80447b8938f340fbc576893d347245f841b1baacf2f75f32b8730fae7f4c1a13

Resubmissions

22/08/2026, 21:46

260822-1mtgsscl2w8

22/08/2026, 21:45

260822-1l2rsazcqf8

Analysis

user interaction
yes
max time kernel
899s
max time network
901s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/08/2026, 21:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Testing.exe
Size 1.2MB
Sample260822-1mtgsscl2w
SHA256 80447b8938f340fbc576893d347245f841b1baacf2f75f32b8730fae7f4c1a13
MD5 272339c02f3d7911fa6c4459d0f1fa55
SHA1 cfd5d4a325a97f88e88bbd5d85335865f94d3007
SHA512 dd92f798b941a0499e9352f1c1d5cd37eaf0a5c97e19bac32a7d0d3881e387e820ab78884f3521dae42897ca77f630cbd944888c5218bfd188797c53ba9293fe
SSDEEP 24576:yH3zvDWw5xr6bTKYNiO2Cu9q+U3DFRMHaNNibnFD2U:Qzj5YbTKHgJzFRBcbn
TLSH
T197559DD0BAB826F8D07F803A869AD547E5F67840033099FF139CA5593B662D30BBB715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence

Malware Config

Signatures

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\acpikhishub\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\acpikhishub"	kdmapper_240670281.exe

Executes dropped EXE 1 IoCs

pid	Process
3740	kdmapper_240670281.exe

Loads dropped DLL 1 IoCs

pid	Process
5172	msedge.exe

Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
152	discord.com
31	discord.com
35	discord.com
37	raw.githubusercontent.com
99	discord.com
32	discord.com
33	raw.githubusercontent.com
98	discord.com
107	discord.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_650787421\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_314697558\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1609011199\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_436548599\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1906922463\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_80538755\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1489505295\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1106168177\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_2147416850\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_680831714\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_314697558\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1065196442\kp_pinslist.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_774776296\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_314697558\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1489505295\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_705678797\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_774776296\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1489505295\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_80538755\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\CompatExceptions	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1106168177\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1541543494\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1541543494\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_314697558\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1065196442\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1906922463\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_650787421\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_80538755\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1610441086\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1065196442\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_774776296\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_436548599\arbitration_metadata.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_680831714\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_80538755\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1541543494\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1609011199\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_650787421\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2144	msedge.exe
3616	msedge.exe
3100	msedge.exe

Checks SCSI registry key(s) 3 TTPs 7 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319088572164003"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 14 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2654269261-3199571979-4291878722-1000\{262716AE-494F-4CFB-8E4F-AC77F6A23F83}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2654269261-3199571979-4291878722-1000\{24E2426C-D88C-43AD-ACB8-BB98CB83758D}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2654269261-3199571979-4291878722-1000\{9FC65E89-96E9-4FA3-AE9B-BF6B91C0174C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3740	kdmapper_240670281.exe
3740	kdmapper_240670281.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5116	taskmgr.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid	Process
3740	kdmapper_240670281.exe
684	Process not Found
684	Process not Found
684	Process not Found
684	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	3740	kdmapper_240670281.exe
Token: SeLoadDriverPrivilege	3740	kdmapper_240670281.exe
Token: SeDebugPrivilege	5116	taskmgr.exe
Token: SeSystemProfilePrivilege	5116	taskmgr.exe
Token: SeCreateGlobalPrivilege	5116	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
1344	msedge.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
1280	msedge.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe
5116	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 1344	2376	Testing.exe	82
PID 1344 wrote to memory of 3788	1344	msedge.exe	83
PID 1344 wrote to memory of 2144	1344	msedge.exe	84
PID 1344 wrote to memory of 2368	1344	msedge.exe	85
PID 1344 wrote to memory of 2368	1344	msedge.exe	85
PID 1344 wrote to memory of 2368	1344	msedge.exe	85
PID 1344 wrote to memory of 2568	1344	msedge.exe	86
PID 1344 wrote to memory of 2568	1344	msedge.exe	86
PID 2376 wrote to memory of 2032	2376	Testing.exe	88
PID 1344 wrote to memory of 996	1344	msedge.exe	90
PID 1344 wrote to memory of 996	1344	msedge.exe	90
PID 1344 wrote to memory of 996	1344	msedge.exe	90
PID 1344 wrote to memory of 4736	1344	msedge.exe	89
PID 1344 wrote to memory of 4736	1344	msedge.exe	89
PID 1344 wrote to memory of 4736	1344	msedge.exe	89
PID 1344 wrote to memory of 920	1344	msedge.exe	92
PID 1344 wrote to memory of 920	1344	msedge.exe	92
PID 1344 wrote to memory of 920	1344	msedge.exe	92
PID 1344 wrote to memory of 4844	1344	msedge.exe	93
PID 1344 wrote to memory of 4780	1344	msedge.exe	94
PID 1344 wrote to memory of 4844	1344	msedge.exe	93
PID 1344 wrote to memory of 4844	1344	msedge.exe	93
PID 1344 wrote to memory of 4780	1344	msedge.exe	94
PID 1344 wrote to memory of 4780	1344	msedge.exe	94
PID 1344 wrote to memory of 1556	1344	msedge.exe	95
PID 1344 wrote to memory of 1556	1344	msedge.exe	95
PID 1344 wrote to memory of 1556	1344	msedge.exe	95
PID 1344 wrote to memory of 4232	1344	msedge.exe	96
PID 1344 wrote to memory of 4232	1344	msedge.exe	96
PID 1344 wrote to memory of 4232	1344	msedge.exe	96
PID 1344 wrote to memory of 800	1344	msedge.exe	97
PID 1344 wrote to memory of 800	1344	msedge.exe	97
PID 2376 wrote to memory of 3740	2376	Testing.exe	99
PID 1696 wrote to memory of 1280	1696	Testing.exe	112
PID 1280 wrote to memory of 5068	1280	msedge.exe	113
PID 1696 wrote to memory of 5072	1696	Testing.exe	114
PID 1280 wrote to memory of 3616	1280	msedge.exe	115
PID 1280 wrote to memory of 3228	1280	msedge.exe	117
PID 1280 wrote to memory of 3228	1280	msedge.exe	117
PID 1280 wrote to memory of 3228	1280	msedge.exe	117
PID 1280 wrote to memory of 2980	1280	msedge.exe	118
PID 1280 wrote to memory of 2980	1280	msedge.exe	118
PID 1280 wrote to memory of 568	1280	msedge.exe	119
PID 1280 wrote to memory of 2056	1280	msedge.exe	120
PID 1280 wrote to memory of 568	1280	msedge.exe	119
PID 1280 wrote to memory of 568	1280	msedge.exe	119
PID 1280 wrote to memory of 2056	1280	msedge.exe	120
PID 1280 wrote to memory of 2056	1280	msedge.exe	120
PID 1280 wrote to memory of 4992	1280	msedge.exe	121
PID 1280 wrote to memory of 4992	1280	msedge.exe	121
PID 1280 wrote to memory of 4992	1280	msedge.exe	121
PID 1280 wrote to memory of 5368	1280	msedge.exe	122
PID 1280 wrote to memory of 5368	1280	msedge.exe	122
PID 1280 wrote to memory of 5532	1280	msedge.exe	123
PID 1280 wrote to memory of 5532	1280	msedge.exe	123
PID 1280 wrote to memory of 5532	1280	msedge.exe	123
PID 1280 wrote to memory of 5592	1280	msedge.exe	124
PID 1280 wrote to memory of 5592	1280	msedge.exe	124
PID 1280 wrote to memory of 5592	1280	msedge.exe	124
PID 1280 wrote to memory of 5620	1280	msedge.exe	125
PID 1280 wrote to memory of 5620	1280	msedge.exe	125
PID 1280 wrote to memory of 5620	1280	msedge.exe	125
PID 1280 wrote to memory of 5896	1280	msedge.exe	126
PID 1280 wrote to memory of 5904	1280	msedge.exe	127

C:\Users\Admin\AppData\Local\Temp\Testing.exe
"C:\Users\Admin\AppData\Local\Temp\Testing.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/Qsrf86hzR9
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x304,0x7ffd18fbc188,0x7ffd18fbc194,0x7ffd18fbc1a0
    3⤵
    PID:3788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1652,i,14595300510534381859,3509702262605080941,524288 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,12203837594328652523,3618903214178398606,262144 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
    3⤵
    PID:2368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,17073096413438216291,7097178824447466790,524288 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:13
    3⤵
    PID:2568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,16980545405376136293,12646644211034768370,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,15222960977155337428,1575169217792096691,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,7943275612433176266,8315428156151809937,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
    3⤵
    PID:920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,177019590064914639,6806430362224873188,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:9
    3⤵
    PID:4844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4288,i,5107818313201137989,5252951612378018440,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
    3⤵
    PID:4780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4256,i,11535576689319051061,6895862418001715041,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:9
    3⤵
    PID:1556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3516,i,16166332303267434380,810284515762138908,2097152 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
    3⤵
    PID:4232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,7172516141055070127,10654337827975519611,524288 --field-trial-handle=2344,i,14415711135201124296,627279137381675440,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
    3⤵
    PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://guns.lol/glockolex
  2⤵
  PID:2032
- C:\Users\Admin\AppData\Local\Temp\kdmapper_240670281.exe
  "C:\Users\Admin\AppData\Local\Temp\kdmapper_240670281.exe" "C:\Users\Admin\AppData\Local\Temp\driver_240670281.sys"
  2⤵
  - Sets service image path in registry
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: LoadsDriver
  - Suspicious use of AdjustPrivilegeToken
  PID:3740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3608

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3912

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5116

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:496

C:\Users\Admin\AppData\Local\Temp\Testing.exe
"C:\Users\Admin\AppData\Local\Temp\Testing.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/Qsrf86hzR9
  2⤵
  - Checks SCSI registry key(s)
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ffd18fbc188,0x7ffd18fbc194,0x7ffd18fbc1a0
    3⤵
    PID:5068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,9717136169015069991,10584724379822193612,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,7023377520979134171,7060140349163751022,262144 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:2
    3⤵
    PID:3228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,16640626025438340606,6008358717808176660,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
    3⤵
    PID:2980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,15166515522663340493,14784634019285469424,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
    3⤵
    PID:568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,17817257580877198718,9306998967621641729,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
    3⤵
    PID:2056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,15347055239536555299,5571526199882107822,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
    3⤵
    PID:4992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,17875535866658874233,16404698577508842242,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
    3⤵
    PID:5368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5240,i,10676292315124495048,7425550599946101499,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
    3⤵
    PID:5532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5372,i,3296802044802129421,7861937341728337764,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:1
    3⤵
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4168,i,18330101839200280671,8378087907338345053,2097152 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,4101520783612791675,1443233468946935889,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
    3⤵
    PID:5896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,7988563086278604857,3284651614716448053,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
    3⤵
    PID:5904
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5069739572750580090,8718204437575582970,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:5252
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5069739572750580090,8718204437575582970,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:5236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,9221942290729628786,8596857090189744059,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:14
    3⤵
    PID:6140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,16193557780548800548,2486197865545360478,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
    3⤵
    PID:5032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,9585502824591024312,6714875306565336137,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:14
    3⤵
    - Modifies registry class
    PID:5788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,16796389827654743134,9608986183949018161,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:12
    3⤵
    PID:5776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,14393914902958123832,8303154736224875712,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:4432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7188,i,8092171471705156272,17341939282374020524,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:14
    3⤵
    PID:2820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7348,i,13332361522424544029,4611499951330574503,524288 --field-trial-handle=2176,i,733309188660817646,1114272008791617047,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:14
    3⤵
    PID:5428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Loads dropped DLL
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    PID:5172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffd18fbc188,0x7ffd18fbc194,0x7ffd18fbc1a0
      4⤵
      PID:6112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1728,i,10538441648144993230,7098148083886913399,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:11
      4⤵
      System Time Discovery
      PID:3100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,7997295825789221160,3247198025751479273,262144 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
      4⤵
      PID:5612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,11493033518589570936,5153928045083056964,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:13
      4⤵
      PID:5824
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,2518223662167584165,1680307123375270040,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
      4⤵
      PID:4144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,2518223662167584165,1680307123375270040,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
      4⤵
      PID:4568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,12484415125782870113,9127144097908869946,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:14
      4⤵
      PID:1908
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,17913277611394678012,13030192858086204072,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:14
      4⤵
      PID:560
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,1178474238106582622,1780848296969497365,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
      4⤵
      PID:2316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,16670683083306509933,5050487034134400849,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
      4⤵
      PID:1500
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,2963355112275991556,2555736011639019543,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
      4⤵
      PID:5780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,17892082526840091210,7558679350458755769,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:14
      4⤵
      PID:1768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,8248408666766621913,13270022286682126581,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
      4⤵
      PID:5712
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,15306789319209833132,1327729673563464127,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
      4⤵
      PID:6012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,118919357528488536,11881514117724466855,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
      4⤵
      PID:3344
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,3082855481687879822,1576836104927959287,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
      4⤵
      PID:5800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4752,i,1455822471782933235,6540124165399479346,262144 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:10
      4⤵
      PID:5716
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,8944228404755351844,13134159184221195738,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3204 /prefetch:14
      4⤵
      PID:3724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,8952095575834497944,9334588068686712351,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:14
      4⤵
      PID:2932
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4072,i,17841531970116996318,4703802582746911026,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:14
      4⤵
      PID:6028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4088,i,6390938404692237796,18265903634541316549,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
      4⤵
      PID:5284
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,8544397665270984589,16634075645667354630,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
      4⤵
      PID:5104
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,13804906401607285716,1547395970771474174,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
      4⤵
      PID:5148
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,5837311713217606793,13146374198039760871,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:14
      4⤵
      PID:5368
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4116,i,17822536879395893960,6457693527219498600,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
      4⤵
      PID:2484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3212,i,2118527820712096,14927193461115757144,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:14
      4⤵
      PID:3696
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,12141585581847349076,13733238378603357571,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
      4⤵
      PID:792
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4120,i,12187158355643377409,11267081045273946107,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3844 /prefetch:14
      4⤵
      PID:5356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,15894378381936069148,5799413630797079325,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
      4⤵
      PID:412
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,2579976991720433573,5748482028055675926,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
      4⤵
      PID:5200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4104,i,10130867082632002691,3815426526464911868,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
      4⤵
      PID:1848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2856,i,7093715230198074033,4580937610036635413,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
      4⤵
      PID:848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3212,i,9540164830307174612,8444761323729778367,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:14
      4⤵
      PID:5392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4084,i,18078174267517613017,4546412866855459115,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
      4⤵
      PID:2844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,13181761538221530866,234001644410039190,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:14
      4⤵
      PID:5004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,13520668022178733689,15326339989874643755,524288 --field-trial-handle=2276,i,169770056069852569,7679268146880086338,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:14
      4⤵
      PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://guns.lol/glockolex
  2⤵
  PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1568

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b825960e093c505ed8b2d25208a6a3ef4eb588fd7e3f0a739f6681adec4241fe
MD5 f001f4c7632aabbc8547c40a2a9665a2
SHA1 d3257e13c3132d0536b33ef02f337f9476b1c310
SHA512 c9c2806c7593f3b769405c2676589dac1a14d13f8c6d2e67e0b14995b01f4e41d04a60b8f556d218c2168180bcb2316746a622635dc3053b54c55fbde5cf4f2d
TLSH
T185D092217B5DB082EB0A0A3188639B342A6EC94A389BC21A7122400DAD66808E3C944B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2556b72d28f89c8f370a686c09713ca855d220a86f854f1072a9a124b4c38f9a
MD5 1bdc30c3586fef966c08c9e224b305ce
SHA1 82bfc14f0ce8e11606eeae85d74a77cd334b7d79
SHA512 50fa7169768ff0fc7aa7cc0f23ed9bfe2a8f10bad1bb6f471ecb048e4ac271db0401eeb135681feb0e8db53b4f4a8475c351e791d3b6b6ac01fcad42beb81208
TLSH
T1C5D080216E6CB1D1E7150535C9734B10266D858B2597820A7111440DCC75445E7C9D8B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab179404bd7915ed53c37dba96fb1d4b136ac5ee3769e63bbd99f0a6511a215a
MD5 d456e9e28458167b3809eef32c45789e
SHA1 31c029151ccaa3381e775f1a1f76ab1d9360f753
SHA512 177c65fb7b6734ce5c83761819a9df06a70ecd369c15bb1f6ef6ffde9348c1f006a69c5bc4e75f46cb0d0823513655682e3d4d631742c03603ff5ee54c82cdb0
TLSH
T1C1D080216E6C71D1E715053585734B10166D85472597820A7111440DDC75445E7C9D8B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4644c35fbb6c791f0136f68001795522c8010884a3993c4dcbe8f5bae30c4924
MD5 e87113898ef3fdba39e0b35319fcc305
SHA1 1a84c1f9de746c48b2a6fac804a1d30e4c40aa75
SHA512 159f814ff6a22a02ad6bea236f30ebe7006521d21e72a5a49a4d699e34a000505dcb0738ceb26cf73861a40589be41b56b60f95364cda569a538cc8ed616dff0
TLSH
T13BD023205DACF5D1F626153C85334710369D858B3957910BB111050D8C7644293D8C9B
MD5 SHA1 SHA512 TLSH

Submit Download

215437bd-db54-4eb1-b8cc-1a4ca16b7876.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\215437bd-db54-4eb1-b8cc-1a4ca16b7876.tmp
Size 414B
SHA256 21a7f29499a65277033eb4e42cd3081c1ff0f306658901b6b37c1592f0e01556
MD5 56720c03b9ba5747cd2a8891841eaf61
SHA1 22a79b078ee968ef1d8f2245cefdab6db7dab144
SHA512 cb486bfafded843cb4ea1a6a60ccedfc4a93f4ef33dd11cf650c2141aa61d2e3fc85f6faf6fca02e2811709e86b62438305c21bf03b4ca6ed0495d97c9416f05
TLSH
T1F9E022A9D825E87709FD476CA0600646EF1123073A41880F3A7E850C8FB863B598AC1C
MD5 SHA1 SHA512 TLSH

Submit Download

98e0e2b7-d1fd-4246-8b4a-234f4a26c71c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98e0e2b7-d1fd-4246-8b4a-234f4a26c71c.tmp
Size 31KB
SHA256 46bedd3d8ce4f8062e259cffc15029bf129ea2e51809e5e1a7f5cc58db87dcc6
MD5 ce0448f4e8bcc83545f40e8e324fbc6a
SHA1 9b12f65ee8fc81f4aa85ad9be7481b9cc4a3640e
SHA512 1c0e1090348fbf914d333b4ba563926232fc8d17d8fe6867ecee0508cc522c5b7f9a702358d16b66a62aad7cd92199bfff6c3da057086995615684ea9d16e779
SSDEEP 768:ni/Lh8dF2KkWRmAcQ3w8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3KjLl/060lXOrozU:ni/Lh8dF2KkWRmAcQ3wu1jaKKjLp0Dlu
TLSH
T1CDE22A3B690CCB7E4F840EADEC266F976ED801CB66584D5447EA894C03C73EE411A59F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 9356ef96e310c52c0c3e6c44900fbfb8027b5ccaa8e3acb8a48775cc133c2a85
MD5 b3343826aed6c412ea314899dec0e3bb
SHA1 06a1ec4f7a1b4d707a42fa29b117b3ce43336f1c
SHA512 1aaf2a4c882260533b5e85a7a6b4d8b1aa29ca34feae7bf7e85482ba3acb5b269abe107d4c37f21220cbc1bca3cae12e98dae770c462246917e1d0f3b6322982
TLSH
T1F1E07D8414CEC3AF9711A44B5178D3CC9280364EE2C8BDBE5F088484B215C4CA3C27F9
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 e51faa993d523af278bd03d01c692941a8fc158b60b0420e3c82b0eef1bcf1c1
MD5 e21ed15bb08945b56b92d0f97502bbd0
SHA1 069f101699c708093abea720d080af3f300ed293
SHA512 f229bca7301f324390c74e3ddf68fd8d22e840a2efdacbfa6c2d31926d6baf5f88fc9eec410adfef206449f89496aceee080ce03c28d1206c79402efe7b807c6
SSDEEP 768:/zuANArK9QwaIUbv6uRZdpUHLI57aUeJJ:/SLkQ5IUr6uRZfUHLI57aUKJ
TLSH
T14113B37E32746C47D6EA167D500B0BB8633AE429D2F9922FF372B906E3287165C8F150
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 fbc811e0542bb1a7cc76c644384cef148b7049db2de9f65f48adb13f4941746c
MD5 8c56e64a1c30610e245aa0aaf423acf4
SHA1 8dbaf43ce49a825361ff948531aae6efca56141c
SHA512 b569085e25bf3f4faed092a161abb943a6b48b1ce213a40203617360e9d81805ca093e1065b33fe1b87e713ca4eb13b1b5348d85c8a31f5ce58b159bb4061267
SSDEEP 1536:pnL/S6L/4/mpysYuVQ38YXEL/jL/40KMR:1L/jL/UmprKl0L/jL/CM
TLSH
T170441CF71951A00BCFA842F5E2033A3DD27B451D7CE1E9E9E6784C816825B32B6FDA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 5762e0000a745691868fd4f1ce446a3f0350f9100c7bf00ba6930cb112230c81
MD5 97fcd6b20f7702027a6f8c43bda917e3
SHA1 73f7466a5822ba0f0fdf2a3eb67bd9c2d3518f45
SHA512 e82ffff94de6296ecb554f64501e8e8732f2886d6a0ab61f3c99607b46ec56e0d3d2577b87650e00298f8194ebd67156557333396b68c8503cc764d8a58980e6
SSDEEP 3072:iZnbXAnuVxbmLHw6WWw61uyJkBGcqeuY7:k8uVJm06Tuy6tq1
TLSH
T1E0253CEECB681C83CB67CB7075D0C8077E702183BA99D0D3A940C5A957D2BC576E92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 072ae33bbc15a7df456d863adf91adff005c3082b52b924d85db93f024a6060a
MD5 60dacbdf08abe2ae705f861fea72f118
SHA1 81f003b4a7acb7e1145eb7633720f07a6be92600
SHA512 c42e8e631920a2f0583ed7782bfb75cb1c16eb06f81b4d192e8b371ff150f31a2ce04da095fdecc927b97e00ea5e304c195bb2c6be5e96d828862c9170b14082
SSDEEP 24576:3olPr6YSla+Y3OM3urCl7qEnVGMHmJeS8wyVIdzY77GGxjEHfrb:O6YS8R3Wk75nVVHmI+d07E/
TLSH
T11B868EEDCA6898C3CD639930B1F0ED477C7413C3B5A5C1D68898C684026B7C5BBAE769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 18KB
SHA256 95b21d608d57ca4dc574a71569805beb746cae6b77c27e97a814798071b36693
MD5 f661522a88252140a5bd7c3a4871256e
SHA1 9702e7b52a5a983ce3be64e899fcd9e5f0b71787
SHA512 3ddefc245460008a9efc5b38a69b7171578873c28c6dfa4e97cd3d1a9e53c40d6591f90f694b68a403b3a3818879efe3a32c2f95162b353384609b78ac134be2
SSDEEP 384:mI+CPlyETznTji/dZHUgm+NnQw/uJ1G4I6LJ1On+k8+I/9:mwVj3AZUgm7w/Q09691On+k8+I/9
TLSH
T12982CF592EE1E8811C2EF86E92D5C6D8EBA14568D1C2F63D68639C42CC40972AB80CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4295fce144a118a7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4295fce144a118a7_0
Size 264B
SHA256 95bc2437dcf70ff6b1f85bfd3eabff4fe16addbf13e0411c3e4018952159448c
MD5 df7268097c5aefd2aadec161504aef82
SHA1 412bd432d93d41dc31bb9e5fe87c8b844f783e10
SHA512 aedd3c694a3a45bcfae87cf4bea24f6a012732109c00ab883a55042080d186ab783768c4d0d1041ef7702ddcedda0804f340883127c111c62c6f658526f1c4e1
TLSH
T13ED09527C9767E02C58F5DF4CF579359C71344784C6C41254F0F84F151524A717D5171
MD5 SHA1 SHA512 TLSH

Submit Download

e26e1551c120dfb9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e26e1551c120dfb9_0
Size 4KB
SHA256 487034b8584ae3e0d633676b49b8c35ad28529edd4c31ae89188f69990eec834
MD5 e683d78999db530fbe83f78fb1b9a808
SHA1 d36dc10207e884a2067e5a6ae3d4995165c537de
SHA512 82ebedf181a485f5cbc03c4fc330d50b185b82824989ee5a2d7f7ad1863614b4f749f48c202a2bfa5fd52275739542eb86356f6c432445aac4243dd5db5d2a96
SSDEEP 96:BiP4NBVreTe9YhEnB2S27qiT29222iob1m1rbVfg2Eb2piUJvMY:sEBVreTe9YitiqmO7qb1orbVfg2Q2piY
TLSH
T168A18281F6E5EE0DCA2703F502B55A66B37559EE2FC7C303B5A897202C153E60B89D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed9bba6723d2b5c6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed9bba6723d2b5c6_0
Size 268B
SHA256 c9677f9ad38e30226a56dad496fe4f075376f355fa012e0106b6f1b064cc609d
MD5 39e51d32bf99a1d484f0387388d30e96
SHA1 a8940a18db0aaf2c023f7f819c28993dc907c4d6
SHA512 7aacab636eac4520fae5adad46bd3a6d6f61186ef5a8e435c4fcb07a0fa7da9089e71542ad53bdd1ba870bb4aa28f2974b08572ab05a4c3452546086800077b3
TLSH
T181D02BE7A8263C10CE94C9F8DE273756CA2245B2CA6CC8004649C1E202611A35E94700
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 97530cb36607e9d0986e9588f1c300bcfcfa2e39c7949e7fd55afc02821a16b7
MD5 e19c72e144b7bde795812b7fe5e246e3
SHA1 fe0392888c4f778c8f0e386c9700200d81943d73
SHA512 430b9c156a1191ffe8c72f57d6cea3c7b1a6c83b1330c0066b05485a688b95044dbfc504ece27b7019a4f3d4589da3b6760dece66215d6c7f1ea0ef3b43481e9
SSDEEP 96:x7CKA6ehD9Mc+/JM/zZyaK+AZXnBa9hwGeUIhzUi0:RC7fBc/AzUBHhw
TLSH
T175C1DC3491FD6B4BE3B88E3EE6D605CD31374148CC6BEFA6904494B7549AB48C8A3B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b28d39c2b875c6066c49d04c455cf98775f1de1a83422f1df33f452d93ba30e3
MD5 21dddc8a7c1e2c100941cb621da7731a
SHA1 fd6d825fc43134c0d7f6d922ca7e255b6e180d71
SHA512 2c284aca33fe1f2b68b54684386e8ba3a4e503bdd75d6d0a5658296d35aac80c3a0ad7f0d557180250b9677d6d481092c640155d30cf18832501f53a51fe2a8e
TLSH
T1FA71A338C1FA8897D339C931B6D112C834334598C96FEFEA219498FB9412B1DCC91B2E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 684B
SHA256 ebf65d839a9c2a53ab503763d44c3a0363d3387faf4f947b5959463833c3b75a
MD5 f93b6a29284b7e38dfd05af480d25ab7
SHA1 cde3c88c5dd5d4e617e8f8157c03d66d730953f1
SHA512 e2148554c1b5c2b97175e5ade1fe82b5a08311ce9d736907ac299f99c3580a99458d7fefc894f4badba5921dfda84f61117e1ae3e57b0063f127aaca6563e099
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e0e9734604a269f21ffe73ece1f15e4b5332379785f834ea5e6beac7cb6974d8
MD5 5b91b0afc73378267bb1fd84d416d23e
SHA1 72369f7f3bcd14e9e5125488a4594592b4e50385
SHA512 7f460c4d15fee1327876eb55021c530dcdcc7fa0a2ed9bcc35d16da190b8550f7ce9d489e303d14fc56c6f13e8b2b90f642132133208b9e113ece248895e2430
TLSH
T1F4E0866C04DAC63D9A55689382A8630CD7D63487B6C8B9631B0D8C806227B4AE69B791
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.109.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.109.1_0\service_worker_bin_prod.js
Size 132KB
SHA256 108c7add8cba49512da24b2a1b95cef35d778691ef5a5d01ba66c2ba7dcee00c
MD5 4208fdfeff374e23801e43b0fb3be7d0
SHA1 7115966dc5b13d52e04ecab1915d83ff4f851c0b
SHA512 93c65fa0c727676bd1741fca7d31166798ffeec416322c30dab27f5ae7cf7d77b3d4cfc72e2d75fde9d9c389dfba9a57c2417321ddf29ff01718beba0717c070
SSDEEP 3072:NMMPOfeioQnKd8lIuG5sVFbcBvahMWlURPLVV+9Wy7:NMMZQy8h0ahMWlURPLVV+o0
TLSH
T165D3D9CCB6B5B4224363A5F5002F010BB23AB8A9E44C85A8F188D9E97DB546D4377F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 f40e0cb7065a4422536bd6d53c39d880c1d58feb877ab24f8d56acf30711dd1d
MD5 86c1895e8f6e9d3ed2540d2f46ad1c8a
SHA1 dcd0b53ea3f99cd9b504cdf523d3c23d83271f11
SHA512 42c2c7a1df7d8244878a49a2dfee1f28eed19057164dd2958376231e8cd289ca246a3f672a5246245665496209efb23962c9eaa31f8a3a9eb6f7fb076e307159
SSDEEP 96:xrWHU+bGz83uxDLjGQLBK31NfR4J+MCXkFr+MFcjtk4Q9/2j3hSEbjBHMsDETbi4:xK0+G83uxXBBK31GkSJYwEJH7DNspUm
TLSH
T13114010E5F343712CDBD813669E744A35D6DF03F8B5366DA6C6104B4CEE3652A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
Size 40KB
SHA256 462ee0281a1eff22915d48f8354aab2cf6ab096f92d8b51cbaf374ed7633ef9f
MD5 83c259ef27077dc9c262a88488daf949
SHA1 f10631cec8f8e752e81ce4656bbe340eeede01ea
SHA512 bc6803d346e62e267a4c9142c2067f47c9d2add71dca1414806eb4bc2d78098753c7529ae7b9976bdcbf3eb79b3b7113dd384e657edcfb48165ec33125588893
SSDEEP 12:VqJREfcmiCkLOYS9rawKU1P4cWlIt7PoQSEmsRuS0FRc7miR:VlvhxHp4llItTSEms0Rcaa
TLSH
T19813F6F17DB92413DAA5653E9996E9FE9C06488D0B4143CA6C03C5250C2B16958BAAC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 4cea298c41b97f2bc3c0ec3e49b507322d7f88ae352c403881b9d2116b4957ff
MD5 735d54aa368007c16858cc1bf22d6e31
SHA1 836c3ba238677cc98d9ce2dba3ba5a94304932e7
SHA512 24bb59546c43e5ef8d4c5ac9b8573bb7af63d22e8202cb7e2747dc10bbe333eff05c3d3d2684a43adcbb2c9439acc3ec9c8ed9f17a7cfe9450e38b337d984ca5
TLSH
T1B9E020A846DDC21E7705308B5759670CD7F03447F7C87E512B08A841B05E808F7897D3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 ec45acfd7defe7615d9bd75947bd24a331460a831bb5ece7ba977d44bb67fbb4
MD5 efe91a1c7b5e22c84b16ad2ba3b61d1d
SHA1 c3930a4e3e1faef592e8da3afb36df92be8064fe
SHA512 7d3b9e0a11249bdf7063e9486acdd8b26e0d6b535cdaa7e5eae61d67d2ab6735f4685a92ab7dfecdf73f286abd7682ead4350327f0258520f7eb4919e3c74663
SSDEEP 96:9eMatUaAKoXSTcImu81PayFYfMGpqjLjB:9LaSaHsNImu8NgMGAjLF
TLSH
T15592B38E2F642101C2D91735EEE588923E3D202D8B3752CA4E05E0F38D72B9FB117167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 3d65dc39b4fe5a82210b4c78f7384984c8b3525598c897edb5af1af3e8b45c20
MD5 44c4d64802537ec2abe5299ce46926f2
SHA1 11ec0ea6b73438e56bf57828b8696b81d5c502a6
SHA512 192df1fd973bfd1dbee7d80e25968dc621325a2d283806168bc620cd521c6bcee1f0038fb34120a2c166726787ef048ad1a9d1f8fb62607b4509fb192c4f9308
SSDEEP 48:YALlC/buC/mC/7fRpQC/AC/ZCQUOBnSzIsazEsiVRs3CGgCWxJzsYCnscfoKsXCM:DsubaUPAQuyqz4kcLlqwkLgXAwziypuM
TLSH
T11FA1CFF7C3E9866D991153F4AA147E2ACE1D0915832C3C0AC9E4EF1F9BE24B1E141E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 577c021aa49a2a5a4223b7ccb2db44e58e08e312e36949914b5aeaad48740f88
MD5 9b83433f705fc25baacf22795894d4ae
SHA1 d6ed4c6bf4fd0d5cad6b5c0c4e0949631658ae4e
SHA512 30f7c5c89ba4492361a53745564cd241e58c68a1235bc99e5079a6cad9db081d716273e519314f3c1a66f8a94b8ba688e540507a094c40931298ba08c799ee6a
TLSH
T1C45180F7C3E8867D9A0152F4BA156E1BCE1D0919432C3C16C9E46E1F9BE28B1E14096F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 a4819d07c477c6c7dcaabc1d956ab3062893481ff0da928f759f10fabe2c5ad0
MD5 7a0c555a9e084e3f6dbc5bd40101ed01
SHA1 9159513de74127c5dbbbfa759d9032a9ffc91e6e
SHA512 a74046bfa2b7778044f757a39d5b712bd0935be8b9752ea9f2713bfd4d1452f722e5b0009c97078287dc7903fad5da6b3756fddbf1876cf4b1abd3c29db8cb18
SSDEEP 96:DsubaUPAQuKiqzrcLlpkLgXAypulwcJSJ31J8pJl:DzbaUPAQ/iqvcLlpkLgXAypGJJSJ31Ju
TLSH
T138B1AEF7C2E9866D991152F4AA147E2ACE1D0918832C3C1AC9E4EF1F9BE14B1E141E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 959532c06fc61961428c224d390ddd22161ce776c26375e21c74dc3768d57aaf
MD5 7b1ccb32580f295ed1b891939352a12c
SHA1 6e5c9387e26a71396941a5edf8bec51b96963357
SHA512 5e8866c781dd004b7d23aa1241bbcf9ef42089ca0e586198656ec51745fdc471a4ca012601022249cd2c645380091a8a7e0fcf829fc926063409bf23bd8b2864
SSDEEP 96:eIEumQv8m1ccnvS6VCYp9AiDI3KV9svSf0hI3KV913LknF2I9mAzF84I5f4g:eIEumQv8m1ccnvS6oEDwKTWwKT9ezpQ
TLSH
T1CBF2F2FB07275205DA9444B094446B8EAF12014B47B6B6FCB6C44BE3F7921E3F1A9786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 857B
SHA256 7b4ceff2bd50c06463166f1478e416a1c641697ab457a4288fa35be61cf83e9d
MD5 2efd037dafdb75d36342e82706f512a2
SHA1 1e75a475d61f9f91672d36238742e2259b8325c7
SHA512 5fdcf5c3f43b9d28cf9f681f0417ff57fe94e65f85e973dc9137041ccd565a7e19913552bdb1a6e37e805bcf8527ad533173324c488c6c0b3b54edab18db54a4
TLSH
T16C1121A7C67EE46790788A3F0E81F809267BA430116294F6DEA7C63DA0814F31B13866
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 690B
SHA256 a183dfe3cdb7fbba625f2b9fac14c31019cebd0d5aed0314fc7b2781fca7ef3b
MD5 3b30e100f243ef73d846a3333c05d815
SHA1 e050092d14f6f0b658092df09dc52ca14411a947
SHA512 b9b0ef4255b252a9bcfe7bc60f61fc03828f12a54051a52db626d1595839aa830e8bebbe4c6c419a203323db133a7c5c022edf887a28b0c18adf4494ec29cc78
TLSH
T15F01F2D3897EE47350B8897B0A84B805667AE430412064F5EFE2C27EA0804F31B174B6
MD5 SHA1 SHA512 TLSH

Submit Download

b93333c3-8e66-4035-9ecf-6b8d618076da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b93333c3-8e66-4035-9ecf-6b8d618076da.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c97adb6e2e261fa54d29f29f2a17762f2b04864892b71fca316b75ce7e5fae61
MD5 fc962f494841ee6166df21a27c7906ba
SHA1 b8cf9549dded3ed71d6a16823206cac31f420e40
SHA512 421d32c837e8523ef2e97c7440dd9f24f876010c7cabce681654733e57d2c5e0cee3c16753cedf102dd4636938153b226af9fc6bc2e5d2f4392e64a5f2ab7b4d
SSDEEP 192:zZ8RtyM/jK1Ml8CcG/fNsrWpVuTV7IcEdpRF/W6+WNRUiB/z/0uBnIRrdIgEJ:zZ8J0G/fNsrWvuTV7IDj/bZ/ouWNI
TLSH
T1CA52E712BA346977CCDBD209F955BF53D6F8152292901E84AEFCDA1C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 032f6cb5b9bf873b53dd9247affe8a14ef575b5227d372d8e6776fbbc84fdf36
MD5 0cd1f663a20a19776e94f37d06e23077
SHA1 26b18873031c2aaee4962eb0c26a3a5b89c81b18
SHA512 285200593313a98aa3ae699e0086701951734cf0891f83c354bce7eef4c2d0874da12a855276e98b2326bb436188f1a7fc0054644cb174e8224ece1664fb6506
SSDEEP 384:zZjndk0G/fNs/WvcTd7IsO/bggfeQuAVI:VdTG/fGYcTd7I1/bneQXG
TLSH
T16862EA12B634597BCCDBD219FA52BB53D6F4556395900E44AEFC991C00E6AEC2307C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a66a0d796114888a29390c957d66797e98b0b46568d23916c5079fc2e851f061
MD5 04e333f3bebd793dd6be0d2c33d96f6d
SHA1 d4a758535fa955049e7c7cf94ecbeb613bbd651a
SHA512 254436195960953ae27de56a108cf6d02d9ca441eabe2d423ea1d1f49d67197d6e6d2731b449840b1ca97b30fe7890a8cfd8ab948d7303508919cd77ac6894cd
SSDEEP 384:sxZjndk0G/fNsOWvcTd7IsO/bggfeQuuVV:sLdTG/fLYcTd7I1/bneQXL
TLSH
T14A62F912BA34697BCCDBD218FA56BB53D6F8556291900E44AEFC991C00E6BEC2307C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 74c34ead2fb8618ae9ed12e369259413e7b6503a8c44aa31b14784e9a60778a1
MD5 8aa2affb0f44f26eb0e82817bb7b2f23
SHA1 cb1a073ec1736e71ae4a6ab15c390da06ba564ca
SHA512 bf72202f24dbfffc7a0af5ed6e54b21a11342dfc920406d65fca60a6d4f1000c4146d9bf49f1288793d549ecdb27cf1441cbe24267815adf9dfb3a3c12918276
SSDEEP 384:sxZjnPk4G/fNsOWvcTd7IsO/bqgfeQusAV:sLPDG/fLYcTd7I1/b1eQdE
TLSH
T12C72F812BA34697BCCDBD218FA56BB53C6F8546395900E48ADFC991C00E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 2423664e8b1d08847f4917181ac96e4991cbf9983833ecd11534c7c816c598bb
MD5 84bf63f29a7fd800cfee529ba7ff20ef
SHA1 50abb6872edcf7187a8091b9b9b6a852e75d79c0
SHA512 18503e9b46348ea7b11fcceced33ed30cc166b2849863516a9183313d8543dfc950788151d569d9a21709258102aa1c04bff8f9388981dc01a9a679a6eada5ae
TLSH
T17ED0976FE0DA0521E7AF4E83262228B98B203DDC08C6A088C113701D60F07879322F53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 16d3da7c0015b29d55e7c54d2a2b8fbcf0b4cae521eb834353d9ccf585f6425b
MD5 0a3870609b9acb2db9b1557528f5645c
SHA1 6a59dffc3bf8e6f00cc8e98eb9b32cbff5374ba8
SHA512 33470f96e2fdbf11bedf54c88cf0fb053949c3ed37ca1352bec08938ea50cf67000883431e94539975f9885d5466e0f2f34a5a2ed86a9c6c65dabed62e3cc6ca
TLSH
T17DD0976BE0C90621E5EF8F832612287987213DDC08C9A488D112501D44C07879612F53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5951c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5951c0.TMP
Size 138B
SHA256 03e6e3cc801f80ad3d27d1a47b00148fcbcf04717ff28ac5cc6a02d338e6e2f5
MD5 ce283872827d61d334a677822d026071
SHA1 0573995b2f7296f2a4a76b9d57ec06edc2d46bbe
SHA512 04a711a55203db40de196b9389d99c7f21fc05c0c1fbfaecf9442874e290852285c88e0eaa25105bb799930d8b2a1bf8bf162235289359f648bd2138a69bdb5b
TLSH
T153C02B9BF008021187650A431232996D470A7DEC8CC6A48DA21374142030E536106F91
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 e1ef4455c3f31762cb9b92852a09cbc6414022115fa62ebb59b7f81e76667581
MD5 333ab4fffeefda8051ffeba567777e6f
SHA1 73663528057c81130ad3796c48f44a05b90de517
SHA512 7aea930e3a0907b925028f3cccf2c534df26a9a5f830a9b58acce9694c8e0b5587583b3390510783c95bbc66fbaf85a5ea9b76057a72408cad877f69a6a2e17c
TLSH
T1FCE0261C05EAC2BDB22624C30334C30C8AE47847EBCC3D766F00C84061BBD09F596E90
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 729B
SHA256 aee9520afe1528109d083485ee274d993a987da68ba6626e0ba46099c649c13b
MD5 9ba97a410efb08338f6ebfe6b392ef30
SHA1 fd50870106f0f44ec853f9314eb0823bda9fe803
SHA512 5e672a486538b6f002b6528410547a680357acfca235270f58e2be89aee95f343563cb9e41957b50a8c8961eea27572df0361b39fd3772c1c5ab41e521ce33cb
TLSH
T125014EFF1E15D429DD6D917148CAA378537AC18D4DC4CBC29A5C8AC719012B27A36C07
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 322B
SHA256 f3ed4d7f5825805088c27fed21cf61c96ebf922d706881c702b59bb9e43c9840
MD5 67e6aade8a6dae930f567b994950184e
SHA1 38f7b0358400ea1559ec3d2f38288bf78b6ff6dd
SHA512 07d8e1456c7ae8df813e44de6d4ba6abf1d93858050d83dba5cbaea0da354084a33b81234f51b25944c7cb436101e3d1f2bb73ddc096e497c11a1c8f0df50507
TLSH
T1D7E0267C04CCC229671664DB02A4570C92E07443F3D83D661B00C450621A50AF7C66E2
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13431908796871719

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13431908796871719
Size 956B
SHA256 c4d661e4c44b2816110c797bfc2c33469d89201f308c2150ab3951f7024b8fce
MD5 8626f9ca3301f10d4c80edec306164fe
SHA1 749537730986450c0d06f817e3a3ad90a276ee0f
SHA512 9e97851ce32f5b7ecf6d8838502eb07c1440ec1250400df161265fe69122606a17c9e6118cad441139c8a789a7fb2913e05306feb296c14b355250f33dba82be
TLSH
T117114C66A8B11269C13E097EA8AB15FDF6B29B032EA1CE17C541E2150C22B664DF4D89
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 4e304e8cb153031346ec8620c9a3bd92f2b776c3b1c1139eb8468fb194071e02
MD5 96b2889a25b842c647135541dcb4ce2b
SHA1 f990e0c803b6ac70621b2e3f053c62740e0382a7
SHA512 aaa36d2145f250fd95415e52a71bef23cbb7440a4bca0ad1436b4372919c202a6c0a699d840eea8ad4576adf154f47098d31423532dcb4cf2fdecd67a601d77c
TLSH
T174E0D83815CAC76AB74620D79A28E30C81F27403E6C8A9726B0CD480621B644B247A92
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 f49f3d13a22f1b3c6f4491966f287c9abdb59d9d9d976e7e0ce3371f3c038967
MD5 6764ba1b5be3d3ab372124c13db29f6d
SHA1 ecb7a23e9ce7306f1011320961e3d9817fd6c6ed
SHA512 42bfbb7732f4de21577d01d5db0a360f685e29ab9f2ebe8352c9e71b409c06ded8569a64de08865a1edce8ff30be920472a8d75cc115f7828a5dcda6d376dc6f
TLSH
T1B1E0207895E5CBB9960160C34274E70C82F0F90BA3C43F71A70C44407112545F669E90
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bb99dd97042cd3ac60c5d7ebefe73f633e28c8c745b76cbf436c34809d950c28
MD5 066c0a1312f1ee8d53d7808447129aa4
SHA1 f4bc0dd445ca08f11ae8825b8091a02bc57c440d
SHA512 ca072407e52ed14ac69b9536f1b22ad5bec938256ae6aa1ed5453a2f83b6187b035b636f4b2734dc98253a24d49b8bb12f4ac56ba9a00f75ae6b0a88f1396315
SSDEEP 48:K08I/KFGsDNIVKeL6IvKTK8DyZWI/KHKcg:K08gKFGeNKKeL6oKTK6KWAKHKj
TLSH
T1CFA1F19670BA42133C7E295C976587771A52B2633068E96F3FB810B51E2BE114EFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 fbaabad55445d8b6a94a882ed7c6ac2a491a6744071ca2c611dcd8f9a0df3dcc
MD5 9810834866b101e8d5491e54bb9d3a2a
SHA1 96c51ea07b3625971bbfa80d8ab7d64f22006063
SHA512 672e160b6cd25d857a9a3c95266ae9bd607ff13873c99e43bc2e4776d0d8f0a0e6b515069da0b517207735be79db13abce4714259067ff40079168de0310fd9f
SSDEEP 192:1LoWes4e+fT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:WV6+fQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T11724640A7B787001DDE7D9725CB080771A3CB16ECF22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db-wal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal
Size 3.9MB
SHA256 bf3c5eedaf143a5fc1fd707c236aec05f661082571c4a037b714beac01a17932
MD5 4c11c17b4af35ca5cad49116809b97f2
SHA1 c43731b03eb5bae800b66bad8e4679e1ad1e500a
SHA512 dfcd915ed0d269b96cd52b0bcd30dfc90904a369616877397ad5a3dd153c806cc6da839dda8f2fc3be48cac783fa45efda43c62d30303332017b42f7c65e351a
SSDEEP 12288:22Hr5L0gdCgfjFwcA/Tp7NG1+vRPMSx95qH5bSsQeEtHUYhRDAB8PXgeQBVMxSwS:22Hr5L0gdCgfjFwcA/iZWE
TLSH
T11916DEF36D1B91AADACD8574D42BFE0840738660A62CC8E9AD3D18C37B78902FD759C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 c28e379afda9d7cc646e16ce767f6afe8dfbf1e565a06ef96d2dea3380226155
MD5 251e5c36fc45b6b3973caf25e379bb3b
SHA1 cf5666b4a2e5c62a903d4c9a17cefc36cf1822c5
SHA512 eead501c8bed33770d3caa8ebfc3aabf4f69a30e95e6b39d851896fd58739eaf16f96539dbaf84ffce47a97ab981f99fae350ddf64ba1e776ab5f36d188ccc89
SSDEEP 192:uQXIIImbGMIMslYcY3iOor2AsGlrhKrsVI:uQXIIImbGMIMuBIoLskYs
TLSH
T16142625E2A162F7BC19F5F7F1252C1846AD888814864296C31916C5F8DF3E9B83D22F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 0306a12050a0ff55c3f6ceba9155b7b7e5f01499d87164e631b16626efb911f8
MD5 2261dfc3da06337f44e11df22690a97e
SHA1 4bace7733890d3b46d35cdd9f2e6fcd02c775778
SHA512 44df0f47120b79b1f61f1bb2907c7a59d9300007efcc7b787143b4c28efbe097117c1ee988362eb91423399098c6270b89a811628bffcb7b29cbc3ea0eb3166b
TLSH
T115E020187CC4C29E6A1620876158470CD2C13403FAC42B551F00C4846016505FA79A52
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a95c73c4d984006e5930b13c8cdfef067cac007119ea21360a95697b0400296e
MD5 cfbc2f1a11272084f9ab01d2040e8092
SHA1 8acb46681c1868b5b0d0a73f13c48d0fd3deb626
SHA512 a6f9d1ce08adca1370d2b3b644af81ac64a1c832b325f5500344d79806a9783c87ff7ab7d875a94ad4298efdecda86fcec8b3598cd64e5486ff3efd25e20b71e
TLSH
T1E72145A2F334C155D64A863A607EA7210338D8419FF8EC0F45BA34243EB6B040D8B2E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 2940ffa7ca83e795abb3f0561f6c538424c5f084e95f23029a7c5368d281c978
MD5 90feb1a8a2ac1d93a7e37b9ca5b00cc5
SHA1 17611f855dbf47cd5fa877e4b766f095a0bdf5ae
SHA512 a038a5093c8aaaed0b21bbe5ce1f605f669ee455c7f71b517942231352b26818cb680751e8fa1b6be34d97331fc3745d30adc9f3399bfd3e38dc60d5909bc316
TLSH
T167E0202875C4C3DF5613208702A9878C92D23803FAD82E511F00CC445117546F67EA52
MD5 SHA1 SHA512 TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
Size 82KB
SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
MD5 aeb538c29f46cf0e19827ce47594488b
SHA1 db32b33a5811c303b1e37e1ab956df20ba44b355
SHA512 38488a42e5c532442a65fd4edab683f1f63eea71bae3ba2f801693647f633af9d836171dc751b342dc2e0e7784266eb9a40f677c0d3c9f651e7374f1af707852
SSDEEP 1536:NocewxXknaFpdgxBf8paY3JQzQik428fKagFVbydki806yav7Sz:NZvx3bgrfrPza428fIe76yaDS
TLSH
T1F783F1C0DA6C0117EE6B4D75D17959CA6BB9D6B50BA0B3EB2372845A0E02FC5EF36700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.21\data.txt
Size 150KB
SHA256 a387f2eec4175eaec10e8de166dd4c16ed6cd20a29a0b0787067b29c1fa4866b
MD5 93bbac1bf250528b208c200d6e9f889b
SHA1 e93ab1b1e8273c76df7927257e3cb82090cc2c07
SHA512 6df30f17a2905235839a610ceb0b0c68cb846a41b5d64c298cfcedd0ecd4a8673e990c46c61c71e7f115fb5b2f3ba1c7bc4a4eea135c779b6bdab2f418290062
SSDEEP 3072:MHPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEBJ2fpXvHIcau:MvX1aI5aZoKzMJ07NSBXzau
TLSH
T1D5E30110CBC41F9CDAA8261CA0FE1F0D63E0C59D852A658DAB63FD0B6FA7508571B5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38e9fd0b-128e-4ca1-a1ec-3e4ece0a900f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\38e9fd0b-128e-4ca1-a1ec-3e4ece0a900f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 3e6094b7a5b19ec1fd587d6e114676a0ad033289e5c8da3b2e35074c04bf55fa
MD5 79156729f51605b69fa4028acad911bc
SHA1 de55ae28b1ac228f1127ec6dbf9fe691f1d82fea
SHA512 ad075e3975e03ff8a2f1a376567b0cff933788e16aa178715d05d76265793faf2008b4919ab148ac385b7f35685daaa71b39f6608f733768b9423db5bf7035a9
SSDEEP 768:PFOt3uwgpQdLHd+KHhW0dPt6RLf5033T19t5VFU8f0TdmV:ct3W2+8h7Pt6xBwtrFUA0TdmV
TLSH
T101234BF59CD7893AD8ADA747A73D6E024ABCC163B5988984F7885E0CCC621BFD706811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b3d269565685f991dcefe9249683bd3f4441c12fa19eb99271f63d11e635ff2a
MD5 251600c6574ade0a1ebf8f28e939982e
SHA1 070da4a72e0e38ab46bc6e05171a7f8837f512d6
SHA512 10f33beb83b46b5d40b16f6b6907d9405b85a6332e866222bc263d221b3ebc0bbf4380b3848486c15a5badc061204635f43ebe9ed495f4f1a536e001f4705577
SSDEEP 384:z/8NgHJ140HkrdH0FptZl83IXpUvXJF7IzF:zbNkdUbr4oivXk
TLSH
T1B9421936AC746C679DA3B549F51A36136EF4812B9AC86F44DAEC6F1D01DF29C030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 339ecc60bbede50d2c789994d2b271d6bcd455b5e3d1619fa139b5059f80b336
MD5 0172189a9fa7909fe0cf41db36be4676
SHA1 eaf6a252f16685698f985287b476bcd6b36d33c9
SHA512 17ee55dcf7f79c4dc545e72c1f284eeb9b0694b15f68a81efa075fbd652b55686412a051762f0ebfe38e5bbf4a1a54d80dd1e68a6bcc444b89541fac380551e2
SSDEEP 384:z/8NFHJ140HkGdH0FptZl83IXpYsvM/ji3VFekeUXO:zkNxdUbr4oq//ji3VFeUXO
TLSH
T1C9821A7EEC202C3F889EB74C614E39235CA4413BD6B89A58EBD81B0DC1BA558F742D65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 f37f40ee467fe6ca243cd25f4808cdbdef940acf73fb3417a8e24bde547d6e09
MD5 6f7d6c85833fd00d2fdd5a04612eb421
SHA1 7b3c9c9d048f88025074ff988f95b8074c593c7e
SHA512 24a584d7adfb2ac32693cf31eb17c46bbc1646de9a00ec0253e31764d4a46c685e36c33b6920ec9aa945441f0d480351923900e9e4f0148defc37e4c9b6799fe
SSDEEP 384:z/8NFHJ140HkJdH0FptZl83IXpYsvM/ji3VFekeUXO:zkNWdUbr4oq//ji3VFeUXO
TLSH
T148821A7EEC202C3F889EB70C614E39230CA4413BD6B89A58EBD81B0DC1BB558F742D65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 b1ebd6404914b06267eb5a072cf50cfd3aa054f3cdab952ecab4f07174eaba9c
MD5 e2d70c6bf61ec879cfc5dc5cc81f0db6
SHA1 3e87d0a69ad9db834ab615e8d177db930a966ac8
SHA512 81f682e19e931544e2dc957c7c015fb0a634f273d6872645e14fb7b78f85c41ad814c47922c6a46f21c93c8f39be18503ce95459de383acf7e34ad7301568d4e
SSDEEP 384:n08NgM140HuYd20FptZl83IXpjvXJF7IzO:0eld1br4oBvXX
TLSH
T15F522A76AC746C679DA3A545B50A36036EF4812B9AC46F44DAEDAF0D01DF39C130AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 5c4f8b5d680f6d63ee142579cbf5fae1d2f75a5baaba800a9b0bd18447f25f4c
MD5 d96a97ce97ff6e3b5d909771ee3d860c
SHA1 1a91836166aba1be06a4943c7c348fe7a92968bb
SHA512 09475d0c354117448af45d856db71e6e1bfb4dea83782b3fdd6a5bfc60f1d2690f606f439d11b3c70ec40facd1ef8a32d3dd90c5ac90dfc44039d7d4f7efbefc
SSDEEP 384:nSZcIt38NG3140Hxpd20FptZl83IXpNBXJF7Izzo+:gt3BPd1br4oXBXmV
TLSH
T118826C716C746C6799E7F105B64A37035EF890379AC89F04D9E9AB1E00963981B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 a07f185d1491280e2eaddf489ed7f33d3fc113fb98f5715f8a6d002392aaf775
MD5 7da7945b627e594534ab2c52e14fb2e2
SHA1 f86d1fbb11e0ba7696e256b518a99c4760fc9308
SHA512 252f84110c20ad01cd1312b331ea8c732758a0e70fba3caa895e0924bcb3579ae656d44f806abd50c3205aa8d4958e0163b0d52da1e2da84870f3292286cba01
SSDEEP 384:n2ZcIt38NgM140HxEd20FptZl83IXpxrCXwni3VFa48frTeTXJF7Izzo+:kt3eOd1br4ofc8i3VFa48frT+XmV
TLSH
T196B25B7E9C242C7F85AEBB08664D2A235DF4503BC6B88A58EBD85B0DC077658F706C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 605ea4cb4e07f558df257d2b312cf8ec2ef091b99dc7f791fbbf88000e096163
MD5 b7664c9d370bd33dfca865cb37822bc9
SHA1 c2d62659d9ba446bd633596a8dd6a42acdca7e3e
SHA512 d872427824dfc86ba90c1c24bcbc462caaeccd87857078abfd8d713df689fc8425ba79f29b4315518748f3b56fafc21242a7651130b8f9f87b2c925dfbfb3da7
SSDEEP 384:z08NgM140HuYd20FptZl83IXpjvXJF7IzO:4eld1br4oBvXX
TLSH
T148521A76AC746C679DA3B545F50A36036EF4812B9AC46F4499EDAF0D01DF39C130AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 2f0068dcb2eab6fff0c44c43abe4a3da3cd9a9397422c75544a1d4b8c9d875a6
MD5 0e517bf450842cac93f7ea4852b951d1
SHA1 44c38d12d3d1e57186a193db47e1a4d6af7bdae2
SHA512 3196fa32991d7b898b0a6c7a51df495fe976fc50903c4c74089228f939461872bc45240d324c08eca1b535e4c494897da7d684646a9552d66daec0d1181a9246
SSDEEP 384:z/8NgHJ140HuvdH0FptZl83IXpUvXJF7IzF:zbNedUbr4oivXk
TLSH
T10F421936AC746C679DA3A549F50A36136EF4812BDAC86F44D9ED6F1D01DF29C030AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5216791c45ac4be39d4577f4d374163bc4cc9c4f930d0e0081e3227443e63d56
MD5 6cfef418bbb58bf4a1aa74f76b077273
SHA1 2bb9f21b23ee5baaff5be5f93c6868a41d5dd44b
SHA512 7beef4c11e3e52f0389d4514f4b135813b36d7d87a2ccb2d471bf76e16e22c444418b3cb36e96bbd86cbc753b9638aef61d621b5a114ec37847faec6c950a7d1
SSDEEP 192:tGNo6d940tQmiUyxgcBF2oP1Zpjzor3RJIXkQ4iDxqfkU6:tGNo6740rncBFptZl83IXpZ9U6
TLSH
T18212E935A878BC675EE3B504B08736536ED5113BDE84AF44DAE85F1C04DB38C2B4A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f8e869299442408a7a4b3b1dc0e5835520f804a1ce91b31a07098a8e64d3380a
MD5 30d2132ad845c1c244f8fcfb5e5dc881
SHA1 f34629c34009c8cf341968d08712527ca742128c
SHA512 c3a07cad450d8854013efd6b5592476b8ec1601793eafb737c3a8db0dd074ba56b9e467424a94155bf1d3f3fefe994d1e4be53549f53a4e04dd51305a96f6582
SSDEEP 192:qGNO6d9402QmiUyEvgTBF2oP1Zpjzor3R1GwTtmU6:qGNO6740SDoTBFptZl8h8U6
TLSH
T17002D836A8783CAB9EA36E49F48737136FD5112F9AD56B44DAE85F1C40DB38C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 08395a506106f3d0a099faa87c927e44cab76088d8beb5245344079cb9fc9754
MD5 4a1c7e64a46cc0bda95abd31f3ef0bc1
SHA1 c8ae15571c627b4fbd8e5c3c6f9dee68c2d326b8
SHA512 b83fd1d5b604777a0d4be20148945c623af0911fe77bafff52111c77dfe19bdf613bf67b34c1b8b899d609c5cb0ab9da31fb209d3ff6aca4ded72bd9f530ea5d
SSDEEP 384:naZcIt38ND3140Hxpd2I27JfY2Zs3FptZl8mOct5VFU8f0TfJF7Izzo+:Yt3sPdY7O2Zs3br59t5VFU8f0TfmV
TLSH
T19CA26C75ECA45D3B88AEB384B60B77535DF40137D5D84F48DAD8AB0D8463AAC2707C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 55305dcf6c3d3f0b336f3dba1387fda79f113fa0090650fd9393f50db30ad3d1
MD5 59b9fb5a19cf692158a6dbf0dc401309
SHA1 aa73f338789e8dcae4b1f7e0903ed52ccbf0688c
SHA512 621c74e93f19d0ea871bf61490fc192c1df55e0dbcebedb2777660b7601dea6f67016cdc0a346ab1f293f91a64027ea966e5a309d7444a62fb4ce92060e54272
SSDEEP 192:ztGNF1d940HUfQmiU1lTjZ0F2oP1Zpjzor3RJIXkQ4iWxqfkU8:ztGNF1740H6bN0FptZl83IXpA9U8
TLSH
T17622F835A878BC679DE3B548B08B37536ED4103BDD84AF44DAE85F1C049B38C274A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

safety_tips.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
Size 163KB
SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
MD5 bd6846ffa7f4cf897b5323e4a5dcd551
SHA1 a6596cdc8de199492791faa39ce6096cf39295cd
SHA512 aa19b278f7211ffaf16b14b59d509ce6b80708e2bb5af87d98848747de4cba13b6626135dd3ec7aabd51b4c2cfb46ed96800a520d2dae8af8105054b6cd40e0b
SSDEEP 3072:K1W97njdmeMAYV2ig7ARGHNxmfltItcGJ97WgbT:K1WVZyArBmbI+IfX
TLSH
T1F7F33B49F85703A06F1780C98FAD62972504B2F47395CDDFB3BFB6A5AD40C9B10990BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
Size 3KB
SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
MD5 17c10dbe88d84b9309e6d151923ce116
SHA1 9ad2553c061ddcc07e6f66ce4f9e30290c056bdf
SHA512 ad8ed3797941c9cad21ae2af03b77ce06a23931d9c059fe880935e2b07c08f85fc628e39873fb352c07714b4e44328799b264f4adb3513975add4e6b67e4a63c
TLSH
T1895130C109286CC63CD599E71D55BA08B61B0DE846F9C3C2CC7E80894F4548362BADFD
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Advertising
Size 19KB
SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
MD5 897eefe311c18078a34e06f3cf624a6a
SHA1 98246e769fb513b8aead588024d1ceadc65422d9
SHA512 0fad93ec06d6cadb4c2e72b3355b509d5b9995706d6b7e9e69df21d9907dd3d4156eaba62a6c64ed34a6747046ffff841cc79020aff0a29690258ab487bbd6cd
SSDEEP 384:/j+Vafk2xyJEYoAYiQZU8rYvepdFhQXVVRwjSTV2quzxmVUiKF4EysZ4y5:zfEHoAYiQHriepdFWlVmjSTV2qwFOs1
TLSH
T16A926151887035622F2F50CDE0583F8E1199667540AEE6DE9FE48666F28C0F37894EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Analytics
Size 3KB
SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
MD5 b55f84fa839160086b8b337b59f80ded
SHA1 0fde6cb65ef56264517aab0eb5ea93667f5985c2
SHA512 6750626e0efca608abafe63926229887a68c9f3e657cb78921daf9c6b3ce11d6bfe1ba83fac775a8d1b6b69cbc00dc193fcb818c70ded3ea159b6241fd2823ce
TLSH
T1CF815415A4A014433E2E5668E03C76B912E8253880E9FBD9EFB19965F30C0D778E597E
MD5 SHA1 SHA512 TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Content
Size 4KB
SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
MD5 0e3ce75aaf5e674dcd7508251bb839c5
SHA1 35d4a84a8d946263e6b1d06fadc31c5753a946f0
SHA512 80d49bfdbcce2ac21c5c39c6c538135a9768b5fadd73137f6b5916fe6740827fda06c154508c0f9810723c397a22f3d93542f3e972ed3b736f7478ea2e6dc0a9
SSDEEP 48:lAHJBLfUUIAPMsb2zIEcySe00woiyKIdw5uZWhDNB+jS+3NrSA6CdM+3+1oH:lApdOAP7bercySB/1ylw5usB+WB8x+yH
TLSH
T13991B7037E4409276E95D105C0ED209E2C71ABB0C85DEDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
Size 552B
SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
MD5 39461c6ea4ff09d663a65d133eb47c98
SHA1 c41f5b5ac9a202ec7dd12122e64b858379a9a815
SHA512 a8e195fb9bfa68dbb064a0f8a41cd86aef5fca43349388294d364b5fd556f0a01674bffcbb5eb2a36e3fea9c64bf575b5e7ed674661dcb7544ed7a961686d4f8
TLSH
T14AF0C0E5C82197766FD544A1E05E7389F4844BB26094F3D50B56321996E8A432684DEC
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
Size 1KB
SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
MD5 f665b35df3c2a7b4efd9dc396f2af9bf
SHA1 2833c37d7d92a4cd1e413eba0d6717e90e69f973
SHA512 e7930341af55bae220962d79ce9aa056bbd1c9fe3cfaf0fd4181d9aa4257b5679648e4aa19561c2f9b5c8fcc6e6757d3616726eb28e77a2b899fa25f7d1b6706
TLSH
T1DF211F8295D038716E6E1488D55C3F9C129A2B7001E6F5DCCEF486A1B61489F7180C67
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Advertising
Size 21KB
SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
MD5 452f3e9d40539cd65cafbd008308b5b8
SHA1 34203b4a803009ff56bb28d3a14305348082990f
SHA512 08504c06b603db3cb12f0ed6e30e733c2a2c830cad1124771c64b0e7b8480113383440325c56116fb57bde458b393ce182a3af75f0cef146ad6a8872ab9a964b
SSDEEP 384:oQh4q3kwr8CPLo3AptN7NoTn5LTDq3ZXmRHAez/GRQMKWxV1R:wqRr82LKAptNJoTNT2JXm1AezO2MKWx5
TLSH
T16CA2B361996025513E6F009DF1993FCD5AA8233080E9FAE9CFA0C676B35D4D335948FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Analytics
Size 3KB
SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
MD5 c4c782264f4a6a6ba84801c8c148afdd
SHA1 f138b8f526133c5dd612f79825f4706569fd18b2
SHA512 e1d3b123a7eabfe72d4df981e1015ca616c51fe7d94de91223e9c7f4eb98ed7d3ebcf7b5c7e08579db502c7b3529e095d314dc71b8cf5e79081c678e73aa646e
TLSH
T1F261C814312434212E1A126ED55E3E8E6AF8223904FCF7E14FF18A71B2194DB38E873B
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Content
Size 5KB
SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
MD5 7c5f5e42e885211f783a06b1317ba145
SHA1 079ab890b012120b89f776e4bfe67f3789f67096
SHA512 ec581f41917ee010d71a021cf16648fa757327198113dc3daff3adb33ee739da3f40d87a6f3e49004106770ea705e6b800fe263d21eccd33d7883fd1ed8c82eb
SSDEEP 96:02KCCvwLR/tE1LYSeyTPXD7fOiCrC400uvuJEjchVEy8Upy4uILrqNaRq3:02KCMwtWLYSe8miZHvui68kRBg3
TLSH
T169C183B2495079522F3E01C6F9E6265488E483715CBEEBC787E0C62CDD0E9E335A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Entities
Size 128KB
SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
MD5 87b4b75312dedc7106ac746153153c1a
SHA1 54fd4b67eb16620ce0dafe8eb641f6a256dfc4f0
SHA512 f594a5039c73db236f97dd50c3eb007f2fa2ff44d558222cf983dcd703d89f9b1e832bd3c249a20bfa592656e9c2e61a41f90df1b927fdd8f490d36734f92d30
SSDEEP 1536:e9nKLDxqghS81HcmcgqPvD2E/FwoqtK1Gmbpq6CXkkqGqnuP7Sr:GnANN1Pt3/oqtKAWvCJqGqnuPK
TLSH
T1A8D30938FE60C8185CEB041B91296DDC5B801BDA5AA6FDC9EF7F78190242DDD33285B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
Size 2KB
SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
MD5 427724f72baa3d5c91671853a89245e5
SHA1 a33deaa88143c298e0732ecb233663c372cb0e2b
SHA512 bd0027e9bd25fa3426dfe85f67bac14bc3124bbbd6493c1d1aafc33343dcb008a8a418134deda235b71377ff970fcdc45ce4e6b1eae79fd3adf1bc3ba2e2103e
TLSH
T19441552354202051BEBD498CF59A3F4D29E5623984DDF6D5DFE08936721A8E734908A7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Social
Size 3KB
SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
MD5 af4c6f2598c45087a32c4f410f242553
SHA1 cad2a50e20ee6f699e21e78c58991a6a25a55ec0
SHA512 7d378b90e3cb7feac3580bc7858b6d8a4967c77196be5b7d94ef076a7e1e8166156e62954998fa6931593db5c8a8dcaacdfe3421bd39e6517f6c6094caf4f4a1
TLSH
T17B61DC32C550A9932E5D0C81EDC55E704DD8067ECCA6F4E287B082F8F0AD8977D90BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Staging
Size 1KB
SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
MD5 5d7f5a0c242d9d1290c8ad0bd57be3e7
SHA1 d454811443284aeaa0294d30caf65e624182b150
SHA512 5d36ffb2ec4d162c49e5dd1207bee8b51f36d91ab38d23ff85d4467ced3a7e0f4f639b230623804260d8b03e49ef124e6ae9714f63c896c024215bfbd13dbc88
TLSH
T1A621E2194E908CB11E596745D20A535ABDEA617D38E7F4CB8EA8DE7FC2CE85702344A0
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.8.22.1\typosquatting_list.pb
Size 815KB
SHA256 8af6745b8c0b69345e70cca321ea5177f859bbbdc34b4f4caaa6337fc9ac080d
MD5 f2ffc1365060361e009b712bd4bdd283
SHA1 60e39659f5ae210d593aec9edef26a6cc1dbba7a
SHA512 dc87a0af9befc30dc7311956478dbf633b22540f55587a3d4542eb37a5c00818bfe220a447a8eff1d5994296c0826141ce595bc6242faca52c20305db4368974
SSDEEP 6144:L6j7S1KFMKYbxIj113ej+OjNIUMCkz+6T72x6XH2Nu3E+dagmGvDovjEh8:2XS1KFMKYbc32IYeHmE7ovjEh8
TLSH
T14D05B4B9DFC00154DB78112D20BE71D8181412A580EADFEAFE7C855F2BC6AC977E85E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
MD5 95ac3c4f8946991b2f4b965a390aa896
SHA1 864730b7c80ff406dcef7eefce17b842687c2bd8
SHA512 b13343c0c56d9943ac874eacdf49f82ad4ffcf8be1ca55600fbc7e0ba55c6203da11354a956eb54c11ee241672e2d8c66d8469e722cfb0c0129f0dbbe3c2167c
TLSH
T1942112E0183E1AC2D5BE0DAFB0872AED50DC9612F8D834382898FD68967E51D2550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 824de99fb2d26a9652ce4d147d41b5f42d8eb58933629e98754b359ef813de81
MD5 c854428d46d0bd8106d3a4b26b2c17af
SHA1 3414466742a52757c163c28cc508953129b9067d
SHA512 1de7dd4e62a741fd98b414fa13966befbe757d57478e2eca3d9d49fc11f15eff8310633888dec1ae7c7fd5ab938d39ed341567261f568dc0a1838e5acd6da636
TLSH
T1E93122E0583E19C2D1BE0EAFB0872AEC50EC9211F49834382899E868967E51D3550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 560ee7e0d7557322d94bace43c28ac646d9d42fc0a2c1d1ec868ce5af83f10e5
MD5 cc1217ef5ea06f444a49dd3894b6b76f
SHA1 21acaaaedbfc70ba260bfa8a21be697d7b46d119
SHA512 8e66af3a7a11a743deeb1e553d2cc7cc2d9f3c6496515fc41b0c846b88c85a7e366c2f4e7f3d5ddc5e210b9ebcb392fd86d770cef8cf5308cea4bc35c77fed9e
TLSH
T1253164E0483D1AD2D17E0DBFB0872AFC54DCD211F8A474382898E968963E50D300083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 d322f05184dd2161b8423b7ed8c3fe3a2f6c2ccfdf9e2cd80faaf3d22ce34d61
MD5 52c9871daeef3c7736e000fa3d16321d
SHA1 d3bfe04c46c8a4177b69d3aea1ce66f5aeaf9fa9
SHA512 df73949f72720048d650f7745d31f1d11574879ad5bb2edbf4de358e0cf9823365ccec2190dcbaf467d2605542324535969a853d9b88113980ea34532a9dda9e
TLSH
T18A4100E0587D1AD2D4BE0DBFB08B25FC94E89222F4A4743D2898ED68967E61D254083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
MD5 5791c60bac582e1f169aefd7494e8b65
SHA1 fc220a11a5357f3b3134686ea018f8327ad6720a
SHA512 7ea314ea2431da694bb2d6ab59852e9e0458aedea4693b1d78718c5a54c1c97849afbf8992b044f2295319673c112e8e40e08f8732d473893c556cad7c1d8183
TLSH
T12A2111E11C7E1AD2C5BE0EAFE4833AED50D8A616F4D834381888FD68A63D51D2551C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 eacf1adcab56ea7707951a59a1d5415c83ac02e038089cf23fd24d14c5a52cf2
MD5 13fbadbf74e4028d922652c3b1fb7281
SHA1 2cd5239ea161b2a994b9b84a77f0296997a22ea1
SHA512 c1600d8593594bf33e8eea3c0e9b7153a41c3ed3ee25dc39ca5b63f2eb3a021af51fb979ffea4d93c39aff5ea2b0e6b4348c8eaaec269e725dc1eb353379cb59
TLSH
T1A43153E0583D19D1C07E0DBFB08729FC40DCD212F49434382898EC68967E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 bf6f9a42cb2e4ca9469c59e3e413f1095e2793853e8d59510aaaa47c75856608
MD5 c4c83b8137863883b36d10904db60b44
SHA1 062a1cdb31565db40a22235312881fb5c0786acf
SHA512 ddcfb1e714150cd0ba23e9a998213d5f876ff821b1bdcb1df8fff38e681c57f6668ecf13f2f4ffa1c8ea30d2a515b2a5d83f705a4866cd4c3f36879939f59e2c
TLSH
T1463103E0587D1AD2D5BE0DAFB09735FC94D89211F8A474396898ED68967E51D210083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
MD5 bc900814bda342e30ca622ecf6edf1a1
SHA1 58549077a989da91156012baf9dbfc98ecfe429d
SHA512 c918bfea1c94a06e69e13a1edffa87e69fd698fc8ddf310fc5545d1e2a80613e7617e19110e5496fa91c8e8037bc67a81e300b571bebefb407ab16a384d97fa1
TLSH
T124111FD11C7E1AC6C6BE0E6FA4833AFD40D8A622F4E8307818C8E964927951E2451C7F
MD5 SHA1 SHA512 TLSH

Submit Download

ca1d6ad3-480d-4a39-ad98-91b7570bab51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ca1d6ad3-480d-4a39-ad98-91b7570bab51.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ksthunk[1].sys

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GFK8XAKU\ksthunk[1].sys
Size 31KB
SHA256 cc6477cfe8f2fdc445f33bef064bf4b9ffceb8e144f3a0ce5b2b436b1d3f46fb
MD5 190b240838b0d190192abe13b969a973
SHA1 9ebe7d4648219700b2e3ec8575b8cec170ba111a
SHA512 0175954fcea6d6bff4e30ce5dbda66387a8cdb6c5e509a100958148c8d9823bf95366922b5b7f31589f35864571855ae0baff66d68591ff676ed269ef558c2a0
SSDEEP 768:ORo+RMwZX8jHDfbsmbUnCkkmGPMMthMmYiI:DsXe9EahMmYiI
TLSH
T177E24B55F3C669F9DACAC0BAC692473AD6B2F42423214BDF02E0DE356E434D07A3D256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47c3478e-6a8c-4ac4-9036-e43281b8d2ea.tmp

Path C:\Users\Admin\AppData\Local\Temp\47c3478e-6a8c-4ac4-9036-e43281b8d2ea.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8f13b3c-6313-4d00-a606-230ad69e6ebf.tmp

Path C:\Users\Admin\AppData\Local\Temp\e8f13b3c-6313-4d00-a606-230ad69e6ebf.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

ed3769ac-fe0f-40ea-86d7-988bb32ae423.tmp

Path C:\Users\Admin\AppData\Local\Temp\ed3769ac-fe0f-40ea-86d7-988bb32ae423.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kdmapper_240670281.exe

Path C:\Users\Admin\AppData\Local\Temp\kdmapper_240670281.exe
Size 138KB
SHA256 57832f7a25c5cd0dfca09c54d0019e4f19a0d27a949a92dc68baf35b72be8211
MD5 365fc713b2097470bd269602b5d54eb2
SHA1 4e237fb146ed252246ad81231294f877edbc35c7
SHA512 5033693df40f39a568967b26977603c353d59e538d43da430838875d5955181cc5533a3ae8de4aaf23b8841046e72f970f539879f44c17a633b72df08ead29d3
SSDEEP 3072:ejVYisyVqzOSDMbfVP+qmJTQSaMm5/6Ygnzg+zOG:ebsyVqzOswfUWlBgns+q
TLSH
T112D35B2BE659207ED2A6D9BDCA524912FBB27C850751B7CF136049B60F627D06F3E302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1280_1579127604\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5172_1566412036\CRX_INSTALL\128.png
Size 4KB
SHA256 ff702ca753a7e3b75f9d9850cc9343e28e8d60f8005a2c955c8ac2105532b2c9
MD5 d056cec3b05d6a863ddfa7ee4c1c9f0c
SHA1 dcd15b46dea9d234f13d7f04c739a2c516c973f1
SHA512 751274949b04c7cdc5e8f5f20fd062bfe130f1415eee524d9d83bcf1a448fbfb4b82dff8bbf7495250a852779c3d11ac87e33275508a4064f9d52417f4ca230f
SSDEEP 96:YpjISYK9mvKBG4+43tmidWQX3DJQoWQpzYKL:Yp7nG4j3tRWQX314QpzzL
TLSH
T1EDA16DDEF15935355323E89B282AC458C69F5302D282D6AF940DD4C572C3DBE68B2DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5172_1566412036\CRX_INSTALL\_locales\en\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5172_1566412036\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c
MD5 64eaeb92cb15bf128429c2354ef22977
SHA1 45ec549acaa1fda7c664d3906835ced6295ee752
SHA512 f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def
TLSH
T153213806EA14BB37825F6036BC657585A3300ADB2600FC3D7EDC941C1B059AA91BB3D4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5172_1566412036\CRX_INSTALL\manifest.json
Size 1KB
SHA256 de026fac7324c2bb4e13c466bafaf080d1dc23088a090acc12de779ec2752201
MD5 f5e7c78011a7a5c20c5afc80e4085125
SHA1 de91d57f8df1a352fc458168fb32a1e4b5100039
SHA512 fa564859ce8959e79309b3453b84f33d8a8ddb1d3a61422e39da9c25bc00463d48eb4fb41d7d31ce941c3ce5172e59d36715ad22c678808eaa8c886fea98690b
TLSH
T16F4169F7BC00AD634BA498D8AA1E710EFB2AB24D55CFD4DB8298107302CCDAE1D601E5
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1065196442\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1106168177\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1489505295\manifest.json
Size 72B
SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
MD5 a30b19bb414d78fff00fc7855d6ed5fd
SHA1 2a6408f2829e964c578751bf29ec4f702412c11e
SHA512 66b6db60e9e6f3059d1a47db14f05d35587aa2019bc06e6cf352dfbb237d9dfe6dce7cb21c9127320a7fdca5b9d3eb21e799abe6a926ae51b5f62cf646c30490
TLSH
T154A02230AC20A03330880B300032838383B02C0A2020FE0A0F0B2080A28823E20B220C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1541543494\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1609011199\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1610441086\manifest.json
Size 165B
SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
MD5 3ef32f0bc4059ed77b8df1ddc1bd32d6
SHA1 180f08a503c8145e50e715a1dbe202b491de0011
SHA512 036d08f722ca62b9f5a21d79d9d6d0585f7255ff736ce717f72aff31ef0e194adb3481da6c690be7306818947efcdf1e6745d0d14de0c32bd088a5f93415805b
TLSH
T1EEC080029400197419CE47150D5CF388A722D7152D80B0165BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1906922463\manifest.json
Size 118B
SHA256 50a59d038c95ffa1787e774d49b01a6f51acb2fd146de71440bcb426dc5ebdb7
MD5 ef4bc22dd676e47a52a316cd3a4f898b
SHA1 97cd101728f57a95b93ee20507d71ad393334c26
SHA512 b19b8027d7674d2fd865e3ee5f99d365c16df32edf06de288932c30108218c77dad2394cc87d792c5f7e300b13587b528a07bfe44fe0243886588640cab09e3c
TLSH
T1EDB092B00C0AA03B22809760ECA0668683F80218E9465B1E088036881F881B880362F2
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_2147416850\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_314697558\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_36075687\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_436548599\manifest.json
Size 238B
SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
MD5 15b69964f6f79654cbf54953aad0513f
SHA1 013fb9737790b034195cdeddaa620049484c53a7
SHA512 7eeee58e06bba59b1ef874436035202416079617b7953593abf6d9af42a55088ab37f45fdee394166344f0186c0cb7092f55ed201c213737bb5d5318e9f47908
TLSH
T178D0A727EC008DB611B207580AF5A742E3B1630F7C012509377308CC0F3D1744081285
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\Sigma\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_486624702\manifest.json
Size 132B
SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
MD5 c9209ab189a035569ba3c65d7375d220
SHA1 1987aaec8f436325415fe36c168c9a37829523f9
SHA512 60495e096f78de05c6025a9d7b69aef9dce0d08ec1abbd4ccba206827a8c25d8449f54f93637599649762ec09a034d32fc8afc06199b1b57cd010ff1a0c850c0
TLSH
T17FC092615802797A14DEB7F00D29CB926AB3CB2E18A4650546F5C228ED2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_650787421\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_680831714\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_705678797\manifest.json
Size 53B
SHA256 5d7dbf6016a45872058051411fd7bc3ca1cd3294a1cedbab2b1165f5cfd38cce
MD5 9b673791fa0e25cb0081840b4d0ca435
SHA1 393094427e915bdc04a0393dddaba329750e0276
SHA512 a3c90c821e04a18b78192dc99bca2a33f46572d1e757c48f35cd69bf3b2ac55e8af685d41d27d39c5341eddaa4ae58f93c4a5c9ba3b61e867b092287b14b42d0
TLSH
T11D900260041492175AC10E546570B881A391661959850D1D0449165802A586CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_774776296\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_774776296\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_80538755\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5116-243-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-242-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-244-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-252-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-251-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-250-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-249-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-248-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-254-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download

memory/5116-253-0x000001648AC00000-0x000001648AC01000-memory.dmp

Download