3085ad12b4de487377ff216d9c857ac002322535ca1613d7a97f5abe3e243d1c

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CSX.exe
Size 4.2MB
Sample260912-pfk2asbd99
SHA256 3085ad12b4de487377ff216d9c857ac002322535ca1613d7a97f5abe3e243d1c
MD5 9b695f7ec773626b69d0893c42c84d32
SHA1 e5d7c6f62c66a34f9d4c5f2b88e0288319c0c942
SHA512 e49c172dd5af5cf123085378f042aa2671632a0914535c32a131de5764328895d2ca37ef2c2957750a732fd93a44d177a41d8679a2ef449d0fe25cd25b6a9223
SSDEEP 98304:ZALcL4KTBORZwDyGmk6lmDyNwIrqJtLFNv5sfjapU:aLcLYZwDokzDyNwIrutr5AupU
TLSH
T1421601213F719C38CD4671721D2C9FE7661D9C313F9F52C63A486B9298224FF62B4A62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
31	discord.com
36	discord.com
43	discord.com
52	discord.com
3	raw.githubusercontent.com
4	raw.githubusercontent.com
28	discord.com
29	discord.com

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_1488777249\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_1488777249\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_307991917\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_1488777249\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_1488777249\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_1933617274\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_307991917\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_98303615\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4436_98303615\nav_config.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
364	4452	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CSX.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4552	msedge.exe
1384	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	CSX.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	CSX.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	CSX.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	CSX.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{A82A3C00-6B6F-49AF-A3E7-8B523EA3AB5E}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	CSX.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{73D97B79-84D6-4DCE-9FFE-11DD95BD6F6B}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{E8747F39-F449-4D16-BA8B-170AFD7F9665}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	CSX.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4452	CSX.exe
4452	CSX.exe
4452	CSX.exe
4452	CSX.exe
4436	msedge.exe
4436	msedge.exe
4452	CSX.exe
4452	CSX.exe
4400	msedge.exe
4400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe
3196	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3196	msedge.exe
3196	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 4452 wrote to memory of 3196	4452	CSX.exe	89
PID 3196 wrote to memory of 2160	3196	msedge.exe	90
PID 3196 wrote to memory of 1384	3196	msedge.exe	92
PID 3196 wrote to memory of 5108	3196	msedge.exe	93
PID 3196 wrote to memory of 5108	3196	msedge.exe	93
PID 3196 wrote to memory of 5108	3196	msedge.exe	93
PID 3196 wrote to memory of 1276	3196	msedge.exe	94
PID 3196 wrote to memory of 1276	3196	msedge.exe	94
PID 3196 wrote to memory of 5996	3196	msedge.exe	95
PID 3196 wrote to memory of 5996	3196	msedge.exe	95
PID 3196 wrote to memory of 5996	3196	msedge.exe	95
PID 3196 wrote to memory of 4676	3196	msedge.exe	96
PID 3196 wrote to memory of 4676	3196	msedge.exe	96
PID 3196 wrote to memory of 4676	3196	msedge.exe	96
PID 3196 wrote to memory of 3136	3196	msedge.exe	97
PID 3196 wrote to memory of 3136	3196	msedge.exe	97
PID 3196 wrote to memory of 3136	3196	msedge.exe	97
PID 3196 wrote to memory of 1584	3196	msedge.exe	98
PID 3196 wrote to memory of 1584	3196	msedge.exe	98
PID 3196 wrote to memory of 1584	3196	msedge.exe	98
PID 3196 wrote to memory of 5620	3196	msedge.exe	99
PID 3196 wrote to memory of 5620	3196	msedge.exe	99
PID 3196 wrote to memory of 5852	3196	msedge.exe	101
PID 3196 wrote to memory of 5852	3196	msedge.exe	101
PID 3196 wrote to memory of 5852	3196	msedge.exe	101
PID 3196 wrote to memory of 4412	3196	msedge.exe	102
PID 3196 wrote to memory of 4412	3196	msedge.exe	102
PID 3196 wrote to memory of 5408	3196	msedge.exe	103
PID 3196 wrote to memory of 5408	3196	msedge.exe	103
PID 3196 wrote to memory of 3028	3196	msedge.exe	104
PID 3196 wrote to memory of 5536	3196	msedge.exe	105
PID 3196 wrote to memory of 3028	3196	msedge.exe	104
PID 3196 wrote to memory of 4436	3196	msedge.exe	106
PID 4436 wrote to memory of 2040	4436	msedge.exe	107
PID 4436 wrote to memory of 4552	4436	msedge.exe	110
PID 4436 wrote to memory of 2340	4436	msedge.exe	111
PID 4436 wrote to memory of 2340	4436	msedge.exe	111
PID 4436 wrote to memory of 2340	4436	msedge.exe	111
PID 4436 wrote to memory of 3904	4436	msedge.exe	112
PID 4436 wrote to memory of 3904	4436	msedge.exe	112
PID 4436 wrote to memory of 4920	4436	msedge.exe	114
PID 4436 wrote to memory of 4920	4436	msedge.exe	114
PID 4436 wrote to memory of 2772	4436	msedge.exe	116
PID 4436 wrote to memory of 2952	4436	msedge.exe	117
PID 4436 wrote to memory of 2952	4436	msedge.exe	117
PID 4436 wrote to memory of 3400	4436	msedge.exe	118
PID 4436 wrote to memory of 3400	4436	msedge.exe	118
PID 4436 wrote to memory of 3100	4436	msedge.exe	120
PID 4436 wrote to memory of 2840	4436	msedge.exe	121
PID 4436 wrote to memory of 6140	4436	msedge.exe	122
PID 4436 wrote to memory of 4572	4436	msedge.exe	125
PID 4436 wrote to memory of 4572	4436	msedge.exe	125
PID 4436 wrote to memory of 4160	4436	msedge.exe	126
PID 4436 wrote to memory of 4160	4436	msedge.exe	126
PID 4436 wrote to memory of 5192	4436	msedge.exe	130
PID 4436 wrote to memory of 5192	4436	msedge.exe	130
PID 4436 wrote to memory of 4400	4436	msedge.exe	131
PID 4436 wrote to memory of 4168	4436	msedge.exe	132
PID 4436 wrote to memory of 4168	4436	msedge.exe	132

C:\Users\Admin\AppData\Local\Temp\CSX.exe
"C:\Users\Admin\AppData\Local\Temp\CSX.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/ehXCwMMFrM
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7fff2e5bc188,0x7fff2e5bc194,0x7fff2e5bc1a0
    3⤵
    PID:2160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,15348722473093277930,4239344348294458726,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,12900790631936221976,6797002869546294416,262144 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:2
    3⤵
    PID:5108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,10608229779285455849,13650640083865753043,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:13
    3⤵
    PID:1276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,42678794634051467,10735039617218466175,2097152 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,10332144923828271088,3594192953431529428,2097152 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:4676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,9255508138682505706,6762555638361217424,2097152 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
    3⤵
    PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,13846088593139100281,3147865699203751307,2097152 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:9
    3⤵
    PID:1584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,3182329674755487853,6920653630610451289,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3728,i,10924729698516295888,7939875698037594967,2097152 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,9500146207315611327,1723015563778984657,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:14
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,2403595818222649859,9061614890121545140,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:14
    3⤵
    PID:5408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,2654989154915894631,13008902317690540620,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:12
    3⤵
    PID:3028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,4503238361136936403,15799596800452644890,524288 --field-trial-handle=2620,i,210267741605797343,2061631388774316588,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
    3⤵
    - Modifies registry class
    PID:5536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:4436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7fff2e5bc188,0x7fff2e5bc194,0x7fff2e5bc1a0
      4⤵
      PID:2040
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,5688798879722062903,9920144502732949710,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:11
      4⤵
      System Time Discovery
      PID:4552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1960,i,16580432801564993822,16585379979438506138,262144 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=2700 /prefetch:2
      4⤵
      PID:2340
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,8415489123531406505,13737402193475894384,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
      4⤵
      PID:3904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,17047987186214578754,9778989028658089724,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:14
      4⤵
      PID:4920
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,11653083173113962335,16085447587921580358,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
      4⤵
      PID:2336
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,11653083173113962335,16085447587921580358,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
      4⤵
      PID:2772
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,11633865407063813225,6591555643959424467,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
      4⤵
      PID:2952
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,13071675333527694297,8734071324858907260,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
      4⤵
      PID:3400
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,4982455663345178482,12418291189846834296,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=1228 /prefetch:14
      4⤵
      PID:3100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,12526450973358908786,847098261046601595,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:14
      4⤵
      PID:2840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,12493283707894198163,2852967916944112932,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
      4⤵
      PID:6140
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,1531768244999350278,7383707324800748621,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
      4⤵
      PID:4572
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,16063542826665153296,17517218616118747425,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
      4⤵
      PID:4160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,9506921650022927505,17112260223881698330,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:14
      4⤵
      PID:5192
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4264,i,7453895668069402832,7695995397733857287,262144 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:4400
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3976,i,10253877991373743072,17561273252068352975,524288 --field-trial-handle=2704,i,3449438625736974370,2808127108201860892,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:14
      4⤵
      PID:4168
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4452 -s 976
  2⤵
  - Program crash
  PID:364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2968

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4452 -ip 4452
1⤵
PID:2532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

audio_cache.bin

Path C:\Users\Admin\AppData\Local\CSX\audio_cache.bin
Size 1.9MB
SHA256 9c636b3818219bc7b17efe8251b04d0f4f69b2bf31a84d8a344c5760a167a7af
MD5 f858820a6804ecc42f254bb4c5c20429
SHA1 625c613b76a2d13d513587bd20ff7e3327970b73
SHA512 1e5849507dceb5a3ed8a2f08a0e616eacdb959a8c2dc15d5d0a75fb51a63c90c33df262a49656a5446d494e5e8f21a0743aca9ffe3fddec1818a755cae7ad7e9
SSDEEP 49152:4TuDATN+1yGekCEX+MbiCepR3HprcH9my4C:Cc1y/kTbLo
TLSH
T1B295DF03B682C522C4680170F53BEB6F4A3DBC740B2545D3B7C91AEB99B11E15EF29A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxdiag_cache.bin

Path C:\Users\Admin\AppData\Local\CSX\dxdiag_cache.bin
Size 180KB
SHA256 731854a7705d539eee41c47d22112f6e6aa34615b3b61723ec847a3ea0e269af
MD5 bafd76845da784f889fc7d90c6ff20b3
SHA1 0f56b16c33f9764772dabc3cbafc6baea034d97b
SHA512 f6376fd933c1cc62402084bba1771dedd61011abf6ebdde54dc6f4d77e3b489ea25d1fa5a5270167254490d19cd24170ac898f4a54b92848a38b16a8f8103271
SSDEEP 3072:8N9t5nHwYi3PhpIpx8kFmOz0DuJMJuszALCAWnm345ecu1fxTQFX2pcVPxIiTb4u:4VUppzMP0DuSJu4YXWEmx
TLSH
T1F6046C01F592D03BE6BE0A745931DFA58B7DBD604FE4A8CB77801DFA49306C0AB35A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 be524950edf373b11ef8ba0027d8b62b8acf4df3c73fa6d0743a0ced54680b9a
MD5 3c49b83f8a5c04fb240b37e68cc64ccb
SHA1 e7b892a96364b1f1a5ebde0c5ef3a7f8088a8684
SHA512 3a2b976d8995b7e5b20115874c108923addbcc1a27bafb727500332499514ce318d41531cbf96876b4800f81fd15306d61546c45ffc3bc0f367e9bd129b006c3
TLSH
T196D0C074AB3CD9F6E021207C4051040053643102AE1301C01F005D04CDB40C140916CE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a2ca7c52567a20b837821dc745941b881a8a9d7664ebd04fc1ff505242270612
MD5 f431b8c3cdf6e2c5467e9e6df281ff62
SHA1 382831838e39d7a49fc68ce363424974df5ee0e2
SHA512 d4959185410070f7aacc91a0ffa16d92030a40962f0b4ba811e399b7201cd2953fd9a1d673cefe73ba4e7860a4f534f9e4b80b41f30741f4a623b73dc746c8aa
TLSH
T1F8E02BAAC920AC2B09FE0BD95051074AFA5113975B41955F3A3D861D8FB176A464582C
MD5 SHA1 SHA512 TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8bebe8df5b9084e4491438df0f0c568bf283e22912e5a6e47cf1fddfb43622df
MD5 3b493f9e80b036df38deccc98fc53e9e
SHA1 54db8dc4728afa643285e319688c40fa4935ffca
SHA512 1347dc72fceb231070832ed3cd3a949fb4a797d68dba0a0c0c32dba6038f0221dbcd1d84a5798e454f9e50713695db9716aa02c7efa55e03b2dfe0d17b8d171c
TLSH
T14CE02BA9CD20AC2B09FD0BD95051074AFA51139B5B41955B3A3D86198FB172A464582C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 80KB
SHA256 e2954e96778bcaf3925509aef3c3cb52db6ac09d3ba0bcde47e42b325547b77f
MD5 d821fe55cacefbf9549198324fcdbea5
SHA1 52cfbc8a977888d7d8691b41030e996f84987a09
SHA512 678b21a87191f6e1c19c2d81f5623ebd5560dec4fa78922b5f1199e619b4317e440aad4babe110323cf08c985dadab60de81abd1bb0b369e098195528de43c34
SSDEEP 768:ffuO0LoacWnFqg4UVbEt1AtMdaV/5kennAG6ONrcN+Aa+SEvH8Lt:ffuBobW4pUqoVxBnymo+Aa+SEUB
TLSH
T12B83EABE62801F55F2F3917D35CB5AB3A324A4E6D688060B5278F15822B53CE384F17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 776KB
SHA256 135ec706aaf3f663c250a4cd8c9699212ed695bdd6375b6319e34b9a6d2b7b6d
MD5 980447d9c2fbe2235c9c180bb03e0c19
SHA1 9e0a102171a772d76d87b88fd9bfd0d759ff986f
SHA512 9f11c9e072fad6ae5549e932ae565cb87d6dffb2fbfb6c8e02d6d713a2adb06e7855f64d0b935d0fefd8fa985eb320c0e21cf2b8064c07da8cd70eb44d84a317
SSDEEP 12288:mL/cL/r+HL/6wLUkWzNA7qnwFroTEJXjJHu:nQU1mbSAJXj
TLSH
T161F4D6F385006929CB7C12F563033A7DD337018D3CDAE8DAE5765C996819B22B2A5DE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 4.0MB
SHA256 8101249499d4cbfe36e20a55c0712c77f42ed99cfc5423019f65470760e44825
MD5 81f462a843cf78c3078eff8e31c551f7
SHA1 f35301712233922c008e3e35d82f0baf3ef2da5a
SHA512 45ffd510d6be0cfa7ce3823d2314b7404ca25732bbfac3da53c28289f3ae48d0a2bc94dd10e4bd993b1b776c8227a4481e7f7334a7f2f6d4ffed5cb7fe8145a2
SSDEEP 12288:mQKzUdDn3eHVSKIOWySfB5LnXh/6EJbEI5fUZfw3gtk7+96Np:EoJnOHIKIvB1Xh/Hl15f2fsgGi
TLSH
T13D1628C78BA45AD1E7ABDE70BDC4CC697E7421C1AAC6E043B442C77A10837C63E5658E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 003d6d41dce0656077270d299a9a1a992a0341b6ea310f7149e58b13060ecc39
MD5 c1da1c15fe929362f08ee1a081f2c137
SHA1 5706be690a82b74c120c29b54ecd7a0d44789908
SHA512 3ba6f153518539ce3c9d0c408fb501fc4564ee23d4420b4efd1844421aa112f0c482030238d01ec9c8f169286535ca6282c0e19534e549e03543db928cee2d89
SSDEEP 24576:VWH2ICUOr2n99nKjTESG9Vi8UDEhBzV5KWni7y4CNO9qcgw:sHXn99nnSGvUoh/5WCNOvgw
TLSH
T17F867CEDC96858C3DD63AA30B4F0E9477C7413C3F965C1D28898C58402AB7C5BBAE769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 5938b04c41fdfb37b6104a4f1fb9fad67c1f13235489fca95bccee2a58f5da45
MD5 ff43ee18269a3b25de6460d1c2b068f0
SHA1 a82aad57f93b5c6db5fce9da5246c491fefac439
SHA512 653795080e11beee1cb06498e328d0535a94c597725398348853f6727a0d0f8969d4d9877b52518858574f4055218a4777982df9259dcc8c12cafd0aa8903142
SSDEEP 192:bn0oy8Hai4WdHymC7KYLotF5nvl1OHqVB6R:bXyWaHWdG2e0zv1VA
TLSH
T1902250C87EE28382FF74C4B872D0AFA77A324DC620471E111854D9B96C72B653A3B479
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5956b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5956b1.TMP
Size 3KB
SHA256 e9d7c9c928b7d41687ccf0abc208dcba548e82d112a1687859f30dd0c73e209c
MD5 85582a1624ae305b8b3768e548482407
SHA1 132eaab6763b4ae436336a6acf6dc2ae9c3e02b3
SHA512 9007260331792c18ec1c74187e5b157d0974e69aedc571430255b9b5f60d9ea736c6543cad657926483997c4b908e0734671ee7eb176399fbd2d5404aec0e46a
TLSH
T1C461930CAB60D153F7B8497092E0CFCBB6324583748B2E110D84C5FE68A27390F8C49C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 0c4468a7b3b37190c87bf633d962530b3c9b9b24a6678494509520e080ba167c
MD5 538710f51384be60bf13edc5321281d2
SHA1 e4f2b393abd656accf313245e02c7c555423f182
SHA512 d8a4a5293fb00f2b4dadf0ebfae303654ac7d6788810286e362591aa55cc4961d029093df75dd6cb5caf6889abe674e93beb375659d1e5ba338961d5693c0a57
TLSH
T154E020E454C7C21D55907AC74134EF08D1C13793D7DDAE071740CCC87606401B7CB546
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 a416ba2faf976c33ba5d53b12c592e807807c8ef6762438991f0e78a20dc2867
MD5 1e4f6d928397d8da5c338da34d536fde
SHA1 e0fe288a1e48134b9608baa45f21fefbc7d243fc
SHA512 7a58d064d82c0d74e2a42a50487fed44bbb8810d2c3cc4fcbb70858153fca84deb349e2706416a7f1569826690b30fd694f191e487387051e2788d50a3c5d27e
TLSH
T1BEE0CD5405DEC52D94D579978368EF4CC7D13587F7DD7F061B4AC8847103A45B39A284
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 65d7c9c3aa397da7b8e32d193ede6c1f65896578a46c8a2f954f01c479f717cc
MD5 db7c258a10633dab168c9ee1e5cbbab8
SHA1 11cef9a1bbccd59fecff3c6762d58b2040594fcc
SHA512 e3abdaf116032e9e0bff0e67f3b13bdd7827b7c1748dc278c90858e1391272362834226f59eeb57358145ad9c2cf35fbc2b3ddd95c781d71e159f42fe3746c04
SSDEEP 48:uzBmw6QU1PznLwJOrZjrte3FJu4yeRvXqGg12AxyUp6:6BCxnLwAr5M3FJu4yYvXqz1Xxd6
TLSH
T1EE92B5470D387C53F7492A7A262B8838C93BE19CBF95DC89312550681DB8656A0394FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 218020eb6eb9aaae3008f0f4c3beedf02f6941584401a46c90c98fd621599aef
MD5 b728afc79ef942e38638171d348c5fc2
SHA1 70a7b9675f5029a1dd84a58f12cdc1961b7d7adb
SHA512 1804a8e79475a39b9a37765401af7a38459f1c0e7fffc442d67f94af43898c9474e35f984c690bce5b21e4db652d77626a83eca4f24ad6c1122647f93784f012
SSDEEP 96:5gtBHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/x3PrXcbbEOVpZf24JkMfXSFs:5u+H+bF+UI3iWGVoWN3qL/x3jOVVV63
TLSH
T15C24111F5F743712CDBD813669EB44A35C6DF03F8B5366DA686114B4CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 10KB
SHA256 8c500b619e51c3073df2bbc181e7f35d476ddf55757cbd145fb4533ffc4ca50f
MD5 d4e6333221c7d475fa02cd748f623de6
SHA1 c4ce475cb30acfd8f375662ab386ff380c7ed820
SHA512 628dfebf1b6a978b89e493d49b8fab9a129c91a041b108d1e6d656d01f4a962e91e3a7fa366e7a2bcf8d59c220492d40eea401638c2c4269fefe34fa4af38ea3
SSDEEP 96:2rK4U2nwejJYR91Q/G7h0ZtZpZJgxWUADZXYAyKU3Q2mIAMuuOv3y/KP9sKXl+CI:/DGjJGJhtrfuU3Rdyi/CMChWjv2Ol
TLSH
T1A622217FD408847E4767C327D18B352ACBBB297E181CF95AD1D61D0C026E2AE12119AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 64f6a1439e98f8c9c6ede31ea040634c9c3ea67cdf7032a6bb1409206a704cc3
MD5 037469013ebd4d68231af8d61756deb8
SHA1 4e2bd6133d4134c9ac3503b048588c226917f780
SHA512 ad527cce9dc42d1fe394ff3c7df693100392516158f512b05284f19993137b891d3f546fcede0a1da4464da8f8706d2005b6bf845dc69235fc3ca742722afea3
TLSH
T119E0D86059DDC11A6288614B8215FB58C3A03587DBCD2B091B0DE845F045404F3952C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 fee0d3ceaa6b19abf7bdd7ecd1a34bc12bbbb2116dd135fd757bc53b98ce5f96
MD5 cf5fdcfb5cde399563e19a09768faf17
SHA1 d327e18f7a82126f2e6ddcb70d1f9bd59e8cfa66
SHA512 435f2ced4273f2879835d18d9cf5472f0ff894a6f800dc904ae3f6719900e919d99e70af11f642624943f4981514274a785197d20f9914d1a97f4685d8bba61f
SSDEEP 96:qDeMatha9Vd5XVcr3vjulWmImyMKrBHDxO6Bt42DP:qDLaTaf/O3bunIp/FDxO6XDP
TLSH
T16FB2F84F1F207560E2F59AB2DDE444421FAC106DC3A76657EA4C50F2CD926A7F6028F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 53c3dec3757ccbfb0dbf05539def2d667068bccfcb956b3f4769793acbc205b7
MD5 ced1a7447c84a3f98c72bef569d07927
SHA1 d60512720b37f6fc97838f1f4f5466b41d3c13c0
SHA512 7abf713174cfda728d6b0fdf491f33c6050799e7ea865d2e737b3cec55fc358fa09e055ec4eafad35671d8670ee3b9ba3725a0a1862e7ca1cbe110475c6634ea
TLSH
T12B61AFF3C7E8866DD91156F4AB147E1FCE1D0A54432C3D2AC8D4AE5B93E24B2E141A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 30d3015b9f40d374ebff1313db93a019588e709aa37ade865a034c9567b3a557
MD5 8cd240b541f10d4ed822a72b07ebe409
SHA1 6d2f8a79ad1ce13470092e38ff8b01eb7dec1584
SHA512 a1f5c6843936859500a4281de45f78c225e462fcebc64dfc22b1ab251c632fd6a374d215c9c1325953b3b4537997ddf30326f140ee9ef43662dc4433010b5ad9
TLSH
T1DF61BFF3C7E8866DC90156F4AB147E1FCE1D0A54432C3D2AC8D4AE5B93E24B2E141A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 032fa9215aba86762eafc5c4c01b030badf0c7c2e1ead795704436def4971fab
MD5 92cacffc076f28bb02c3d0fa63c020fc
SHA1 405a791ef689fb49331854f8c3550c03723fa4c0
SHA512 fe06ceee46d177503261160bc4b140b672f5126d26d565ad8191b303a1823476b1601933a68dc2117c21705fc2e70e679115d5a67127bb399bf6b2752de74721
TLSH
T1B161AFF3C7E8866DC91156F4AB187E1FCE2D0964432C3D6AC8D4AE5B93E24B1E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 09ca614103792670bdb1180e740cc363d3228c78878a0fcfe6004a794bd55b0e
MD5 4d41cad2b517ef89e23c068084f3e6a2
SHA1 4a700d8293924fcb572a08a04a923b855f46718d
SHA512 f1dec05c9b12565148a5257f8a8c7436a677a1c0a1a799ae562e1481266258dc679988299cf5357860435d89e824383f4f347d0df2dbac0b6c51d1ff61bd2047
SSDEEP 96:eIEumQv8m1ccnvS6Q5QkxgrWnwLIFZEReK/F6dIFZERQnhtmyqIZmQzsInEo:eIEumQv8m1ccnvS6c+/fUSdqHo
TLSH
T1BBF212FB0737A205D98405B09400ABDEAF16004B47F6B6EC76D45BE3F6921F2B0B9756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 522B
SHA256 d1331779d08fb4b4317ce54d6453667ce8134a2d2795f3c8dcf15c4d5133486c
MD5 6e78a688b2c663bfef036318568a0350
SHA1 aae7d7dbb311a80c9795556e53b9021d36f4c01c
SHA512 35441eaabb0f70190f468a42034f6d502d67f8844e375feb52b0b209514d2290583c64eace1a1c5d65f0b0943c5b2f50953a405bda9652ff10ec60365e0ee8f2
TLSH
T182F0505384FAF4B75028083F2D807C847979E836024154F9D5DBC63CF0441F76B51417
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8ca6af4920d811d5bb4d8d53b7b80ca0cab713e8a6bffe0bb14c70708bd79313
MD5 8131deba7f237998104d949b77aab5af
SHA1 f207177dc62f925a4f7d2eedb1f8a13f21952bf8
SHA512 8ef7c68944dc8648326f1134fd03dcb891836f08ef0944ddad66e7278d38a54ee0de473db38dd91efe7b9b6ad71e77129d373c8e69695bc17b99ed57ebeca37d
SSDEEP 192:sxRkR6CN/fOspWpVCXMzoA8pla/g6+WNnq2q/eBi82V+RcGLIgtJ:sxRk3N/fOspWvCX9k/5S/eZ3
TLSH
T11442A516AE68A93F9CDBD25DFA557F13D6F81072A0A11E44E6FC891C14E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b69c4781b168b76b10f846c6eb46ad640637edcc353d6a5bdc496344ba8615a4
MD5 67d1fda34f2675f0c47ac33658eb4d3f
SHA1 df5c72dd8b052e0deba31642dcc900899d21eb2f
SHA512 2ffc1c6dfe684f2b7501e55f151e03fb4820c5354544b72908f9e523404a0afed8f7a4577ff906af5433dbd979e5b812aec60aa3f49a03dd228b2fefb4ac1f6f
SSDEEP 192:sxRkR6CN/fOs2WpVCXMzoA8pla/g6+WNnq2q/eBi82V+RRgLIgFJ:sxRk3N/fOs2WvCX9k/5S/eUv
TLSH
T16C42A516AE28A93F8CDBD25DFB55BF13D6F81072A0E11E44E6FC891C10E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f8a2c7ac3fca79d55e0e92c390a8d54e460b11e389026b54718df0e132da66e5
MD5 21c4a3a244c57eae16677f24d44de535
SHA1 b54e6a05182054b8bb514bb5b9e7b08f2200b41b
SHA512 ffe255abb3d2d061eb3451f2e6303516428c0ca8f2fd516a6c014e71bb9933040d5f0fda5190d16b1e65ea04cb30752eefdf447a3cdb1df1cf7be7d1cad515a2
SSDEEP 192:sxRnR6CN/fOskWpVCXMzoA8pla/g6+WNnq2q/eBi82V+RcGLIgtJ:sxRn3N/fOskWvCX9k/5S/eZ3
TLSH
T1EF429516AE28A93F9CDBD25DFA55BF13D6F81072A0A11E44E6FC891C10E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 75a361780d83c714f071169ed140551bbde5498a895cbf03d488d06aada1115f
MD5 61ed9f0bdc766ce784592a98811e1999
SHA1 cfc47f9974860ef8df058e4767f5594bda31beb3
SHA512 ab247e28f9c0a45e27fd4f43dbc6c02b15043eba4fac838768695c8b7395cbcfc6cf958343cc70b694d8d1a8f47c9cba6a487414268595a642c7f15aefc0da24
SSDEEP 768:6JajZ+7pLuLb/KWgm0f4O7n8F1+UoAYDCx9Tuqh0VfUC9xbog/OV0omBxroUS:6JajZ+Eb/KWgm0f3bu1jaPhBKx
TLSH
T173C2CB7B740CCB7F4F900ADD99197E9B6DA802CB9698CD8047FE981C02C67EE91164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 d9438c13d2e34458ac63fa5d485cbeeb4bb710ff4c474bfc88ac81c2fe147a24
MD5 793e63efb80e94c11286f4a9c28bc7e6
SHA1 20ad5bfc37955a7e0ddd35a20023831b72200bd0
SHA512 8167544d1a70dca8c788838c2b13c563eeb6222891e18bb5507f69c95618a290301a78ab2226fd1d33a7b07f5350d5e66d4156327cebfcaf24cf737e68e16a08
TLSH
T1A5D09723F08A0882C9F68BF10672203B8A203C881896604CB811041A0460E83D302F97
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 ec6ab949b6ebd3887da6890bfa806df68766e269436cc7162f5d48425cd18ac2
MD5 e79ebd7d436e550439e070150a777d43
SHA1 2e6c43fa2430441a4123fad129861d25bca3d945
SHA512 8295d52127badabd3b79ca3ab3105d70f6a375d82b70f50e193e6934e2c1dbf9b1408e0f4e7ccb0a9a2ecfbe7aa06640a502d1db7c568195886489a966ce038a
TLSH
T10DD0A727F1960882DAB64BF21672256B8A613C881996604DE856241E0475A87D311F97
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe594750.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe594750.TMP
Size 138B
SHA256 3f9a8d062c46a7e57be74fa8ae1acdde215b95ef2535ee39a331239cb86b8817
MD5 17419d4349fb101abc214d1217f8eb32
SHA1 9c52d0fed298a47a57ffc413952deac24a94f9a0
SHA512 61b6c0924f0d56365bcd9577d615cbddc5c6670607025562fe01b547883bd422b2fb7bdf0873f558a57bbd98c0d53a04d732dc70e6143bb98c0aea9ffdcc5352
TLSH
T154C08C63B1000C02866002A10332612E8B413D880996904CB052341A1075A636302EA1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 789fe0d96e20fc8c89ab876c96a43a65a7afaa0c3dacbb0519d71de96dbb686e
MD5 cea1278aac3293609d2321a9f52f772f
SHA1 e77a055616238edd8572605c54a72817bd3cdf4a
SHA512 e1c9b3b4735d95e311ef6c70b31db500ffa1439e9a08c3cc45e35e87cab66720dec85764ced224e2de13dd1e3a887f15c4be8e48d921395a4eaf00bd26f9afbf
TLSH
T1F9E0865005DDC67DA19623870278D70892F47957D7DC3E262F8DCD456142948B2A21C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 984663be591edfdf74c78923f333987a66eea748a16b806289eee4f7f89c42d8
MD5 b38e85865003ccf4808a7bd14f518edc
SHA1 e4d1bbe366db191f82df3af78fc8218b7cf980c3
SHA512 a711c2f141ad6ed59bb56b8c3aa2c37d5f9fd008d4fbf12ed763f20382500d10385ff16261fcd53192d05b2dcc5987965aab1ec8398e445c635a3b0a1336d551
TLSH
T186B012953710AA26D4850D3203E08BC05744F02114829503C80CCFD38F0979C3E518D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 81a566ac617e7a9fbbaf2b883e6fa598a4d6173964ade5b1ec03b7f2bb70c04c
MD5 bc5259cd4dd1dc67be3566017fb1bcd8
SHA1 46a4845b72a32d7ee7c7b72ac4ed8fc2667d3c75
SHA512 1b991e4f3add6e53db23908e608cff04458703d2d40a7059e319adc3138550be3fa3ca803b274a64aa9fa52e2456c71a80097a2215eb3d5ca04c6424bc8a8bb1
TLSH
T1CDE0D82016D9C66AB1CA359F8334F70C82A27987D7DC6A162B0DD546620A540B393595
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 dccf1dac48a143bce47a145ff75970d4a3e2328d16163671cad7ec5342134152
MD5 ad8b29e5bec7ab71127f042e0852e094
SHA1 bcd5be87b8745201895fbf1ac67da08f778432ee
SHA512 a29f6766675e298750a101954436b8858b30490082287370f35729fab04a29418d43d3d9b354a98afe5b10f0c86a22a8e18d15aa5cd80abe6afbf76c2ab80400
TLSH
T1D6E0867045DAC63D9088A1878264EF0CD6F47987D7DD7F4A570D8489A141545B3A6581
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 1efad5c0a70e6e2992aeb3c80c8877daea7f9157060459791b3c2630a2b9b5e9
MD5 56dc5df307dcaf64ddc8cd608a6be7bc
SHA1 b7a6d3a8e4d5c4d44176b07410eccf4eaf3e66bc
SHA512 d82c4bd9232ab9f259737ba1c7417429cee3d902daa17e2b67573d5c39a454e7da54712e61b41864e42c6f4264305843093682f924611088ba34939a5469ca21
TLSH
T16681FF92703A1280387F250991D19B5E674232B33569F62B3FEE04B68E77E095DBC4DE
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 d82df45d8ef78bb67a3f08224ddb8304f22ac7b85c3ff755509c1a1370461bb3
MD5 1d892ed69a26738fb85ad5f3eb52689a
SHA1 49f04721d11598b4d68162ac938b97d23747142a
SHA512 15c2dd44372155dcbc604a23a2d9b6e96b73c1f35997b97b0273633c29b9ef40d2ccca5c7420f10eb70a20b5bb2d89d401e8ba82402584cb1b7d629737579710
SSDEEP 48:KM9MZN3LXYTD+LIa1YKV99fYR1IoOfN1yDx6I/KXKE3ytDI9KMcATyZsI7KpSUr:K8KkKTKSe6oKXKO2DyKMcuqsAKpSs
TLSH
T165B10F92B03A1240397F250981D09B5A664332B33569F62B3FEA04F68A77E085EFC5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 87d175e81f1abf24e35a140624072cacb467cf973aedf04db0ce35cc0627715d
MD5 9f97b83576ece1786612de6c28b1a759
SHA1 a845d405e5154773835433c89bfe14490eacac74
SHA512 1ba0902fd7577d86644904025f976694a8d34abba724b9abaa7d8ef0e2b2f8aa622ae1c9e5680a91bd3373964c7c01d5f5ce4940044dddf1f4f5e9300a797aca
SSDEEP 384:DNrRZyCSDnxTICS0MEhIKyll7svbFKfk7:xFZJSDniJFyI1l7svbF9
TLSH
T1D844850A7B747001EDE7D9725CB080771E3CB16E8F22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 248B
SHA256 18c9d0f5bae43eeb6d4835926ef8412b2a5f475a45141a2d7d9d43900c334742
MD5 cf3f06ee6d2fa0bf03176a7efcf5842b
SHA1 f65943a31394136cfde75ed6b51d505a27e9a23d
SHA512 3a90ef3371b9a764c89690deee6a131753ecb22e3e1935ec2fe2f7da527c603522bf56ba62738560d9118e927e28cf65eae9849238e479d0d406f5b44f0e66c1
TLSH
T1CFD05EE3732A3090F2CC9991D0482B0798883BE71719C6623BCF0589CA5981C1B3D933
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 8b4acb8f6dd6eaea3b5d43923d3368cb00704a73ab59e20971f0bf96e2e646e3
MD5 accce3bff5187bc63f0f902bafec7ba6
SHA1 431739cf7789e3e6d71f8f8668f74ee5809d616d
SHA512 a106d30f625141beb50b4f3d24a72837e994ed2b025ec953d78911d1fe510023e75eb39089eafbfc78ef623e7cb8fed09a3b47758e78484d872b8c8a7fc65d91
TLSH
T1E4F0C2D76F421977DC52507144336782FF61998B053468A7438E226A5A5E2F1CACC0D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 fc4f535870e3499e835c0815589e6b3c0209fd97e855c7b9df4e5badf0ed4e63
MD5 1dd58f6fb10986d76149fd04c068e4a8
SHA1 bd3ee67a3c2433d5ca3abb5d641a10e462e6b42b
SHA512 fb6574ae95330c18e8b48986a18b3b1c08872dafa63be1d1dbed9906ddce8a7ebdcb35b7021d1b2de7ad0f8dcd7c820897a70b9a08f657b4aa890123fc283988
TLSH
T153E0CD90AAE9C56FB49431CB4175EF8C93A13A57FBDC2E4A1F05CC4CA101F44B79A281
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 2a275c2cbb3477341925d63b370edae6b8e819518a22ac11eed7cab7b534bbb6
MD5 dfe159ea770b959be03cefdeab0c3aa9
SHA1 f3414f1f28e698e4c7d57c983c043d844a7044b4
SHA512 adb9632416fa7d5ca09fb920030d9225a0485a1d08dead472adfb3dd9e71f26ef45f3835814241382884593c2fafa81a33fb80b82e70d0ec7404648ac894b332
TLSH
T16B21F155F320C418E64E823A60BE8B310738E8568FBCED0F44B920296E72F191D8B6E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 616a575805cbf72ca984535e622ad3f1300c2795e5e71b4d9d2d32afe65a3e19
MD5 8d98c6a931e1b279d4dd32cba24e6b70
SHA1 a203135caef794134514baddaa92b12c1583744d
SHA512 045c0dae80fd07424081869dae5bb75f45520d1a19cf7cb76222dc6017d0bed09d41d75a1db4cf289add120d085a77a143d4edac87d159a8231098108e608ae3
TLSH
T1BFE08690A8D9C5AF90A531D70179F79896923D8BEBDC3F0A1F46CC4CA502945B79E181
MD5 SHA1 SHA512 TLSH

Submit Download

a3117389-4085-4d2f-ab4a-0f921275d046.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a3117389-4085-4d2f-ab4a-0f921275d046.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 8dbea1ca18894867770be59eb8dca05eed3cc471a6af3e0f91ec82a4739d1fb1
MD5 f5b9aed65a40ddab8af1153efaa98096
SHA1 504f65b812e1ca7a14a39ff5ac4db9ee4c27399c
SHA512 787aa7426d8924a274ead18427fea3eef0ccfc89fea370be1b704d5a9bd8fd6273cb09fa58479a9d5881b4f2374abe073235bd3a87f1f969cd7dc3d3cb0de8ed
SSDEEP 3:MsEllllkEthXllkl2zEfl5fr:/M/xT02zir
TLSH
T1A34404047FC00455C500543041D3C37013F0D4344D1357C334D144335CC7F400C01014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 0d06313d7d72f0c940d89cfa763c2be94e6bd4bd3e20f18559eeed8e5e6d621a
MD5 537bbe3669f062202a9be7e424377efb
SHA1 dfd7d17910100a8678bebde8b23b2bde4b226fc8
SHA512 2fd1a73067fa9ec0f54048b00d7a257166bb0093770bfbb4d329d68b588a5e6a90f96260c0040a506d30c7c61a9d0475a6964790d027a0439bf79ae94484f1a3
SSDEEP 3:MsEllllkEthXllkl2zEfl+ll:/M/xT02zB/
TLSH
T17E44040C7FC00445C5305C344553C3501370D410551157C734D1C4335CC77410C50004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 59KB
SHA256 324174ad25473c3604813ed0722a54829c032c79851382081cceac2b14820ece
MD5 3b0e3f76183bce7df03a435d14a4d956
SHA1 ad135448c326cf80ce005ee7074a7064316fa6c6
SHA512 10ef38846e533289908298697e05ae0054c246863fa199faacf335df77841fcfec3613d76d2b5d01f19190f4d8852d902b909136aad8287592e22d2a3195173d
SSDEEP 768:4FiR3Rwg8O4E57Y0GZxJsXBdK8CtFTsUAD750cVzjrxbYVT+3/HwdlKHn:PR3J70/JsXf7WHclzfxbPPHACn
TLSH
T1A5537CF598D3993AD8AE67836B3D2D1589BCC163B5A84984F7981F0CCCA75BFD302814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 36c8339081b4b3034d4d66489673b31981bf2a1d621d7599fc7ae6dee1960ddf
MD5 e748fcec001bb1caaf41420824f7c531
SHA1 dfbd676865bc09e0284526a9515868adc90d43e2
SHA512 fbc134cced94c2287a534bed7b9e4cf8a49600eca97fb5d58333701540d782e31c1dc2ad0f0c3da2409b5b8f1aa9df0e970e1bf2ea13e3093efc5215f3258fbf
SSDEEP 768:L/UxvxjgC+I3itKzyE57Y0GZxJsXBdK8Zm8/mt2O:+Zj3+I3Nh70/JsXf7Q6mt2O
TLSH
T150139D3CAC619D3F48AEF740360D36A7ADA815B3D5A00C68CBD98B0D817769DF74391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 94f394f554ba357b647b4991eadeb1e3619debe3feff460073ccc1d7cd4a513a
MD5 af1b8322a07f88a7a2077cd8ff569280
SHA1 7cd35a5ec0fd6b5e63385d4e69202df43525012e
SHA512 f63ca96d013105d2be86296ea9e0d02fdd62caca1170ce1c4e4723d4974f861d26f00c030e6210ca9cda1ce387ec204383cfed4c2e8193fd03d0ef0300b02602
SSDEEP 768:A/UxvxjgC+I3c7KoE57Y0GZxJsXBdK8lWSHUPpMs:tZj3+I3F70/JsXf7sSfs
TLSH
T1F303BF35F8519D739DFBA390360A7797EEF446B3C5C54DA88AED9B0D028B26D030391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 25543cccad5c31c52dd7d9a4c17b1052e24870b1b8d05bed99bcf612e9bbe38c
MD5 0a9b722158c862bede71e1e4729e3bd1
SHA1 d993834297474226f96273a44d3eaf9b66cb0ecf
SHA512 302ea4c2eabdaf9b82a91635c1ba2b0779acc07cf38c45a8b9cba7b7ca754f5d414190196f54386447813a0d2b6a0b3a5c29274362c051ad953256c6f3265b2a
SSDEEP 384:nPZcIR38N6+F3dS1ym/nfydXX/IubWDrgYg57HD8CJGZXhJqlX/XBdm/e5x4zY4k:HR3TtKzgE57Y0GZxJsXBdK8yYLHn
TLSH
T15DE2BF30ECA1DE7358FAD39175067683AEB855F3CAC84E48CAE9DB0C00476AE174781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f6b98b7010dc85e9a2b2fe0da40034a4b3eeff4ff62b2604114c50a34b52fb04
MD5 327b24c26e1910873ae9622be6d112d9
SHA1 a8ef0db205afd5337b5e4116b3a5f581304e1509
SHA512 60f578e187ce63ffe97e19193c3331ec58b8a5a68c21081266299907d923670c569f0b4ab2db97199d6eb150cc1458c99a15e2dea6ec0cea7f6fa035773dbca7
SSDEEP 384:nKZcIR38N6HF3dS1ym7enfyfnXXdArgYg57HD8CJGZXhJqlX/XBdm/e5x4zoJAeP:oR3YcKuE57Y0GZxJsXBdK8y+3/HwdQHn
TLSH
T18DF2AE34DCA19D7B48FFF380360A76566DB492B3D6A80E48D7DD9B0D0067AAD6303D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8aa7253033ba6743ab112dc585dfd1a9d69b7a1adfa49f7662255744bba7711f
MD5 2183bf543ca8307c69262bcf3e8d0925
SHA1 16447289e9dfc2d9f0997559919671dd2a7463f7
SHA512 4566f7670b0808da5f93784d36a36aefc3f07d95a5bf04a390733acc59e8ca93fca2eeb1620af6f81b88a9d4f039d24871f08d8f03c8b0a7d3b2960824ca72d0
SSDEEP 3:MsEllllkEthXllkl2zEfltc:/M/xT02z
TLSH
T1984404047FD00405D50054304153C3501370F4110D1177C334D544335CC77530C04504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

6e75f054-13c7-4c22-bc29-d28fb6a874c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6e75f054-13c7-4c22-bc29-d28fb6a874c1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

1edd756c-95bb-4b9b-952f-bd2e297d4824.tmp

Path C:\Users\Admin\AppData\Local\Temp\1edd756c-95bb-4b9b-952f-bd2e297d4824.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71edbef4-705a-4431-a631-6087df6b7e5c.tmp

Path C:\Users\Admin\AppData\Local\Temp\71edbef4-705a-4431-a631-6087df6b7e5c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 04ecf97d6d276fd31ef26c887654310246e0ed7de1f1d417b1a46b907ceb9953
MD5 4b674fc490a51f9b9917f2fa78c88139
SHA1 670d595cf7057dd20d69eedeb972b019fc3ccd70
SHA512 6619ed654af7e9722ede6f067d1fe9b36014c18d80da87f983b5271007f171cf8f5b68ca254344896f1445c3973b0092882a6ea933a3d6a29d42672ef6d73a24
TLSH
T11011CDE43436333F4B865FC890624CD42A60E152033B2A9CEE5A5064AE4CEE2A71E389
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4436_448639184\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download