ff0b8a01d0b5dfb4bb539a4f96c408099c20dc4e47152555060771e8e6ece757

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
request.eml
Size 50KB
Sample260824-pym9datvgz
SHA256 ff0b8a01d0b5dfb4bb539a4f96c408099c20dc4e47152555060771e8e6ece757
MD5 ef2e255f3087b46487a631421431b0f9
SHA1 a9f6321fffb41403aaec56a80717e1b2e0977594
SHA512 f094564bf510f26480d994614e15c42060cde1b5730b344391fdfda0cf02b00d4de01b7ee951924216f561bcfae94da4b81b7f2ae78a1bc36d294cdd1c02a81d
SSDEEP 1536:zjZUE3zjaz40xQh03aYQVN84uu91yLY6+bp:zjZHzSjxQhOJWyLQp
TLSH
T15E334B09EF53046B95F3A1E9F902BF4A63920D4DA77345A034B27277498FCA1679A3CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_6076_356376964\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_109_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6076_1475663794\_locales\zu\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1160	msedge.exe
3620	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320491082530548"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{B06F7A16-23F5-4E6D-9AF5-BCA8FCE7693A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{EC98777D-4BD3-49CF-8932-3524CC1B2B86}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
6108	msedge.exe
6108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
6076	msedge.exe
6076	msedge.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4372	OUTLOOK.EXE

Suspicious use of SetWindowsHookEx 32 IoCs

pid	Process
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE
4372	OUTLOOK.EXE

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 4372 wrote to memory of 6076	4372	OUTLOOK.EXE	90
PID 6076 wrote to memory of 4164	6076	msedge.exe	91
PID 6076 wrote to memory of 5044	6076	msedge.exe	92
PID 6076 wrote to memory of 1160	6076	msedge.exe	94
PID 6076 wrote to memory of 5044	6076	msedge.exe	92
PID 6076 wrote to memory of 5044	6076	msedge.exe	92
PID 6076 wrote to memory of 4584	6076	msedge.exe	95
PID 6076 wrote to memory of 4584	6076	msedge.exe	95
PID 6076 wrote to memory of 3004	6076	msedge.exe	96
PID 6076 wrote to memory of 4872	6076	msedge.exe	97
PID 6076 wrote to memory of 3004	6076	msedge.exe	96
PID 6076 wrote to memory of 3004	6076	msedge.exe	96
PID 6076 wrote to memory of 4872	6076	msedge.exe	97
PID 6076 wrote to memory of 4872	6076	msedge.exe	97
PID 6076 wrote to memory of 1204	6076	msedge.exe	98
PID 6076 wrote to memory of 5928	6076	msedge.exe	99
PID 6076 wrote to memory of 1204	6076	msedge.exe	98
PID 6076 wrote to memory of 1204	6076	msedge.exe	98
PID 6076 wrote to memory of 5928	6076	msedge.exe	99
PID 6076 wrote to memory of 5928	6076	msedge.exe	99
PID 6076 wrote to memory of 3524	6076	msedge.exe	101
PID 6076 wrote to memory of 3524	6076	msedge.exe	101
PID 6076 wrote to memory of 5792	6076	msedge.exe	102
PID 6076 wrote to memory of 2116	6076	msedge.exe	103
PID 6076 wrote to memory of 5792	6076	msedge.exe	102
PID 6076 wrote to memory of 2116	6076	msedge.exe	103
PID 6076 wrote to memory of 4080	6076	msedge.exe	105
PID 6076 wrote to memory of 2904	6076	msedge.exe	108
PID 6076 wrote to memory of 2904	6076	msedge.exe	108
PID 6076 wrote to memory of 2268	6076	msedge.exe	109
PID 6076 wrote to memory of 2268	6076	msedge.exe	109
PID 6076 wrote to memory of 3400	6076	msedge.exe	110
PID 6076 wrote to memory of 3400	6076	msedge.exe	110
PID 6076 wrote to memory of 2656	6076	msedge.exe	111
PID 6076 wrote to memory of 2656	6076	msedge.exe	111
PID 6076 wrote to memory of 5868	6076	msedge.exe	114
PID 6076 wrote to memory of 5008	6076	msedge.exe	115
PID 6076 wrote to memory of 952	6076	msedge.exe	116
PID 6076 wrote to memory of 2656	6076	msedge.exe	117
PID 6076 wrote to memory of 2656	6076	msedge.exe	117
PID 6076 wrote to memory of 2656	6076	msedge.exe	117
PID 6076 wrote to memory of 4600	6076	msedge.exe	118
PID 6076 wrote to memory of 4600	6076	msedge.exe	118
PID 6076 wrote to memory of 4600	6076	msedge.exe	118
PID 6076 wrote to memory of 5796	6076	msedge.exe	119
PID 6076 wrote to memory of 5796	6076	msedge.exe	119
PID 6076 wrote to memory of 6108	6076	msedge.exe	123
PID 6108 wrote to memory of 1392	6108	msedge.exe	124
PID 6108 wrote to memory of 4232	6108	msedge.exe	126
PID 6108 wrote to memory of 3620	6108	msedge.exe	125
PID 6108 wrote to memory of 4232	6108	msedge.exe	126
PID 6108 wrote to memory of 4232	6108	msedge.exe	126
PID 6108 wrote to memory of 4928	6108	msedge.exe	127
PID 6108 wrote to memory of 4928	6108	msedge.exe	127
PID 6108 wrote to memory of 5824	6108	msedge.exe	130
PID 6108 wrote to memory of 4752	6108	msedge.exe	131
PID 6108 wrote to memory of 4616	6108	msedge.exe	132
PID 6108 wrote to memory of 2036	6108	msedge.exe	133

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\request.eml"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://secure-web.cisco.com/1B0kZdQfVlT-ykH8Y045r3ypaAXuzCci433g9AJvxdTUMnBBmDbQ265ZfRWegpDJalUHrUGI3dH4S4uWqlOIU6yhb3hlyEpMaDWmceC5m8JiqxUjlow8sWQyp-BpL7PQi7WLkevC8HzPPCKk9y1pQ9I9lyRtnsrgO1U-M-UmfGyfT1CFbaG40UbL6rM1wM3stZwjwetcDd6FnYuyJZnn2o_L-f6B7fw2LoE9kpWKXyxsxlo5HrFrg0f9tC1GGiCqfq41bQNg6vYaolpM0ysDz5ZEUcFiBJ0vqTI0lOhhTnzzGJ9uqEWVth4t2JCnIme6I_mFbffWLlwTVMXV8a7dSrE3PnVycWp5NhECjlaVAGGrCE9FzRRUtSLGigQWSycQL/https%3A%2F%2Fweareindy.com%2Fapp%2Fshared%2Fproposals%2F6a7b5b31930cad0a7d6b7237%2FmQWbIM8TeD5UbtX3wU15HBOytYQ1Sv1tXGqW09qkQZv9phbtOIFfFUrnQ0njABna%2F
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ff83684c188,0x7ff83684c194,0x7ff83684c1a0
    3⤵
    PID:4164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,6914280465187265988,17064302185528683806,262144 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
    3⤵
    PID:5044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,14292654803784577882,18417921857908470670,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,17808296999433088953,12695668519546023803,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:13
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,8403157982731644660,7093208877733778201,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
    3⤵
    PID:3004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,15287256026527651967,8887034362686823057,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,3637446207528169772,14145402747905517909,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,5725762911669704378,13622723141015239111,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:9
    3⤵
    PID:5928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,4048266378435357050,10673055958751121620,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:3524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,11366554464179714635,18184067979767703483,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,7392462850923785770,15658220545105483800,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
    3⤵
    PID:2116
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13403069054459834183,18330917451743795529,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
    3⤵
    PID:1048
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13403069054459834183,18330917451743795529,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
    3⤵
    PID:4080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,4137538433871325672,1339361208506596777,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
    3⤵
    PID:2904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,2089848455553821216,11092223710875615514,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:14
    3⤵
    PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,12432154754407547659,6553671015139058230,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
    3⤵
    PID:3400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,13734508291187630233,15134963671615323248,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:14
    3⤵
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,15055223313826913892,12496794866059818129,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,16673516654866685418,9356477688804063141,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
    3⤵
    PID:5008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,10584117426321477597,9470555415796081489,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
    3⤵
    PID:952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5388,i,2928121013176523907,198597899597581469,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
    3⤵
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4044,i,12691211598079718345,7078567662872318973,2097152 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
    3⤵
    PID:4600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,16994346753972731153,4734502712719061271,524288 --field-trial-handle=2368,i,11810897406152067317,7867000901041918471,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:6108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff83684c188,0x7ff83684c194,0x7ff83684c1a0
      4⤵
      PID:1392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,2335628945144102922,16551834958887328221,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:11
      4⤵
      System Time Discovery
      PID:3620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,5860039300717989113,15430112732226988255,262144 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:2
      4⤵
      PID:4232
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,4897068632661704260,6673567828427992258,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
      4⤵
      PID:4928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,3715043285759178311,12408747154239201320,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
      4⤵
      PID:5688
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,3715043285759178311,12408747154239201320,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
      4⤵
      PID:5824
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,15971192276820441833,8463622336450705899,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
      4⤵
      PID:4752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,10728351456768843051,7526645157655875026,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
      4⤵
      PID:4616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,15180079804432265368,3504173773546878151,524288 --field-trial-handle=2808,i,463513561086563936,6407905962246494350,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
      4⤵
      PID:2036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5312

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4c1a085bd175632d0340908860a547cd322e6f9f52ce014954b2c1cee268288
MD5 2885e4f3a7f98c10f1f1ba3f5bac5aa1
SHA1 bcf82b3efe095ee8d461d9faa035dbd79c362eb3
SHA512 e2e732347488caf23bd2db202cac90a12add94dc62faeba8985cb3943886d4919629feebe11a41fc3a3db568a29626aedcfa36d1773c0464c997fb113e1ade71
TLSH
T1E6D02339832E7F02F01BA239A0D1365C346F6082E803E49364800359081B34002F0CBD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb252e5fb54364dc485c5a2dda234602e8e323796f5ff80a98a0147070de4ecc
MD5 d68a52a125fd95cb075c4dd0868cc829
SHA1 05bf3362891eabd332681b7e1fc6217bb24b6f4e
SHA512 6d381cd8c3d2ab0ea15e2ec1745eb55b76cc7f4daa66bf248299e7661858e1965bbb2e561745c0fde9d1e1fb6840d0df67fff15f8c58d79148bfd50c2e89ef31
TLSH
T1F9D097248128BFD2F03BA23C11A1228434AD1083A902A483684002290C6624202F0CF8
MD5 SHA1 SHA512 TLSH

Submit Download

2f9179d9-d3bc-429c-9272-6fe969151f21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f9179d9-d3bc-429c-9272-6fe969151f21.tmp
Size 414B
SHA256 5e561bcd36c501a8b7801c7462416dab9a23bec86e179e23fe675e98b34c92f5
MD5 d360263c2a0226c24a2b34c6fbae5cdc
SHA1 9b1529de4f6e91e3dbaefed5fbd5e675bbcee1ad
SHA512 fc67a94d1addae7cd5f4f5a0555252ede8f7f44abd47ae735dcb94814139d3b60d485e0953c1d16789e3fdae41f1ed348565446795a1a0b5722f7726acae5c18
TLSH
T158E02B99D864AD3719FC4B2994D40746D751171B2A51CA1F363C800C8FB0A3E158DC9C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 22b844e6bb9a0da28041bbdace2271c05cec752da0ecc3fd60c1484e105a1940
MD5 ba063acc5e4c128a0b1bc98024902618
SHA1 34e822f6ace2a421c0f1a862c613e621869090a7
SHA512 210505f5ff99ae92c2ed3872dac8ee9b91312ae2164e7112d049526fb40465490de2caf4051b84aa5c83c57ed47a2c2bf8222c85edcb9db01852b5d761930986
SSDEEP 768:d8F0BODspe2v84Um0x4OycNRJNnNBNGw:dQ0BODEfv84xn1cNvNnNBN
TLSH
T13013913EFA848CA2C6C3E43C418B1A3A6330D675D4D16B47DA797D155B26F86D8CEA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 745ae134f7e0fa0af8478a1dca1b5ed36640176d81bff91efc06a2bb212d90d4
MD5 2a9cb8f617287d96c46adbba98d2e5c9
SHA1 be59e23a57f70af764b7cdb870f654ab3ed8f83c
SHA512 75dfb3f55fcae7fbac31914bfac225ee28a54bc8e501accc82c51a86603d6609ffdf1c0ca05a271c60c9f5cbd6e78054be758ddcd80b5f981fa82ea26e674e1c
SSDEEP 1536:3HY1nHvreL/eQL/1Z3j4cPriyTd0sDH2TU8b8bnPLlHtxFDdtBzvO4Ve1d4B/+M:I1PreL/7L/vjHeyllpHttvKd4B/+M
TLSH
T19F4473F71450605ACBB446F5A2123A3DC277811E7DD4FEEAD1384C922C35F32BAB9A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 c1ee57d998c05d56eb986e0ebd7b30414ddc7a84d2852892c3c9ea687f8e9bf1
MD5 5a905c6a8e6d4edd6b7985e84dba8c88
SHA1 6f9c533670ad3f1412636100c4f653ad4e98f95f
SHA512 87f53d073bd422d34560b3c608e7280204ad84faca58c49c99d32836ef5c0ef40d20a2ccc1802652937171c6caf131eee9dbb7cbca202c891201d660e1e24d9d
SSDEEP 3072:Lv9G+9/h0vkiHn0w+z0xY7edDkiKrhoSQCTsRrno8rUO1n5orc3qZ6qxpvWrunbz:LQSh0vkg0ZAErPSroo1n65pv9Gkf
TLSH
T1F5256CEE8B181C42DF67CB70B4E0D91B7E302182F69DD0D39904C5A95BD5BC17AE82AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 878902cd929611ea93b6b0c3cd1f45685ae01a13058ccfa4329d54c64170f878
MD5 d91f22d10527c147fbfc4bd0cb16abf6
SHA1 f4b0eaf138aad254e63a2bb38e5f17891920d11a
SHA512 318bfdeec95a92db2344cb02683fc3ef1a02dcd553b97057d11f5c72d1fa9059cffe4064aebbf6c6b8ecf9cd306999197f8ecf461727d7a5fcf16b855b06464a
SSDEEP 49152:+AX53Kkzkp6dZ3cUbnZd2MONiYjU9XKDo:+Y3Km66sCniMYiYXD
TLSH
T1AE869EFD8A285883CEA39A70B4E0E9577C7023C3F995C1D7C858C59402A77C1BFAA65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 533cebaef2de49c156f2efa1fa0e098c9f934f9df08b85fc0d162f1b11aeac76
MD5 c2c5c5e0a895b6ccc5e3b67ffde42422
SHA1 9e3b7bef1de5a43ac6d3e097ec393514ec6f1e66
SHA512 a89e36ab0120d77af92e0d1498233bb877db9fdb216486be765e10765981dca2c27bcedf986177dbb35c905640b7580b168da0e473ff3fbecb518a40018d18a0
SSDEEP 96:aj+uU0gJlI8dMNy7Qf/98k9WwxrC7rwfMHltq:fuZYrieVw1YrwWq
TLSH
T1E5B18653F6D61C90EF57D875AAF00C193AF5642681962F03D7A28DB92407FD8C0CB25B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1c430dab8b8a1342bdf9e12b5b4de01a217a42c5bdce048c1f18b17bef03e49a
MD5 4413ff2ed2af5071ef4604314d4bb074
SHA1 ea3cba163e10bee9bc44c71e00e6939c2024016f
SHA512 32f618a2f454768e1cee2a775434d27680911a0b03321bc3747c55e7a526ca757a4b380d205675a33132d0aa656ba521cb2c68da35cc74e23c0e01344d0631a3
TLSH
T1D261C5A3836325C1E727A472E3F1880937F8A44B81AB2E0343D25D74580AF8CD5DF167
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f999.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f999.TMP
Size 3KB
SHA256 4df81d6129de524cfe47a6034070b43868ed385eec80a314037e4d1f881040c1
MD5 aee6f2472af2b416b2f48b029c1d8c4c
SHA1 0602bf94aa7cdf12f62bfaff1457aa3d003dc984
SHA512 c5ccb822fcd125b66b177c2b7a673d4dd1dc733de01737987226dc0e8ec2a96598b54f91795756716ae6b55d83ba763d980e06b334f4bd4307db6dccbf816bbd
TLSH
T17A61E8A3836729D1E76BA472E3F0580937F8A44B81A72E0303D25D745806F4CD5DF267
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e135c458a38faa30066efcdba422aad0b07a7b7c65177927b83b746ef79ef0bb
MD5 c8c87e0730f2b7f1204e3ae1c87c948b
SHA1 55d4bf3d86aa751b811f2ca80d9fe63356debb4b
SHA512 243b80d0f8ec76fd2ddfd8a73d5654560204d20cdc1373645bc545d926c243bdad57a92b20fc8ee1ced01fc4b82cab9d60532b667e4a80aadd63c45b76859c51
TLSH
T1BEE026C505C8C1BDA8946CE78AADA70882E0341EB388B986670CCC44A141A41E2EBAC4
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.109.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 32KB
SHA256 a364d405565f7fbbd0e264d60c89cf717968d95d76feeabd492e915a0c730bd9
MD5 3a6b6e695f1a44e587912cc1500db948
SHA1 5d06ff41791d9f051411d580289194fe9651f278
SHA512 690051f80f3a4e2bfc6be7428100d4e44eb8973310d00b86ee23595b7efa3f1ea40199519b047448aca39440ce17dbc3459b8b526584c55958a78122728a2486
SSDEEP 384:lBR8HKHtQ840sno+dNlyo+dNl8bBJDcatC:d8qNF40uRdNlyRdNl8dJc
TLSH
T111E26CBBB1BC7D2ECB952C74390D00A49623D2A96E69DD476421907A1AF84197037FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 ea19b83f005528fec13500f0f0ce7ff122641362c8ce0cb4400bcbb8441d96fb
MD5 7e4abc67d72bd37578470562eca82c77
SHA1 ea490fc3cf2b629a557f050bae1bf786e3ada38f
SHA512 98646899842f736b52038a20d678e5611d87fe27f7420fb8f30f450bf9a7a8fb35434ce177d261b824767e348be1e7e0f3162b43a226a8f4358213d5941535a1
SSDEEP 192:Xxd1+yaGvH+bF+UI3iWGVoWN3qL/YE+yP+yPL+yQVVV63:XxbNvIkUI3ijVoWN3qL/z3HLYA
TLSH
T18224741F6F342716CCBD427668EA04B20D6DF03F8B5365DA286504B9CFE2652602C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 4KB
SHA256 cfd1381e71710c9294cc1b2885ab949cc3167b1d2a00e8dc0a129a617b1b5a7e
MD5 d8bb8b4215d1090dce500449880fefe6
SHA1 1b7e35418aaed53dd8b58fdc60cb9ebdb18370c6
SHA512 01e05df72216285da39ef8de8e84764384109ee7e5a6324354e509c2f66ece7a5590b07321408e5887f5665e53db580eaa616fc73757f9b1aed416896ee92991
SSDEEP 96:u/H1WaZKx6yddNW0wDw5KZKx6yddWW0wDwpV:cVWEs8
TLSH
T1059145EDA4048CBEE37F83E25245B52B97B888B393887DDCF05D4B1500DF6982957A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 531868efeff7d5d37d44c06cac606d0d248c8df659c3e2691a3592a59195eda7
MD5 2b5352c8ee52c6c7a39429c997019820
SHA1 3a5447078ca8ff4a8beeb6c023af8299d422217a
SHA512 98131ab713ffe66d29ab13752bd84b721169bd718f51ee0d218fd8200153a5f864758b5c7b70e0d6b5df35fdf71967e6791fc08001bdfde3efc39b9ca140591f
TLSH
T185E0D86244EDC1E96904248BA66C7B18D3A0380EDB88AA866B04F844B495504E2862C5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 0a4aed605f766346b4b23f6d506d81bf9e6e09cd1b7be7924cf25912e9036566
MD5 0ca99099ed78100e49d3ba642bce4913
SHA1 21141fae00dc3b2ae6507c27f32580355d1e1a60
SHA512 a81b03719f9f045ae1b2df5d60b385141d6cf5a3bd46ac734e0fa189627fbeb0352ab788c265a35cd86280341cd5f9879df963e0b2576a5be469fb843ac4c8cd
SSDEEP 96:NDeMatha9y+MuXv9C2aK4eznN/Yq9oWetJ6T+90n4Auy/KGMsQ6IPtqpX:NDLaTa8+MmV1+eznqjp6TUTyZpQgpX
TLSH
T160D2D51F3A141C92C7FA4A36E4B14A207D19005992B2ABD6CCC1E1B3FD7174B7E16636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 3216623d9ad1d2b7b4b3adf15a88d14f3fdad1041ed074c880873c0181c0e842
MD5 91fca8336152aaa654903a68432c52f9
SHA1 728a4e29c6e8fcebb567161e85af0ce86726ce17
SHA512 92b63267dc087364c41ff7f3d2b50af28f73dda95633c153f72c9b9665ec2385cf42e603dc39c8a0e65b86d4fae972071239a703ca5916b9cccaa388c45e279c
SSDEEP 384:DYAS4e0L8IWe7C9WTmyTb1aVZc2/2U/iXzvg01rHRXnuPVgvVRcBRZRYXT0sO8eG:zl3
TLSH
T15C52BDF782E8896E891159F89B146D1BDF2C0518871D3D59C8E8FE4BA3E3473E21660F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 54e35320ae73694372d1d2d2ca062d06205f3d95679c35acf1ce46f436454f9f
MD5 a44729b6be7f8fb7683d1354b8536779
SHA1 32122f06858b644cd3a50da16121b8f8e9ad3bfb
SHA512 a219702399f26238703bd33b8994c993af2f343b074587bc42de0e95541749ce77231a1f4d08cc1b22d28e345068d006aab1f6e8ca009e43c02a706ced9e6515
TLSH
T1AF418F57D0BDE42711AA48BB1F49FC09367AA4394252D4F6DA56D16CB0A24F31F13032
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 38746ebb5f1ad7edb6aca7e0f7b26ea31393782da94401154ef6df8491fd9d9c
MD5 ac92732259db5adc9013348fbae9d86c
SHA1 df3234bef8aa5db20f41092c772080a8c551c54a
SHA512 c52ae6f601512c64048ac9c3c2d11025f8d599bb25616ca90a4df901f1a8437b91abd72afd57a88d5973cec74214a3b69844065b4a5dc395f9120aa252911494
SSDEEP 192:sxRpRGCC/fE+sMn0+Z1lT5zoD8pmm/g6+WNy33/YCJbuODGeIgDm/nNJ:sxRpPC/fPsMn04btl/5+/dZ6
TLSH
T10642E916AA689D3B9CC7D21CFB55BF13D3F9503291911E48ABFC8A1C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b26e8f86043d6a42058f8ab384a0b275c5402fb113a5105335e02fa090875610
MD5 f7bdc50b7f3bfe67cff933fa6904b655
SHA1 ace4d52cd9ce982d9c14df3bb12731e84cc9f9e9
SHA512 86312ad75f3befb5bb3c07906048e907531bc67a635a07f7ac4650b4f5c8153dbf97a8331bfeed3f49df96d90cdae0c97769be6d1522d45ead8cc41b0cb46da9
SSDEEP 192:sxRnRGCC/fE+sMn0+Z1lTHzoD8pLW/I/g6+WN0FbpQoXBDII5mrHeIosZFz5rVIz:sxRnPC/fPsMn04bn5/5cXxZeRVtZ6
TLSH
T13862B5A7A9785D7B8CCAD229F510FB27D3F50022A0D15E86ABFC891C11E76ED6106C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a0410dba0acca8f93d3282762aba7fbb81e47d421475ebd0c096fe8d48d8cd91
MD5 17a3fe2a3e5b3d3d2f9b0edfd9d05a56
SHA1 c3bb20b4e69ff3125dbfeabb93f3e3591cdea07e
SHA512 8ab98dd8f03f36d17ad552ecdd81c8a93f92bb7f29e6c344b8e0448a1fd663bd6aaf3e67e299c6290926a0f08aa8f9ba627f66e643a0b9dd6d5e601a7d85212e
SSDEEP 384:sxRn6C/fPsbWvrn04bMj/5bo/xZeRVgPj:sj6C/fWYrn0Z/52uRab
TLSH
T14672B593A9781D7B8CD6D229F611FB27D3F9042290D05E86ABFC892C11E76ED6107C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 84cb0dd481f9df842288e98955808fa92b9525f54419b57f28e47e1fa28d9f59
MD5 f32aa2c03dedf0459555cd91065942ae
SHA1 453f1acd1127f311c03c489dada94a7e6517a60a
SHA512 fe16ab669d6402c5a9530e6c305cae9a76f691f9bc34015ea10c154626aa9547462f796d0f85bd3431d99cc935a3dfe0b0b0fdee9a29cf3f60c020755c514f0f
SSDEEP 384:sxRn6C/fPs3Wvfns4bFCj/5bo/xZeRVgpj:sj6C/fOYfnsv/52uRa1
TLSH
T1B382B593A4781D7B8CC6D229F655FB27D3F9002694D05E86ABFC892C11EB6ED6107C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4b3d004e8b2fa9516000106ccc927d9de2a1d36fa3c087f5bed87fbda63cc041
MD5 73273e7d43bb21c3d0f5bfe6f4325eed
SHA1 4a2a4cc2c9a937ef79f15f6067711b830b51eb33
SHA512 997cd8e8787b026c05d6d40216db820ebd3669cc5bb8a523b6fd9b7ccff801049bdaf2c8e62997d92b3f25e8706591ce5c153894dd04bd4aea807ddc0a56943f
SSDEEP 192:sxRaRGCC/fE+sgnd+Z1lT5zoD8pmm/g6+WNy33/YC0RuODGeIgV/nNJ:sxRaPC/fPsgnd4btl/5+/+Z9
TLSH
T11142D9165A289D3B9CC7D21CFB55BF53D2F95032A1D11E48ABFC8A1C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 989a3f7fded392eaac2ea22543bb43bd10874acadfd77e5c0378b8ddc58ed762
MD5 979a090e85688a802beef86a454131ee
SHA1 cb1873ce48610412516ff9838ac5b03561963307
SHA512 fcb2b714022bbc0082494464c0ff4793a84eae25ede582cb36269172e5b27b474f80e45d7e525939b1068843cb80a508b309b7e476553eb5217c75b12e6f7aa6
SSDEEP 192:sxRpRGCC/fE+sMnd+Z1lT5zoD8pmm/g6+WNy33/YC0RuODGeIgDE/nNJ:sxRpPC/fPsMnd4btl/5+/+ZI
TLSH
T11242DA165A689D3B9CC7D21CFB55BF53D2F95032A1D11E48ABFC8A1C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 557620811288e7afa0bdac0c7b6825fd28b67d5cccac41b36e1599b2c319173b
MD5 064a3966f5c20cce2fc42b535f89d766
SHA1 7112e77078306d79992b459afff89b2a77f2f07d
SHA512 4e5f89bf4e1100289e568e13145d454f037b3ee597fdc5449f0df6ba0e5089567b71c708ccaa5f275a12bd4105ae16e43bd2bf0b9164f3c285792c3974986e89
SSDEEP 768:jC+vpm7pLuLzDQWgQ+f4+8F1+UoAYDCx9Tuqh0VfUC9xbog/OV5t0QqcmiroZ+:jC+vpGEzDQWgQ+f4+u1jayt0Vcg0
TLSH
T14ED2DA7B640DCB7F4F804ADDEC197E9B6DA802CB9698CD4047FE941C02C67EA521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 1KB
SHA256 515ac8beb8ca13c11c934db8143bcd6382aa4bab99cc26db1f04b7f54be19cef
MD5 559da0de5ba7e9f4cce70c45e456ae96
SHA1 f5316802305c335548f1341a5116a2aa13c3efd1
SHA512 07482cd3a4a421baea447c6842f2aad0ce45b7542882d7bffa017247bed604a224c3107fe8c887f40b5b1819013a79e30f9cab80734b9389f6ffac46fb9ceea6
TLSH
T112217FFF57100262EAA20AF7686A337C9B91C42DCFFE67D7D1AA903907A195B34185C4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 d88607ae577a69d46cb9e2f89a72eb5619a98ed776c7eb714a940a39d6d94b1f
MD5 b8a30b9a7581a1871f74d6fc3f98f82a
SHA1 d7e188a8e611c9177c660b1f7b5197f97b91a2d5
SHA512 33e8b9589c13e280db22e63e5077167191f2ea5414e4d2b284fde762c8d19623a6ae11ca0b700d9f3370f628d3521fd80e01f312036949a8d69db72b9ccafed0
TLSH
T1CFE0261109C8C2FEB89764870A29E728C2E8744FDBC8BD8A3F0CC84461C6905F19A2D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 b10886d28c9552cc2f16718e59a59afb997d550f0520a528dfa06250ce385443
MD5 8d2ba0836c296a1d7d25ae1b4f0d18aa
SHA1 75b843819c8a0242a01a8c8ae0c51b8680bac0a4
SHA512 645d98153eb03b97d0c82a0edbfb0c967d78d9f76afeae9499030d019f73eb188a0689f2b7ab2488be495054d633fbdb242e97cbbaae99305b80d1d46a6a47fd
TLSH
T12CB0223080AFC080C0808B30B8C2A88832303C2282320A0288B0C0B88C320E00322802
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9cce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9cce.TMP
Size 48B
SHA256 102c6e7e9c32d944080fd1e9bc106b957e4ed822781c4be6bd02c972d8b3e304
MD5 c62254b011ce64d8a3ef6850e40a811d
SHA1 ac082b159552f13bc9d6f74b48eabc7c56f4a807
SHA512 1c8bbd6f0427e35d56ec3aa01f9f777b6c786b435020382e11ad6872545b1cb46edf2d96795f54e683d594be7395080ca749a7b34affcfb3ce2070ca31ed48bd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 244B
SHA256 e1fc0b8048754ae6ec83d1d10924f53730d74adf6f0290b69b98cd5afec4f869
MD5 e5fa4f7a79c070f7492f2584538a00dc
SHA1 a477f6a4918501d33899062ef3bffc7b0aa56e78
SHA512 64cc1f3a50ea2114b201b4de935ab34dc7c51945bbfe8d88c74284917288bd93e2bcfe31c56de3b7c0006bacccf24f371b7f06168688c490e536649848b55a44
TLSH
T17FD0A900B716A252FE4A2B7901D297662340E43B644000D3DDE88EA02E4B2699E501E8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 fbf96f6bb7b3c414bf6d3247ba755e5addec702dae70291a8aae7ee7d22e1e1e
MD5 532ca92c560056f77963f0222d499098
SHA1 718f9d012ae4c87536dd86941a5cbd1579166bf3
SHA512 4b067147fa9369357bf45f1017be5d7907f6a9f357568e266eb0ead692d91916a833c6f059da1679849787f99944055aec2bb0b5a2e0b5e924b27ad4038d7923
TLSH
T16AE0D82119C9C6BB754524C75618F328C3A274AADBC9EBA53B0CD484628E940F347180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 857afe823b5550f4e9b73f15a023284ca5d55c38f62a5bbb47d7f0fbf81b5341
MD5 43a404993b38185b94cd23c55873391c
SHA1 f1b8ad7f3ff48536d4ef5cc6b022e9546e8812e8
SHA512 48fb2582fee4934508855ff234df2f20080a1480cdc8b173e3206df9f87b92d3aedef615149a37dbbee38de3d05895b7ef41e0a5102a85841c316006e5cb90dd
TLSH
T143E026B549CCC3BA681064C34B68B73CD2F0784F9BC9BACA670CC484E581501F2AA1C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 53b13d77febd1c156403c01c2f880cee20bbb3deae149f5456e85b7dd8c3f910
MD5 bc3bf2ce721e00522abe6306045570bd
SHA1 35b8b2b77dc6194005bb01d8d25430b82e6e95b2
SHA512 69a2cdafd4ba0099a3774a5f1ae0c00efd251514051d36d2956f72732e2673146a2c883cc9c7fe96686624646fbccf96140637b3e454a8d952c2eae96ecb0e64
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOeJOKaEqN14jv1zTxmPWsAnxKI4AVxMtlON:CbEBVj5JAdSp9/EgTK7j6dJOhVN14jvp
TLSH
T15EB1C907B0FA46403E3F2C0CC8649576998271663156A56B3BA8C5DB0FAEE515CFDDCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 e044d719911d0b0d4024838ce8ae7d62de2f19bb78df8042dd4d166e709b967f
MD5 b67e1a02128587306cf95c5e74ed247c
SHA1 302e389f5f89179dda5249e426fc5f197589e08f
SHA512 601db06fcf2916e9cbe231d5c902c551671429994e12d29e3893fcd5ea4621d982f72a0ceaec9868deab3912cdc43af1ed5ab7d1de4997b767730e37aa19d7c7
SSDEEP 384:DNrRZyCSDnxTICcnKndnGnVMEhIKyll7svbFKfk7:xFZJSDniPnKndnGn6yI1l7svbF9
TLSH
T15844850A7B747001EDE6D9725CB080771E3C716DCF22A6916DA254698EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a82dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a82dd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 8999351affbaf16b72a306120d9ab1bae4e06e4b5e2e0b3d83dc79eb07ac9423
MD5 262adeca641120e214e361c28d825a2b
SHA1 d392a724f7966bbd100c0bfdb018372d113f388f
SHA512 c4f2d81b09b4d566b6d67fb9f532c80763a583519386b53ebc3dcc83487b43e7f7c574e4d50be75c5a5be4f3720d25feb025bfd9906c8793d8a46d079859b52f
SSDEEP 3:MsEllllkEthXllkl2zEN+t:/M/xT02z
TLSH
T131440404FFC01545C5405031C051C7500371D415151157477CD104337CC55F00C45C00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e96773dd00f6e54d1f1c126ce4057b3b5262afc79dd066b8647ab97a6cb7dc00
MD5 10e035286569d64b5a7321f41c1ac5ee
SHA1 a0d23a29bc231fddcd7791ac492e159a20d23dc6
SHA512 f5e36aa6d1f142cd14a69eedb964376939b56b77dd422de635be34504561bf45f285b3f04291652219aa41e2af9680dca98b3abbe092ecc441601022617383bb
SSDEEP 3:MsEllllkEthXllkl2zEclt:/M/xT02z
TLSH
T173440404FFC00745C50050304571C75003F3D411151357577CD144737CC5D700C44000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 49f03ba795a7e14522746d9acd8196350e1b6188a132578f06458909725b46ca
MD5 2d0414ef3a9f70887872e6adce0c8403
SHA1 75539818c575fa2895804b1546d7ec079c9e353a
SHA512 635cdbb094f87728d30d5e4138dad278d59145e700e8e1b7af7912a4f281f2a686b288ff17bb20860333adc51dfe6ade2cca6472b4ec72ec966c3e504d908bf8
SSDEEP 768:uc31NpZkSp8+p3bd66j+4BRv86aLIWnfquhm:uc3Tks8+p3Z6n4ytfqAm
TLSH
T138F2AEB1ECA9DC338CF5C744B2862B43AFF4106395C51E94D8DD9B1D10962AE2B0B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 ce328d0614d4b1da17b7d8a5601fa4fa1a614e31f5358e4e6d1ffe67ba8a0074
MD5 163cb8d7c7deded67b7dabcf3fb73964
SHA1 58939e180c435024ff97af449512300814ca921e
SHA512 719845dcf0063a05b359ad3f7aec4a548e3a343c847f07464257150037893c928bdd992b7917e1e098c5759b79b3ecec7a3f7ad6e6604add3894f80fe1c5e0cf
SSDEEP 768:1FGt3lwgzxSXw2p8+p3bd66j+4BRv86aLIWOr9UDfquhm:Ct3rg8+p3Z6n4ykWDfqAm
TLSH
T182135A7EDC94C93F98EEB784B24D6A179EA40173C5F498D8D7C85F0C90721ADB70A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4f4b353c0c07eefc996b651866ad25432b02d2baf8908004ed23456b7b53872f
MD5 f82f9f06b73dd8fd8ae7ce7de62e70b4
SHA1 93d28d5424d1c30e66dbb58811f6f9a691f80e98
SHA512 6f23975e435534b95744c94c5baf985ed6e4dcdd6d3ae86b0988f18a85482aba8fbbdde81bcadfb97c36455b4ec8708e40e847f0ff19fe25891a74b445bab7fa
SSDEEP 768:dFGt3ZwgzESXwfp8+p3bd66j+4BRv86aLIFeB9U3qudL:Kt36x8+p3Z6n4yjg3qwL
TLSH
T18C037C7ADCA8CD3B9CFA9B85B3497A07AEF40167C5E49CD4DAD85F0C10A219D6307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a710c9a09177cea592a528225a535fde67e3550c5b629ca8dea57b60900775c4
MD5 79b070a452ce27b3957bbc5fbbe3c4d5
SHA1 c345c822c1da3c103ff86c58fb10f67efdb97536
SHA512 50181a00ce7d5bef4c1d53c443c4fbc4fc6bd441eeba8f25e793a636dec53cfcee011ed7d546579b3396e07ad441c0eac281f3e7c2b7c515187c064a4224fe78
SSDEEP 768:Irv+4UNbdD3dcZZNp8+p3bd66j+4BRv86aLIii2bwCl1:Ibsbp3GZL8+p3Z6n4yc0ww
TLSH
T12703BF73F9A899339CF6CA44B2467B437FF8519396C10AC4D5DD2B4E419A1AE230BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e685dd7831290b3bf8528121d6ef28ebbbe488066fcf3c092215f07684061fc9
MD5 161da36e4904547e468b103822bd3c71
SHA1 d9c631a33128902fcaee4fa771b92e3ec705a34b
SHA512 b125f0af3f1b09ccaf6a1cb6652a0ea09c6a793ffbbc1eac5981a6a7cba1fe030006bfa125cefe5eb141737c3973cbcfa3c76dccf954dc26b3f537df1819bd2f
SSDEEP 768:+rv+4UNbdD3yHpZk3p8+p3bd66j+4BRv86aLIWnk:+bsbp3+k58+p3Z6n4ytk
TLSH
T19E03AE72F8ADDD338CF6C644B2873A837FF4116395C10E98E9D96B4D41961AD2B0B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f36ed6b870d536320b8475237d157e7208d5cd45452f92aff6233cf789a2b3d2
MD5 3aaaaeab2e47ed7392d5bf329dee4253
SHA1 ee9221b3fc2b7e09b741497cd41141d341a62e73
SHA512 9e8c1738236c214badb6670c103986f718907ddf39a91a23f497bc85cc215fcb43d23850d8caed2a5ebaee9941507d860ec5d20323c8093a11b1fcc82c38e32f
SSDEEP 768:Wrv+4UNbdD3hDZkNp8+p3bd66j+4BRv86aLITn2bwCl1:Wbsbp3LkL8+p3Z6n4yW0ww
TLSH
T18603BE72E9A8D9339DF6CA44B1867B837FF811A395C10EC4D8C96B4E405629E270FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 1d75ae7dabb76bab74b5c115cfd585a2c95405a3cb788ffed5ea0b78219e2328
MD5 136a7c06fbb927010b63aa67fa46b2a2
SHA1 48bafd2a28234b82ffc0f44a003bdd13d9255a1a
SHA512 dc23c4fb0ee76f50919ecd7f3ac190e2d983731d6747c822c7b8205f983f291d1f2c37bf343156f6885759dd87859b41e2813659615083213774a41065b2cfbe
SSDEEP 768:Sc3yNpZkSp8+p3bd66j+4BRv86aLIWnfquhm:Sc3mks8+p3Z6n4ytfqAm
TLSH
T127F2AEB1ECA9DC338CF5C744B6862B43AFF4106395C51E94D8DD9B1D14962AE2B0B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 be80eb4e9e795e49bf0080451afe564c46625e7dd774560985bbc605f3b5a96f
MD5 4754893230cbeb60a2ccb570fc103e89
SHA1 467aedd1951824895b626cd32211a5decb9f595e
SHA512 e3cc171514d2d4cee53f4017b20b25536665c3686f3a6f6294a74b7bbe638e832f97957e94961d51d53edf41859b944e39670d151143b94ee52e9cd32153cfae
SSDEEP 12:TLJYJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isuQQtydc8jzbdc8n:TL+j0afDdWec9sJVUO68a8Lpe1jy
TLSH
T14E92F4266E352473E8DE4775FC9349900EBC139DC9A779548DD40D620DB1BC1A2952FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 270c7b90b2d997b50202536367db7e0225e2809aa97747c375c3771ea7cadfe4
MD5 718458cc249ff92ec9dffab83248be05
SHA1 d5c2850ea77aaeb22bba18119984e728ae4c77e6
SHA512 006a6f402a3e46a9141a644bfac2b1e8f5ac84b627992dd106ad81a44f7bdd6320765bf05d38408caab08a58aa1c493e9afadcf27121bd077044ce36aaabf1d6
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5a8a40.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a8a40.TMP
Size 392B
SHA256 188461800e8f1f3efc31913ca29c8c46a333c0aab275226b380e61ed2bc75340
MD5 2547875f32d0da80c936dae79fd6a699
SHA1 69b62a822485e2de8ea6a6ed21dcf5f3be409bc6
SHA512 2beed5ec0bb3166fcfff883a30adaa5ba7ea6f581cdfd8379d0ca44dbaf55d60b485bd176b0cf46154127f13cef738e94ba3f6f81e9792c429d54d91b17cb038
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 631c838e686fdea3ccaba2eb605299dacf61bdc3394db49530100c98f44f0641
MD5 8b1f847c8b8d553c9afad26d0871b59e
SHA1 4813dac7393b7700564e743436214bac1d7d2b07
SHA512 eee013be52a235a4a31230e6d81ebea56c3cb2cca28fb58ef80cc45da257314f6d5f99317c84aaaba4192b4386f49f4846fe0f6c55b5e582242736a8eac07d2c
SSDEEP 3:MsEllllkEthXllkl2zEfsa/:/M/xT02zq
TLSH
T133440455FFC0050DC54050314151D7500370F413151157477CD114337CC55714C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 a0b1a35a86cbd2e671521525fc6903162d450e3b301948d913d05ef458794c20
MD5 22215f69c4a5231b8c568620e783d7fe
SHA1 c64663b6efe0023ca5978374d785f1202d924d1b
SHA512 9e38513132672de4a65c01a6eca3c8c3a878cc6e11e2c0d2235798b78e3338c9a13a15d261c4b4fc6c60657f42407b98c8435aa4352366d1809843ddda068e22
TLSH
T1A5C02B79481924CC2B00043C6004012B19B0560023C413F48C1B8D80007537CD30817F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

008a3ada-6e49-4e4e-8c69-ef4efb239f6a.tmp

Path C:\Users\Admin\AppData\Local\Temp\008a3ada-6e49-4e4e-8c69-ef4efb239f6a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6076_1107095356\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4372-38-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-15-0x00007FF81EEF0000-0x00007FF81EF00000-memory.dmp

Download

memory/4372-14-0x00007FF81EEF0000-0x00007FF81EF00000-memory.dmp

Download

memory/4372-12-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-36-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-37-0x00007FF861C3F000-0x00007FF861C40000-memory.dmp

Download

memory/4372-13-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-39-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-8-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-11-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-10-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-9-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-7-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-2-0x00007FF821C20000-0x00007FF821C30000-memory.dmp

Download

memory/4372-6-0x00007FF821C20000-0x00007FF821C30000-memory.dmp

Download

memory/4372-1-0x00007FF861C3F000-0x00007FF861C40000-memory.dmp

Download

memory/4372-4-0x00007FF821C20000-0x00007FF821C30000-memory.dmp

Download

memory/4372-5-0x00007FF861AE0000-0x00007FF861D43000-memory.dmp

Download

memory/4372-3-0x00007FF821C20000-0x00007FF821C30000-memory.dmp

Download

memory/4372-0-0x00007FF821C20000-0x00007FF821C30000-memory.dmp

Download