3267cd8cb8e5dcecdff3041672f651f762b80ca6a8367f408d374551a109eae0

Analysis

user interaction
yes
max time kernel
599s
max time network
578s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 17:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
luna.exe
Size 29.0MB
Sample260818-v9drzaae53
SHA256 3267cd8cb8e5dcecdff3041672f651f762b80ca6a8367f408d374551a109eae0
MD5 cf0add5c13f3fa63b52db8a4a1fa03bd
SHA1 ac352029c95f9fa7b5c23da24f0ed1a146f588e2
SHA512 580ff10a672318f67d1a7a6ff5bb29c1ed8ecef6f9fa4804c29fcc4b2cc7fa5f6ac187f595b13bb682c55050b6c510bd22f21c6afd391cc5f3404ce08b6b96a3
SSDEEP 393216:OQ88RJl7Mvz9gYI8xdnmqKE8PdEVB3WfsHhm399XkifiR/8rGfi1CPwDvt3uFoCv:OQ88RwGdOa
TLSH
T130677C57B96800A5C0EAD178C5678213F77178445B3067DB3BA4EAE82F77BD02A7E720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3160	msedge.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
3	raw.githubusercontent.com
4	raw.githubusercontent.com
1	raw.githubusercontent.com

Drops file in Windows directory 42 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1927366796\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_277672660\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_46516362\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_802945056\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1927366796\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_841939497\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1164643525\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1164643525\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_46516362\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1221064301\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_277672660\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_277672660\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1899889382\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_46516362\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_46516362\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_760856833\arbitration_metadata.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_841939497\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1148702393\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_760856833\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1013992368\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1899889382\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1148702393\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_802945056\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1927366796\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_277672660\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1164643525\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1927366796\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1013992368\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1164643525\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1388532798\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1899889382\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_802945056\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1221064301\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1505914013\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1899889382\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_802945056\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_802945056\v1FieldTypes.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	luna.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	luna.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1624	msedge.exe
2576	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315485001715094"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{A9C0A74A-FF9E-4CBB-AB0B-EEFDE5776608}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{F31A8813-EF98-466A-BC8D-5B145A42B950}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	luna.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe
5584	msedge.exe
5584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2756	msedge.exe
2756	msedge.exe
2756	msedge.exe
2756	msedge.exe
2756	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5260	luna.exe
Token: SeDebugPrivilege	1976	luna.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2756	msedge.exe
2756	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5260 wrote to memory of 1976	5260	luna.exe	90
PID 1976 wrote to memory of 5332	1976	luna.exe	91
PID 5332 wrote to memory of 2756	5332	rundll32.exe	92
PID 2756 wrote to memory of 4632	2756	msedge.exe	93
PID 2756 wrote to memory of 3372	2756	msedge.exe	94
PID 2756 wrote to memory of 1624	2756	msedge.exe	95
PID 2756 wrote to memory of 3372	2756	msedge.exe	94
PID 2756 wrote to memory of 3372	2756	msedge.exe	94
PID 2756 wrote to memory of 4480	2756	msedge.exe	96
PID 2756 wrote to memory of 4480	2756	msedge.exe	96
PID 2756 wrote to memory of 1500	2756	msedge.exe	98
PID 2756 wrote to memory of 1500	2756	msedge.exe	98
PID 2756 wrote to memory of 1500	2756	msedge.exe	98
PID 2756 wrote to memory of 2536	2756	msedge.exe	99
PID 2756 wrote to memory of 2536	2756	msedge.exe	99
PID 2756 wrote to memory of 2536	2756	msedge.exe	99
PID 2756 wrote to memory of 4944	2756	msedge.exe	100
PID 2756 wrote to memory of 4944	2756	msedge.exe	100
PID 2756 wrote to memory of 5144	2756	msedge.exe	101
PID 2756 wrote to memory of 4944	2756	msedge.exe	100
PID 2756 wrote to memory of 5144	2756	msedge.exe	101
PID 2756 wrote to memory of 5144	2756	msedge.exe	101
PID 2756 wrote to memory of 2336	2756	msedge.exe	102
PID 2756 wrote to memory of 2336	2756	msedge.exe	102
PID 2756 wrote to memory of 2704	2756	msedge.exe	104
PID 2756 wrote to memory of 5728	2756	msedge.exe	105
PID 2756 wrote to memory of 2704	2756	msedge.exe	104
PID 2756 wrote to memory of 5728	2756	msedge.exe	105
PID 2756 wrote to memory of 3264	2756	msedge.exe	107
PID 2756 wrote to memory of 4308	2756	msedge.exe	110
PID 2756 wrote to memory of 4308	2756	msedge.exe	110
PID 2756 wrote to memory of 5412	2756	msedge.exe	111
PID 2756 wrote to memory of 5412	2756	msedge.exe	111
PID 2756 wrote to memory of 2852	2756	msedge.exe	113
PID 2756 wrote to memory of 3508	2756	msedge.exe	114
PID 2756 wrote to memory of 5236	2756	msedge.exe	115
PID 2756 wrote to memory of 3240	2756	msedge.exe	116
PID 2756 wrote to memory of 3240	2756	msedge.exe	116
PID 2756 wrote to memory of 3160	2756	msedge.exe	118
PID 3160 wrote to memory of 4252	3160	msedge.exe	119
PID 3160 wrote to memory of 2404	3160	msedge.exe	121
PID 3160 wrote to memory of 2576	3160	msedge.exe	122
PID 3160 wrote to memory of 2404	3160	msedge.exe	121
PID 3160 wrote to memory of 2404	3160	msedge.exe	121
PID 3160 wrote to memory of 4420	3160	msedge.exe	123
PID 3160 wrote to memory of 4420	3160	msedge.exe	123
PID 3160 wrote to memory of 1968	3160	msedge.exe	125
PID 3160 wrote to memory of 6048	3160	msedge.exe	126
PID 3160 wrote to memory of 5764	3160	msedge.exe	127
PID 3160 wrote to memory of 6124	3160	msedge.exe	128
PID 3160 wrote to memory of 4848	3160	msedge.exe	131
PID 3160 wrote to memory of 4848	3160	msedge.exe	131
PID 3160 wrote to memory of 2448	3160	msedge.exe	132
PID 3160 wrote to memory of 2448	3160	msedge.exe	132
PID 3160 wrote to memory of 5856	3160	msedge.exe	133
PID 3160 wrote to memory of 5856	3160	msedge.exe	133
PID 3160 wrote to memory of 5584	3160	msedge.exe	134
PID 3160 wrote to memory of 5148	3160	msedge.exe	135
PID 3160 wrote to memory of 5148	3160	msedge.exe	135
PID 3160 wrote to memory of 4596	3160	msedge.exe	136
PID 3160 wrote to memory of 4596	3160	msedge.exe	136
PID 3160 wrote to memory of 1596	3160	msedge.exe	137
PID 3160 wrote to memory of 1596	3160	msedge.exe	137
PID 3160 wrote to memory of 3720	3160	msedge.exe	139

C:\Users\Admin\AppData\Local\Temp\luna.exe
"C:\Users\Admin\AppData\Local\Temp\luna.exe"
1⤵
- Modifies trusted root certificate store through registry
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5260
- C:\Users\Admin\AppData\Local\Temp\luna.exe
  C:\Users\Admin\AppData\Local\Temp\luna.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1976
- - C:\Windows\system32\rundll32.exe
    rundll32 url.dll,FileProtocolHandler https://wails.io/docs/guides/manual-builds
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5332
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://wails.io/docs/guides/manual-builds
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2756
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x224,0x354,0x7ffcef4ec188,0x7ffcef4ec194,0x7ffcef4ec1a0
        5⤵
        
        PID:4632
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,4280890650341409779,17795491549729413536,262144 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
        5⤵
        
        PID:3372
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,4612781101180004530,17200163651062985323,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:1624
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,13266478631386435574,1296371415040312686,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:13
        5⤵
        
        PID:4480
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,8070251650129861868,4635458979279114058,2097152 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
        5⤵
        
        PID:1500
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,10432206406113520772,11502730297918169810,2097152 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
        5⤵
        
        PID:2536
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,3097289953742675979,14667210571795390334,2097152 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:9
        5⤵
        
        PID:4944
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,13297336311674427940,8048705721533917612,2097152 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:1
        5⤵
        
        PID:5144
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,17926176748857804948,315009095872823175,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:14
        5⤵
        
        PID:2336
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,14647081628755329528,10577459157053604073,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
        5⤵
        
        PID:2704
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,7033523791728367130,3625348235354585508,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
        5⤵
        
        PID:5728
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,14609659738035022695,6145467796953711636,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
        5⤵
        
        PID:5232
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,14609659738035022695,6145467796953711636,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
        5⤵
        
        PID:3264
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,14068205719314224323,8072235776286707950,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
        5⤵
        
        PID:4308
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,10971478014039583390,13018320179902506940,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:14
        5⤵
        
        PID:5412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,13639854683884629949,17374150245272735019,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
        5⤵
        
        PID:2852
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,5000402640413952355,15778402969794643673,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
        5⤵
        
        PID:3508
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,15964588619080144491,16706021878215703786,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
        5⤵
        
        PID:5236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,16870914147497334267,4980887758348064397,524288 --field-trial-handle=2416,i,18029749355180210079,16899894307773751595,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
        5⤵
        
        PID:3240
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Loads dropped DLL
        Drops file in Windows directory
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3160
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffcef4ec188,0x7ffcef4ec194,0x7ffcef4ec1a0
        6⤵
        
        PID:4252
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1960,i,1903424853081043542,13855373209289162064,262144 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
        6⤵
        
        PID:2404
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,8297291840953273196,9756124017537625492,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:11
        6⤵
        System Time Discovery
        
        PID:2576
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,13719863540484747355,16649040530786085801,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:13
        6⤵
        
        PID:4420
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,7906643807905901139,15141874224242789263,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
        6⤵
        
        PID:4072
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,7906643807905901139,15141874224242789263,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
        6⤵
        
        PID:1968
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1216,i,4729878293224371589,539630422287808551,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=1376 /prefetch:14
        6⤵
        
        PID:6048
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1220,i,9583226619912099593,12543006309609532542,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
        6⤵
        
        PID:5764
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,14483324276576447788,9577923572338101565,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
        6⤵
        
        PID:6124
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,11762247383127472462,10061771500173210647,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=1324 /prefetch:14
        6⤵
        
        PID:4848
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,1335418841019567103,4745364654637878493,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
        6⤵
        
        PID:2448
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=816,i,6766352348564457258,4974228899237797579,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
        6⤵
        
        PID:5856
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4964,i,6120400687723133815,16045014525519151783,262144 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:10
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:5584
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,11868198734253753967,16706198070767834403,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
        6⤵
        
        PID:5148
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,15311762442977517417,17917798463322690979,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
        6⤵
        
        PID:4596
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,8291790080351001859,15155287079846955810,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:14
        6⤵
        
        PID:1596
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4052,i,5974708734016642196,16488850526052338423,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:14
        6⤵
        
        PID:4076
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,8107540250033881338,17919941039992916039,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
        6⤵
        
        PID:3720
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,12135495944668453915,13937381706149814467,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=1264 /prefetch:14
        6⤵
        
        PID:4480
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,2644916555925296188,4219267911239598663,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
        6⤵
        
        PID:3404
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,4594334442254667341,16577774081010275652,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:14
        6⤵
        
        PID:2816
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3184,i,1566885083411227311,10758076224064648972,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:14
        6⤵
        
        PID:4452
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3176,i,9495095624346708712,654450669693989584,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:14
        6⤵
        
        PID:3820
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3180,i,1158871205937945050,9964027769026462444,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:14
        6⤵
        
        PID:3328
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,11509642497287674623,15340522237365983058,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:14
        6⤵
        
        PID:6012
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,8471728858099880631,16265106552026217105,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:14
        6⤵
        
        PID:4104
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2836,i,6737560634015547134,1491466437744303589,524288 --field-trial-handle=2500,i,17076723365950103690,2458509708556856010,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:14
        6⤵
        
        PID:4488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 55a7d885fadddbff4768ba6c4d1831cf3c97e5cee2c6278de82c828bbd98df7a
MD5 b27d7e363563245c4556040952fdbf95
SHA1 dfc224d76f71496470da48460fe6bc98bd6b630b
SHA512 53bb58d5ad6a6e99815ef4adad0abf35d7e22ee9cb08396210cbf4d6d7c933cfd85b85d6129c7d2584767453a8628b8d168f33fd574d277fc5d3c3ab08469a5d
TLSH
T1AAD023F079B2E3B0C60C00388110021011224A723AAB23176240480CEF3C0C2C1CF8FA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d3a944f1371142716efd52d2db0fab426b2c9f88fa95fd832077a0869856a1e1
MD5 bfb2a77c725ccef247fe60e36f212ba1
SHA1 26ba05919fe172310c7367cd78bc5647d746e4b3
SHA512 7dde042e51e50dbaaca445052c8494e2e9f194d71df44046a65a8df5f00b795c1c80264adcbe40774b97b17cc17eba98aa2fc0c3d8783e0846eb9edadddea7be
TLSH
T177D0A7F575979211CA4A0031A4401350337349303DAF6E2792D6540D6F7D09196DE07A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6f6e0f965ff8221c9f6826a0f905614658570681cc9f75e041c7751208969d6e
MD5 cc143ff5e852c9e748e71c66070f5163
SHA1 fe857865e22b9751a7239471c42fc9d9159a58f1
SHA512 96db6ee2e369f55fb3cba9eac7c3b787285d1423695b46cfdb5338e76bf6f9bad92202dbe58759b1cac5fe95ee1e9c6b909ef814971cbc97b7ac4725cdd31541
TLSH
T1FEE07DE554C8CA7EBE44644F516D570CC3803A6ED2C8B99B3714CCCC7482044B3CB6A0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b08fff36cbc0b27f7e901106039404c9b382ce95679f4ff50950fdcc3d3bc054
MD5 15f95f58f40e50aef88b94b7a962e89f
SHA1 55d6808dc1031ae8521a252fe10a836b25403493
SHA512 1a3cbe94c856a815a2308a34a930ed00fe8285d7ff5d74c3875b556ccbb17f92de895e58ce23cd04511a346930b8b6fca9feb904f247c4783faf5ce77a8f5574
TLSH
T1C2E022E9C821AC271DFE076AA0504686E79523672A81858F7A3DC20ACFB477B4186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 460dc5b8f8a09f1cb8312d35e264a2c97990f06f7b6dffc9d88bad9ce63fa877
MD5 460621c235a8e6d20b8cb15d99615767
SHA1 b68fccae665e4a35abbbace18afe9d24f8abca5c
SHA512 61ce996a9aa38f4a2c951d155411075218cfb729209a56ff983661119574275481c9dce5bf9273f31a016ab0a7b7885afc795a0f1c6437ad5fe70dd56fab37b9
SSDEEP 192:JGPLxZ0Iy5f+QR9OSiLnVDQpRm03wFSEF+HYWp+F:cTxZ01RISkS5g1F+HYWI
TLSH
T1A1130A7E72802D8BD2D3D47E43976B3543B2D526D9D618138234B60022A0FB36AFE94F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1cf0c7e097baf9bdf951a4c6078ab3be0d3622f5bfc18260741646c6949db5fb
MD5 5fe237da85f871a56d60942679f628c7
SHA1 2870994eacc0b1196cdd7611a2be2ded489a4f7c
SHA512 c5cfab20e08ee706394b9bee37c1e6eadaa041a7ebff0598259f6f9d6c068b64acab88043376734bb33f44a2d5d254d325dfee41946a971dc9c5f46d8ecdb819
SSDEEP 768:hZNLA7mL/j4LL/D2NjnRdzFUaVbeo6TThDQJFf5cB6MzzcqbJHOY/ZgHmDwaGteR:9QmL/juL/D2ZxYoit0JTsJHRgSZQe
TLSH
T178444EF71A11A01BCBA882F592033E7DD17B454E7CE1F9A9E57C4CC52865F32B2B8A44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 8f34dcdd5cdfe4ca722f884d549c10e9527e519e128110d1c5185ae9894f79a7
MD5 6e49b9f2d079b873392a43abe1a38c5c
SHA1 b59ce2778d2780ce126c70224c801e2088a11d20
SHA512 9a03423f69c936cd78e7b725904abcf94670ef27aefab6743882fe54b133d6d1c647c113f0fe7d16cafe177871cc25fb76dc9d4d6fdb3dc337ceb6089cf6e9ba
SSDEEP 3072:vv9G+HN42FBiHK1LOLg22/nu/sIt/+SCxpuRC:vQ8u2FBF1LW2/u/sItxCju
TLSH
T194255EEE8B681D82DFA7DA70B5D0DC1B3E742082F699D0C35901C5A956C3BC236F52AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 4dfeb58b3a0107e3e4488e0241b2f8e45f9de26d1c4582c502732dd1feaf0817
MD5 fe30309bd59e83525f2d7722fced6f92
SHA1 a291c35f7aa1ccab790f79fb3e3d0e1f8ecc2782
SHA512 0e17241a04224ee0ae5b198ed6993b90d4933221944b245ff9f9cd7a1c9aca8efb824c88941e27dcf40f3b9a047e8ad79df2ab80017207b028698a08d27b961e
SSDEEP 24576:5HAIZYfNbAojX3W7lB6KXxQeZRXfgHPtvEpEY:5gIyFb1jWD3XxOHPtvEpE
TLSH
T102167DEDCA6858C3CD639A30B5F0E9477C7413C3F994C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 799812e745bcc6bcd0d275f710ad5d7436156ccbaec5182e9ce7b403900889b4
MD5 bfdb890bd920f152a0abe1d5590cf91b
SHA1 cbd416b82247cfe2c044e8b6dd3a8406c1ec15a0
SHA512 3fc7ee58b3476b9f967ea258805298f3d39f23e4800a3a1e0e982fdc1251bdd55562faa479bb3ff74b415adb801d414177631787cc5b8d591d2aefd0ff92f1c3
TLSH
T14551F6B013A2CAD3D7228B3347E26A8D36F0845B2A872E2546503CB49802F6CDCF241F
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 812d54a3359a65073d222f2230d951214143ea8245f6aaa3dfc6b56811d9d241
MD5 cfee12a04cf35f8715f0885da93c3226
SHA1 fb9e4d6d07d2fccb8bb2886fea82e58940b89f2d
SHA512 0f3fae823428a2c85c0aa775b2079012f62e4beade6266449bd1f3813fbeccb1e9cb6532b5b65eb2b7c46803f8c5436c9dc691f5a49a1d740959e5c697a6f00f
SSDEEP 3:MsEllllkEthXllkl2zE/lHcal/:/M/xT02zlal/
TLSH
T1024404047FC00407C700513040D1C75013F1D5500F5757C3F4510C33DCC5F440C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 316B
SHA256 c6c0b0434bdeeccbaf4dafdf0114c56f84b591194b9c30cd898103131ecd07bc
MD5 680bdef10288f7bd44b4d675f9cecf08
SHA1 585c925d8f2a4693f95d06b30e057d15c43aafeb
SHA512 09eef7fc8b97ff0840d0126199e06ca5082d90448862d3edbbf2255a446b7b312261cdd7dcdc6a7d995add7ef03444aa4858999dde2bcdf4ddb9c986495a1c00
TLSH
T1F1E0CD5834CDCF299C5C68F3C37D675887D1384BF689BD1367498C407547655B6A7280
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 4a71f1f177fa93daa3ca0eb128fce1ea4bf5a6da89c88fa2fe6507733f59d8f5
MD5 7aefb73c4c2bcf9d9634fa3a487e273b
SHA1 5e38ead58ebb26b8177f2232ce89ebc48295ce62
SHA512 6e00cd3f089b9d3d5e44a2ec9d300e2691e1d4fa24d5887fca7abddc1798ba9b9a35c157739b80faa3fd8087e1122c4fd14baf8c2116abc72cf3c2feb061b887
SSDEEP 48:IzBmw6QU1Pz6eAeQLekyeKZ2TEY0LYBK+nqcuCK/DsimtQoUmp3VoSdWHBR/Aso/:UBCxGl0jauPs7tp96CkdAs1q7E3w2e
TLSH
T1A4B20A4BDF39B903E7965DB9215A49B2CC3AE2CC9FF26C807478542148F82A1D0301FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 80a70c297898bc9be96272b97b837a116423ae6a20d70915bc4b664984b239c7
MD5 f37a145274785e298ff8cdc4cd2ba529
SHA1 8a5b0f719c26b30ab923afc36a7c0c96c84ba609
SHA512 8a60b3caec363bf44b3917326d3ab016c20470bae0fb1334a8656300cceba8db8c32b3eaa3b5d296b805fa55e5bae14c8c8314746946b9ea635fdcc661376e5e
SSDEEP 96:4CgHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/38bbEOVpZf24JkMfXSFR+CFqD:4CXH+bF+UI3iWGVoWN3qL/OVVV63
TLSH
T18424211E5F342712CDBD913668E744A35C7DF03FCB6366DA686114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 244B
SHA256 40c3b7d0286781c39c552a5f489d4bcf7e48e4f2d8e31603ec1af81f9ac83294
MD5 19528bfc3d0f6c6b08ac1a5b2eab1c12
SHA1 cd271635d1661368d7c83e85fa7fe6a61c6961e3
SHA512 89cccc96945db35fce2c67f5768de579d0f1dee585c786e99e02cfbbe8880b9e897827e32707a100f468d7a55294a1288c56e91a2d854910ff546beaafc80d34
TLSH
T1E1D0A7E767392425EF9D4770A9A0B98FFA3D145CCDB09258C54E342044D24263200C00
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 849a663832dd11e51350cda41570b98e857e94bfde7cbff57dc3b26a4405840b
MD5 6d7d738b0ac44af66f41beadb0728c8b
SHA1 6e94717dfa875862cb132a6a7913196025f9645c
SHA512 3062fb14f577252d5cf5a2cbf87dc4347387d3e5b54e4aeaca8f15255a2baedf7a1104999cbc5e686b319a835e7b91fd5899f328da58027175a86d007e95b9e3
TLSH
T16CE0266465CDCD6E6E4824ABD23CB70CC7B0380BE689BE039B089C40B8C3008B7832C6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 cbcd10aaf0985a20d6d0b3949ce1a862ca989c118872f09e103205d7aa561885
MD5 1c5f9d259f5b262c87b6f558b4089d7b
SHA1 34b9b8edb0d4090c175ece48e7b799f5268c38b8
SHA512 f2614811fe281c5c0116e256ca41711e2ef56ca6847fef9dc14a27c3fc3edc23e6bb57f5367c11961de8c20693304a553dbe9e72264f95f2735fcb044f350397
SSDEEP 48:Txk/LopFMaty423w/a9NUuThTwX5rTiD+RkM8nodwy2AwmwX2:qDeMatha9Hu0+Rye2Alwm
TLSH
T156B2624E1F246211E0F19A7ADDC0846B3D3C102DD7B33256AD9860F3CEA25ABF906069
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 63288cd94422f6ca024aa865c4c303b07227609f335c44b5abfcbd3b06c74a6f
MD5 819fe336072a1c8a2dbfae3d6f2a571d
SHA1 9100f87279bfc84a412159bf94736b19d9d6bfb9
SHA512 891344d8632db2afbe7161716509ae6a6277de0ced298691b78e44401186061fd1167c8e09638f2f3d648f8a91fb80f6c7ad4e285b5bb171ee1205a890923d6a
TLSH
T103419EF783F4856E891196F0AA186E1FCF1C0515432C7D5AC9E4AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3d2afbcb5fdac811df1cd53327eb9ed9a9e972a0bd67cd5e369fc11d046d757e
MD5 1b0176fee7e8cfdc804cc1f495fff738
SHA1 3737d2108c28860a6bf0198f2c44bd0cf4a78296
SHA512 004323e40d7727cb7871517b878c3faa2f78d4b6ac64c78a2f7dfeeda42b7a2a5ad7d3f754daf3803accd3078ca70ef66009a4fce25cc7ea49a56bf301aac36d
TLSH
T18241ADF783F4866EC91196F0AA186E1FCF1C0515432C7D5AC9E4AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 39913a773cf826bb5557b7d65f143ec0d1d5989195a514e422260b433582fc07
MD5 008fff198e84b7fb8dd851883256332a
SHA1 65f7cacf92ede9cbf9585f1510e5eef322cd537e
SHA512 227b2447b4faf5af8ff6ee88a626f626c96e07f20a106b00731a895b64cde5f15161aef866e480a28bd42931360ef9741eabeddba018ef9e7c153a39820e180a
TLSH
T113C0221280FAE47300B456F90984A881AA36CC30008048E0CA9692FCA0800F75A1202A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 454ec69a3fd928dafaef1c0f939dcf7c1610d258a115ac15363ad71ed70c0273
MD5 bf9a4ab7d5f08d281d889d58f6a81f7e
SHA1 a9dde8245e4ea4dd665d4feae38259cca857b58d
SHA512 ae12b38911c169393cfd39eb6a3214657752fbdc32053ecbfc3abba9e407bedb673908e1dd4c1b1cbadd56a8f5cd0ec9c47e42ac66939759cb646336b74b4150
SSDEEP 384:sxRArZ71T/f6smWvhC5Q0MJD/5Wp+/+Q/nkc:sMd1T/fwYhCQ/5V+Yd
TLSH
T18152D915A924A93B9CD7E25DBB15BF52E7F85032A1912E04EAFC8A1C04EB7DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9e9347eccb760c7294cc307d07e4164e98388ed29bdff7b660afaf861254cdad
MD5 229ce4c7cc53760fd5273785956e2dc3
SHA1 e9acd647144b7159cd3a981bdabac4efbf47f4c7
SHA512 44eeab6e8b5d945edf316c4b6b843550667e9d472c149040fe89c3e18c28a907a90f10f17c92602960e77dbcbd487bfc9509f3973f0cbd2989a9259f1f40674a
SSDEEP 192:sxRA8Rr7NCT/fI1s/mwGjzoA8pYlAD/g6+WNiAO0+/+3AyohkjCYIGsIgVLiJ:sxRA8Z7sT/f6s/mpSTD/5tp+/+Q3PjU
TLSH
T16342D8166928A93B4CD7E319BB55BF53E2F95032A5D12E48FAFC860C04EB7DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fa16aff71bd16c8c6cb8f552eb89cc9419f5b944f1d977b8960843689abdb12b
MD5 b3372a4c9564a3340104009ac9e32384
SHA1 c2ebfa4746dbaf69b1d177392470f852ddf01ffc
SHA512 788fe9ac1211306ec0adf69df8ac934cdab4a2f40fcf3e49e974df5c5e97e4e8d0668ab374a51606d87f79c972f498a260d76b342595e07fe071a8ebdea377ab
SSDEEP 192:sxRArRr7NCT/fI1sNCwGjzoA8pYlAD/g6+WNiAO0+/+3Ayoh87CYIGsIgDZLiJ:sxRArZ7sT/f6sNCpSTD/5tp+/+Q3Zjc
TLSH
T12642C6166928A93B4CD7E319BB55BF53E2F95032A1951E48EBFC8A0C04EB7DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c8604a807d5886bc54e25a170d6bd95710dca6ffa85495965a928b6cf41def67
MD5 f5bce4c5fd22aa89f6f6bf41f51a2d24
SHA1 a1d8e7745d197ed87429cd53190a556cece4a8e0
SHA512 c9b04e48d348c62ed3a0dbdfb451fea6ea46461eee788d0f1de5fa71042c503840bc4ff54301fbe501af6fdbae44b0bbde2559cdf9cd3e02401367c066654d7e
SSDEEP 384:sxRArZ71T/f6seWvGO5Q0fLJD/5Wp+/+Q/nbc:sMd1T/f0YGOB/5V+Y4
TLSH
T17462E905A924683B8CD7E35DBB15BF62E7F95032A1912E04EBFC8A1C04EB7DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3a7a98da03b45d99792190be193edf80d8317a1ceef344844a55ecc2bee9eecc
MD5 5c351bca4c19cb60fbe03b7b8b0357a5
SHA1 e57906f74a0493b8312bdfa3a7ce8c7eb6f1d181
SHA512 cebebd97acf46d674e233b1e934751358a5c1127cf632a920e0ccdd9cd58d5628d4db8ac7de1feb8e21e96988d3907ac2635b702540aab7d97f29de855c164e8
SSDEEP 192:sxRArRr7NCT/fI1sNmwGjzoA8pYlAD/g6+WNiAO0+/+3AyohkjCYIGsIgDLLiJ:sxRArZ7sT/f6sNmpSTD/5tp+/+Q3PjK
TLSH
T18242C8166928A93B4CD7E319BB55BF53E3F95032A1D51E48EAFC860C04EB7DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 f8cdbc16b6d11eeb8daa7afb9d6f14de874eae070a225a69de2d13d31d36ba0f
MD5 8fef278d3204ed3bc8843fb27dd436f5
SHA1 b0330fa4b774d3d2f5e9ccaccfdeab438d64d7cc
SHA512 6a3128d06a78316126585e86c0b6e6b295a519792860768c7669ffae5eb77450373bcf7e3ccf9755375af13be047b93f4e5ca3e87c5c67fc69ac56504a7205d5
SSDEEP 768:j26Heo7pLuL7MRWgs2fw28F1+UoAYDCx9Tuqh0VfUC9xbog/OVtBBVuwWro9aLec:j26HeUE7MRWgs2fw2u1jaOBB4wtUMu
TLSH
T1E9D2DB7B640DCA7F4F800ADDEC197EDF6DA802CB9698CD8447FE941C02C6BEA51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 332B
SHA256 76db41988333158d424b3ed82a4cf1cf4b6160dff6554ba7bb495951c8683dde
MD5 5a1555fa072ca6cb031578777afd11f4
SHA1 4ff761d5366099b1c500a2d11ef18d3ec9fa834c
SHA512 ee7f13d3815c4a1d7feecdbc92add85a5b142eab1d174e22e1cbc0f848b58857d8340c4465289612c244b77fa2749351ce6e706661382b9ea671e61af87a889d
TLSH
T107E0266029CECDBD7C97205743AA9718D3E4740BD6C8BD036FACCC406983508B1B3182
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 59af6093b1a691974bb301cef016b99d48703389f8e2066f682687cd5d41102b
MD5 db3f36e682fc2ea6455957c5a97442e1
SHA1 6ee665194182136912db79637c58c3c493696387
SHA512 04f8c0fd50dc95b1348676c3ecbc33eca9380137c33cc6ca4357bb93aea7812b8d78ae18fe6e8afe8336399299c77fcbeec54f11433af775c5d1a52988cef637
TLSH
T1BFB0126537206311E4CCA871A3B58FC0D3D8E52290C0C507884ECFB01D0465CBE8DD80
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 e6889a76b83e3133635b58bbd9a1966992e34202c0f27bafdbbb40c1bf4fce49
MD5 c4d766dfed2c0a8e98a8fe4c746e348a
SHA1 54a7ae015bc1b714eea0cb2202ba8f52d61f7e30
SHA512 ffe6ce46961c8f60b18b3893b2fce5ce2e49b084e50394eab3618bcf31ee5b53cbff5f95e431121b03d324bd926630514408510b79b8fea2447d030e07324497
TLSH
T13CE0D87035CECE6A69C6609B9259E708C1A2B41BDBCDB9626F189C406247144B263141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 02b559e2d4358d2017a13b29605fe04a7b4c8ef99856892434758a924ce3a07e
MD5 6dbbb3b2792fb5cb912cf60deee4320d
SHA1 d90b180e2b033a48f85086bc27cbd609f269c40f
SHA512 ff6a53f8b9907f2915dc4f4eb692c21edfcd68d5a4157e0893c89ed7a062ecda215675934c0d6557f8ef06678e209755bcdeed565d047d817a8f1399c9da6c7b
TLSH
T1BCE026F069CECEBD5D42A0D3826EB71CC2F2791B97C93A0397188C80A543108B2B7181
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cf2f08c2a6924404b1cb95a31ded9c1453ad7395de14b8480314becf482b4711
MD5 59019add2a7c45bc657ab0fa8f63f7c6
SHA1 0ec7bc59b1845ca93ca2b2d8a699f9a56ac85513
SHA512 bd8767b1d41a4308c3cb9da2e91c94d39eb221dcf96755175841548f0bb4025ef813fbcc8a56615d18d77376c7682565000761f7248e2dbc9259bf4264e12a6b
SSDEEP 96:KR3gFB31lpWRekgJpK4ggHpcvHG5FaHoZs4q26gWeDzgggK41gCgcwgzijS4KLC9:C3gFB31lERe1JDggH2vHG5FaHoZs4q2h
TLSH
T117911740767902843D7E7A1EC0B88D1BE5C174737516A52F7BA815A64FABD026CFC8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 74ed0faf9b86212feb37fd185b41a9f6c49c3df6c3aadb49fc33a21f0f03a0d1
MD5 7a06498c2dba9f04004d5ab17d63b884
SHA1 4b7cfdfa7f257dfd2d0e1ca4fec65e2299148743
SHA512 fa886d81a51f3e3efda344b7ec1f006486313eed3df9208dc7fb147860485016a5c7893bb8cd58dce854c70cb770becc9b8430cc199bf534b1dd89c44f07b8cf
SSDEEP 384:DNrRZyCSDnxTIC2b6MEhIKyll7svbFKfk7:xFZJSDniVyI1l7svbF9
TLSH
T1F944740A7B747001EDE6D9721CB080771E3CB16E8F26A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bef9cdd1-1874-426f-9712-2ad7e11f4129.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bef9cdd1-1874-426f-9712-2ad7e11f4129.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 4f8bba511048cd4821abba48de419168d1e61ea62d54fff48c6b357a0c64a24a
MD5 4525fcfa2674eea07ce627c1b95e3fe5
SHA1 863ef67806910f99b351b5dc6aa952d60d663046
SHA512 3529106e8700a5fc31daf5e4fbe6652a09806b3128ae2f8d360152b27f79c70fb6cef71b98b0c89012c273cfa9101026f8aeb2fb6df154e4f1fc45aaaed72be8
SSDEEP 192:j95QkIIIbbLMIMNsYcYVYOJlAszlrMEusuQ:zQkIIIbbLMIM2BiJWsZks
TLSH
T1AE4263AF26052B77C05F5B7613B686549BE998820172A12E3353AC1F8DF3E9783C52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 09727621e595ae483d8a822b3e4dd0bb72e5894a333d8bcc4d3294c980d104d7
MD5 7fd47788e95f4b15b103f8d181426ae3
SHA1 9c4f839896ef6485dd69d0d76b82d8bad76dd3f9
SHA512 05cb5df82c849b19307ef34e7e779fcb0f548e798e9cdb161d1f1d639755e8455d43306b7c5252d096f7eb756a26ae2b42a7959a074a0cabff11e59019dfb8fd
TLSH
T1A4E02614B9CCCE6FAC59A09B51285B48D284BC0FFAC83A876F04C844A443100F697582
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 be977a16e4c01bdb642f4f055c0dd79442d0fb72098331af515f4eb61df2bdca
MD5 03b1863659ebfe66e52063ae5089bb7b
SHA1 635770de08efb85b5ce44726cd24e923359d1c2b
SHA512 377b9aeef831d6bebcf53c80a0572a49a4972d050443f6a02cb2123b6718c93dc36deada7ca462eda3ff333f35c2a8ed6dcf7fbd0641506af235986282f6edc7
TLSH
T124210055F330C149E15A863A607F5B361738E8168FBCEC0F84BA20346EB6B040E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 d7854172636053431a6eee26d8e64dacd86af2b9b5ef51e0411de48c0f19f2b1
MD5 51df666ca6d4ea8c53c40c6246e069e6
SHA1 703a9954e5e4869b591d738c36d751ca0e65afd4
SHA512 4f784e8191aa5899ac754bd70b694232aee190b25e71922d5865732901fc07c08e2b798b1c7bb5e98fbe9dd03a3a7be376294ee2e9a7c83b6d8005eca12873d1
TLSH
T1F6E02620B8CCCDAFDC6020E3416CA768C391B80BEA883E235F01CC84E983149B68B581
MD5 SHA1 SHA512 TLSH

Submit Download

829c55fc-733d-41c3-844d-071b0a382879.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\829c55fc-733d-41c3-844d-071b0a382879.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 352c11311ad4b1c959b6739f78101df183d31ee9d38b153d8709bae7fb74a09f
MD5 afca189b8b24cf2bcca88afd73a8055d
SHA1 2a68aa9e7552b3b6924c195327762a4610b695bd
SHA512 f2ee04c432cb915d8ea6f067ddfd847b17de71e99c86d02e8ce307ee8160f4c1da466e5532f3b25da5640789b09348387c4e8c3ab0f76849fd416291f6dd8aeb
SSDEEP 3:MsEllllkEthXllkl2zEi3/l/:/M/xT02zfPl/
TLSH
T1074404147FC00505C50050705051C3501370DC511551574734510C137CD77700C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 f5f2d0d83cd758fbfd78e703fc949e00106c4de22d17aab12483e1a2eae85335
MD5 2b3d41e8355bcd9adf994693f06b6e79
SHA1 779d091c7d01f38fc5cc84730ed85f04ded6d410
SHA512 548727b74b3d02916ce1ebc1e9b884308e197f0b1a446bd95b45991a31e07491a8e9edcba139833b9187fbb1c4f613ce0dab20123a006d71e3a9c1b16d9aed3e
SSDEEP 3:MsEllllkEthXllkl2zE0Wl/:/M/xT02z7Wl/
TLSH
T132440404FFC4050DC50050304151C3501370D5510551574735714C33FDC5D700C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1819a08e7f894a8f28369eaff624222fb36ae465d45b256e6a36d8c6fc035116
MD5 a42d48cd1fe691825251e2edb0833d79
SHA1 a68a69246ddff5c9fda73fc5bea355275f38c434
SHA512 e63f7f2c9d17cfeb5eaac04a0e10b2cfb0bb537bb22b67319eaf13e7c8f288e0d01ff38ff598f6b111ad924cfe2c5deb280e3cb2c1e9194739294807f9854339
SSDEEP 768:hrv+4UNbdz3t9/TBOW8FxONXyer1IRCzniB8eVH1SK7:hbsbV3DaxSIqnHEH1l
TLSH
T1FA03BE36E4A8DE338CE2A3D6B14B72037FB86057D6840B90E9DE1F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 bcb765921eb8c826ea6d9d800be5b204cca62a46793950480f2e66d968346344
MD5 0b7ce9beb691f662eca9f15aa021f96a
SHA1 aa1e75f1adb3a118defa85d69b075579a38366df
SHA512 abea0a397464f4a41e20ae7b75f2ae16f495064b11790f663c9ac57cc8489d99073c8501c52271a8e52f326b714d0f9b3ff3b2d0d2d42f9a5f4f91ede114bc2d
SSDEEP 768:4rv+4UNbdz3v5/TBOW8FsmYONXyer1IRCzniwzmeVH1SK7:4bsbV3xadYSIqn/mEH1l
TLSH
T18903AF31E1A9DE234DE6A3D5B14B73437FB8206B89800B90EDDA1F4E069B59E170F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 60KB
SHA256 a321e069d6c1f37abe30a1c7687e7a0ee4d9ea882f2eed5f9d8428b3d774ed4e
MD5 704dacb87ffe02ac9b8a7e18b5bae46d
SHA1 b8af15fe8184f160c8616f5ffa1d1ad12e3a5687
SHA512 37e51d834379b7bf8aeab26a6ac2e4a99181716a7e793607f0119fbebf4346fc51db19cc484f2d8acd5f1f243d0e9eaeaf2c33ce901c29e1d28ae2e6e32118b1
SSDEEP 768:hF+g3MwgFs0cONXyer1IRCzniz/vUd1WyiZ4i9j/FWPcz5AHb7kHMb4jhZi9P2tT:eg33PSIqnS/Md1WDZL0y5AHsHe4NZ9tT
TLSH
T178536BF998D39A7AC8ADA783633D2E1699BCC063F2984194F7C80E4DDC9247FD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ee58628f88f797ce84be059850f640830dc592d98a930e5ff6b4131904cfd80d
MD5 146f7f3261b0c012743b5c7dd40e184e
SHA1 48227380da6e210dc4076c9234c35a24a8d9cb93
SHA512 bee2e28ba62cb7d46fe495bd4c775ee504eea2a801c651dc229fa13b55df9cfea003cb55527c226c3ec0fa547d02e95ca3e661ed0969e8758da6965e02c7d0c3
SSDEEP 768:QT3SL/TBOW8FsmbONXyer1IRCzni9zmPi9P2t7:QT36adbSIqnEmP9t7
TLSH
T1A8F2BF30E4A5EE134CE6F3D6B1466342AFF82067E5C44B54EAEA9F0E059761E070F81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ac0459571923f43666fada5d9eed2ee7fb67fd12e79906bcf22f26e44e3e3062
MD5 a0817989c2c7a10c63e2955d180ff529
SHA1 36915587198d6b6e4debddb6c6f030c010c90287
SHA512 0185f62ecd4f71a8af351c74d545d2e71bf70b57788e048af252b745c3df7a317a6d3b17251088a9ca540e22878759d2cedc5d41cad98adf1d121619d45f3b81
SSDEEP 768:krv+4UNbd43QL/TBOW8FsmbONXyer1IRCzni9zm0:kbsbC3IadbSIqnEm0
TLSH
T18D03AE31E068EE234CE6A3D5B14B6343BFB8206799C40B94EEDA1F4E059B59E170F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 d59be1c23790df5cc2bd6d3b8468d2b12b8a0bdb6926859a1e50ff256c7c6ed7
MD5 37d6ccdaece946de3ddd8539bad68b48
SHA1 e69f537b3742e073e0e0d0e1f373f40a556d5929
SHA512 9795172b00850a00c0b7554c649bed4f137143b18014adc7b76a408e31d3f207451c40834cac10127cac6e537ea5ada1c9b804592290cde248c42df2bc749472
SSDEEP 768:Pg3aLBqUusOW8FsmkHONXyer1IRCzni9JCMb4jhHPi9P2t7:Pg3ycdkHSIqnkCe4NHP9t7
TLSH
T19823E2F898D7593AC8ADB787633E6E116ABCC027B1A40554FBD90B0DCC6253FE306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 79eeb0a618539c84ca6943125750e68d73685c33af80eb5ed015e1696ebea68f
MD5 8d3f2c7b3a68bd416e4a51def13bae09
SHA1 cabaf5992c9e919de89d46110c3223e77469d8b4
SHA512 2861b19a12222609680241ad987e2373caf988ca0e82980344934de7b10c27e01104b2ab3a30d19e6fa25d45dec2ca59c9562b3dc32d83f18b3bd534fcc7b71c
SSDEEP 768:ig3mLBqUusOW8FZONXyer1IRCzniekHMb4jhZi9P2tT:ig3ucZSIqneHe4NZ9tT
TLSH
T10B1338F998D7593BC8ADA383637E2E026EBCC023B1940654BBD91B0DCD6657FD30A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2f30d33c9aaebf9c0f657781c44836b4403ec794b82a1250880715f729ad8c6d
MD5 1e442ee83a4a48eb85207c956f078aa4
SHA1 dbd87b7b05afd66e7199b22497702087287d89a8
SHA512 6bba3ecab086f9f1775ab78898f8a4412e74ab4a7c62525cbccc351ab5433f7c25108aa49e5fd2c2de19c9cf2476380821cafe239710f1bbe0da9f31c6e295bb
SSDEEP 768:wrv+4UNbd43xL/TBOW8FsmbONXyer1IRCzni9zm0:wbsbC3NadbSIqnEm0
TLSH
T1FE03AE31E069EE234CE6A3D6B14B6343BFB8206789C00B94EED61F4E059B59E170F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 e8492446d098dd552da6ed87fb49040dd7058f45e6a26e2921f9bcd2b965f006
MD5 a736f23a7b28fcca5a21b1499ef6b298
SHA1 ac0fcee53d414338321e435d3e23f46c6431f9d4
SHA512 cea1eec94ddb4ed5737e8a8077e7615d2c60447ed7cbe79c536412ff86339fe10fe8abe2333bc16ad1fd3ddbbfee543e39607ddb6876ec78a79022d86677f425
SSDEEP 3:MsEllllkEthXllkl2zE2D/:/M/xT02z5D/
TLSH
T1F94404447FC00705C70050304051C3514370D4D107515FC734514C137CC55710C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
MD5 bc900814bda342e30ca622ecf6edf1a1
SHA1 58549077a989da91156012baf9dbfc98ecfe429d
SHA512 c918bfea1c94a06e69e13a1edffa87e69fd698fc8ddf310fc5545d1e2a80613e7617e19110e5496fa91c8e8037bc67a81e300b571bebefb407ab16a384d97fa1
TLSH
T124111FD11C7E1AC6C6BE0E6FA4833AFD40D8A622F4E8307818C8E964927951E2451C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
MD5 95ac3c4f8946991b2f4b965a390aa896
SHA1 864730b7c80ff406dcef7eefce17b842687c2bd8
SHA512 b13343c0c56d9943ac874eacdf49f82ad4ffcf8be1ca55600fbc7e0ba55c6203da11354a956eb54c11ee241672e2d8c66d8469e722cfb0c0129f0dbbe3c2167c
TLSH
T1942112E0183E1AC2D5BE0DAFB0872AED50DC9612F8D834382898FD68967E51D2550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 824de99fb2d26a9652ce4d147d41b5f42d8eb58933629e98754b359ef813de81
MD5 c854428d46d0bd8106d3a4b26b2c17af
SHA1 3414466742a52757c163c28cc508953129b9067d
SHA512 1de7dd4e62a741fd98b414fa13966befbe757d57478e2eca3d9d49fc11f15eff8310633888dec1ae7c7fd5ab938d39ed341567261f568dc0a1838e5acd6da636
TLSH
T1E93122E0583E19C2D1BE0EAFB0872AEC50EC9211F49834382899E868967E51D3550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
MD5 5791c60bac582e1f169aefd7494e8b65
SHA1 fc220a11a5357f3b3134686ea018f8327ad6720a
SHA512 7ea314ea2431da694bb2d6ab59852e9e0458aedea4693b1d78718c5a54c1c97849afbf8992b044f2295319673c112e8e40e08f8732d473893c556cad7c1d8183
TLSH
T12A2111E11C7E1AD2C5BE0EAFE4833AED50D8A616F4D834381888FD68A63D51D2551C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 eacf1adcab56ea7707951a59a1d5415c83ac02e038089cf23fd24d14c5a52cf2
MD5 13fbadbf74e4028d922652c3b1fb7281
SHA1 2cd5239ea161b2a994b9b84a77f0296997a22ea1
SHA512 c1600d8593594bf33e8eea3c0e9b7153a41c3ed3ee25dc39ca5b63f2eb3a021af51fb979ffea4d93c39aff5ea2b0e6b4348c8eaaec269e725dc1eb353379cb59
TLSH
T1A43153E0583D19D1C07E0DBFB08729FC40DCD212F49434382898EC68967E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

d0defe68-e454-444a-aa95-e3367c47007f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d0defe68-e454-444a-aa95-e3367c47007f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2756_1742618953\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3160_1899889382\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download