902f12d9deea71d6e11b770bac772c2e66d1f9791b6ce0fbd8dbc3ee2f521103

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 02:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
loader (1).exe
Size 691KB
Sample260826-cmhtas1fnd
SHA256 902f12d9deea71d6e11b770bac772c2e66d1f9791b6ce0fbd8dbc3ee2f521103
MD5 649f422c2d9234aa4e2695669651cd25
SHA1 5e46e8835f0e522624e47d344b0d9165b578a6a3
SHA512 7b314f8bb0d5c3b2dd3c64ae8d8b2f971acda1f0ff9c0ad2be9d1f03172312e55beed22e26dde6290f70f124504e1d7dba37c29294bd52ddcc1469fe95e10fcc
SSDEEP 12288:QK8W6uGSz7PfXEWshqc2DbwMt3S6weB5ImwS/Ui+n8EK:QK8Wue7PfI92QMt31w65lwS/Ui+nXK
TLSH
T14CE49E1ABAA452F8C07BD079D987651BFB72384803319AEB23F059751F636E0DB7A710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\msedge_url_fetcher_124_481647921\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_109_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_447592766\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_299201085\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_241770959\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1089642811\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_299201085\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_241770959\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_241770959\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1738604425\_locales\sk\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
204	cmd.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5460	msedge.exe
6044	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321839122850059"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{F9CE9AAB-65C2-433E-9088-D49079ACF2C9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
2656	msedge.exe
2656	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
820	Process not Found
820	Process not Found
820	Process not Found
820	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
124	msedge.exe
124	msedge.exe
124	msedge.exe
124	msedge.exe
124	msedge.exe
124	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4136	loader (1).exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
124	msedge.exe
124	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4136	loader (1).exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4136 wrote to memory of 124	4136	loader (1).exe	90
PID 4136 wrote to memory of 204	4136	loader (1).exe	91
PID 124 wrote to memory of 1484	124	msedge.exe	93
PID 124 wrote to memory of 880	124	msedge.exe	96
PID 124 wrote to memory of 5460	124	msedge.exe	97
PID 124 wrote to memory of 880	124	msedge.exe	96
PID 124 wrote to memory of 880	124	msedge.exe	96
PID 124 wrote to memory of 3612	124	msedge.exe	124
PID 124 wrote to memory of 3612	124	msedge.exe	124
PID 124 wrote to memory of 2056	124	msedge.exe	100
PID 124 wrote to memory of 2056	124	msedge.exe	100
PID 124 wrote to memory of 3116	124	msedge.exe	101
PID 124 wrote to memory of 2056	124	msedge.exe	100
PID 124 wrote to memory of 3116	124	msedge.exe	101
PID 124 wrote to memory of 3116	124	msedge.exe	101
PID 124 wrote to memory of 4920	124	msedge.exe	102
PID 124 wrote to memory of 4920	124	msedge.exe	102
PID 124 wrote to memory of 4920	124	msedge.exe	102
PID 124 wrote to memory of 2876	124	msedge.exe	103
PID 124 wrote to memory of 2876	124	msedge.exe	103
PID 124 wrote to memory of 2876	124	msedge.exe	103
PID 124 wrote to memory of 2504	124	msedge.exe	104
PID 124 wrote to memory of 2504	124	msedge.exe	104
PID 124 wrote to memory of 4116	124	msedge.exe	106
PID 124 wrote to memory of 4116	124	msedge.exe	106
PID 124 wrote to memory of 5424	124	msedge.exe	107
PID 124 wrote to memory of 5424	124	msedge.exe	107
PID 124 wrote to memory of 5864	124	msedge.exe	108
PID 124 wrote to memory of 5864	124	msedge.exe	108
PID 124 wrote to memory of 5864	124	msedge.exe	108
PID 124 wrote to memory of 1784	124	msedge.exe	109
PID 124 wrote to memory of 1784	124	msedge.exe	109
PID 124 wrote to memory of 1784	124	msedge.exe	109
PID 124 wrote to memory of 1968	124	msedge.exe	125
PID 124 wrote to memory of 1968	124	msedge.exe	125
PID 124 wrote to memory of 2332	124	msedge.exe	114
PID 3404 wrote to memory of 620	3404	msedge.exe	115
PID 3404 wrote to memory of 6044	3404	msedge.exe	116
PID 3404 wrote to memory of 836	3404	msedge.exe	117
PID 3404 wrote to memory of 836	3404	msedge.exe	117
PID 3404 wrote to memory of 836	3404	msedge.exe	117
PID 3404 wrote to memory of 1896	3404	msedge.exe	118
PID 3404 wrote to memory of 1896	3404	msedge.exe	118
PID 3404 wrote to memory of 2340	3404	msedge.exe	120
PID 3404 wrote to memory of 2340	3404	msedge.exe	120
PID 3404 wrote to memory of 6040	3404	msedge.exe	122
PID 3404 wrote to memory of 2788	3404	msedge.exe	123
PID 3404 wrote to memory of 2788	3404	msedge.exe	123
PID 3404 wrote to memory of 3612	3404	msedge.exe	124
PID 3404 wrote to memory of 3612	3404	msedge.exe	124
PID 3404 wrote to memory of 1968	3404	msedge.exe	125
PID 3404 wrote to memory of 1968	3404	msedge.exe	125
PID 3404 wrote to memory of 4520	3404	msedge.exe	126
PID 3404 wrote to memory of 4520	3404	msedge.exe	126
PID 3404 wrote to memory of 1680	3404	msedge.exe	129
PID 3404 wrote to memory of 5056	3404	msedge.exe	130
PID 3404 wrote to memory of 1800	3404	msedge.exe	131
PID 3404 wrote to memory of 4272	3404	msedge.exe	134
PID 3404 wrote to memory of 4272	3404	msedge.exe	134
PID 3404 wrote to memory of 1368	3404	msedge.exe	135
PID 3404 wrote to memory of 1368	3404	msedge.exe	135
PID 3404 wrote to memory of 3632	3404	msedge.exe	136
PID 3404 wrote to memory of 3632	3404	msedge.exe	136
PID 3404 wrote to memory of 2656	3404	msedge.exe	137

C:\Users\Admin\AppData\Local\Temp\loader (1).exe
"C:\Users\Admin\AppData\Local\Temp\loader (1).exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://guns.lol/manlikealex91
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ffcd606c188,0x7ffcd606c194,0x7ffcd606c1a0
    3⤵
    PID:1484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,15028186696542144480,5375299654913300284,262144 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:2
    3⤵
    PID:880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1704,i,10190879795825258107,11032737770918446502,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,5292033244407830082,13460975934079748538,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:13
    3⤵
    PID:3612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,10119025970310931566,10183823011749261588,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:2056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,11798996807405305277,6243451954053787456,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
    3⤵
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,1341606008052883166,17837332260042964590,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:9
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,13539194034382896341,1365035269482105077,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,17405904819808251630,918059448108359602,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,802924286329407542,8466540119362185480,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
    3⤵
    PID:4116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,11435875682437713921,15489393957768552284,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
    3⤵
    PID:5424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6032,i,16497222146651702105,12769950220787136806,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:1
    3⤵
    PID:5864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5340,i,5646418165894653351,12283136322504036930,2097152 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:1
    3⤵
    PID:1784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,8866088027090654692,2365377443509621860,524288 --field-trial-handle=2464,i,5808973158128035137,2349514088214765439,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:12
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    PID:2332
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c title GG KLAN
  2⤵
  - Executes a command shell one-liner
  PID:204

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4316

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffcd606c188,0x7ffcd606c194,0x7ffcd606c1a0
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2072,i,44152796787063233,11075925091431330135,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1824,i,330723184208994567,11127562259713906954,262144 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2688,i,16507818475208114735,15975747082964290160,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:13
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,3384420705178815361,946500340595754934,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,9780383423983439249,3679444514000985698,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,9780383423983439249,3679444514000985698,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,13941595528750020392,11823040946378771484,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,8297490911315862864,14361868563401855256,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,13810598519058018434,738530107091786340,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,13384852861670818985,13529996806343701451,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1216,i,5172222105523724464,1076900962898947052,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1220,i,17842063765477764199,5942671600136862832,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,8219138678784045531,16407791449317813241,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,5445701008810807083,2936418350764990414,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,18102888516361845248,6459401864681438093,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,7547572261953884492,14073953356676194101,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:14
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5336,i,11221359518112883601,4535091714539756588,262144 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,15362872545204730931,6909673024863869395,524288 --field-trial-handle=2368,i,3060233275888020348,5392731408071138617,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e4dfc51473e3a2842307065a23d64e78bb103d68ca0820594443bf9900242fa
MD5 5d7af12e326b0b602e960cc7ec6367fb
SHA1 4969f639098cdc8a01d79c70f2b777afa1a23ea9
SHA512 d93ebf8e4f6e9329c2747d4f830851bed75eeeec628e4b383e4c029405f1b9d2edf644b6fbb00400e7508f73e88f549762e25538cd44cd4f943e742ca3bf669e
TLSH
T1F3D0237026A5BF9DF51C3539B2D00154956469A28D15175A5100543DDD3E1C30ADFCFF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 8189ff6ad127632a5ebb822459b1e29a96928b5c5034d9893a6be6bafff05466
MD5 0807b58c34958fe6dbe3a9e509c639e3
SHA1 b5c0ea720406878052ade23fe01789e55cb73c5a
SHA512 7be5f72f4c0106ba37456440baa7c7f9081aa59afc28e840350fa1eae9e62917831e587b8981dd9c8dc2114449f312b81ad2a746df7b94bbda15c28634506c3e
SSDEEP 384:c/tFgNs8zpSCS50Jm2E8EvSKS/SAM5HGr1rorJpK:mgbSNWQSKSaAMV
TLSH
T16913D6BE72049CC6C2EA413D534B4B3623F6D4A8E9D1D217C7B970449354F639AEEA07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 fe3f6934fe840c921302242ac286536b5f0a3f1ad69d833cac87634a710c41eb
MD5 6c238cfe9a457ddc839983fb1590a678
SHA1 0f1e827f3c32f88188ccd3efda9bdc190d66829d
SHA512 eb8ecc2a879beaf090f9511ef9ae03fca450986ac4cbba50cfda28d43aaddae2bdb69d54985ef75ceb72f39356add451bcd6730edc269c0072bb981d397132a2
SSDEEP 1536:zHL/7QL/omlW2vNF3LuwH3fx1E/qZ5ZfBs4dyMbBBx6Nep:zL/UL/plfwXcbpTN
TLSH
T1AB444FF71911A01BCBA842F5E6033A3DD1B7851D7CE1F9A9E5784CC52825B32B6FCA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 573157fe8d55df33a33ab33f17a12263e6b84f600ebebc7851130f2a6e69f558
MD5 ef3ab0b4cfcc3058469efe923723a3af
SHA1 a805c23b63fd0496c61a328683048c3077ef63ed
SHA512 dd0b1a0e3a11479095d39d3c1d5b7d81dcadc7ff4a85c7c69285d98bb71784def926f53ad29d5d0576e529a33df4c3c0abf0f13e856b90d09af4b7f250c3bac0
SSDEEP 3072:Fv9G+HN42FBiHK1LOLm2ScdDkf0K0m+eE04Zxva87:FQ8u2FBF1LTs9KYeE04Xa87
TLSH
T118254DDECB682D82CBA7D770B5D0DC0B3DB01182FA99D0D36940C5A947C2BC576E92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 079861e5fc7d7812a072d1dc53e08ea2843f384c509edfb3e64b507df75ce8a9
MD5 ee31a75f35c47d690809a352ee522cf0
SHA1 ad1294e96c597c51cc09fc61d18aa0f37d66d323
SHA512 f5052129a73ad898c78d5b4eb4d0d02882c65d248306c72cdb1b87c94aec3966a3cfa9e396f8fc3b74d9a687bec04374311378c7c4a91dc1411303f5b611ebb7
SSDEEP 24576:UHNIZYfNbAojX3W7lB6KXxQeZxCrJFnC1xR48XodveAZAb:UtIyFb1jWD3Xx+3C7R4rdveQ
TLSH
T13E168DEDCA7858C3CD639A30B5F0E9477CB413C3F594C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c30d1eb98d3c3691c6d7cb62aed48f0b699f59d864c39f28c25567392e9f0e00
MD5 73fbc5e77b00954c5c66b1dcdf460f20
SHA1 9927bdc05b2d207f3c479426d8bb3d30576c8855
SHA512 ab9e7d38db986fda0665c2d653052a18b9cdc24da780eca6fc40a32306bce1e3b49b57743e473ad3d6087faba7cee7e8b255a7396b815b2d73fff53fbfb7ad10
TLSH
T10981C8C1636D79D2DF248E75AAF3248935FA50A5010FCF0290825EB4E5A2FA220F1C7B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597526.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe597526.TMP
Size 3KB
SHA256 f8fc3c5e3e675a7e16cb57722ff3f1a2c5d378d1d48e9d3940a70afbcb8401e2
MD5 457be3efa8e5d32eaac459d74cb1c69f
SHA1 0207968a8b5b9ac2d9579b4e7e1b55e9ad7e0293
SHA512 456a5f97b056343e5d8a1ceb5f070bc9abba972e6957b266b816cf849f3fffbc35cb8249013ca90023b0fa105c43a01ca61db2c58c69402910b5a497d7184b25
TLSH
T1D5519591632DB9D2DF258C75AAF3548D31F968E9010FDF0280426F34E6A6FA470F106B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 1a5566308cf4b7868354c545506723cfeaef0103dbdd4f927a3ed8cba66104f4
MD5 01a489e23a650222aa99ee040171f23e
SHA1 6eb33d71fed659ed0e4ec7797e4216a1595fad70
SHA512 8d4c675f9db90650d1a246296eae9b1672f2bde95a38fb9382b3c239bc2e00e2d8f47a038ba2bd3575b76b25114fc5d50294d4e630a9eb7e07f61b7508ce78cb
TLSH
T106E020B564CEC21F6DE434C792355F4891D8355AD6A5EE075B04DCC87A46001B356746
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 322B
SHA256 cbfed5b2681a905f1789d42cbc5968ea9c5fb81dde8ca18a0cfc76bbea286f84
MD5 253ee6348c6e4c5d7629637049aad010
SHA1 3783737c91a50740a7950d058c369640c99b6c39
SHA512 fba97dbf4772317a9c2c8dd748d66f5e0c2108a73fa63a0a39d991c1b36e85c0b0b1f51acf997c093c3c58c889ee647bdc5f0aae0f32c4a92a68b3ea7262a2c2
TLSH
T12FE0866916DDC22E645474E3D6B8930CD291750FE7A87952572C88497153148B3DB3C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 5d5d4469b3c16c5c97b2d23e5795485794c00fb61ea4de74d999096899020fb2
MD5 97792ec8e18def73c35ec4081e0bd38f
SHA1 a532ee334a228806d3482f4914c64342d0c93457
SHA512 933d215c93b417cc2bdcdfd9b7f2888b6b4371ff3ad7e4c67ff2e19f42214e160be730952c7aef6b590d0eb16e017903eae7264b36d330ec6d3019d87729545c
TLSH
T13FE07D2807ECC36BD45478D7C76C470893D2370BF2A83D025748884C7163A81B38E384
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 49b143eca3f663b0c3b8b449c3dca28215c9bd83ef51d30bebaf94b04d579242
MD5 efc871119dbe17cfd680acf05be01016
SHA1 7e315dc0d51dde411b6f6173efc28795579eb53d
SHA512 17ecffcad287f00457393f416f355295437e671f5d4e74b7b7545c3f457c88dac6085189a9a250a55cba0fe465bc57dfd4467f0c4d2f549b297128fbfe7e32df
SSDEEP 48:IzBmw6QU1PzbBozolFXv/lsz4UCL1ezhNqMVMcEGFkGlRPjcsO:UBCxNo0lHKnqMECRhO
TLSH
T1B3B218432F347413EF412E3F7A1B5479D93BA32C5FA69E09346028518CF840A95792FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 5bdc4b17b80b98edd73289d251bb621a728fc8a55b9890e76b07e470ea69753f
MD5 e0ab62e1506645654bfdbfa8c85b0bbc
SHA1 c059f2d5ee2465fd58084b4f280e5e34bbddd863
SHA512 a58ea136764cdf19440fe49971a18eae3914e87087588c336efabcac897906bee9728c0c250c99afbc8d319afe8dc947d988b3a7c16f3263858a5bbe381c4eb5
SSDEEP 96:re4TrWMHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/5obbEOVpZf24JkMfXSFRe:re4gH+bF+UI3iWGVoWN3qL/4VVV63
TLSH
T1F1241F4E5F303712CDBD813668E744A35C7DF03F8B1326CA686114B5CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 482B
SHA256 e763a1ba380eab1f44a2dbfd0779c6a836f7f993542b063880139f9c92d7d6c2
MD5 db26b1455adc334edcef087b110a5989
SHA1 c87b585725ff5e40ecbc12adae4caec83a7870bf
SHA512 ffa0d6c847ab0e49a37ce49c578088427191c96342015b7c6313dc0e07e01ff920521d99541312b8be833aee939945560fe3df8fba4b10037d1ee59219856198
TLSH
T145F0E2E76C2E8813B75042F03CA3337CDB2B521D8DD8A2E5CF0AB51714A01F448E8E18
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 a750dcf071aa2bff8c076eaf5fc4cd6888fbb3ace25d45a3f6b9a505baa1e217
MD5 d6abba0c5fb2677f842371e8102bf832
SHA1 5824bde2ec0a344d192da547f63786d0bbfc7497
SHA512 0417af722aa7ddf05176ae372cdb84f4e3fa5b8b404b920d64a4ad529236ade8fc83569ac7396edac28625ed2bb3aafd1b468a6a0ff96c706677de5f6f136c77
TLSH
T1CBE020B585DDC21F6555609BD61D770CE3B1350BE7A87E019B049D89B147004F3857C6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 8e9d1fdb2cb1f3c74abebc274649e1e3f4faa749c6cf51c2d92310ef5b85dca0
MD5 90156dc14509f03c9217d543cba1343b
SHA1 425bf5eff5fc359cfe6b4f7ad883de5d8a7966c9
SHA512 65dd815bdd4d7dd31a29e0c86606003e607d51999af38e68e2e1cf960a8d172dcc98649c3184bcea8f482714fa1890a33dc03bc60ed69c6843e74b0aca1b008c
SSDEEP 48:Txk/LopFMaty423w/a9NUuTzEcwG59hiulsMzn7jfM4yQvOZ+HNOSFc0bM7VoHS6:qDeMatha9VL1B7j+5nSFsWTQsCnCcK
TLSH
T129B2B5AE2F306512D0E54B74BD9684533FBC101897A3648A9846E4F3CDB12F7BA26422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 cec39f3cdc5b4f3100a747d646c0320b82aa50af9fca0625ef761455a08cab5f
MD5 dafc60b6201ccdc41ecfc25b8c1a660b
SHA1 48317e345ab41b0cc9a7e602ad0cab5faf77729b
SHA512 0e594614a5f94edd5392d633b1f488b710b78e47b41da14f2e0b97cd2c8c90260797c759ba0675fc477d9a393819068432f3ec61cd6d6fc3ab7c2b436d83dd46
SSDEEP 96:D7On24ohiVaiZwXpzraLZZepm/La8/mMw:Din24ohiVaiZCpfaLZZepm/La8/mMw
TLSH
T110A1AEF3C3E9866ED91152F4EA147E1BCE1D0515422C3C0AC5D4AF1BABE28B1E151A6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 46e561531539d5dbb6527e2612451fe31df0a266272f9b6b2a14399534fffad1
MD5 a87d01984e16d4c26af4f3100db71bea
SHA1 292e602e6f8ef9f36f74010b9eb5844f3094c254
SHA512 4f76c729755388743d84f9cf3781f59b0eab0b3fc7a7324933f4fb6d77cb597b968524144bd914f984d6038cc351215801dc3ab3a39394cc5cf5baf8f08db27c
SSDEEP 96:D7On24oh6dVaXzBLZZgm/La8/mMhwFiQ3l:Din24oh6dVaX1LZZgm/La8/mMh4iQ3l
TLSH
T111B1A0F3C7E9866E981152F4EB147E1BCE1D0515422C3C0AC9D4AF1F9BE24B1E151A6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 907574645c3e45d3bf00877e844eb3b0ba7c833e111e9191cf6ac8cd0bd49f1a
MD5 a33bc4ee0f8d18ddcf2eb9ed8cbf5707
SHA1 af919627d59c8d1855cb3c388ed19d2118551271
SHA512 c1f7900ee7f4c7a981a3c11335d3d40103691e1368f0593a5b56e2939e80d37d2423dd2b22f7551402a42dc38c14e193076e01bb523627093ec570c1f0ab1b6d
SSDEEP 96:eIEumQv8m1ccnvS6VpUBStfORnFHJjE4g:eIEumQv8m1ccnvS6L
TLSH
T12CF2CDFB07276206D99484B0E400AF8FAF16004B46B6B6DC76D447F3F7921E2B179B5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 517B
SHA256 01a150c225b028513597d32d2687b006cb0ebaae25577aa44a3502ca54f86ac7
MD5 f892d90213797e56be70b4f5dcbf57bb
SHA1 4e738a1d09c49b67311cb62d4bcfab304ae09e26
SHA512 8bdae41ed33b62d2b680ca1b6faebfb7178484da6e1ae79579f9f26944dd6424bd5caae4d355fc7501c8b798715c7b478466303f01b2a84b4e05283ce25d4612
TLSH
T12EF059A3D47AF8F35078583E1D407C01663BA4360110A8F9E997823CF0914EB1F0A532
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 394e604ed1ef885399cfc3eb4ca90434e03d8d1b3d0087890316ee4404959280
MD5 e843bd3a0b136f03e83718ef8e29061a
SHA1 168ed2be0ebf61b08fbd6f76bc3b6cba6e771db2
SHA512 ccfc523b00ac7e004554e2fd14177f24c28d84097a62c802c3edaec78dea7df4c5d55c71b3332038ed2605811ea35c1ffb411b052d302a8e666a5a093b6454bc
SSDEEP 192:sxR+RwCE/fFszpWpVdHueZeKhszoA8pyk/g6+WNeE4X/eB3ygqCY3GdIgvGuAJ:sxR+tE/fFszpWvdOYN3/5G/eFX8
TLSH
T18F52A716A924997B9CC7E61DFB657F63D2F91022A4D06E48A7FCCA1C00E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 76600885264b196bfaa9ecaeac031bfa8990e5aaee709237f52c5a9f498fbfeb
MD5 fb13c2f1b1dd7012a4a1710172bacaa6
SHA1 b6da739ba5901dd12c32dc6f63ef9eac4be74d23
SHA512 33e016475c2afeddcb11c0c9bdccfc954dac4eeca182366ecbb5418fefcc198338056d11e3cb9070dbc823fda60884ece9391491a159af8845425baa3ad0bf71
SSDEEP 192:sxR+RwCE/fFs5WpVQXW/uwGgszoA8pyk/g6+WNeE4X/eB3yg1CYSgdIgVpJ:sxR+tE/fFs5WvQXBpW3/5G/eM2B
TLSH
T11352B716A928997B4CD7D21DFB65BF63D7F91032A1D06E58A7FC861C00EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b6d42390839e3d15255c1b6bd23ed8590bbfb1da0bfc79476d996ab26f6ae8c0
MD5 b36208214789ea4858caeeace2f93a8b
SHA1 47a80eaa97cca6fbd33e23d3289f5fe7326e5844
SHA512 2bc306dbfe8d515daf802dcf1f5f105e8bd7538b3b7e88f607ffe1e146ca059b5a30390f09fa2724f3d53a7fb75b94856687e44420e17b6dd79473d7171b2399
SSDEEP 192:sxRlRYCE/fFs4XW/uwGxszoA8pyk/g6+WNI4X/eB3yoxCYrGdIgVpJ:sxRlRE/fFs4XBp/3/5L/eYrB
TLSH
T1FD42A8166E28997B4CC7E21DFB65BF53D2F91032A1D46E58A7FC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a8da342825aa3209e1a50ccf5446ab5b50d6a5a35e54900c8ddc76f5c688ff23
MD5 f1299203170004f37d887bb3a0e599dd
SHA1 0fa3a1fb380cfbafa11c1186fcdd02315977ae4d
SHA512 27e4b4b0376a346ed3a73a2509b29ba830b1de9464e0c3a096eb2d43ff48ca472a9245219be4c4bd8b11482d37f64282c296fead8d99be8f65a6f64a25532833
SSDEEP 192:sxR+RwCE/fFszpWpVdHueZeKhszoA8pyk/g6+WNeE4X/eB3yg1CY3GdIgVGuAJ:sxR+tE/fFszpWvdOYN3/5G/eMXO
TLSH
T17852A716A924997B5CC7D21DFB65BF63D3F91022A1D06E58A7FCCA1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fe16e6aad631e121c45a2f04c7d8be32e11d9008f558875112fc05825b340a81
MD5 48c3871243154baa71f77c20dcb012ca
SHA1 987315a760c3f8b5d2a925f29c6790377a1a1775
SHA512 2ee67ff2c4759a17843e80545c187a16b5d0891b7e0c3a5ad21ae0f0da4a8178b19cbec51a48118f6f2209ea83abc0be6c11b47b7be5e1864ba8ad232954f970
SSDEEP 768:j26HWo7pLuL7MRWgs2fw28F1+UoAYDCx9Tuqh0VfUC9xbog/OV6Vuw1ro9xe0UrI:j26HWUE7MRWgs2fw2u1jaR4wOgI
TLSH
T188C2CA7B740DCEBE4F800ADDEC197E9F6D6802CB9698CD8047FE951C02C6BEA51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 781e355fb41e333516a3ff819ffbcfa9b2a466df50309d105cc600c9963fd8fd
MD5 8452beb44a08578a5b6ba62e74a9be59
SHA1 d075510063956709e9368680138011110f1d72c4
SHA512 e02ddf709a889f913395763d0f7b4ad05682f563904aef7fd3e0972005038e0559e5ffcc5ec102dc2203560269e87f19173cb9633b99025dfe48563ea41dbaa4
TLSH
T150E026B046CCC27DA0562097CA3C970CA3E9F51BD2E83D02AF20CE4C6183904B79A281
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 fcf07d18f667e21fa325ce68f990e5d66c5beb75ae76e081d7961186c1f3d281
MD5 38de0bb9ee12f50403d39187a1ff3aee
SHA1 3389e8ce9b9259d8f81ef0b6d2c58f93045b6a79
SHA512 bc49788885ef35f69a599fe3787d8c6a6b84157f75e11a46438909419255e56e8eccf554fec7b997ae38048ae8822fe83db4ef8409454a8c7c6b209b170f4f5d
TLSH
T137E0D83456CDC33A718520D7E638E30C91A3F947D6E879216B08B548624B5487347641
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 dc5ad6cbb8d2769d5567b5128213e2b1dd9b806fde2ac9855cf1b6508eb1215e
MD5 03de26da568ab148741ab3978dcdf1eb
SHA1 01a0b18a5c6a43c665873b2b0569fd9f61fd2efa
SHA512 a386823a1daf02a38afc2745950d522c3c076bf15d68710d2cfad869a6ae9613fe68616dc549effa38ef24cfde7f6d38df75a826b907f30b72249a090b89d80e
TLSH
T1E2E026B487CDC339544860D3C674975CD2F1BE0B97E97A2297088889E643204B3AA6C0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 303e5c7bc221b981be85ef242faf0241d08fa688802cb14b800c5319f213cb9d
MD5 c5b0c5e7e71ad2211340e1380a04cb38
SHA1 37001be8e71d2ae2709c3ccbeb4750b5769cfef0
SHA512 172c046bf46b42578d6f0b431a2867f437d21403f93fc9d5798ed124ed2ea7390fe0ed7c1e2dd056ca8226353460e7245f83d1af9fbe91157344a93a28b6f983
SSDEEP 384:DNrRZyCSDnxTICy0MEhIKyll7svbFKfk7:xFZJSDnivFyI1l7svbF9
TLSH
T18644740A7B747001EDE6D9725CB080771E3CB16E8F22A6916DB254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 984a417a4e2ffa3101fcb3886105d2cdd704894ef08ac59f35784f6b022da83c
MD5 d2cd44468403a51b916a3b23a1bbe886
SHA1 4a755208eb6599b1d96fd88c0440005770eaa8f8
SHA512 c3b3a8adb5b0b8246ff88d472be982396a92411b3757a7b433ecb69770aad7856f6dcb34420085d9d32be5f87a4f1975220908a0f3bc5247a83c453773ce4625
TLSH
T1F9F0C2CBAE030977DC02503151336782FF6189CB08246867438D246A2A1E1F1CACC1D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 57f27ff033dfaffc9a3823d9cca76dbd8a712d97737f8dcdaf80455b7dfd2570
MD5 d84e6af936877a7ad2f9f45e14eab024
SHA1 2fb97151c454df1d8c9f04e8c93f8d60b5b0ed4b
SHA512 919cf228afc6cc92ef64d9a7b8794661ecf31f392c3c900e71b8c19e5e129325f244cad8f7f7d78c60e0b7f2384d5a3b5a10f01b1ef3558368f1b0c845733c6d
TLSH
T1C4E02624ABFCC2AFA99430C751354308F3843A0BFAE83D065F00E48DA442500B38A281
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 97eae66f849a6e7c07efebef8b548b94cd9c2ab2b2b3ef6e60cb23540ca14695
MD5 58a6eba701d969d22b460ab15e019116
SHA1 7e91b8415e271e902b449a714abf0a003b23ea5e
SHA512 78afa03cef73b1097318a2c86f7968dc12edb40f72f108fe5e567bcc2614638a9780673dd235a29c623d9f9c8d5f0754b3f322e2bb3c2e9b213091789c27b12e
TLSH
T12F21B515F330D014E25A827A607F9B351738E8569FBCED0F857A20746E72A440D4B7E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 2a9029aa387fa3e1212ac9fe7c650766241199c45ece32b2b37d7bf28e83bf57
MD5 0c7117aeff2895905e70a5437bc42c04
SHA1 f84432aa67b6577061ae827bb8d6274936659e5b
SHA512 73afff9bb1ebe7e77e03def71dd0424f7d0cde8d7d27e10a237e8051920cfa3ad5db08162d9601c97adbf99a96549e42286a953debee66de8cae758da602bbbd
TLSH
T14DE02628BAECC2EF915030C341658348E3A5394BFAE83E026F00ED8DA143541B38E281
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a667c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a667c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 46f74cee5d2e47a0869c05ed5227543987aea04fa2cb0278557c79aa6762eb66
MD5 c69cda79885a1ee5c315e1e5b2ca78e3
SHA1 cc13a426325eb0d353e6b1892206df0a1b9bc857
SHA512 4494b67ea9deb837446d559ec2082956589f0fed7045a001e07cca1d2dddfda7daeefa901f469e8d40e4da389f9e31cd996362b5633e89b4bbe209a8b3b8ff81
SSDEEP 3:MsEllllkEthXllkl2zEfls/t:/M/xT02zN
TLSH
T1524404047FC0040DC500113054D1C3743370D51005155F4374F10D33FCC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 c0152b38b7f07179ca3e2ef852ba0dc646dfa78b9e3662d8d55124095d3023aa
MD5 893cdc0a0bd227277181fc1265f13ec0
SHA1 8cfc77921cae620e91fa0cad48f979b398739b61
SHA512 2497fe3a6e28fe538bbe9f0c56ffe1924db1f764f3bc082f84b336a3d7fae467a85a11466b589c07fcbd73b80c409ae02cd764bce2d0458535a8998017d48118
SSDEEP 3:MsEllllkEthXllkl2zEflmZRq:/M/xT02zXv
TLSH
T1B44404047FC41F0DC5011131C051C3703370D4101FD1775334D14433DCC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 fdc6217dba507d4e03521938f36252d23d6f506aac67c8b34139bdbd214759f1
MD5 8fefc5246e73a8b8c1a6744821c82fd0
SHA1 4812b2e16a4dff460432919ef2cfaccfff59a29c
SHA512 0cf75cf97fa934f2c58942e0983ad1edb80114b133feddf7dff2faf493611ff39c64d7487f8f3cc00aaf986d9c0ff57bc52e3d51dd497d55161600d5c0141daa
SSDEEP 768:0u3ztC/TBOWQtt2jONXyer1IRCznieIAV2:0u3EbSIqnKI2
TLSH
T179E2AF71D4A59D234CE6E3D2B2473743AFB8901795C88B50E9EE6F1D02D7A6D130E81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 5e20e2ebb624681e3fd5b43097a12f541c3c72583c963c3189a761ddf21989d9
MD5 03fc9b60f28c6646aa7c08369fb9ab19
SHA1 e97eaa1d822bcd072696301a97058026892a3b98
SHA512 b180e5ceb5efc47b3a8f45a560f01191df8195d37574305dde58135667e31c3c22f3e90d03139d8387e62fd24fd6fba6dd70dfd203a7a2b456577af12a7178e4
SSDEEP 768:Lrv+4UNbdZ3r+C/TBOWQtt2fONXyer1IRCzni9qaMbG0j:Lbsb33PXSIqnTaeG0j
TLSH
T1FF13AD3DDC249D3F8CAEB385710E26133EB85037D1A44664DBDA2B4D817B89DF30A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 62KB
SHA256 c288e919075c811d8faa8bc2d561ca3b7c9de0a2b1eeaf4e616b2f588b9fd23f
MD5 bb9f8a4728e19b8b77bff0ab0bc3de74
SHA1 bacd67fd13f71ced82ac1c0650a0abca7aa7553f
SHA512 043df71fd6c6552792e756021553cc99c0dc8f31b1685fd60b4a49114ee8c63369b60cb05b4876ba946adc42d7fce7466a545a7fb9acee2c53cb49b61bfdcc4a
SSDEEP 768:8F0u32wgqUh0MONXyer1IRCznisE0fFHHbyKLN+uo2hDk6efQX0C5kZrbajhrV2:xu3obSIqnltH7yKLS80WaHaNJ2
TLSH
T18E535BF688D7893BC89E5787A33D2E069ABDC067B5988990F7D41E0DCCA25BFD305811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9ca081ec61e6002492d7c29f390d8a1021fd94f968c15b670c255e8cc7c9595f
MD5 4572e787edd8b47412172b1d5a07dda3
SHA1 c34f0c55f8963191042a095346bd81e563be74e5
SHA512 626997fc35dec664d57b5da4e3de603bc838030a8ef5c045fb42ad09fb2d94c2b9b105bccd9f7ae0584b77e5267b7778d85ff8cc4d9b104af285ff9b6a959a84
SSDEEP 768:hrv+4UNbdz3pY/TBOWQttgONXyer1IRCzniBreVH1SK7:hbsbV3WbSIqnQEH1l
TLSH
T11403CF32A4A89E338DE2A3D6B14777037FB86057C6840B90E9DE1F4E069B99D130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fb59df3c45f0c8a9795f970c9da42a905e1fd365f4e44a14bc57fbd451de0522
MD5 f95a8c00d72269c6cf710d338878b511
SHA1 7ca2d2fef59a8bb5db90283cdb9d401deb75a687
SHA512 33cef604ef91a16cb2f241c207c33fc05e3a1ca041542c5e16c46376158ba394ce11f0f9d58f4d1ab89408bc96ff3ccd0f511e61d9c98bb653a9673081587a51
SSDEEP 768:prv+4UNbdZ3rsC/TBOWQtt2pONXyer1IRCzni9Nj:pbsb33FRSIqnmj
TLSH
T11403BF31E068DE338DE6A296F14777837FB8206798C44B60E9E62F4D059759E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 bb1ca46f900c3d0488cbf72dbe874252000596bc63c768a7d5d6f6c794bccd61
MD5 76211e4af36f949fcaeb078e7b4053eb
SHA1 ad0011cd7367c63fa913f8926a51dbab9991c92c
SHA512 88b1d720155204ca51c2f39ab657bda3e6b082d23f8cf995c72f14155bdff4105e434e6248233e1f0276f12c6c52fa60504aaaab4306b6e979db7f0e8416e46e
SSDEEP 768:1u3GtC/TBOWQtt2jONXyer1IRCznieIAV2:1u3HbSIqnKI2
TLSH
T191E2AF71D4A59D274CE6E3D2B2473743AFB8901395C88B50E9EE6F1D02D7AAD130E81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 cd2c3a5587a153f3d95b9313d6d446ef7b6ec40a8f951b52d951db98df8843af
MD5 03219be9c7e6da16cd2d5b3196884b6a
SHA1 b69bec4b54105caefde5610006efe2e0dbed75b1
SHA512 2001e6baa481b14ff180526de859c7341fffc1935af6e4d2360517a062db2c99e5b1c9fe4715b0e10d18707805be5cd447cdeb372c39676a3bf5077fbdb8c161
SSDEEP 768:Au3ztCV679OWQttQmONXyer1IRCznieZrbajhzV2:Au3EUmSIqnzHaNR2
TLSH
T15CF29E39DC959D3B8CF9B3C2B24676036EB85037D5D84650DBED2B0D01B3AAD630B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 325e9edae1b1657b86bf4f6e42419580bbc2249354ebd6189fc1a63a6ad6efd9
MD5 5c590bcb0ff9ed60cde59ab68adfc50f
SHA1 5fc494ac260cb2a43feb6761ef0a120282871505
SHA512 193487aa9a419375461639120ce7f2cf186b724bad4c2756351122922a381d2c51f1568c70d26efef1c092d6975e59ef39184c3c7c4b27476e02230ed830a843
SSDEEP 768:Qrv+4UNbdz3Sc/TBOWQtt2KONXyer1IRCzniwNeVH1SK7:QbsbV3lySIqnJEH1l
TLSH
T10503BF3191A8DE338DE2A396B14777437FB8206799C40B90EDDA1F4E069759E230F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

e05029a1-d894-4a0a-a2fa-633cf3453d4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e05029a1-d894-4a0a-a2fa-633cf3453d4a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 a0b1a35a86cbd2e671521525fc6903162d450e3b301948d913d05ef458794c20
MD5 22215f69c4a5231b8c568620e783d7fe
SHA1 c64663b6efe0023ca5978374d785f1202d924d1b
SHA512 9e38513132672de4a65c01a6eca3c8c3a878cc6e11e2c0d2235798b78e3338c9a13a15d261c4b4fc6c60657f42407b98c8435aa4352366d1809843ddda068e22
TLSH
T1A5C02B79481924CC2B00043C6004012B19B0560023C413F48C1B8D80007537CD30817F
MD5 SHA1 SHA512 TLSH

Submit Download

1c5dbbea-7b0e-444a-a110-9bfbca5b3f4f.tmp

Path C:\Users\Admin\AppData\Local\Temp\1c5dbbea-7b0e-444a-a110-9bfbca5b3f4f.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a12944d2-d22b-41c4-8aba-a4eeb9589d30.tmp

Path C:\Users\Admin\AppData\Local\Temp\a12944d2-d22b-41c4-8aba-a4eeb9589d30.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3404_1331822012\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download