hxxps://www[.]twitthub[.]com

Analysis

user interaction
yes
max time kernel
899s
max time network
898s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 04:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.twitthub.com
Sample260820-ek4dbsbc82

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4760	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_724002986\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_888689739\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1397413794\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_956198619\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_44291104\arbitration_metadata.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1966244611\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_506325640\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_313499780\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_2136726213\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_816820139\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1875591124\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1842765930\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_2136726213\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_44291104\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_724002986\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1124637024\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_924639981\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_924639981\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_724002986\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1124637024\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1842765930\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_2136726213\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_313499780\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1875591124\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_724002986\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_888689739\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1966244611\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_956198619\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_757729742\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_816820139\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1397413794\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_176287052\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_924639981\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1875591124\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\CompatExceptions	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_924639981\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Sigma\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1842765930\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1842765930\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1966244611\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\LICENSE	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5840	msedge.exe
3680	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316720699712364"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{C0D0A864-05B1-4067-95A9-D2B036D63224}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{5D00ABCA-138D-4E38-90F2-BE08AC20B956}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4336	msedge.exe
4336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 2576	4300	msedge.exe	89
PID 4300 wrote to memory of 4108	4300	msedge.exe	90
PID 4300 wrote to memory of 5840	4300	msedge.exe	92
PID 4300 wrote to memory of 4108	4300	msedge.exe	90
PID 4300 wrote to memory of 4108	4300	msedge.exe	90
PID 4300 wrote to memory of 6044	4300	msedge.exe	93
PID 4300 wrote to memory of 6044	4300	msedge.exe	93
PID 4300 wrote to memory of 4344	4300	msedge.exe	94
PID 4300 wrote to memory of 4344	4300	msedge.exe	94
PID 4300 wrote to memory of 4344	4300	msedge.exe	94
PID 4300 wrote to memory of 4384	4300	msedge.exe	95
PID 4300 wrote to memory of 4384	4300	msedge.exe	95
PID 4300 wrote to memory of 4384	4300	msedge.exe	95
PID 4300 wrote to memory of 4236	4300	msedge.exe	96
PID 4300 wrote to memory of 4236	4300	msedge.exe	96
PID 4300 wrote to memory of 4236	4300	msedge.exe	96
PID 4300 wrote to memory of 5380	4300	msedge.exe	97
PID 4300 wrote to memory of 5380	4300	msedge.exe	97
PID 4300 wrote to memory of 5380	4300	msedge.exe	97
PID 4300 wrote to memory of 5376	4300	msedge.exe	99
PID 4300 wrote to memory of 5376	4300	msedge.exe	99
PID 4300 wrote to memory of 2996	4300	msedge.exe	100
PID 4300 wrote to memory of 2996	4300	msedge.exe	100
PID 4300 wrote to memory of 4340	4300	msedge.exe	102
PID 4300 wrote to memory of 2072	4300	msedge.exe	106
PID 4300 wrote to memory of 5392	4300	msedge.exe	107
PID 4300 wrote to memory of 2276	4300	msedge.exe	108
PID 4300 wrote to memory of 4760	4300	msedge.exe	109
PID 4760 wrote to memory of 1088	4760	msedge.exe	110
PID 4760 wrote to memory of 3680	4760	msedge.exe	112
PID 4760 wrote to memory of 1348	4760	msedge.exe	113
PID 4760 wrote to memory of 1348	4760	msedge.exe	113
PID 4760 wrote to memory of 1348	4760	msedge.exe	113
PID 4760 wrote to memory of 2352	4760	msedge.exe	114
PID 4760 wrote to memory of 2352	4760	msedge.exe	114
PID 4760 wrote to memory of 4204	4760	msedge.exe	116
PID 4760 wrote to memory of 4404	4760	msedge.exe	117
PID 4760 wrote to memory of 4404	4760	msedge.exe	117
PID 4760 wrote to memory of 3068	4760	msedge.exe	118
PID 4760 wrote to memory of 3068	4760	msedge.exe	118
PID 4760 wrote to memory of 4832	4760	msedge.exe	119
PID 4760 wrote to memory of 4832	4760	msedge.exe	119
PID 4760 wrote to memory of 4960	4760	msedge.exe	120
PID 4760 wrote to memory of 4960	4760	msedge.exe	120
PID 4760 wrote to memory of 3136	4760	msedge.exe	121
PID 4760 wrote to memory of 3136	4760	msedge.exe	121
PID 4760 wrote to memory of 4952	4760	msedge.exe	122
PID 4760 wrote to memory of 4952	4760	msedge.exe	122
PID 4760 wrote to memory of 2496	4760	msedge.exe	123
PID 4760 wrote to memory of 1856	4760	msedge.exe	124
PID 4760 wrote to memory of 3036	4760	msedge.exe	125
PID 4760 wrote to memory of 4384	4760	msedge.exe	128
PID 4760 wrote to memory of 4384	4760	msedge.exe	128
PID 4760 wrote to memory of 2584	4760	msedge.exe	129
PID 4760 wrote to memory of 2584	4760	msedge.exe	129
PID 4760 wrote to memory of 4132	4760	msedge.exe	130
PID 4760 wrote to memory of 4132	4760	msedge.exe	130
PID 4760 wrote to memory of 4336	4760	msedge.exe	131
PID 4760 wrote to memory of 1728	4760	msedge.exe	132
PID 4760 wrote to memory of 1728	4760	msedge.exe	132
PID 4760 wrote to memory of 4660	4760	msedge.exe	133
PID 4760 wrote to memory of 4660	4760	msedge.exe	133
PID 4760 wrote to memory of 4816	4760	msedge.exe	134
PID 4760 wrote to memory of 4816	4760	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.twitthub.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffa5697c188,0x7ffa5697c194,0x7ffa5697c1a0
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,6293482484143680592,10134975367282924188,262144 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,11413846846754329179,3113060751400380484,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,18348985295112683420,2333705937847361281,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:13
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,16233593658747854393,11138161244143499001,2097152 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,8243161763066166223,15009058557803003084,2097152 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,5365065980414325146,7451632329977890934,2097152 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,9795810847300943381,14908232587247290174,2097152 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,12314796873618847920,17028444075197701259,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,81570010570489253,11961444727224894321,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7659112416847618699,1134958266327725277,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,7659112416847618699,1134958266327725277,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3144,i,52578075695250206,13441009099273643394,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,4528040390319392315,4653799258769270625,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:14
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,16543767583724518190,5895819197116429021,524288 --field-trial-handle=2924,i,7742342579986089137,10181523793339313869,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x234,0x7ffa5697c188,0x7ffa5697c194,0x7ffa5697c1a0
    3⤵
    PID:1088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,8042252177987981788,7148677198503836895,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1952,i,16785195538151870773,11662563243366701009,262144 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:2
    3⤵
    PID:1348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,16275074898562446964,3477338584781645066,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:13
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,9725767220355661308,7824383123665757773,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
    3⤵
    PID:1884
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,9725767220355661308,7824383123665757773,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,3649043514124197321,6505019264464515812,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
    3⤵
    PID:4404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,1913200362970421664,14904208942152217003,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
    3⤵
    PID:3068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,5002818059206878000,13655756933983773997,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,17163926264665050573,7577740553316253883,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
    3⤵
    PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,907138805884879651,8824407789152218221,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,13579931099145790642,640298985563101432,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
    3⤵
    PID:4952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,6491663583582049101,1135246198085990088,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=1360 /prefetch:14
    3⤵
    PID:2496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,6880595754328594475,11193352420264067075,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=1368 /prefetch:14
    3⤵
    PID:1856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,18219117982909206427,2162372484462970315,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=1324 /prefetch:14
    3⤵
    PID:3036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,11628360631200614639,4924565144879730600,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
    3⤵
    PID:4384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,429508638682567113,3986652594431146894,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
    3⤵
    PID:2584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,12100829786066888167,9852487450534360968,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
    3⤵
    PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5280,i,5920070373217691383,16927447347122363938,262144 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,5922808111505059148,8751257016867902008,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:1728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,6201096659017821793,1816797755767204254,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
    3⤵
    PID:4660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4116,i,15758391731134199643,10690021723552596285,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:4816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,10755122909343647663,508017143528495656,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
    3⤵
    PID:4592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1369293404861996673,2589464357606730846,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:14
    3⤵
    PID:1344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,8908116992652661219,10541805158397787711,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:14
    3⤵
    PID:724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,4040212744927893797,3456401868421651596,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
    3⤵
    PID:2384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,17855124374346353914,12373481860571964537,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14
    3⤵
    PID:2604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4080,i,7783222179907744634,10909826241218990115,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,1965945082371652001,2017496433722863885,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
    3⤵
    PID:1576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,2806071117368066107,13340651196061199995,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
    3⤵
    PID:1428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3852,i,6203873744236771192,2206345555629045634,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
    3⤵
    PID:1608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,9210802641480381377,4030402182884708890,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,4231569365640605118,947532032034535720,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
    3⤵
    PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,1999860614353810977,12916020568679141029,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,5995072582978511892,18183797901491932594,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,6654363072310362734,5381092723737210315,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
    3⤵
    PID:2072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,10323463220168847818,10524555832351912310,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
    3⤵
    PID:4648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,4651190092321003905,6427032366047312795,524288 --field-trial-handle=2620,i,15346322826380139678,4532023167007641262,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
    3⤵
    PID:756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2592

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5680

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8247aeca7b33f283e40bb306bc0f5d3f9484f29ba499d4fef16adb4f524d067c
MD5 b27475a4adc7a441cfbd4e10636bebca
SHA1 128cd1ea190d0ec80228a1924b99cc6fe4d9e60c
SHA512 0f3a31480c4406c56e8db918a4bf77c6ff4f86841313f82c28703b2711e4ea7b4057b1278f6ec66772d1887ce88d74f882ece97b27c07f9de109017c91044366
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7F:fwUQC5VwBIiElEd2K57P7F
TLSH
T16DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4696ad9d35bfcd902f7085aac9b8acae9725499dbf58eb10f141b2bc90e60c96
MD5 80abdce154ec49c5a57aaf8835dfc856
SHA1 bf985efd0c592e9dc683ecbc862dc9d4569b5139
SHA512 22622ef64dcea7aaad9c78007c9263a6b51f977a37c496375e7bfd03586e6800c846e7b6800367c67ee672489ae613d9652b5a14c38335a4d22976d83da9792c
TLSH
T1E3D09720791CFAC0D216103942244600314D8642BC831207E950180D8C3E84293906B3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c973b6a0ab6d2e8d04bd7ccbaf4fe6fdc38211c1a5e6f7a2bf678f6b5324aa77
MD5 7a47b889c3c9d56ad7eb02025998bd1a
SHA1 1836913ebf75b13ecb4757a148385f97dbc4d69d
SHA512 b2d2733de14c05c793999f02e59651d0a8d56571061b8ced526c3f990b4bc9cd05f57f81895c75ec473a8da75a2a4bbf90c083a1496432e5edc0bdcb00549b82
TLSH
T14BD02374775DFD04C6070136C524AB15325F9655BC535217D991260D4C2FD41F7D4177
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

24de5492-6739-4387-b151-6f687f7bd19f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24de5492-6739-4387-b151-6f687f7bd19f.tmp
Size 27KB
SHA256 bec7658e0ed3f1dc625a12809351d70dd9526e51d13290fee66c989d9825f5e5
MD5 38adb5e8edee343350634cfcc9bdc168
SHA1 696ba9b47024e97b5ee89c6fb25cf9287bc6bc86
SHA512 11b8ca54d2a6f31782987b182e793f8df4060b01311f07dbe32b09b8a0e9ccf9d600fcd3da123b0d407189a070811899e6191390a6468b365e54259faeeb33fe
SSDEEP 768:UtiiWNWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPpN0iroYlC:UtiiWNWgv7fgJu1jaCf05oC
TLSH
T1F1C2FC3B640CCB7E4F844E6DEC29BED76DD801CB5A984D9447EA890C03C77EB521A49A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 b2fdfc0b4e92d8a979107030796517040cd3eba7c671c0521e111d8d62351125
MD5 c02a49c5fdf72f0892d99ba954751032
SHA1 c23cf86fa4ea24d83f6ec0e10e0216a158364c8d
SHA512 372bd3a4d55a1780535ec7b8ec27dbfa60e20e501108adc64a286bd55cf65a97e5da39c521532c302306fed01827cbbc084a26fc56de6b66dfe1845b73f0f255
TLSH
T139E0C8951ACDC26FF7046447556C439D8194371ED6C4EF45370C884CB147575F7D3A50
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b9243d76efe52e76b5bfc41c3dc0a000e8f47f91e3dbb9e5e358c40c163a7d75
MD5 50ab9b97a7ba7c2a48ce386212bd0eb0
SHA1 c034c4a92d47485b32ad4935e40ba252053f5663
SHA512 a9733502a9285f4fc48add9261ba1e628f1f6b9b31fcb4cde62d56de320e2f182d1296b1784ac6d0663356bdc50ab16f8e6cd716e2159e678543dbbd025729e7
TLSH
T130E07DA90BCCC23FEA1064775268474DC6A13A1BD2C8EE1A170888CD70031F4F7C3AA0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4246dc9ffe1c6c21b50a434a2d0608273e58a3077bd2c6fb13a78f83263e3118
MD5 59aaa78b79bd8920403541d061255815
SHA1 35307a6ff202443791162c5edd329c34604515ad
SHA512 06e9b8db48e909ce0c231db07214b3807804b565a1757514aabe30b06a96ef65c00094c41ac561433882304a3d6bea5fd9df1fc393962863112f776acb44861d
TLSH
T14FE022B5C960BC2748FD176EE4A44786E750134B27608A9F3F3ED0198FB063A058AD2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 e17b98a51e413e3a468804463b5c183d542ca292525d831495864c1534229022
MD5 47f15295c90777b92aaa937c8ef02cdb
SHA1 1af3e6a7c38959e9d6c77d965a5f2dd659729a7f
SHA512 4c0b9a8946b1c2ec06bc2ae524734511b9127e32b84aeb08ceed856c2b89e5106c364dee15f9c5600493f621d12a0336e3c3410191b2dcf7d451c3388447fbd6
SSDEEP 384:DshgT4BGE7UbuyyZ7ovWd4x2voLH/tBcy:DsiT4Bf7KuTZ7o/LH/n
TLSH
T13013F8BDF7514DE6E3C3473D124B1B3563B5DA6AD0C6805F9A7A32008251F928ACEB93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 89384bb978610eacd5ee5b21d6e12ded25b4b030bf55783b87f5b74083ff8150
MD5 a8dcd185235cffea5b9615dcdf60a6f0
SHA1 f6f2632f0b0f9b5a773213bce6a782926f52a129
SHA512 344cb16ed475313d92347265a71545ee6902f3f3805b4c8b413e3792413feaeb85dc69000a3a012652c6f0c62682de619dad46f00a4015d398e0a9bfecaa7c41
SSDEEP 1536:8E0m+7L/mAL//kCuoyys1WK7f40q3AqP/eL/I6L/9L/ME0O:gm+7L/rL/Ap1+3AE/eL/LL/9L/N9
TLSH
T1DC445DFB4A01A04ACFA442F5E2073A3DE23B451E6DD1EDA9D1794C812825F31B6FDB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 5069f846532d1faedc0f23ada661d40b3bb5812e96890b1206d58f6616fa16ab
MD5 a260810ff37e77572d6412717e606dc1
SHA1 dd59b51e10fe990d5cd5ff58850e706a77b46f52
SHA512 23e2bf1597f2524316f56074642eeca241ed9574ba6b9426cd1e0e1ca033e1416278bbbdfa1b54b7ffc4e3104c9e9fa353cac96fb341020137b793dc59f4d26e
SSDEEP 12288:vQkYBVGnQfVs5S2CM3I8gE8wl21WIX+VYRCTU8HKtgvlYpM:JO
TLSH
T102254CDE8B681C82CF67DB70B4D0D8173EB02182FA8DE0D39541C5E956C2BC57AE926D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 02c4c78910e5e2076e6c33f9a11d00a821ff692f979c2d0fe2ee5d3ce377f621
MD5 b0b6e7c0ee12345963d1b6d9b6345e4e
SHA1 153ced4e17ddbdf596fc81c024820c06c5474224
SHA512 60c6cc293967aa37bb77c0079e04e2faf820d1be299625f2d1e7e751331ea5c918a831d8c877b3ebc82d064feed6a32ebfa01c830ebbfa12a4319d507df0297b
SSDEEP 24576:xHc6Z/+cn3hE6n4IddXaNlpj/BZAT6oQuJzvY7xxujKrjn:x86hh3G6n7dXaR02oQuJqxujEjn
TLSH
T1F8169FEDCA685883CD639A30B4F0E9477CB413C3F595C1D78888C594026BBC5BFAE669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 470KB
SHA256 765e1320085bdd353531ffcd09d30813a99647bf26a0302a1d46988a22559bef
MD5 6725136828b0c06e787a4d1517fcec01
SHA1 fa5fe6fdd384d56380bea33460e3bf9caf4db233
SHA512 be6973dae5ae8223eb026b223a4c2ac40e29886e770efd0ca9f4bd91ecc5a3c83467394277a2d6ae745f2271f8c39ecb4cee34bcae8b067c52eccada10b2399d
SSDEEP 12288:wigc+EGjxg4Ngkqrp1yQbNKAwaGL+QGK5vmBs1KPkfoh:sEGjxg4N4rpoQbNKtHHOBIe5h
TLSH
T14DA423997B7DECA0EC94D77A25D2CBB2E323D210D6B5B30B1EC6EA596281C5F0CE5410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 42af1f8e918a1b57fb17885661798ac4af30271747576edb2c72be81f5ea65ac
MD5 73b06ef6c63150f7c7ca10c3b2c3ceb5
SHA1 b6475c90191087daa1738d71378bef4a7482ec78
SHA512 928cc52bea4becef7f46d4aeca972923d93eaa428ea8f15cbfeaaccfceb24e18e2ac5f279e051a543aa5fe991b78ed54fb2d5fa1ec2113411baaa1b9595ad339
TLSH
T182716361CF661DD1DB6AA77561D08CC535F0B88B03872A1904101D7CAD33F906BDE6D7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59616f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59616f.TMP
Size 3KB
SHA256 ba90155ed264e2f1137ff46beb1e04fbf13d18817973259672b17e10f9000db1
MD5 b7035b312a752ed7839483978d0d4919
SHA1 824d2118a1619306456a376f93d4f487b80a1ca3
SHA512 ef0f43f97e0f139c7b615b3f07ded86f90feccdbaa2f0a9224ef173df42f5fd63cca35d795bf66680cbeec1dfd72da4eefbb43575d9e0b2cb83506eec020ba7b
TLSH
T14A512F61CF261EE1D76AAB7161E04CC536F4B88B03832E1408102D7C9D76F946BDE5A7
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 d32b86f82c391942a1869369dc56da6f99ef0e22c0d98feba05227209202e384
MD5 3e39163975f1329e037dc4a4acb3d4dd
SHA1 de3878c57124e494d1b6681fd72741ae48577ce1
SHA512 e395e4565f873335d4ea6e3e1d385f878022273a6fc3d76cc7ed6de12d8e660eadd53ced09a6c4b7b15704d656fdf20cd6a5dd617b8f5d5b5465c75757f66627
SSDEEP 3:MsEllllkEthXllkl2zEklm5:/M/xT02znm
TLSH
T1BF4404CCFFC00407C5041034C411DF704374D4100533574334D104335DC7540CC00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 01741dba293eec74d147a90f9919a0c3a61144692af8b6554ac0a70d819c5641
MD5 9af7d4b6db4fa6d2bed093ff57525af3
SHA1 9ac67c221206cf962ed5bd3cc1278fe6385c05fa
SHA512 909365e4ff5a2be5d6cab89db052f34f86ab696a1f643e988ebfb7ea7984e1a40d2abad239e78f729eb940551a1f81a49bab6a7fcb7229cabef7a303a0ee629e
TLSH
T1EBE0D8E558CBC11E9922358796285F589191344BDB8AEF072700C8C47702155F286646
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 3100f176f93907fd87f908429a4745b30bb2c47cd5ff6ded5a6058d394799a11
MD5 04a5a9d7cb30dd2c3ab4dbaeefd67f45
SHA1 00cd7fa8a6cf3adaef07518a356de4b04389b3df
SHA512 ba5870e5726bd7ac894c355146e08d0c2741c305101e7ea61004250ee62f8f3d4624c3ac51772b4d5e80a2aa3468586582f8b9a0d157624a9431921fe32dda61
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj3W5LoFtI6NNVqYp6x:TtD4jJ/0UC+lf5DWxoFOoVTpK
TLSH
T11DE2CE8C3B11F511C4ED733DA0C2C9E05ABC783C4A99B57192389DB68D239A2F49E10B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 fdedcbb95c1b9474b52cbc99817b6eea5437c02d9af265100466a00358b17c36
MD5 0fd958606467befab78456a479d7a06f
SHA1 c35b9f4017f7e7a90f161c1fdeb156fd4356ebbc
SHA512 21808706366ac2793cdf8fdf16c6c742b9a049d118c29da69831b4729800fd453e2c410357768a5f09f49fc1dec41b2a3246fc8cb9a15207d4029c2c5a33e8e1
TLSH
T12BE0866818CED26BE5257893CA6C532882E1349BA788BE12170DC8447166E55F3DA380
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 2a13f328a081078a745e6e6c4ebb339081870dbda2e68c747eb9fdeab589feda
MD5 0dbfd1f3f19ef3630f520f758874f1cb
SHA1 f4453160781f38eb28d92ab5ee70cd5a93389f3e
SHA512 107daabb553a6690f36e24e979bd66619109fdbbe83d3eb7967bc97ac06c1b48b9fb0fa8f6beb6fa8b851edd12778556b211de658ceb04c6410db3607dca52f7
SSDEEP 96:3BCxI/6pss9iQFCPRHjiLm4eoIew79p2jfDydPO8J1rfS:xaP/iQFCPNjiM1O8ff
TLSH
T13BB22A436A793903CA812EB5722E487BCD3BD10CDFD74E9A781688529DBD442A07E4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 660da7b8102f0107253d188b4a81df4a4c79b61fbb8f2a50e6d5fef7933b8df4
MD5 9b860708e2ff07f1b5a3f6689d83a099
SHA1 87c800f4b2d8ecd3f13abdc6f521c52333217628
SHA512 591bd327bfd221a09d4105ca6b078a4eb680209e0c22dd0c652b9ae3ec3d0efbfa5775e4b76f25075ff5b2a193d8208724da36efab1957af33c9fd3988d1dc21
SSDEEP 96:ra1k+WVe8/VtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/5embbEOVpZf24JkMfV:rGW1KH+bF+UI3iWGVoWN3qL/RVVV63
TLSH
T14B24114E5F342722CDBD913669EB44A35C7DF03F871326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 209B
SHA256 f348c41f17ff2d270f343f2dc43520dc109b80d85244f98cb86ee1e2d7e8edf1
MD5 112d8470887ca31c92b090c0b2685ac0
SHA1 5af5c3bb31c445c0db840fc4fecdf86c61e5fcad
SHA512 55391d4e9bc230d3a793435448fe4e375bbb0a0ff17f214c3b3c9ed2c38646f27632af6c17eeb9040761edab9b91671838afd0f4c23c785211215553abf48970
TLSH
T187D0C9EB9515C38BBF0454A0A4FCE2589B53C0BF8F96DAC892036404004147072E9B48
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 5bb07e2cfca63560dab96b906ea39d159bc83fe1514b26bcc222c581d3b82425
MD5 abf605a46ecfa70d849f275c5fc57503
SHA1 64828ea1a2a8b1168c8c8ab79477a47923674660
SHA512 0d7cf50e534c65742df418e43d2feb87762a605d63e50346472003b0f56decdb1549624f513d757e79806ce5b013b51b3940ca5fc231387a34793afaefb0b081
TLSH
T120E0D87548CFC12A950570579A24670CC3B0350BD7C8EB021B04DC86B452114F3C63C5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 577846252cbeb7aa390bcb8a09d102dc856ea46a09350b91de2038aee5c72eaa
MD5 2180404ec74c022ee45b7f23e7d4e324
SHA1 379e032017f2ec443f39b1e4d43e1c3f8f3c7f8e
SHA512 5ca8d4cf61fb24aef1871a6511ee8d2cbfa510ba96690f9fa87aaa8b654c5a970476a968ae1ee9ba409265a96bf5fc68ec277e3883e0ae492134843ec5b5efb0
SSDEEP 96:6DeMatha9onYnPu7tcvT3tszloh0LbK3d:6DLaTaONx4wo
TLSH
T1AFB2C92E2F306755EBA95933D4F484123F7D001FD3136E4B8602E0B25E61E9A7F1B66A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 92c12d2e420c54b153ae984b3ded7319e6966068e45dcaefa22ae45f65c93479
MD5 021bbf87d27ba5766fb21fc300725af0
SHA1 2d48d90a429a4155e98df5468828875e60d8e7c5
SHA512 5e6205d6178d3f031e66ac64241ffacb151f71aabcba99e860d8db5aca9fd83c87fe8660ff2806828e34f0478b4f837ee7e9489f5657eba0db4bc13eae346c4b
TLSH
T13D219DF3C3E8567D8D5542F466243F1BCE2D0C54431C3D5AC9D4AB5B93E5471E28095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 966d259d9c040d5afb6b0490ba168bbd794eafaa6827d64b14181898228d127b
MD5 b19529dad218f4fc75c74dad020eb290
SHA1 0dcfae0fff4cf90d9f5ae8771fc1e1354b3048bb
SHA512 e409b08f74d82af276edf945db2a8c8bba215bc62473bb8456bf3945edb253e1a3b1adc0c852cc092456b385a5374e522b4e121aa16439af57fcb105179239ff
SSDEEP 96:DkOQtDYoaVaiv8zBY7BBSGJBi7WmMwBO7f5:Dv0coaVaiv81Y73SGji7RMkO7h
TLSH
T13B919BF783F49A6DCD2262F0AA152D1BCF690915931C787AC9D4AF2763E2461E101B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 86d76b4580368a44d16e0492c1fb1748154b5723f97d93f763a83df8b0c410b6
MD5 899654c4ab2ed1b706cadaf434dd429f
SHA1 82462d98516172eeed31ad2be0be0e53d9bc729f
SHA512 b4c3224f161846d9d225bc4eb42ab1d00fecf60f274000da27bd2e9846190349a0678a5bdf626ed9554269d6b45bcd122dc0e937f871815fde7cd899c9139208
SSDEEP 96:DkOQtDYoVv8zBY7BBiJBi7WmMO7fpawUDSl:Dv0coVv81Y73iji7RMO7RaJDSl
TLSH
T14CA1ACF783F49A6DCD2261F4AA162D1BCE6D0915931C3C6EC9D5AF2B63E2470E101B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 847B
SHA256 dd2047e1c38a7b00aa8e4151590d4abf190c7609785403e2641057145da5b007
MD5 bc78f60233e27397005bc1fc4205221d
SHA1 2a2ee69a11180956b7814bc8edc4275141937bd8
SHA512 ab0bb02746dccc493c8941f1270afce6463b3c260b36ad7a3dd2eb3800be79be85e6713913571f80bf2ef8e009026395b073625c819fc488bc7d9935d5299c82
TLSH
T14D01486B85FEE4AB90BC097E0EC4F84568BAE8301540A8F5CEA7D13DF0805F70B26527
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2a5c31673b2baf2acea04c2ed438269e9499dd511ef3b723b405523e623b24ae
MD5 bb381ee3c02091c5660e62c66f4e9fd9
SHA1 fcb8bbb1d57bf3861876a8ddb6ed1ce2c996c426
SHA512 fb14d45d7af5f9d8fa79ac3dee2ee72bb539915fe3fc90fe2c8e6de09d2cb80a7f637bff9c0dd8d30340ae3713303e15a424a58d626d2be2e4a5f1f15b821f09
SSDEEP 192:sxRORpyM/jK1Ml8SbVf/fus/WpVwNU3pq1zzpzoD8pgD/g6+WNk7DHXYKdgkAcgy:sxROvBVf/fus/WvWU34Pdy/5iXRArM
TLSH
T1BD62D815A534997BDCDBD20CFA917F53D7F95473A2901E44AAFC9A0C00E6BED220381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e67d980ac77cd0e6e70932585c4db6b0e2e2b1efda0232c93c884f7c7eb790d1
MD5 ed77a875290e36098b5d627336431251
SHA1 d433173e543d2268367457f6619167de883e57a2
SHA512 af248ef8b1512adf7eb6fb51597f001342b2f82025656451673c627fcf884d583938d63ac052ab46567f5c5a8d169855117edeacae8c2c546f057b81f07029df
SSDEEP 192:sxR1RpyM/jK1Ml8wbVf/fusRNU+pq1zzpzoD8pgD/g6+WNdKZ/YGTbQkA+GlIgIJ:sxR1vlVf/fusLU+4vdy/5C/LATs
TLSH
T1AC52E91569349977CCCBD20DFA957F53D6F91473A2905E44AAFC9A0C00E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f0e9f256a7ddd8cac01c77a6673aee6f05783929deb141ebd81ae1a4cc00fb2c
MD5 ef75ae018e0fa9fd59ff827294f8fe59
SHA1 0284c9951975343076b3d7c014ff28aeed413b55
SHA512 476b9022f41419b12df4feeb58eafaa014af19cb9c7aae612bbab363b38ed554f17a7a568ef0229faceddda4380c100c2c64b3871470a73753d6fbfe40e4aacc
SSDEEP 192:sxRORpyM/jK1Ml8wbVf/fusFNU+pq1zzpzoD8pgD/g6+WNdDHXYGzbQkA+GlIgDa:sxROvlVf/fusfU+4vdy/51XHATO
TLSH
T1A862E915AA345977CCDBD20CFA917F53D6F95473A2901E44AAFC9A0C00E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5f0e5864487e0d799f329e9e630781099bb08b12\9edc2a67-e93e-42e3-b27c-8b7c0e930d7a\index-dir\the-real-index
Size 144B
SHA256 5b706b1cebb457a6338b492afb8ba04328effdcbfeba5fe983a4c1ea9c6ad8e9
MD5 369702adf1b11892d6b2a4fcf3bcb983
SHA1 2b311ccbe718736c316dacdbea5ed30159ca31fc
SHA512 5c9bd0a8d71a9dce0fb31df5b850b0b4efee27c1ef5bbe9533cc7843e4af2e115a4d82cdad56fc252f513e130c0532cffb7013961a8396181463fb32c7c82ff1
TLSH
T135C012A4A7F5D116ED04877B1442DE5465B32F61DB0B2147EA797704780F47289CA2F8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594c61.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5f0e5864487e0d799f329e9e630781099bb08b12\9edc2a67-e93e-42e3-b27c-8b7c0e930d7a\index-dir\the-real-index~RFe594c61.TMP
Size 48B
SHA256 30959b5e540c8975b399d15f0861d52628a681841ffb35a46b329d355edeaa01
MD5 9e9b46e06cd449990440b5d53c2df994
SHA1 89003a84eaa90cdc9117426991a774d62cb50632
SHA512 246c726338227accf481f1841a1becf121e363f27614c897fed9ac48ec93e59d74c591cc91e1849c41068d4c5399d81a2aa5809ef63768b7e2b68a7a82cb92a6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5f0e5864487e0d799f329e9e630781099bb08b12\index.txt
Size 144B
SHA256 69cc5b7dd0d32d9dd561771c1df58a06bd6ed7da70eb7f69cda03906108284f6
MD5 53a155686160f7582363e6e2bf81fb5a
SHA1 a625b3b403f51b669a1eaf4778fc1fa03674002f
SHA512 48e8c62ae7925e033b2347226620e811bb03d221084d57c45a8ed511f247ea1bd3b9ed8fadbb114c71a35c3dc1047dd690e7325a87c42547a9ffe8244abdd838
TLSH
T1E7C02B531060C3149D0482C2C8E622248F2770CC8F401CCEA101080600184031FFBF9D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe594c9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\5f0e5864487e0d799f329e9e630781099bb08b12\index.txt~RFe594c9f.TMP
Size 148B
SHA256 43bb1cc15d2abb940fc2078ddd3e169ec4ca8ff646f5108166f03918c30b9851
MD5 df9d042fb2963a97e381116ecc59fd5c
SHA1 07612bb496bcdf2cc28820411fd1dfccd36d75f1
SHA512 37ce6e9b51bbc2a540da35a111f337628d4b0beba5b154386c33943b436ca749e2ec5779323a40897a7b94b13d6c277a1c409189d67464fbafa621b624f1cb71
TLSH
T154C08C521460C2149E044082C8A621448F27A88C8F400C899102280100345031EABF89
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 c7359094a331c241868728f0351325d4565f805d234cbeb6044f740b8e9b86ee
MD5 c359e7bc98d9b068deb8bc85a4b7f446
SHA1 2a7961194dd440b81950e2a64770a60657e0aa1e
SHA512 a8c2696560ee3b4b6e0bd00efc094da623500fc4b39bf1ff887e1c52d1d8f4706801f84b76ca4d00fc962630d0c2dee637900c1375a28c89d85a11b85097fde5
TLSH
T10AE026204ACED1BEA82630B70A24870CF3F7780BD3C8BE062F00C8846582524F1E66D0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 03fb7f7daa667d338948c5b9dbd84d0450e803550ddb25156af6a48e30e9ba64
MD5 3922f2e52c110b84aab887817a66ae0f
SHA1 d14f2c5e825d9415ec28326238d4a30053c75ec4
SHA512 dd53cbb673d046d368154feebe31b758cf63f79b763768ff27a1ff199d1a404c74ff8f4eb20c574486bc4ff615fed8a45f70c79685d7b6eed878a7f24b6eacd5
TLSH
T1FCB0128437845323C8C4C73451A58F429200E0420C501833889C5F255C052AA7F579D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 463440f47053decfbcda4ccb6249e6121fac08066e760ab82428ad7059546961
MD5 7ffddad5fac867649ae65837476e0de0
SHA1 ffb4bec927dfd2ccca7f7240671a853b33852220
SHA512 3422f5575fe588ffc75b23b7b0ca38d527893ddd595e9edeacd4739006c5677a02c6a12b923c1d5796f97e051d5636a46580298dec482e0e3db9be7753b774b1
TLSH
T19FE0DF341ADEC76BA54630BB5A64E708D2B3740BE7C8AA522B08A484A246164B297A90
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 9ca6974ff398dafbdac95a16eafdf4059e69dfeb436ed9445d6c49bbce3b3ff5
MD5 f364703503297edb406521aa919ac8b5
SHA1 bd56b0131725f5c4d8f2ee61840d87601def8986
SHA512 65bd2c11f3cb4a944ce89dad570ace39ad3e036e3ca7e171ed7897dd791c6a7f5c8d113cbc85cc3227ac6cd3b2dc7e3c046c4216960e11ce47c3fc15e4183938
TLSH
T1AFE0867849DEC3BBA505708B4A6C971D96F0784FA7C8BB56570C444CB146154F2EBAD0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5e9733c0c01c208057183abe9300d3af886e2419b805e9f69c6ca73ab13f8c0b
MD5 e03513e680c5da56e637206adf26c3dc
SHA1 f19abdffc088c12e00fec388ca1125126d2b0515
SHA512 1ec8aaefd35372bb4510c7b3634f9d98c63b75daad4660b4e0c961108051f5f7e2483708646137beaadba30447ae901c617c45f83d23706a2baa39ae98b1c118
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkMN4cWaO8Wqnngk8K4pgu8cscHGshHOjyuIQL:Cm7KmgIIJ4tWGm7g09OGlkMN4cWaOjqj
TLSH
T193913405327E02513C7EBA0881B8CC2F96C574663035F57B7BA919A21F66E03ADFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 937cd122e409a0558f1054563d0704862af7782aa3dd162c2a84a4a250234099
MD5 60d0ca23cec9af5b80f9910f12c612c6
SHA1 64ba1e8a1f95869b920444260c671ce0c6d1aec0
SHA512 42dd2dd12d1550617cec9501c35efb8430cd35a35e71d166b95ac6338610ba3d15ddaa0b1f248d4364bb04697636535f25774176851feb0be4f153a5aefda108
SSDEEP 192:Cm7KmgIIJ4tWGm7g09OGlkMN4cWaOjqngkApgujscHGshHOjyuIQAhhOlZzQgXGk:MIFsV7
TLSH
T19DE1B44137BF02513C3F790C81A4C96B529670673025A87B7BA819A21FA7E13EDFD9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 98c5ce716e2abb2070e476e50c1df22f1fcfe23469ddf35f3e6efd45af1b4043
MD5 72ee19df8b37437e620da0ac4c51d401
SHA1 fc360a2840c1a8ef3cc8e8418bd0a7bd437fa9eb
SHA512 52a4c3c37aeb54a8e639789e1b493f3148291f4e66d1476abacc4612f0178775e0e49e2566d4f9882a02e5cf48bd70e00b504a0f3f956462ec442b6b7fc53514
SSDEEP 384:DNrRZyCSDnxTICuMEhIKyll7svbFKfk7:xFZJSDniWyI1l7svbF9
TLSH
T1F544840A7B747001EDE6D9721CB080771E3CB16E8F22E6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 4e7b3a3e7d3a340b66b0e3f0ab2d11624676667ce7547a3d72f79d68e1cbac19
MD5 a6aaeacbae527d6f8e0476d6805936d8
SHA1 a90bf2e0f569049c8932f55d6ce535eaf8cf1de4
SHA512 403b8179f300a8e130fea858033099dc80c3b3701d26232511800f7e1050db4085981bbbaf7dd4eb53889034c89c735753dcbcc60d934a3d8661fff35e3be687
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgtAgfDO0anE/JGt:DEK3tjkSI5IUltGhp22iSBgtAga0xW
TLSH
T10A52EE8BEA302257ECE983309AC041E1BF6A903E4FC1EA4259DE10111AB5640A32F78D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 0a7878f38fcf164ffd30e182563484aad0de544dc7c5ae6ba0a9c0f044672026
MD5 73c99d82cc3a131d99c92808e5f8fe7c
SHA1 92652ccfcb04605a22d22b9f3655351085659382
SHA512 1786b764615ae23e7c4b12ea9532c98ff40e1cc2fb4bad6a83c163cb9ed8385a4c2df95472c1c7650e8cf94d7b3013203fe5b7fcda30ec0986619db41a0e4c91
TLSH
T11CF0BBC013AE20856E8AA544C1182A1370D87D5A220D5871331D49A48B84816FFBEF72
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 321e6483abb11afa2c9fc66d341d4d79211cf375c5a2d387522eb1f295bc469c
MD5 be60ae8e6a6ae59c8fdf61188aa49f90
SHA1 295c31448d32fe19e2f08799273af092ac658e52
SHA512 6ec4c8cc0812d0907d945fb3a0084c6ed52be9f3db856b942df2e670c7e8ca2db2fca39e09b148618a364c4eddb0f86b62b9a63a142bcd00bf28d30de6e29277
SSDEEP 192:GQiIIIBbxMIMbyYcYGHwOmr9AsMl9q6ssyrGIlx:GQiIIIBbxMIMGBVmrOsW4s
TLSH
T14142839A27052BB7C19F5B3A13B6C6449AEC8C811173A16D32562C0F8DF3ED782C56F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 c6eeb0d0f5a448ed013735c9e77ac73a1502fd2a79de0a1570eb7ef2e6264a88
MD5 f51591871e1e11781814967040a7ba93
SHA1 816e2d816998af8654d359da7e1f701e103ef9f0
SHA512 1e864e52cf64b8626154070bc54eff06030c45cc5aa4ff81f6ae7348a03879348d6ad3bede07826ebc7b457743f529838b9144234cc2b6e0320e3a1b62186906
TLSH
T1DBE02634ACCEC16FF91530876D38430982B03C4BEB88AE071F00C448A006500F3EA391
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6c46f98f322c24431d358abbc9c3bf7633e4450290b7ab10d43832d9615fd0a9
MD5 b62f59bfe0f7797c0a1a17c7ee23792b
SHA1 f286a17d893ef167a86257126657f920798565ee
SHA512 574f319ab1b54330ea8225accb3f1e3a2ad30bdff9a59de115ff6ad20b81e912768d63b7af43a7c1eac3573a2ea6488d7923ca76784c45d0a0e4d51959f338c6
TLSH
T1A121D695F330C149E15E867D943E9B3A1739D8568FBCED0F447920346E72B040E4B6E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 9ed8b03d01a9659779b1cf69fccf449edddb0bd9bc2f2b42aca1947731bd62e8
MD5 25b322337aa977bb9f7f6a1fc8ad9669
SHA1 b8c95e649e70f3ce979a7e117a8d262118f45fdc
SHA512 75bb41ea211f05066c1c670e687f24942b125082d3ef905e98cfef2a24d008fbc86dc48be32737fa7d902ce730d14e5f5f26c1a0e2749e3d3085944b623a8028
TLSH
T15EE02624ACCEC1AFE12134834F78834882B1388BEB88EF021F00CC48A14654AF7EE281
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a7030.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a7030.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 9223ea10cde928550190ad0079eadb86c6a509831f81607c8e35001f759ef269
MD5 dbef9b27edff927dcafb6e6657bf60e3
SHA1 e850de86e6db168ddee8d765fde689a595b31d4c
SHA512 f2b571bf3eb1cc0f19c9a78b947a32de16bd71f20b592791ece3b952bf4e254350ea0cfe11803142a020ff073623ab25999c18b0d902e1b063e0e350006016a6
SSDEEP 3:MsEllllkEthXllkl2zEelo:/M/xT02zNo
TLSH
T1A944044C7FC41407C51410304411D7504770DC10053157437DF115335CC75540D41140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 3e2bfb9abca9f398c8e47adc58d31f7944500405a3795dca786af46aa56c65d6
MD5 7c68636de9f488c4d8c95f8c3ac3f7d8
SHA1 a1269a2929c63cfe7ffdfc43b4f15061fc4559fe
SHA512 28bf2fef3271fa6cbc291ea8e8c7b0363dbbc17002ea8cc274c262da5b71005129ef01993e31119ab741fd5783c9c288a248cc1154721bd8982c1becf4facb5f
SSDEEP 3:MsEllllkEthXllkl2zEely:/M/xT02zN
TLSH
T1A344044C7FC41C07C51415704011D7500374DC30153157533CF11C335CC7D401C01100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f5d5e4fc61aa413ea7e6630e4b4eacfcdfe2935937c7f91de12b68e51668ea90
MD5 0e7a973a9777b8c78209b0744787a0f6
SHA1 cdb8f6bd56c5146cffeb961b6ccafd1fb8f04e84
SHA512 6021f2c3b7cbe1caaa5a0cb74b53fd871fe85ac5025eb95f57aaa38ff4cbf55613360ac791c036802f563420b0fb605b84e8dd4372516c2b0c3bb0e3818bd04b
SSDEEP 768:6rv+4UNbdS3uGblYyBgyJ7Hucys6BRvi82oP4/z6himof62bwn+h:6bsbw3uYY3imOz6ImoS0w+
TLSH
T10903CF35E4189D73EDEB8284B04A7A937FF4522385C91A80E5DA6F0E429B95F131F873
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 3640e39c17f0a3ab812bdd42725e39a1907f7b6f3f6c84bb91c4870157d54067
MD5 a062d4cd170cacc9f380e93d17997926
SHA1 ef423820b5555dc4cd17b35a5a13ffaba7def0ef
SHA512 3df8fe34c5d503756505b025bfe6b01bf40d6d092062b746abb532dfd83a0b9e88f122cd76391bbde2006adf104ebd8988530daa0da787f384f60d54523cae42
SSDEEP 768:Cc3y/gUVlYyBgyZ7Hucys6BRvi82oP4/z6himo66os8:Cc3y/ggI3imOz6Imo5os8
TLSH
T1CCF2BF71A8549D73DCEBD2C9B5463643AEF4422385CC6940E9DDAF0D12C7E9E031B872
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 59KB
SHA256 dd0db3ec8101ee2dafb8bdcd00e0befb35f6bcc5a65eb1098ea354776e9418d5
MD5 d60d72c6fb15ecf7db51384fb879a563
SHA1 06a0201bfb5641c39ef5cafdf38d95ebc3e67d69
SHA512 e7ac1ef9418ed1087effe7dbb5b2593f88e67f8d406e6f77893c283135093f894cc1514c958920b8f23e03cd237195ff119f4cdc7b4a72882a3e2e3f75cf21eb
SSDEEP 1536:1c3cXV3imOz6ImoYVIDHGqk8k8BfLT7STGyol:12cltvh2LApol
TLSH
T152536AF998D3997AD8AE9387573D2E0699FCC123B0989484FBD41E0DDC529BFD306821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f1e63defd0219e60090ec611afe4e01dc3316b7cd6dc1edd69ac8a23bce5e5ab
MD5 5a19e4653b93216bbe0a4cdf17651e44
SHA1 20653fd0d2d158624b5681fe71dc06d5c1dbafcf
SHA512 23ffe3b110147f4fa7e2462842f27230a97c940c652902875ef0d4ded24e1610941e449b7d0cc2ab09aa999cf6371a1c02e85c8c9407ab29906fc111aca3ecfe
SSDEEP 768:Pc3DXeVlYyBgyZ7Hucys6BRvi82oP4/z6himo6jk9goos8:Pc3DXeI3imOz6Imou9oos8
TLSH
T180038D7CEC105D7E88EFB789664E3A525EA80233C0B89854E7E65B0DD173D4EF316862
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 2bfaf56fc7f96c49f8d2a9bf19dc6b2e517c965e4aeb35f66130580b1d94014e
MD5 ea39d2e1008752a60bb1b7352dbb93e1
SHA1 e4101e261c2384f55226303a8bf6d59701fc63f0
SHA512 320abc1264aa81c1b10004d0ac7fdab5e1e945958d8a637d948554376e9ca147b37b0d42e67c0333435af8bc6c63bc2347e13e0b8f60ba848653de46829ba921
SSDEEP 768:zc3KXiVlYyBgye7Hucys6BRvi82oP4/z6himoxVool:zc3KXK73imOz6Imorool
TLSH
T14BF2BF74A8559C73DCEBD2C9B59A3B82AEF4123385CC5D40E9E99F0D1583A9E131F832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 014238a0817ac3adc7091558b3c55732a45de4ca6935b74e5471880969755737
MD5 34d4756be071d26bc4409430fed905f8
SHA1 05601d072cae731d434073b91aee9555f72d0915
SHA512 275bebc8ba9ac86c87139468806a1ee2f910219d73e1e4074737b52a743e8f2e5a5ee783425db72514af8a5d341410d1ed14421009034890404d22e504b7dc97
SSDEEP 768:sc3KXiVlYyBa7Hucys6BRvi82oP4/z6himoxz/9Iiol:sc3KXs3imOz6ImotGiol
TLSH
T1BDF2AE78AC145C7BCCEFA389614E3A536EF80233C1EC5854D7E95B0D6563A8E631B872
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 365252d73007e1083706eabab5493a8fe278f56085d20fde25558d3502a21e54
MD5 7684636c9685bf7c8a515e37fb27ee9f
SHA1 f36253b32f49c1170346a64f6666b91e5b8bfe28
SHA512 dac76a967d8d709b319ca1cbc17f357e3c9b94c1ada6036867a6fb6b7d90718f5bc3c228e9f108a1e448e3a034c15937c2a555e49692c3d1a90460141dbb1892
SSDEEP 768:xGrv+4UNbdS3jPUlYyBq7Hucys6BRvi82oP4/z6himo+Z2bwn+h:xGbsbw3jO3imOz6Imoe0w+
TLSH
T11403CF35F4149D73EDEB8288B04A7A937FF4522345C91A80D5DE6F0E529B95E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 6f07f4676a96b717f43e236624601d21794d2fbf41051ed852458aaac85a53c3
MD5 20a9561ab94c4464fa4fb77a0efcd322
SHA1 8028dd6cbf18712de09036bca3d1939ca3f7bb97
SHA512 04f14f158e222c1b6b3ecf4d4cdf01358c1d867cb82cf6835023a3a94a670642c250ad695a56b66dffbd6885927ee922a81e5ec910785698ea7c9502a243bf86
SSDEEP 3:MsEllllkEthXllkl2zEel6Y:/M/xT02zN
TLSH
T17444045C7FC4150DC71510304011C7700370DD100D315F4374D104375DC75405C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
MD5 95ac3c4f8946991b2f4b965a390aa896
SHA1 864730b7c80ff406dcef7eefce17b842687c2bd8
SHA512 b13343c0c56d9943ac874eacdf49f82ad4ffcf8be1ca55600fbc7e0ba55c6203da11354a956eb54c11ee241672e2d8c66d8469e722cfb0c0129f0dbbe3c2167c
TLSH
T1942112E0183E1AC2D5BE0DAFB0872AED50DC9612F8D834382898FD68967E51D2550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 290c47f16a77a8c56d1890de9be5d50c9f5e730f9ee6a4d249f490ed2c0a63fc
MD5 5db66ce3aa3c6ec4970dd243fb876bf1
SHA1 d43a86481b0ade68457623f1ffa0509d3d294a83
SHA512 996f82a16b0cdea315cf0b77214319c7236f9937f30c8c2d50c0389fe14667674546146415de540f92310f5850fa8a84f29723b5ce5cd630aceab14948611a5b
TLSH
T1AA3123E0587D1AD1D4BD0DAFB08735FC94D89211F8A434796898ED685A7E51D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 6531717fb8828c3907681f9478370384c0c10cc24afa904b56e9112c63c994cf
MD5 bdc21d0913e43146bd3fc5be5536e175
SHA1 dd7434e03cc6a3d201cf22d3db6686d240f4ceba
SHA512 61551f4323a370886e4faf7c25b2e704a51cf2e76f27a6cd110700693f9a548dfd9e1014875219721454bfc2b94737d010d5c7c2fe7f74d542937489e428bc81
TLSH
T1F54142E0483D2AD1D4BD0DBFB08B35FC94D89222F4A434792898ED68967E51D254083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 7cffb53aa771e330cf6f2977045f4c8ed1482ca623c76ed54436c17c2fb3bc34
MD5 ee65d1478524f0ac6ac8e7a8633e1f28
SHA1 db2a1937caa4e9bc70d10bb859b484d651b81b83
SHA512 93985d792fc252309e3ef2a80dce6d338aec723461976ac2981393e36be3ec0d737a217f3001e99a8d119bd9ce4f8bcd72a9ea424f5554c2ea0be0c7bae636c2
TLSH
T15A3110E0587D1AD1D0BE0DAFB04729FC44D89212F8A434386899E9689A7E51E255087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0a8051ad004ef8bcee27e93b6638e25664ee597bf25bb654268aaed82af093ce
MD5 ee1189745d148b3ed4bb85febba9233e
SHA1 a2fed181c7e9a7586b330ade2ce88c7f42892f64
SHA512 db3e2b414a72a51cc807e0fe9302abacf192e8a3e2bfbecb1452fb3cd78ea31c9cd6a811f831940e1a1d3304f9d55b38d8937124cda3b28d9e7f2bdb9218a72d
TLSH
T1624153E04C7D2AD1D4BD0DAFB08B35FC94E8D222F8A434782898ED68967E50D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
MD5 bc900814bda342e30ca622ecf6edf1a1
SHA1 58549077a989da91156012baf9dbfc98ecfe429d
SHA512 c918bfea1c94a06e69e13a1edffa87e69fd698fc8ddf310fc5545d1e2a80613e7617e19110e5496fa91c8e8037bc67a81e300b571bebefb407ab16a384d97fa1
TLSH
T124111FD11C7E1AC6C6BE0E6FA4833AFD40D8A622F4E8307818C8E964927951E2451C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
MD5 5791c60bac582e1f169aefd7494e8b65
SHA1 fc220a11a5357f3b3134686ea018f8327ad6720a
SHA512 7ea314ea2431da694bb2d6ab59852e9e0458aedea4693b1d78718c5a54c1c97849afbf8992b044f2295319673c112e8e40e08f8732d473893c556cad7c1d8183
TLSH
T12A2111E11C7E1AD2C5BE0EAFE4833AED50D8A616F4D834381888FD68A63D51D2551C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 824de99fb2d26a9652ce4d147d41b5f42d8eb58933629e98754b359ef813de81
MD5 c854428d46d0bd8106d3a4b26b2c17af
SHA1 3414466742a52757c163c28cc508953129b9067d
SHA512 1de7dd4e62a741fd98b414fa13966befbe757d57478e2eca3d9d49fc11f15eff8310633888dec1ae7c7fd5ab938d39ed341567261f568dc0a1838e5acd6da636
TLSH
T1E93122E0583E19C2D1BE0EAFB0872AEC50EC9211F49834382899E868967E51D3550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 eacf1adcab56ea7707951a59a1d5415c83ac02e038089cf23fd24d14c5a52cf2
MD5 13fbadbf74e4028d922652c3b1fb7281
SHA1 2cd5239ea161b2a994b9b84a77f0296997a22ea1
SHA512 c1600d8593594bf33e8eea3c0e9b7153a41c3ed3ee25dc39ca5b63f2eb3a021af51fb979ffea4d93c39aff5ea2b0e6b4348c8eaaec269e725dc1eb353379cb59
TLSH
T1A43153E0583D19D1C07E0DBFB08729FC40DCD212F49434382898EC68967E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

44f3a94a-a2ba-4b13-98cf-4839d2246c37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\44f3a94a-a2ba-4b13-98cf-4839d2246c37.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ddef9991-27a0-4a95-bb45-40576a39599d.tmp

Path C:\Users\Admin\AppData\Local\Temp\ddef9991-27a0-4a95-bb45-40576a39599d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4760_1187261212\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4760_1633841762\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download