a4129ccb6cba89cb88ffe7ba5d
MD5 4e2d35fe2d688f5e90db1f12d566f435
SHA1 0fe8d8fdb8215ac27c4165001cd873e89b7375bc
SHA512 115f98c061b861c8a6cb38631a262147ea749feef6d2d740e13646efdd98a2324b15b008a2239ac41e2d8a5e6244fc13e6f8478dc597d7b24ecfbe2f440e481d
SSDEEP 24576:9Hczf0F1h8n1zSUhPXeyltUoZd35+KS4qCxG52aUnWvR2x+EEgHxn61:98YFb81zX1XeaUU+uqzNLR2x4gHxn
TLSH
T13E167DEDC96858C3CD639A30B4F0E9877C7413C3F995C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
Size 67KB
SHA256 f1199d1cb532b1b7d347a66fa7cce1ea63400d33e05424d6c4d237fd09d272a5
MD5 db9cf7bc052625768be85a41e6c5fca9
SHA1 2aeb6bcd280752fab012e03d503101bb90635d08
SHA512 79f9dd774be0c92d77e6ee992646ef1976d3ba9c5ba88128436fc1b5cb607ed9dc448a4519526e8a0d8c54c1aefab316704f2ad0674351b1c4692561ccf6ab5e
SSDEEP 1536:QnthZPy81HLbA7EPZKWwIvmRGIOlF8RnI1m2H1xaJDuN/JBm3yhUgU:QthtrBI8UV0IOz8mis/JBWCU3
TLSH
T1786302C3919FAE4039623BC66996C13006FC607404B4BBC4FC6EBA04D55B5BE6EC97CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 408KB
SHA256 79aae09edb44084ab715daecdc2ff2c601bffc9f1444db92e4a47cafe956af34
MD5 01dbbf05a80d2f068ac7537031ed83c3
SHA1 e7a8bbf92b835dfb6a2ebce9ce7205fef7b8f121
SHA512 38c28e0d575fd614a47c325d3970c9bc97e8563f47d9c1ad98bc904ea41a2759ec99f2c132ce2999a1823e28f7faa01038037c25e7a5a2a040f4a97eeb02a22c
SSDEEP 6144:RQnFzu6JhU76hCZBa6YGCrlHBrrzNH5EMGS44B+4my+hDBXdRJQ+9FvUvtIBMC71:MuNBM3hNk4UDn7XdRJQ+j8vtIBZ71
TLSH
T1D7942300E26110FBE9045D0AA513C8BA7123B5B29E81941630BDBFF4A4FDD55A8DFAFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 179140548863f5ecde1b839d39bf0590635d3065263a09c78555ff992a159ce7
MD5 fb266c880a769eac8c482cfe4b27b5df
SHA1 1149cf465cbd232a791f3fac953e635f1632e56c
SHA512 fb0779e780bb95b976d15f2e97a1790f3dc048af3147092eef5d0a39322f0dd1be4454693746181391d0d1f1a62b1eaa90ae65d8ed1ff40a8d59a2a3dffa1ea1
TLSH
T14071BA285BE456F1EF6819F205B07C6936E4886E664B0B6F182D9EF850C3FD442E5C73
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 07fdd59a6974e03c1ea80bfb111a28fc35d58e24354ec2c998b7de6e863bdd63
MD5 100c591c65bfe14285e7be99d68f9f49
SHA1 8064b9ec18e32361921dc5715f0b963fe76a69f8
SHA512 2ceb5cb89cb17f8739d0013e725fdbd3b5fe81647b353e9354dd5e17db51df46fc604549782a94ac4b92e1bfe72de136b19e655953501fdde102063c4a35824f
TLSH
T11AE0D89456CFC51F5D7079C791286B0891C43586EBB5BD4317408CC47603005F396996
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 30600e7922f75ea79c2f7f20eeb61b57eb01c9a7c06700a51ef0296e5f95db71
MD5 edd9ef3b2aa2636dadcfae3d061c6c38
SHA1 799242505d26089f3cc58b38a7e795ee0496e95d
SHA512 8e3ccdcc861ca0b35f084173faa46d550fc8f795bfcab6236178415d13c92e34772f787d075d1fe7299e3078b97fea38d14f6b228e7892aee6aa9084798b37d3
SSDEEP 48:TtD4jJ/0UC+lf5d9sp3CdayP4y9rWx8oV+Wx41oV766+/UWzOM+Vpq:hD4jJ/Jqp3CdPdvm+fm26+/DyM+Vpq
TLSH
T1FAE2E284E632F7AFCFAD1D3EA7C8B2F5C5D8202C91DC1A50137DB9E604A96F8648911D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 c4649889345a5fefb47a66b32cd40508c80268f7d3027e9d63c1ffb60b2ccdf7
MD5 32df6aa4e79496069e6cd4d27e43cc22
SHA1 dc597e803f1b7f812fafddc55047d04c15920f53
SHA512 d9eebaf073a4e0ac63d729f0ab2c39358711587ae565fdf0f77415cff14543f9c6cc07626ebd2d4c0804d975c419ab988eed0f6fa21b88167075561773dbc2e6
TLSH
T1C1E0260506CEC12A98687CE7C6AC6708A2D03582F38839061B888D447142F41E38BAD0
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 d502ff7169ef396416833a93545b532cfce38084beb774236deb342282ff6422
MD5 30cf70a8fb27603c2652402ac5b73b1a
SHA1 153fe92e0509616742705d759c01bacf900da96c
SHA512 b3d9644f4eb2bbf0f56a953c6914be2bb38804bcd993ed9ea3cb69ebcc2ea95dc0b5474f8e4e8ecac83f6ea2d0fe85127d89b4f9d7acd519e27a270d698d6c9d
SSDEEP 192:rhAPniH+bF+UI3iWGVoWN3qL/WbZVVV63:rOKIkUI3ijVoWN3qL/CZA
TLSH
T1B524311F5F303722CDBD917668EB45A35C6DF03F875326DA686114B0CEE2A52A01C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 4KB
SHA256 d34634026a61c1385ce9b5a35b5f5a4e7355efb9dd414b5a85b23066457f7f4f
MD5 dcd8714961a2697d90e316ea3fd156dc
SHA1 d4eb161331f1be2fa14b66ce9db4712be2ea4581
SHA512 a48189f0c796fc462b64f2fbcf7b7377465423867813b84be323dd34143a66f6e42c9deaed96beffcad254bc45266394fcc5e72c50185afc836cf61bbc32ca55
SSDEEP 96:Jtv9/+vkSezB82CJwRr2+l4NS36Ov2YRtrZaNBGrZaNBOFNB8YeWy3:9/+XUqbJwRU0XtboKoA+
TLSH
T15B9174F72C0D982BCB8A40E88947FD59C15708BDDF98FDC8C26C719B216A1643526155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 a2666e0c718985a6c07e6f32ab1c56772a21c413a0d0fe533b806f1aa871d7d8
MD5 a2e6bb16193e5da745c0a83699e55a71
SHA1 8026c90b68d27ffd0eac3da3cbc8768f8b16434b
SHA512 181885903dd9356c2bce4efdca01f063944b14071659404bbd28fda48b43eba5426fc9edef99bf9431821063541222e90d9ca6ec76b63c904ea84cacb172b99a
TLSH
T179E0D87045CEC12A5A5820C796A9770CD3A47686F78DBB413B849944B602084A387DD1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 888243ba1c7adc314fd9ccb47cff8f9fa677fde674b9f145ab587e00b4624453
MD5 5d6b6660762810b8fb36ff223ce11521
SHA1 a9819da4dca128367583107d8d621ed324ad6650
SHA512 32cdafd1407bd49dbdcaefb0e7f82089f1a0b3e9cb4f2921a3a4a9172b5133603a24874eb06cd1bc6615860f0e3b32972522b0cdf1c9017cf8f7e41de7dcaa92
SSDEEP 192:tDLaTarbe4vxR9fKsd58WYRTb3RsmXydSu:BiA19yIry7ESu
TLSH
T12AD2F7CED9111107C1EBA6B169A98F932D65081EAF42EAFF497D00708D7728B3B678D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 64f0257f41fd95fe016f03125bfc07ba55d0691840a08b5433ab64e2308ddcd0
MD5 9ff224c723e6ce68ed06b566f45fde1b
SHA1 23b1c1538346246e3e8cb64852b1a2a0a8cfe2bd
SHA512 df1a906c03f0667ca0543bb4c1cecc1cd733a915a86a01bb64f0bc3dbdf52a7797ceed2d9fb771d1779edc13b4f247a41c0adba0249e9a0f78ea51f4fff54352
TLSH
T15B51AAF7C3E8862DC90196F4AA18AF1FCE1C0955436C7C5AC9E4AE1B93F2471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b416d3265ae5ec79841ed8e6bad234cf1c927cb96056840cb70f4a76b9b50608
MD5 e61922bc9b0b146175eb50c9f3f017a3
SHA1 ecbd0a2f9ff6de2d5f47f546b969e763d3843ca4
SHA512 994fd172231a29e561c1de4bbdec0022700831bea483453b8203b53e9d598e81c0e2c248c7017de0faad1236a47e88679c4ff0a284c60a718005bd59b5b637ec
TLSH
T16151ABF7C3E5862D890196F0AA18AF1FCF1C0955436C7C5AC9E4AE1B93F2471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 5b8d1313f22796c9d55d52dccc47da362ae9f4595002c78f8e85f1bb8e5bdb50
MD5 61d7c9a822988c6a75b51ebe9f5f6885
SHA1 291977db57aeb15d0966b584fbc7293f15881ca4
SHA512 f648a55ceea2f959ec9f9161cde3cb463c4346af74175d44d09dafd9118a3e6601237389a100ad9c3dc9bf7180812a131cd6ba8a1b8314045a4fa7f192b7897a
SSDEEP 96:OIEumQv8m1ccnvSLadtQ7jrmrfr0HEfPfnFIA8uMC4g:OIEumQv8m1ccnvSF737HM6AoY
TLSH
T1D4F2CEFA07276205D59445B0A4045FCFAF06004B43B6B6EC76C487E3F7A30E2B6B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 522B
SHA256 c7db66bff63b9516c5d089b549b50d38b81fe0eec94cc5b1d5412dc586740f79
MD5 484b04728d43e80487d40fe7a4d1a42e
SHA1 cad570f1b7be810842401bc73ddc1683e3844a1c
SHA512 cfafa5c418e2c3487e2ed206f45a14f5090cdcb8fdbced3f24952c012e91a96fc46489af216be847247958c77b8732d4f63256f2e2cb7643f4851b993b7987aa
TLSH
T152F08B93C2BEB03B5438D97B0E04BE05287AD931028094F0DDAE8A7CA0984B7465302A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 539bed86eff29787e6c454aeffccffa9cfdcaa196f096fb67b625fc299443a41
MD5 4210bd75dd21928477843be6e4dd2400
SHA1 9c13c7be94d2a0b6638749ae9078803a85437c7f
SHA512 18d4452193986395b94e50219eef0b058e08ea213d6921cdcca9fe5eadefdb1e7b92fe90a7b78aee4cd7e68cb65a5226147e261f499664a4130ad1a290c9f36b
SSDEEP 384:sxRcjkm1w/fyswWvJqFg7wSuxP/5gpJ/Akd7m:s44m1w/fSYJMQmd/5gvAUm
TLSH
T1F992D6166520997BCCDBE609FA257F63D7F8142399905E4CAAFCCD0C04EB6FD220681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 5d43f18f3375bcee81e38a1fe5071248d7a355d7cca0b0c24feea03b91f7b72e
MD5 0bb17028db28d8feed3dccb04f0cc9b5
SHA1 8e939d4ed8105a2624abbb592efe80f252def6b2
SHA512 64d7becf00b0b1c80fab85a6e4d2f3fd7ed9fea391ea0edc225209dc2dcbed597c6690178579011a90b2b93cb78cf8df54cf7696cd2adf398df2e434f933658b
SSDEEP 768:UtiiG37pLuL7ANWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVqJepN0NroYKG:UtiiGxE7ANWgv7fgJu1jahJef0mbG
TLSH
T10DE20C3B680CCB7E4F804A9CEC29BD9E6DD801CB56D8CD9447EA881C03C67EB551A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0b0f9012-7918-4d05-aba3-e0a1f1773007\index-dir\the-real-index
Size 624B
SHA256 462604de352df4521bb2c7c37c05d13ea495c6d22df25794c229eb3aa9cce0de
MD5 9b7ea2fa720e82dfd1e7a7ce05783a75
SHA1 12ab13cfc9ab4cc6471c2da911ba8646e009f453
SHA512 4bea0cabb67e403097788811cf9b5c6e71d78ef0124c75910e5eca2aecbccb101ace5e1847e71b45a65876c73f92dff4661060ab0e7193815c1aefd159b88c99
TLSH
T121F0DC0ECC982DE6CF425072163B2D60323301EEB6118D3760ADB018DC2293A1982E14
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0b0f9012-7918-4d05-aba3-e0a1f1773007\index-dir\the-real-index
Size 144B
SHA256 5c26f13da234cb699c7eda3aa9069e6d809f09e1b3bce14a97dc2fc7413a96a5
MD5 e066a4ed7f337503d476c2073decc991
SHA1 285df14f53c8a781f602712398546d308d4f29dc
SHA512 3822d3c35ed372edb2108436aa0c6cf6a9b72c2dff327fcde6bfa9d8b935eacda3869646e62a200968d57c30f8f08c71f307a97c248c0bf8baf2302ab3842d6f
TLSH
T1FEC09202DC9A46A9C906293222A751A82A320AAD0956BE1A10DC2906A462899C1D6805
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bd2c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0b0f9012-7918-4d05-aba3-e0a1f1773007\index-dir\the-real-index~RFe59bd2c.TMP
Size 144B
SHA256 a9e6842276bed71965917f45e21eb1454a95fe6b48dedc2a54a3be5475b3a22a
MD5 2689b8d21db91c486b8fede6e389da59
SHA1 b1ace179727c6b0c54fc99c8e162f908e62916a2
SHA512 6d34b03f3b3f75710afa40be1262046ddac313ba329635cfe62e1217760f384173a5dbee7e597aca55fdb7e4883119722c8bd1be80ebc5c6d2f3ffeec6a2d572
TLSH
T107C0121BC65298B4C41B757010A3831C376B0C240422F62E60DD086F58B10D4C0D7D04
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 cc4dfa4a267b43566c90e4432348a19b7bed8b87daa2deb68d2504097070b21d
MD5 f1f51845df5583c767e8a0751b9a873f
SHA1 6a26f14fc8f258865f29391bdbf0cc52164b8fa2
SHA512 bf3d599afeabf1598a4d1db21b9c77d42fe19e0a95e6aafa6820f5316dd97b4307eca02cd77a36bdba0f4d17ef59a0b10a7e9759592e7a6152a48562a986b544
TLSH
T19CE0C0B71CF71434F86FD3D2283681B10201756CCD44FC5F442A66C320B2791394BC22
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 302B
SHA256 3b462bb4034fe495db93c9b53e8b3571487317da24933a8eb1680b44e4728dee
MD5 9a1b01ea77c746261972ae3524bbbc71
SHA1 3399f0bc9b0c4bce2382074427cc0f873f85463c
SHA512 0298a396075bdeb4d1425b6b067252b8309b0b35fcf744701647c0f9926065dfe633db850b297d875d1c941fbc6757f9b3088a22b5d45cbcb8fb736b379cf581
TLSH
T14DE02E8B0B081323E88203F3289B32486BF1C1088BDFAFC3810FA03A8BE820C34141C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 64e3b438139cccf37899a13e31819303cafd615bcf262a477aae66489298c387
MD5 460e43e11119bad6f4285dbf05564ab1
SHA1 09cad67155fd3faf8ded390708444e100f1daf20
SHA512 c1deee571ec019589826fe118c3b3637ed13e4564769d631958d78dbe26198097df2a1f224dcf0caa20d4be58984584b4477f72b3696f0a5d67233da7434a548
TLSH
T186E0DF9006CEC1BAA86524C74228A309C3E9F647EBC839062F80CA4CA2C3504B39B590
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 bcb941db367d52a7384163457990d15d91f9bb7ad997fb80dcc7650772e614a1
MD5 96cdbc034281d3ca290f4b42ec7cb0d7
SHA1 29fba7b49a08744169e0d7dae369409f51c97881
SHA512 d6663bf377bd280f8f12397311d48186604c3dc42861d40c92902e52a9e26811f3b3998e4837d046a84114a53115a3bde58e387356fd6b2d490a8ecd4eb135f7
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59e035.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e035.TMP
Size 48B
SHA256 71e7542610f61e90572a93741e6abe3119cd3938bf275e03d285fbc664b71b3f
MD5 77ca3660f589c845e8dee4759ceb18d9
SHA1 9943cf290e96510f9b3b08d984d2a70103fcc59b
SHA512 9e7612ddc7368528923c5866fb9e5f4f2b99d52a29104c956143da7fda85e9ce41f082af80c7514995113ce1a38ef435eecf6d84c68cf701794a11e8718c2f59
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 545f7f2a0f7e5a69c99115b173d708e2e58811fdf895fd679c67c32bcc5fd2b3
MD5 c0114d847c46fb21ed746140026b26a8
SHA1 f7928c7a20b03b28a29cff44d5e2a43d6c33db71
SHA512 0559f7aee3a86f45520627a37703e3088c13c288eac72ac41675adbf03ef5e9a5cc6b9156d78fd7c5067ff6255848e4a7ba7e6b6fec470ed9af0e375f327ef97
TLSH
T108B01224B3408583CC07063409A4CB05E726FC47010181538D4CEF330D0577C3C060EC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 83abd460ac03d32b599230b200399311d74fa8a5cfd3a2e4c15f892c7c805a29
MD5 0d5164eab098a8f52dc1884ad63d52ed
SHA1 2b5a9c3f4800245ab6fd8dfa00ce0ce2fc54cc49
SHA512 0867c36f6692edf8119afcb62be2bf8f5a54675235748b78f03553f2bf02f7280d0e3e76d5fe398c02dbf55fbfe1eab0f513da39339833a6d9094f456d2ae289
TLSH
T10DE0D8A116CFC62BA59924C79228F30DC2A2F542EBD879512B489948A347540F38B990
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 9ac23e811625db814aea831b7def53b2825f588bf34a37311a4a9aae995e27a6
MD5 3eb192642d1d3915a9ba3293da4e892c
SHA1 a14ccbdbb75e9dd9b00d261f6302b6bdda185d58
SHA512 4afe08e6087133150df91aae96d51e2914fc98cca210328788e5efdb2e7b94b74c1981fa15d24331090286d765faaa9ba77eaa3d3ebd53ac9e2fb768953ad1b4
TLSH
T114E020704ACFC63AAD5065C38268A71D82F0B946EBC47942574868446542100737F9F0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 9330ec194ad50bb1be0d918ce24bc00d3db49aad95b575c1c78ddd5ee1317604
MD5 3e70f22f80593974367446b406c38135
SHA1 7067976c9ea80177dbfd90d40b791a51d03cb0cb
SHA512 9522704433c1f86a29eccc6f67d997fe1189e27f88e82b6a0e37864f7c042e21b6f9534bbfd59be790fa3a13f2edb8eed124cf6a45fb245bf145969c9bc47cd7
SSDEEP 192:Cm7KmgIIJ4tWGm7g09OGlkdqjXNn7Oj4XfV+gBkldQzLkHLURlTp5wtCZNv0gja+:MOnAXX
TLSH
T145E1280176BA12403CBEB91D81BCCD2B52C270673555A46B7FA811A74FABE024EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 70ce4acc34930c39e65f6b8113ddf6b18c57e8f891babb42e003ce5eaf02cd0a
MD5 9c47e0527f19d1c1d6e7236c7fbd16a1
SHA1 c39e3f7a82793a9b8ab3a1ad2feb41f2c08d114c
SHA512 d708f41646eb6290fd81fa738a90d5eebd495e5676b9a735b7d1b1aa6edca2ca3e7243058ce1ba554086494a77c18b30a198c845d7f703a7dd19b79fadc2aaac
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkdqjXNn7vWj4mgfvK4+gBvcldQzLkHLURlTpG:Cm7KmgIIJ4tWGm7g09OGlkdqjXNn7Ojv
TLSH
T115913441713A12403C7DF91981BC892F82C2B4637155A46B7FA821B65F7AE038DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 e4c6dbb4dd7026938e24c188bb82b630e90ed10eae222367f3a5052e64b3531b
MD5 22b2949449a7b6d65658d8651726fc08
SHA1 4ad59b4fd128c45e7f659a72a4bcef8cc7807c53
SHA512 03dc80177619c25779782791ab103d09ad35c4d63d9f9eaef40875479ec88110b42e281c7b8a55543e6a93704cee1b1f1c5c535d662b342aa90dd86a3be01505
SSDEEP 384:DNrRZyCSDnxTICcy65MEhIKyll7svbFKfk7:xFZJSDni/y6+yI1l7svbF9
TLSH
T17E44840A7B747001EDE6D9725CB080771E3CB16D8F22A6D16DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0bd9a53-dd4b-4ed4-a42d-69ab3623ff0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0bd9a53-dd4b-4ed4-a42d-69ab3623ff0f.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 1e69e40f708fbe5322ab710407ce85df983ec756bf2457d3d61302ea36e65e1a
MD5 5c56f1668a680eb3e8c0ff4dea188f56
SHA1 c6633e6bc41d7dea249b3d7be9bb2a8e5b3a267f
SHA512 11431e0b3f2f54c5e6753046d4754f436cc1c7ca0553643ebf13725a570dddd29838fb6bb1ed887db331cce3673eb4a369cf5ce81f10f8e8cb86476d880b9f74
SSDEEP 192:K95QkIIIbbLMIMNsYcYJLOIUAsylrhwQ2s0w:AQkIIIbbLMIM2BvIdsIp2s
TLSH
T1B842966B66021BB7D09F5B7613A296405BE588810073E12D3392BC5F8EF3E9783C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 f082558af58ef143b5df74c51db1997b05a06b12e280f1f6433a35bc9c12f182
MD5 5961fbecbf36f316beb7d99e8b8296c4
SHA1 40d6ce8ba533e7da10c0c190989db8a2a5d0634e
SHA512 38c881a1217574d791b8165a4b7b1576b92e57f87b103d5e2123de4d32e5fd63ab6b7b376894d2748cec1c1d0c7b3cf00ba819f04501a4b9c41f60a8ddbeda03
TLSH
T120E02690AACFC66FA8A434CB51B4A309A3843A43FB987D4A1F44C84CE002500F78B991
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a88e2ca6d3a0bee742763ad369234d4effba82c7d6b50588a2b54b33afa163c1
MD5 dd073c3c742a4fa77ae13b433a12584d
SHA1 753db00707bb2f75191518246ab7337ad5000745
SHA512 eb9a7638eda141824caf2534d03f37bed52a94926229e27fe39c5add54070864c2b758aae8e1d7d0e4f8bd6332f167b04bdc76e4dedd5c1c90c0d1ebdd5c3f2c
TLSH
T107210456F330C148E15A867E907F9B361738D8168FBCDC0F40BA20346E76B040E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 86f6fd9d77225c1407295967f253f80152a6feec967b341af68c53a7a4c34543
MD5 3e8d1e095638ef0298cbfd402d41e799
SHA1 cd43dac2368aa37eb47510cc10021218c4f7fcfb
SHA512 2044b911e5336718edb1739024f71c4ca86143da503ab440273e2215e62d8dfdca900a3ba3b7cd145d3b283a7e82bfc966e7cf627d2598915e21b45906d3e542
TLSH
T16CE02690A9CFC9AF98A030C741B4E349A3953983FB987E0A1F88CD4CE102541F79F991
MD5 SHA1 SHA512 TLSH

Submit Download

5324a113-c3e9-4eb2-8e38-e282753837fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5324a113-c3e9-4eb2-8e38-e282753837fc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f0e4108833c0333b828de3878fc651d69b8e3d3afcb126eba4f6bc1fff0414
MD5 1f708d796e62b593e340148008f3d2f4
SHA1 bb90475a782f85aa32b582c926a0bd36207e4289
SHA512 777640b89ba316db50944d29dcf9a2ae7a11ebb118958b2829c3e68044e34c9661047cec954b7874296bcdfcb77210435d6a5d21a4fc5d9c9a14954e247f498a
SSDEEP 3:MsEllllkEthXllkl2zEfl4hqlt:/M/xT02zVhql
TLSH
T1364404147FC0040DD5003030F055C3501371D410051157C334D744335CDFD504F10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aef8800d1ebd44f3ee83c011666936eca065db1bfa65a6f307c4d122f08d37d1
MD5 c84ec50a8bc41a3ee5060e79ca6ad202
SHA1 e0f0bd1132db957568889821668c492e7de83fa2
SHA512 1b94b543754f5990367dfb4d8947c978e7fc880e97030805119fe75aebc44a3ceca35465dea31e2df2487ef76163edb370d840b2f9b5cb509cd7fa2dc46d68a1
SSDEEP 3:MsEllllkEthXllkl2zEflEUt:/M/xT02zM
TLSH
T1704404147FC0040DD54010304051C3701370D410057157C73CD154335CC7D404D04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ec9f30c5092ded40168189c74530888655e40bbfa9d4f2b311c90f1e7dabc0f3
MD5 da6c38cbd3bfd14d9c691e9df33adc4b
SHA1 4e27c108c6c99c4660e0e8e6fb8be8919317ec56
SHA512 bff2e88ec4e38249330db02276a2e9b6e41cc9cab8d602bb3763d31ce1edfe3a5f905d9b253be9fb6c1eaea9d9ee5d04d38f03eb82eb850ddbcb65d33545ca24
SSDEEP 768:8rv+4UNbdS3cRlYycgBU7Hucys6BRvi82oP4/z6himofW2bwn+h:8bsbw3tgP3imOz6Imou0w+
TLSH
T1DA03BF35A4589D73ECEBD188B0467A937FF4227385C54E90E5DA5B4E058BA5E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3ec54c68b9b0d5856ce9ebff4ba43b48b66e92b13e06df306bc6caf51cd0756d
MD5 037ce2cf48fbac55b2a362c01e4454d2
SHA1 4b2c23fb387782eefb618a2ab24d6ec680ebf302
SHA512 7764add27eb830731b0cfb50a4c1a052d1fa399ce370a994aa5040d580c94f4b80812551aac08aec62bdcbe4a1b0045c866e2d0fb0c2f15f303528398790864f
SSDEEP 768:xGrv+4UNbdS393vlYyc47Hucys6BRvi82oP4/z6himo+y2bwn+h:xGbsbw39gd3imOz6ImoZ0w+
TLSH
T14303BF35E4548D73ECEBC288B04A7A537FF4522385C91AC0E6DE6B0E129B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 61KB
SHA256 c1b8581be17d30278f877960730ef429c49df4170aa8df0fe0538977d4e5ad47
MD5 2b7de7ee2136cf656c70a825380e163e
SHA1 c85a78a7044dc5ed7e42432d094933ae52397fb5
SHA512 c3884bad3201ee5f61b5c63a5c1d991e22d9b34bc58bfc0188b2cbfaa3fe51a26c6639bc9c8fa23a92a85d3a4d0901ee85c1a5e56ff72a3f1748387fa7b11ae6
SSDEEP 768:DFX13HwgiT2zA7Hucys6BRvi82oP4/z6himoCnVCdTRnYYuwHxp5asYl9BTi9PX6:R13X3imOz6ImoYVmt2cihTh
TLSH
T160537CF998D7893AE8AE9B87577D2E065ABCD123B0989884F7D54E0CCC535BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4b6c16f25e024b1a816140fd6adfa74591517b604dd59285b5c7100d0dec7974
MD5 ffad815829a0d92f7071238a641205a3
SHA1 003d1d0bdeebd2889c38eedc9a3214497adcf24d
SHA512 1212651da23e27575aabe4395cdd1c4bbaa263387c35327e7d24e75753a1b4cb534fc8dfe82d843dd8f96cb48387d868885922ab7e86fdc87bef603042beccd5
SSDEEP 768:R13pTHlYycgBr7Hucys6BRvi82oP4/z6himoxbPi9PX6:R13ygY3imOz6ImodPh
TLSH
T186F2AF74E8549D73ECEBD289B1463B82BFF1222395C85D94E9DEDF0D1583A6D030B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7aa2f7d9a3e1ac92bfea3c86c14390ae24025053770f4770ef6c149bfb875dbd
MD5 b9606f98cef535927e14c7b40d3b0894
SHA1 2ef7f0c0f4f32d04332a91a95971a70b5a784c8b
SHA512 0bddd93f5aab36f0dc2a51972a04392b42d32b3c24b732c257f5f80424a92865654e99f34b81bfd3994c4872f9ab8877a787159ac8bdeba00cce820cf336e9c1
SSDEEP 768:213pTHlYycO7Hucys6BRvi82oP4/z6himoxYl9B3i9PX6:213yL3imOz6ImoGh3h
TLSH
T17F03BF38E8149D3BDCFFFB89A24D3B126EE41237D1E85894D7E99B0D11A3A5D5307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ca0bfc050afa8c2b1752d13a51c4843b0a3c48b36d90328691fc43100c8b57c8
MD5 d491b3684ae2db6f709e4037416b2108
SHA1 e138032bc1dd4073f69e09b5bb8dca695b2a7eff
SHA512 6bb9614845be899d5c94a5bc582e7f1e971cd15f485378036ed35812d6f8619389fa4e9b8a13a0c75574b06395fa59672b5b650c53811b279db008811fbb98e4
SSDEEP 768:H13DTHlYycgBo7Hucys6BRvi82oP4/z6himo6WPi9PXx:H13QgL3imOz6ImolPi
TLSH
T106F2BF70E4549D72ECEBD689B1463B82BEF52233D5C85D94E9DEDB0D15C3A6E030B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 fafce35aa757ae6cdd5406f5d5d2a0ae012d4cf13faa04bd71917edd0f0c34b0
MD5 9e47705910d68c43ce385179eaa100fa
SHA1 13d3c16e061fbfaed3c852ada63a948469456694
SHA512 9d386ee758e3928fb9f79c9e190a2ca803f5c63a231348415a26cb8ba958cdd2eaf49ab492941ec6b394a26553987b6a06f5450db7cf068eda159145f065dc4f
SSDEEP 768:e13UTHlYycgBo7Hucys6BRvi82oP4/z6himo6Pp19cFPi9PXx:e13rgL3imOz6ImoOqFPi
TLSH
T19E139E7CDC148D3F98EFF788614D2A626DA81233D4B88898E7D98B0DD57391DF706822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bd1959894b180d9eee1601b26479d8e816824151ba6ee42b192624443f555d0b
MD5 5fb00c849e888c140f8e55aeda3e2dc3
SHA1 87f26e2c56fc8e64cf376a46a499e09972e421c9
SHA512 ff1dcf15684447fee78ff2ea83ffd42abff52ed23f2ced9879d000e677f56ae4663c107bf7bd0c76ae53b84faccd70115a1588340b645708362b17fe0d821c4e
SSDEEP 768:Rrv+4UNbdS3cTHlYycgBo7Hucys6BRvi82oP4/z6himo6WoBY:RbsbM3zgL3imOz6Imoloe
TLSH
T18903AF31F8589D72ECEB9188B0467A937FE4226385C85D94E9DA9F0D168795E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 6fb0dbb80081f5572d5fccac7830413cee52131911d211b2477fcc3ae9338109
MD5 a968bc2929757703fbba1a03c333cb74
SHA1 448b0e3d8c9fdb5ce3586d1092175a7226a5b2d3
SHA512 7a47c7b698e3da98550fe2c61a6bf9f6292ea8ece4dc431cb9f41d88d95b8008bed8b6c7735073157d08d093e809802b6bbd305b9ab37e5f4beef1ce061fce1a
SSDEEP 12:TL0yEJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isJGyzA7dzZEQQtf:TL0Dj0afDdWec9sJVUObsBZ1GEXkGVjy
TLSH
T147922021B9312467E9EF0B76FD434CA00DFC02AF8DAB754099900DA11962BC27B451FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e561e7ff03ca49ef502e29b6a598c362477aff611277c244960345e3d0ffa07
MD5 cfe8314e7c99e8dbd2263f7db00b3917
SHA1 d578dc07b9957a3d692767faba32db0024333db6
SHA512 73d45a21d14bfff4ca105f46e34598850a9646d0ec1d5a8e4266c6adb3425092fef909e2778a6e4f09ad0174e3205875afd8c4a867ed505bf8dcb492768f420e
SSDEEP 3:MsEllllkEthXllkl2zEfl3eWKll/:/M/xT02zT/
TLSH
T1F84404147FC00C0DD51030344071C3D01371D4100511774335D104335CD7D400C05440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

7308cafd-3973-4128-88b3-3d0eaafa9db8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7308cafd-3973-4128-88b3-3d0eaafa9db8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4784_129196394\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3428-1-0x0000023C38490000-0x0000023C38491000-memory.dmp

Download

memory/3428-0-0x0000023C38470000-0x0000023C38471000-memory.dmp

Download