bc4c155a0054a18b5eea7153e7c5292508e91f02f80a031d98ac0772c5704b68

Analysis

max time kernel
157s
max time network
242s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
flstudio_win64_25.1.6.4997.exe
Size 1022.2MB
Sample260913-wtawtabn81
SHA256 bc4c155a0054a18b5eea7153e7c5292508e91f02f80a031d98ac0772c5704b68
MD5 115c2161ba35950233804aff0a9d8263
SHA1 d529f3e2743f8ba400a22919ca16a2f71fd2fd99
SHA512 2bf1bbf91bc9b464fb8bafb4e790a4a9a8e2ecb71c5f8c1a7c29d7c312e34accf2cdf8a4557272c0251b13ff7a0d30df2b8cc38d47979f1dc4b0471d2c1cf4c9
SSDEEP 25165824:w7KmbZbLVhU8vs4sDDhvJShLMY4iS38XNyAo56fan:w7dZXnwHnJshLm13goA7Cn
TLSH
T1B1B9339C53FD65C5FBB0A93F08AB2A7177DA23850B03401A5675A80DBDFCE44A236B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1216_216024853\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1216_243093682\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1216_243093682\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1216_1894049176\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1216_216024853\manifest.json	msedge.exe

Loads dropped DLL 14 IoCs

pid	Process
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe
5872	flstudio_win64_25.1.6.4997.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	flstudio_win64_25.1.6.4997.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4136	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337979368117603"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{BF8FDA5B-A60C-4425-A24B-02EB49FA9D31}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6908	msedge.exe
6908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1216	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5872 wrote to memory of 1216	5872	flstudio_win64_25.1.6.4997.exe	86
PID 1216 wrote to memory of 984	1216	msedge.exe	87
PID 1216 wrote to memory of 5200	1216	msedge.exe	90
PID 1216 wrote to memory of 4136	1216	msedge.exe	91
PID 1216 wrote to memory of 5200	1216	msedge.exe	90
PID 1216 wrote to memory of 5200	1216	msedge.exe	90
PID 1216 wrote to memory of 3460	1216	msedge.exe	92
PID 1216 wrote to memory of 3460	1216	msedge.exe	92
PID 1216 wrote to memory of 3816	1216	msedge.exe	93
PID 1216 wrote to memory of 3816	1216	msedge.exe	93
PID 1216 wrote to memory of 3816	1216	msedge.exe	93
PID 1216 wrote to memory of 2696	1216	msedge.exe	94
PID 1216 wrote to memory of 2696	1216	msedge.exe	94
PID 1216 wrote to memory of 2696	1216	msedge.exe	94
PID 1216 wrote to memory of 3116	1216	msedge.exe	95
PID 1216 wrote to memory of 3116	1216	msedge.exe	95
PID 1216 wrote to memory of 3116	1216	msedge.exe	95
PID 1216 wrote to memory of 828	1216	msedge.exe	96
PID 1216 wrote to memory of 828	1216	msedge.exe	96
PID 1216 wrote to memory of 828	1216	msedge.exe	96
PID 1216 wrote to memory of 2292	1216	msedge.exe	98
PID 1216 wrote to memory of 2292	1216	msedge.exe	98
PID 1216 wrote to memory of 1496	1216	msedge.exe	99
PID 1216 wrote to memory of 1496	1216	msedge.exe	99
PID 1216 wrote to memory of 4008	1216	msedge.exe	100
PID 1216 wrote to memory of 4008	1216	msedge.exe	100
PID 1216 wrote to memory of 3640	1216	msedge.exe	102
PID 1216 wrote to memory of 2484	1216	msedge.exe	103
PID 1216 wrote to memory of 2484	1216	msedge.exe	103
PID 1216 wrote to memory of 6060	1216	msedge.exe	106
PID 1216 wrote to memory of 6060	1216	msedge.exe	106
PID 5872 wrote to memory of 5260	5872	flstudio_win64_25.1.6.4997.exe	108
PID 1216 wrote to memory of 1896	1216	msedge.exe	109
PID 1216 wrote to memory of 1896	1216	msedge.exe	109
PID 1216 wrote to memory of 1896	1216	msedge.exe	109
PID 5872 wrote to memory of 1104	5872	flstudio_win64_25.1.6.4997.exe	110
PID 1216 wrote to memory of 3108	1216	msedge.exe	111
PID 1216 wrote to memory of 3108	1216	msedge.exe	111
PID 1216 wrote to memory of 3108	1216	msedge.exe	111
PID 5872 wrote to memory of 4436	5872	flstudio_win64_25.1.6.4997.exe	112
PID 1216 wrote to memory of 5020	1216	msedge.exe	113
PID 1216 wrote to memory of 5020	1216	msedge.exe	113
PID 1216 wrote to memory of 5020	1216	msedge.exe	113
PID 1216 wrote to memory of 4260	1216	msedge.exe	114
PID 1216 wrote to memory of 1728	1216	msedge.exe	115
PID 1216 wrote to memory of 5676	1216	msedge.exe	116
PID 5872 wrote to memory of 2292	5872	flstudio_win64_25.1.6.4997.exe	117
PID 1216 wrote to memory of 4920	1216	msedge.exe	118
PID 1216 wrote to memory of 4920	1216	msedge.exe	118
PID 1216 wrote to memory of 4920	1216	msedge.exe	118
PID 5872 wrote to memory of 4364	5872	flstudio_win64_25.1.6.4997.exe	119
PID 1216 wrote to memory of 3456	1216	msedge.exe	120
PID 1216 wrote to memory of 3456	1216	msedge.exe	120
PID 1216 wrote to memory of 3456	1216	msedge.exe	120
PID 5872 wrote to memory of 2536	5872	flstudio_win64_25.1.6.4997.exe	121
PID 1216 wrote to memory of 2408	1216	msedge.exe	122
PID 1216 wrote to memory of 2408	1216	msedge.exe	122
PID 1216 wrote to memory of 2408	1216	msedge.exe	122
PID 5872 wrote to memory of 4876	5872	flstudio_win64_25.1.6.4997.exe	123
PID 1216 wrote to memory of 3764	1216	msedge.exe	124
PID 1216 wrote to memory of 3764	1216	msedge.exe	124
PID 1216 wrote to memory of 3764	1216	msedge.exe	124
PID 5872 wrote to memory of 2864	5872	flstudio_win64_25.1.6.4997.exe	125
PID 1216 wrote to memory of 4436	1216	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\flstudio_win64_25.1.6.4997.exe
"C:\Users\Admin\AppData\Local\Temp\flstudio_win64_25.1.6.4997.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c8,0x2f0,0x2f4,0x2c4,0x31c,0x7ffaa0b5c188,0x7ffaa0b5c194,0x7ffaa0b5c1a0
    3⤵
    PID:984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,1887733644781080861,7059215333498421273,262144 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
    3⤵
    PID:5200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,3510436192269817026,7498364522142119240,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,14582092481085524075,16710060917452797401,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:13
    3⤵
    PID:3460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,7185718795720859454,14740893813014634129,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:3816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,5513119523897194980,13493563840371542717,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
    3⤵
    PID:2696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,3057501407427293901,8877226462882773606,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
    3⤵
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,8830905771677979690,12916623075774192917,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:9
    3⤵
    PID:828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,5679127517904463984,3943848731709113776,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
    3⤵
    PID:2292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,3877259144291325602,7945187054436613968,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
    3⤵
    PID:1496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,14448405668034198609,18298165379264845346,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:4008
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,11096942810936941309,14184352102128727987,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
    3⤵
    PID:1852
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,11096942810936941309,14184352102128727987,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
    3⤵
    PID:3640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,14746050027767633143,5706271475911565550,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
    3⤵
    PID:2484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,14735421306701649258,16419967093857382546,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
    3⤵
    PID:6060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6832,i,7092078951529056368,16933976470550790997,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:1
    3⤵
    PID:1896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6340,i,9441189819760272078,14405365846338330930,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
    3⤵
    PID:3108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7064,i,14077510618338506091,7654296441939709837,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,9131530946454126729,8757131491860022200,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=1420 /prefetch:14
    3⤵
    PID:4260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1288,i,18430055156984818633,13367746461646794732,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:14
    3⤵
    PID:1728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,8567642647219631038,2295199730212550921,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:14
    3⤵
    PID:5676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=1280,i,2795695649087074529,1202483056036170484,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6800,i,6024514521738334733,17010603702935357430,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
    3⤵
    PID:3456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7296,i,14353645810805560558,3050503278447540737,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7256 /prefetch:1
    3⤵
    PID:2408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7476,i,17168436916414861271,6605136679409036367,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=1504 /prefetch:1
    3⤵
    PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7260,i,14769254660505984843,12051598617218500266,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7664 /prefetch:1
    3⤵
    PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7872,i,7515786341688761081,15325914809848421348,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:14
    3⤵
    PID:8
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7720,i,17398131614617955339,9136909748866810627,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:1
    3⤵
    PID:1392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8352,i,3802883684122275114,2183319896157390034,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:1
    3⤵
    PID:1844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8424,i,7548034262655977832,2021585038005774399,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=8464 /prefetch:14
    3⤵
    PID:4416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8564,i,15546000657123968838,5670200412240727237,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:1
    3⤵
    PID:4032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8696,i,14359103841670537919,17175058069350127855,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=8640 /prefetch:1
    3⤵
    PID:5552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8688,i,5134199112658114383,16937122678259076395,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=916 /prefetch:1
    3⤵
    PID:2472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8940,i,529622920014403419,6848916892721601835,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=8936 /prefetch:14
    3⤵
    PID:1240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9092,i,7902312629889820845,14067270028016142561,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
    3⤵
    PID:5208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9208,i,11982696990111701720,6082223483065954552,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1
    3⤵
    PID:4244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9244,i,14980635104225656783,110919591128653508,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9272 /prefetch:1
    3⤵
    PID:4260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9472,i,16256962808583505735,8255511515156886557,524288 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9428 /prefetch:14
    3⤵
    PID:6372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9420,i,1501211496590014315,17378300003396285888,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
    3⤵
    PID:6460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9636,i,11960225606415486114,4482636166177941645,262144 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9448 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9664,i,10637703141743687770,8390842019660543601,2097152 --field-trial-handle=2376,i,16023081372907269654,2743361359547727996,262144 --variations-seed-version --mojo-platform-channel-handle=9676 /prefetch:1
    3⤵
    PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:6444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31
  2⤵
  PID:7064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3040

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

077860ef-7418-4fe7-bd50-34c1932f2842.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\077860ef-7418-4fe7-bd50-34c1932f2842.tmp
Size 34KB
SHA256 96ead539db6e0413e3794e3f982faf0073200f0ca7962119514d3ee26212183b
MD5 ee20d87600f42b4288aed93d4d6b56ff
SHA1 131f0d7d550f1f2ddd4741c6ff872bd0b89a90e2
SHA512 3cb2df850af2c83ca293416d42dd9b04e2d80237039570d7233593aa1312f6698552f2798d54e34aabdeb1e190b1f05a16f8dad6c367f61d22f853fa365e8aba
SSDEEP 768:qH3WY9kc7fZrKDp5XSwQs88uBkiT2QiDvcv:qH3z1trWILNBhiDw
TLSH
T168F2BF75AC959C63ACB69381798B3B526FF46053D8C40E54C9EDA70E008776E3B4BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000026
Size 30KB
SHA256 e8a47935e86d56d77cb02182a759b66e429f249697789a29f71e034bd95a5575
MD5 814a06ad5209ea490fb1a426c375b159
SHA1 f440eab8072df6603439bd72635f3b4e6aa2d110
SHA512 9efad3ef55e36361b10c4239cb675369765aa075baee681a437b23f7cfc75e70a350482041ace102070010a139a33d34a68ec1f36cec74b13e61e7b80ae36f9b
SSDEEP 768:gshYEaJUap9jJkV0IsatzI8k3VDlNQxfces7a93j2:gshYzJUijJkV0Ic8k9luHs7Aq
TLSH
T1E6D2E0557049490D91CEBE02C00B9D5202DA67172D7690DC7EBF988E4AF7B93C5A3AD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000027
Size 25KB
SHA256 44bacb1f1a4860588aa6ca1bfe39840f5b208cc04b15ee3b5c64658bbd7738d0
MD5 79d3b2be6dd9c91153fde9e65b285463
SHA1 8636909195162372945d6c4554d4a00c24d11c47
SHA512 83968a71e741c5debabb9a1bcf2e99be7c63bf2bfe8ed77bc10bdebda2b06e72ea8e94d016fc4c3876e0c4bbaf7d5b992082b8865c94c1c9fee7537bc9d9a823
SSDEEP 768:a5Knn763Cl0uiUNiANuXotBpl1/RO4YQOMH:/76oxiaiA9btJZ
TLSH
T180C2E12A0AAD4B8461606DA1DEBCB18E0519E770D658FFC0D1DC2E984D2F9DD4B1E0BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000028
Size 18KB
SHA256 607d7849abe9069c906baf7684feb3774afc348a0e9253f9059c7d06ce40ec60
MD5 c74c7c7d8d7e75c8349c43f07abc220c
SHA1 90a9cfe479ae5a1eaf12942d0e56756e587920b5
SHA512 6a252d814a06b7271e2470108948111eee47bb1a512ed9ab442ae2baa14652145a2de72396627b399e89b2834bdc2d42974b6bbb97bda917746363a2b2fbcf50
SSDEEP 384:IPflV5v6zAubokIlk4fOoo4PyZErixnDm23LKag8oxTyD2oS:ET5v0A0okIlLffK6b23Zg3TyD2oS
TLSH
T15082AF9CAB6714B183B41713000DE6057B7146CFF3BF6364756AE49B2785E1ADB93B40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000029
Size 18KB
SHA256 dd2b29d8fd0b581a5a6833554ef9fffa0734e6fab8271034194fcf6f5cf80ca0
MD5 6c57cf7d480c2f5b8ab6d1bc24ca9b85
SHA1 84bef66784b2e6ea7bb87e44acee10716278d5bc
SHA512 19c6ad1c9383afe9573fd2c3418c70b07ca80da33e6c3260755e79c659ed9127f1e88a211bccd488fe4bd4a7a547633ae4b7ccc8a689da28be667b31a50082e2
SSDEEP 384:iYNvm3BhB1AZtOnFPdmzF/x+2pt24/JWRIbwHvJjpYxfKzUUEmnXUUIC:iYNvm3BhB1KqFPdsNBpw4/JGIbwPJlaM
TLSH
T18982D02E7A69A3CF50404A33A6CBBE1435FDEF0B941839A916D4DFD4E0C45EAE127412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002a
Size 136KB
SHA256 8c61fb1a1ecc4b4c9e2c7de0dd4f4fec6a55b9b780aeae66f36efffafe95a18f
MD5 716bebee20f88869079361f7d0799367
SHA1 60c51253df4d51807b7419c55b71935150690769
SHA512 92cce02cb77b26ee7e6f2f4cda3d336c764a0d4d21da5f9644287156e41a1b86f2b5289818ec489b80982cb2f205f0647eb00f97876bdd05c816f68859c0542b
SSDEEP 3072:vrCOUq41VsnNT1cYLVUi5zMEexYsBfF9c8/Y:v/44NSYLVUkwElsBt/Y
TLSH
T1ADD3126CD760AD0FC16C88ADB2362273AD4120DB2A2D319380625AE64B4DCE7675C97F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002b
Size 33KB
SHA256 b61d46a534fd6269981845cb8ff4ac7d44c92c21574c2063d5e9101f0ca3b452
MD5 abab8b685e2b36faf7ee26eee39639b6
SHA1 9525bbf7cb1d44f1730576cc1674a7ece1bcb7bb
SHA512 3b9e35399a5f8713c4361ead89ffad22c9158b5e8fd9a6343a8f1ecc14c59c4475e7e93bf08895f49aa1e8df18af5fe3509921a69fcbd682dd36650619d0336c
SSDEEP 768:z5R34CmITYoZGnlRqTNyd8ZEnYXk1/FT4FREFVhKL:b4ColR0NRZEniknT4FREF3KL
TLSH
T1F3F2F1E9165A3F425121E1C38C0DED5B8D78897DCFE4842B89D9EAE8F132F54C1E48DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002c
Size 76KB
SHA256 91f369eaeff174e7d807bc8cdd45ad0ae1b03e95a3c8e40385641af6dd861910
MD5 040e0cef96a485cf31b564f213f2e6fb
SHA1 131cc3a45c7de708379b82a1c94f778bb636b257
SHA512 f56e1796100170004cf6b022c568405a52d3f7483922603a903f6d5fa2d7a3633e92cfb67c8fbc3e6f78176603b8b843d31bc0b473aa6db4a3d2a24e4de3ad46
SSDEEP 1536:e872ry2msxHel8hxswWxWFBHeNC7IT5KNNmsc8k5j4wOV+geCBI50aj:Lyy2msRzhCTsoAkKNN48k5cwOVrI50w
TLSH
T10273028FD535B97A9FB29B70DC84053460950D3D6FE52BC6C463D920C0ABE72FD498A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002d
Size 21KB
SHA256 90556675373ea9ed1d0e9b5678426d69296b6801c906ca378bb426aa3d6acdc3
MD5 3eb14f3838ada50e10f062a895c3b9cf
SHA1 f570b2fe0688332cf8c4a9127db25433d9a1ebaa
SHA512 cee1e0f1a0903abe5d00e0cbf1150e990494f950ec7b1f5dc50a832562db30dc1dc6ae437e49c13f50e75274b11703251d0018cdd340ba3544d3a16d319ea6b1
SSDEEP 384:UUAzOARVqPhcEBht09b4FoVNRCgWSCZnq3Jxshb6dddddvyFRCi79Z:UUAq3hck0SMNRsZnq3JxIb/F0ipZ
TLSH
T148A2D07379138094C745DA15DBF93C7E48677BBB0278464883CD2AE5AB31B9C8AB080F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002e
Size 39KB
SHA256 3128c79bcf42604cd86fed0e892167ef5a4ebfdf6b69ab4d525e084bfad938df
MD5 82c402c83f988063f1306800afb632e8
SHA1 0fd5c9b9c72304c0fb93ec2f366d8d2e0c5ff35f
SHA512 ad5c42c6f62326c4698bdab9adb7966046eef21ea29cb7427b0e9ca82e1f6fe7507cc215fdb898ae6a7ec6f3636809ce8b4f22f45dcffca32ffb0db18407630c
SSDEEP 768:a/gNd+cBqIOOuLfh+yuwry13kleZk8oJj84A3zb6h0geOSD/1tBSz411zq:aU+ckIR2fh+uyxkleW8oJbA3z20ge3Zw
TLSH
T1D503F2DED5238A8ECFF13AF29203E891BCD1592506DC9682C54C6874D1F57B7130DDA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002f
Size 176KB
SHA256 1b20a2e93ba9378e4fca7937f39f0ee959d5f36a81995aaecf80508a7d6acf0e
MD5 2e37b18068644407712c28be17f89d73
SHA1 f431dccdd7de25fc30db6076a26da5209ca4a829
SHA512 e184ee15bfd38fe956b88c99561f0078794cefedfc48254de87a0e9dc15a26d6819b0a01e625ee405f4a8b99cbdf9f23cc947d6ba9d5c9b04f32949ca5c2865c
SSDEEP 3072:CMKAHJoijjwEzWtktkBeJ/ECYwCxhcOIElKyxGo0VajVDl7NqDgqMBAlo1HcI7Xx:CeHJoighUkEl9ha2OLlP0pEVDlpq8qMh
TLSH
T1F604230E9F88848A543DC74FD6BA6D780BD3CBABDBBA19FD034AC4A391C2551857532C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000030
Size 183KB
SHA256 f1cd3372bce5f6e2a150edb8579b9aaacd77dc6bda25d0b8b7b17528e49cd5ef
MD5 99d736dfd66ab59751580c0dc8df8e7b
SHA1 80875979e6bdd5ed656ef01f85288ebf7d048972
SHA512 8ebdf73f33b36cbd906b44dc3f9fb79e0d1650c409ba0f2edffc9ac43c6ec32667e3963a6fbeb6afe4be8807a052faf672ebbf472096aeb15850c4cad026d566
SSDEEP 3072:BqZZWpWRu2BOEGFUa+zi21ng0cNTsdZB4+Cgc1koRth8Gpkk1HgN6RUi2un0rqCj:B0ZWpsH8EGr+z3dZBdEvRQ01HggRUf1p
TLSH
T11F0412C6B9784720B4837DA3CD3FB9E90E497871415CA7FB6C0A203E45D09668FC5B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000031
Size 161KB
SHA256 7f67553281f5a9684072a413ba591bdb27460daec5c2651376b0645c665fb565
MD5 a673bf97a4465109ca2b5a115d439fbf
SHA1 918ae7cc0743b0f41bc2831210f1cc146b72a47b
SHA512 0183089a29d5193a971c4dcbd5c61137ea93b3ba1586d7f70b493ccc1929d1844350570a690bf632cd628d9d3421dcb03c51949e06ec2875d681e85e49c63950
SSDEEP 3072:N4cjwp0KHJIVGiYQW6HiSb74zN83lSHdtpOwjH9R9H0EZyl7e3izoUK0M3xSr0:WtHCbYQ1DnVI/hPykx0M3xSr0
TLSH
T1BDF312E2C4278829709073205CD907569B7C5359BDA70DCA3AFCCAFDEA5B13416399B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000032

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000032
Size 34KB
SHA256 cb219e697b6d1c5e100c5bff58a1e890d07eb16d3adfe0422e733aacee3d94c1
MD5 4b0423ee6bf91b412cb43d5b3cd2009e
SHA1 eed399d0b2bd9463481a81f9e004d086c5afcf6d
SHA512 f24f657f9af578228a71afb1042a1ba30d4d4b9ca081e86240c4c424446c54e50d038f10957543e67c306efc167d84f1a0485690c833973117a12c942dddd524
SSDEEP 768:bJr4fOg+AHbe6Wddb1dyVeRs2HMFMnr8FKuRIbw6JG6pFs0n5:bJrAOgZHbe6Wddb1dCgXIoKgwSGqzn5
TLSH
T190F2F1B9B2D4E5137340A7B1884C39574B7AB9A7B0F88B4ACC5F85153B7F2601909F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

033c97d380b615f5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\033c97d380b615f5_0
Size 143KB
SHA256 a11583b3b9d9d92fe57e7cb2582fde23f48004142154faaa8101530fda2c3ff5
MD5 fa3bc52b72a5d5483a1b38fa0ee4b4b9
SHA1 357bfc33b5ccbcd25889cee5d1cedf62d20023a6
SHA512 25bce0af2520eadb4b5f266b11d6a0ff96d5d5750b8833532d2ea7795f1934566462bc01b6207641e1e9318fefd821d9e798d1bb2516d29cb4309547ac1e0c69
SSDEEP 1536:O+ivLxA97t/MwFtmXlJwJZkn/8qiENQVON0/hYzhCfmZlqolfFIol06pfm:O+gLx+uwFmAJ6/8qB0/QhCqpfFIouif
TLSH
T1C7E3A7113750AA46CE7753F542628A57733645493FC3B32762F4B7392C283EB8E4A89B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

063a1543934b6f80_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\063a1543934b6f80_0
Size 32KB
SHA256 432863d2dd965f014eed05c823fb2a46f1aecf0f2429b7af20403539f2fa531a
MD5 338ca62bdef9a80d72a2206d1020d5c2
SHA1 9cfa1275d00d4f21810b3f8d852c8d3b576cc5e6
SHA512 745cfdf58a4cb27456da3935268eb198bc2ee0511cbf9f8179e8e0dfbb3725a6738b4aa6765a5fe9c569e4b6f71c1c848ff58bb334ff1817f1edbb45b0e7ccea
SSDEEP 768:J2sPWQDnjcWl7AzNCaeUT4S3LpWvTBafnws+34Ld6:J2sRDjcWZAz4Xwrci2oLd6
TLSH
T17DE2D6D61B95BC3ECA2A53F942918926F33585853F83E32B34D113391CA47D38ECA94B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0998362a64de66d1_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0998362a64de66d1_0
Size 98KB
SHA256 03eca94664d610c44c84f84ca6332943b5eb5b9ec76930cfbfb246cd49ea7260
MD5 f95e2ebdfcb8a5a93cafb9f304602925
SHA1 ee566dbd9306a46fba1a7fc7081af3f4396deb1b
SHA512 a09ae4bfa3e9986891a4d053931e1a9a5e34abef06978e241981edf5a4ca63ec6a9e43ee0ae7f4c16ab1c2e2ed06c9c08149f7d610897004083efd7c119a4584
SSDEEP 1536:CrQln7OsByORl1oltyTPr6Fqebx4Za+UuCumAypglJ6zFB90uR:CMdOYyqElFX4RYFB9d
TLSH
T10EA3EA792B60BD94CA3617F041B38D17B73284486FC3A72FB2E4523A3C4D5E51F9A94A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1426a34483cc6c30_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1426a34483cc6c30_0
Size 289B
SHA256 780720e596dca1961943a0466094bac48a148bbd2db1324493ad6eb51cbb21ec
MD5 823c3c566f11ad6e03a5e08ec80f18e2
SHA1 a653b5dbdd067e30fcd68ad4908b349b55f8e463
SHA512 213e334d5829f370fa74f3b9320ae55c1200740870dfe7164404fc548d554f2fc5ff9d9e19a2117f94093031a93356a104033c903a906c33a6ecd90db8be2bc5
TLSH
T1F5D02BE338267D5CCD1E0BF4D61B11ED9746D8591C99C6C0D8099C5717824F7CA19441
MD5 SHA1 SHA512 TLSH

Submit Download

3e61c56057355737_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e61c56057355737_0
Size 273B
SHA256 92bbde851e45f0170471141c5b9ea9c17bc38af35224009914d354e94869a3e4
MD5 79839731b5fccf0c4fa42f268be568af
SHA1 287083e0cd43135505079a878d45a6c06158c02f
SHA512 292b31e3f618e32626fc570918bdc303849b9e9c17dc797e2b83c7c3fff8c8ea2473ec7bf1d9c4000c722effb2e8e42b57c4c290e21485b6e072c7bef9c828ef
TLSH
T16FD097A720A54051CE098BF0E20B765DA3E6806E0988CBD0C80784EFF635C37FC26018
MD5 SHA1 SHA512 TLSH

Submit Download

49c643c06c47ac49_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\49c643c06c47ac49_0
Size 613KB
SHA256 486f01c3faff9e33a53b5a0986e57b3da4a121f7df766c6cebe62c80321aa2b0
MD5 67183d76b6b56806bfcc1dfce2f0bd01
SHA1 bd1e3a4824809c9ea034feeee608ab6e7dce4e10
SHA512 3b30629a441098ae506a2ab7e4d229a62d75af3ebe5f268e47f9c58d1bbe51f7a2f7099a2302e86f994857f2335c4b06f665dfcc4f484bda3e199e04b3a2966d
SSDEEP 6144:ZV5oEDDFRQNU8xIClNOf4EdqwXkRTVwVDhH70W5BHnoPJ4hdeBoekFdwANActD4s:Ztt2TtTVoDhH7F5Fe8eSeF7cOM4BE
TLSH
T11FD4A5199F90BF75CBFA16F4C2D3C9676135018A2ED3914392A07E3A2C0E1D62E9794F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

553b221fef3cf8b7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\553b221fef3cf8b7_0
Size 86KB
SHA256 8d4db7418ac779eb30fcc5be8c094066b318fef979b8e5610f4da0a44d890195
MD5 3aad9f27f9dfaf25c126a1f7710b191c
SHA1 9fa1eb9ec12047f8c64ed4c172ddcef2aacb88ec
SHA512 10d4d9cfcb68f8f2326c84420287f3a2784a298241fc2b4757b54e8f43794f1f313a70352d89ef3c21484539b9f3bbf715230ca0996f9aae5b5ea8d5c0256288
SSDEEP 1536:7y/4b3YgBc7Z/6bW07tAbi9obqQv6hGCD:7yQb3tWp6bW07t3OlwND
TLSH
T11583736577C1FE75CB3663F40212CA667632899D6FC3920732F0B6292C4A1C91E99C9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a05256085f46078_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a05256085f46078_0
Size 281B
SHA256 d36a74bf5a9340abba017fab4756b03d37d3e3f96d88282145bf5a00bfa9df3c
MD5 e69035dde15158bcd9c5e076c73ee741
SHA1 040a4d071a4df79e2f60f2ecc96204ad19b7a809
SHA512 49e80ef9a74b9f3497c81bf6efb814898bacbb8acf766e84cc9cbfa2968ac76d90609e5c7a6af98956fb0c25dab5c02e392b5bb70d5706ce3fbc52b379852210
TLSH
T1C7D02BA359300072C91945F193B5A70DC1827005642BA0D4518540B739D26AA65138C2
MD5 SHA1 SHA512 TLSH

Submit Download

5dcdb71bd90a48b6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dcdb71bd90a48b6_0
Size 262B
SHA256 862629932882db1ddf899c81ff696a5a1646a9bbed12286642557aaa8f2e27ba
MD5 39d663bc6cac18c476b6a16b11eee5d2
SHA1 b0c7c5addaeb1a69a5a23dfbb2af7272af453e7d
SHA512 25f6fae6b9e03b1902ef0dfd6ba3d0616fc408237b6c3e9a3cde9a0fc86f925c0b12587f2ede407e2821e9fcc83e8849792195ef363abab01149679cd6819bc4
TLSH
T131D0971760300846DE58C6F2F227C186C52222BA486BCC99A459947702D30B28022B63
MD5 SHA1 SHA512 TLSH

Submit Download

7cf6787f0a7089af_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf6787f0a7089af_0
Size 3KB
SHA256 f727acf296b6556e130e143adb6a7d3e877e47c32291a77d1fbd87622438c3b8
MD5 3f6b608bff55e9162e1480021865de95
SHA1 b5359fbc45f8439e0afb1218c7c57472ca46c9fb
SHA512 fb5ae1888944004974b9ee206db333e642149089f32c0205817b6adcb7acf4d98a73296d43d8b3c07c78602b3d5e54790a0c5ae2723662963e85ff645fb52059
TLSH
T14B6163732BD1EE29CB3213F04191C666F772845A3FD7864396F1A3362C1B0E66A0C84B
MD5 SHA1 SHA512 TLSH

Submit Download

7e4aab487f31e42a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e4aab487f31e42a_0
Size 295B
SHA256 ee9da41c70340720a47b618e06a42bfcf9c39a86f22df13e075ed84a0444cc87
MD5 9c98e718d7a532d727033c7f0b32541f
SHA1 21fcccc9d60c1c914e7006cec7a260e820f9c9db
SHA512 635edad87dfd2e0dff230fea5007185f89e56141c7fe9bb44df7f55ca18bb01782e84a12ca58f368690745f26c70fa5854f41ee0d44443b468dbed52c3b2baa5
TLSH
T10BE0E767F4394004E75049F4F19F5A564B3350EDCC8FE3C12080E0531407F75C244509
MD5 SHA1 SHA512 TLSH

Submit Download

800c2eb8e2c49657_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\800c2eb8e2c49657_0
Size 278B
SHA256 e2dbdecb0f9c2bb17ab60e5bb96fd58ea68018a4412afe3cf888e5e4579c8fa1
MD5 fbdac4718879109ec9806cd91679ed6f
SHA1 50b93d73ccc56fcb495a04d8f7c1c977bc877823
SHA512 9b91c422793ce7f8f8f3ad133cee299c0099b4cc6102eba998afedb3deabedeb449ced48da4a5caf0652979101b20c7f2a69fb70f2e03e852cb0f80d0363f489
TLSH
T1E8D0959F74542951FE0689FCE557B78FC209E2453AFDD1124429B2331FB1DF2145C81A
MD5 SHA1 SHA512 TLSH

Submit Download

97daaef90b7164b3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\97daaef90b7164b3_0
Size 66KB
SHA256 771b5546c844f6ffa682d61da8055448fd6d9326674293e1d264ca70e7d559f3
MD5 f553ceb221fffc65c7dab201c3b16ec3
SHA1 51acde2d380da18f6d5ac5c56a812712fe4d5413
SHA512 bfb46d49fcf735198da70bb600026afba9dd51dbb0cb0a83ed63ed70bdc8547dada3ac145d3d4f676371c31a70f7e8f76de929553d5a3204b6fc4a6bbc8409ec
SSDEEP 768:BKNA+X8ZVkvN053YaExbpKNrNsMgwV/q5RJ58W1hsnYsz2/zZ1CHZ:IvX8v8N053Br3f/qN5/Xfsz2/d
TLSH
T1A0632F79FF116B42D43A9331AFF12078B91D990AAE41A3977055F2B7390B487FF82189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2031c42cbc4a228_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2031c42cbc4a228_0
Size 276B
SHA256 238f61b50f16b622bb8541791cd916b4d29339c6f6c7b3a4748e4c3e5f1861fb
MD5 67f8340ac2af64d2860546078f98ccae
SHA1 be32482f8bcfdaf49909e86db77dc8544eef0192
SHA512 225497c03752b38ce0eb150a48bec90acd7054a762d8232b11e0d2f9f51c89553028a5512801e973d0191f7a4f8acb190b02297cd65b55a205d745edff313009
TLSH
T1DCD02BF754341C1AEE954AB0E62B0B8F961321551D48C546C51A40739BA58F1C862416
MD5 SHA1 SHA512 TLSH

Submit Download

a5131202f42438ce_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a5131202f42438ce_0
Size 60KB
SHA256 b09faff404c0592dce0e54a37db3a1e3aed84bfd5086d8f508b4348bf12db6fd
MD5 7d0b1481201ee972aeb56d2c896a7970
SHA1 e01507e6aa18c4b337caf60e04f91949b112c4b0
SHA512 108cef2a6f5b1f7d90a89ede3956e67cd616a0ee66c75b7ae9f5bde8a2aaeaf1393d2ed32453a34d18505fc5ff7328f03e74b46dc4274c76c499a476507881fd
SSDEEP 1536:8xJvbksGdfUYL8YjcZ8LHDKYDAzyeYZG:MJDksGWYLt9Dqe1G
TLSH
T1E553B6162790FD95CB2A53F5816A8A57B33544883FC3D32366E4F3391C296E62F89C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abfa7f64ced25700_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\abfa7f64ced25700_0
Size 282B
SHA256 55526c13796ad00c0d2b9ecf0615682773c0e662dded562d57895d11dc383998
MD5 60b2bb2f4b557fdfa3d033883fb4adbc
SHA1 f0c2c1b7ff2e02f958859040396eb1ab507f579f
SHA512 9a0aeda137be05a65b4ade4ac242b5d1461d33e538010bc849236fd525b41cbcd7d4807699ce46e68c28f8e80aed6da3e4bf98f93286c27e903ead8226993d77
TLSH
T134D02BF77425100ACAD607F1E31F7286416242D53C1DC5E0C01D795616B08B19C11571
MD5 SHA1 SHA512 TLSH

Submit Download

b1583314721764bb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1583314721764bb_0
Size 290B
SHA256 26aed4a920db8b14dd21fe0bdb02b8a209af498998417ab07b5537bd1c206bf5
MD5 b599f07df3094c72902549126dca4b2b
SHA1 830729e5af341a55f740d8056b0ada01a2b6b3c2
SHA512 66d0a17e788f52824c96ddf02c546b21d7eb089e72664111ff953e19336f016771737b337cb77df483ce201d2cd7d216c68a0c5d119c0c370bf66d5058125022
TLSH
T1FBD02BC75A26144BDE5B5FF3D771735D8273681D047E93C8981056F73250075A709D12
MD5 SHA1 SHA512 TLSH

Submit Download

c026fdd365c526c8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c026fdd365c526c8_0
Size 700KB
SHA256 5fd42cb9b8e8fe90eae19b36cced70c7661ab1afbda6bb1784a4a74340f3f61f
MD5 f552d10a86c19cbbd6426903942c4c53
SHA1 7932569aee3d629d9fa9f6a78862f3b2c14fcaee
SHA512 9e756e477389be8bf446fd439a88186f29de16ce693695f553acadb3a7c192b6543d58278e6f311cd691879dd723e5162063cf2554591ab6c6458b7d45c48f2c
SSDEEP 12288:dtxyh3/2FFx9Ks0djGOYb+oHxqd69TaGFr2Zk:dv22hCdSOYbBZx
TLSH
T122E4C500DF807F36CBF657B942D3D466B536418E2ED3920352A0BA2A6C1D1D66E9BC1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0c54abd67fea39a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c0c54abd67fea39a_0
Size 8KB
SHA256 12ae91dbfcad89817c8d05f9d0b3135f21423087ce03c54debb25a2b0849830d
MD5 bfb58f6c0b53518ae452709763ff2b6f
SHA1 4840fb4e4260379a8dcd78abee9714096a84b428
SHA512 829a3e73287c648eb9d9070b256be8367f1e173547d3197cb3b4895ba1f5a468ae20b2296ff12dc7ec75dea7a27c48559d8642db3d14bd7dc7395d996b218036
SSDEEP 192:eeBJngzml9MzRpLINEMtP4E5BgFlKEIQ:eengCHMNlINLgEsFl3IQ
TLSH
T19202C6A1A3A5D927CB2A57FA2292892BB73195053FD3830720D4B7763C213F7594E90F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c22aeb5a5d74cc6b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c22aeb5a5d74cc6b_0
Size 419KB
SHA256 e4b65d6caa2185ed69f34063a45ec28149fbf14e9579cf44bfa8478fa6221c6d
MD5 b33e8931d8c3b117530df9fdeab96672
SHA1 caa3e2730b3322b1e7d851fb9001349f659ba36f
SHA512 2d1d7eeab2318ebfb9c0655ebe0f4a61017c6eb836d9acee4bb54c9830bdb6fe1a4e0e4d9379085ffed3e10570e57d15710a673739de9600446b4c46d81eeda0
SSDEEP 6144:AK0lcOVU7KjpcnDQbQhyZMVpzJEBJbtA24/HhGTsELwFu4Egue7EMVa+0YtsI9Re:O0UKNQYGb
TLSH
T183942A5503923726CE3A03F889734923A735D9457FA3CB0B71E096292C993D60DEAF5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d540971052cc2622_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d540971052cc2622_0
Size 68KB
SHA256 4c3edd99fe31acc96b125b468f1ae822cd0292ccb39073add6fba26beea6de89
MD5 d277a1459c25a6e92b8c954ae3959d00
SHA1 d20178a9e023d6f6752643fa1deb770ba95b0bb9
SHA512 cbc40ff19cb6ba131e4accfaa2caaf3c14abd0c2d7e46831fbe029b818b7e8693a3de473afb5db5557a67b9a8ecc8e4e8bffb03977858dca8def88a697bc7010
SSDEEP 1536:0VaCPSpXMKhLz7RRb0ALaDmoU1zCyJD/HKI:+aCqK0n0AuDwCgHT
TLSH
T1A963D6423780ED96CF2B77F541664BA7332284092EC7E707A6B5F7291C850C9AE95E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea4d2489dcc21c5c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ea4d2489dcc21c5c_0
Size 872KB
SHA256 cb2f1afb3ee9193fbbda1a31950d003ceef71cb500fffce3a2a2e77008c3cd55
MD5 f64d72c0389027ed3b383abf810ec757
SHA1 f269e2a0921525df184515bc947fa382f86e384d
SHA512 88ba7276adde5752d59a2b60ebbb7081cd6c1a69eda10af20f122952467e8083ee0e02738b284514c1cac2dd56083af3cb4d3b6c5887638a0c5d2388fce7b702
SSDEEP 12288:qdeGlH4lKx+RK6BM4ruMtGopgfMlrMPxw/6t9RL:6LMRKwMixgf+SlL
TLSH
T1D115A400DF907F35CBB647B052D3E47A7139415B2EA29503A2A0BA3A6C1D2D76ED781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaf1643a3fa3b11b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eaf1643a3fa3b11b_0
Size 260B
SHA256 14087c8576c4862c4d1f438d16621b65b3a9bbb8cbdd3dd77ebfeaf4b0698012
MD5 67de57dd047c629a09cfc39857cf3126
SHA1 47adc33a40ef84a2d1d6022d3a18345d2841d1d4
SHA512 986c14c9e29af060a63efbdf1aba02bd90b590231d8749efb6d36dcfb9f7c60346b3268bde3ad37b49f66e6c269785921ab238c5db57dcda67f4fea1ee8fed3d
TLSH
T1FAD097E74821198BC82D9DF29A63208DD380E1A81C1FC4A1C01681771A121B0D33820F
MD5 SHA1 SHA512 TLSH

Submit Download

fd3b58217fb7e755_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd3b58217fb7e755_0
Size 282B
SHA256 7a6b72a54f5fcb367802e4c29f1f28c0bcbd781285e318baa2d473ed5e823d63
MD5 4617ac7b85cf1c78f51b8f6f36c5b780
SHA1 b588f3451c2300439195742dcba502123b3ceaca
SHA512 795668dbaa171dff1f5a31477b1321f7282140249844b983aafddd99630cee00c3faf3392c99a5616de686f3fe2eebdb1943f1c56f024a632388384edb03d2d1
TLSH
T18FD02BE33534201BFE465BFCE6CA2720E21992A4199FC0604845E51B72851B151D5021
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\000003.log
Size 4KB
SHA256 e88b745b267b1fd2ae20a55d1f864a7f2a6e03b808dfee0092cd45d679744c82
MD5 96d84e84b1b712fefafa56804a268e65
SHA1 bbca4c51b679c9144ee616a8aa3438af91cc939a
SHA512 24c37406d8a5cd7e722834319a08b573af6cf0db356a1f63e001e1e8160e2a0bde42578c1ac6ce436423d271792caaddddc5f81e040750578336d6407b6a4f53
SSDEEP 96:BKXGnS/UFAZFKjI3/kru/n0TWU+lW16EnollsNayo:BKIFAmrTOlWfOaN+
TLSH
T19CA16B6FB6109FA7CA1C423249261FC85BB76E80BEC4914BF1C0FA7ED7B26405C71692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 ac6c30112f91aee4d587c373b6e4ab1c1b105a78dbf7b368e875a336257398b2
MD5 cf121e6eabceeaa30c58ba5f8208eefa
SHA1 af16eb05846450fbde51c2c71ba4a34ed1ecf7d3
SHA512 2f9464d2178c77def052f3b0a8051620bad6660ca621bc4073aaab5b940af5640b2107d88c3b49cd5739a35f253a15bd435a0563206614266d402419a6502b45
TLSH
T14DE020E8C4CBC91FA350130292683F0CC7A3370B9A9CAF81AB04C950B080290E0AE241
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 2d44d4151c35fc561fe04cc9f86345b66cac9f65eba70b6b2106e8d0d6997195
MD5 c9bb91a420397a7313ccebd335129d34
SHA1 508e403d86ece2a307133c1ea998ba468aca3ca7
SHA512 32ee96987a6651e8845bfda2abc2b7a4f3499b07d9965bf7b1749a77865695ac681593e8b96b831861d36c5dd89e9d9ec288bf6005e59e2416edae7ba3a3540d
TLSH
T1FDE055A884CFC12FA3501302422C3F0CC6A33B0A9ACCEF812B84C950B040090E0BE164
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 f8673662ecf205dd30a5901e3de8779aaf0ec45269b302fb207cd159dd600088
MD5 0221f8a900a4ebe7e525b2ed03a78c51
SHA1 a78eb4b136f6ab5fc3b87b22b5488c5744534606
SHA512 641546c8d7bdb9157ebb68e3d32b0a874768869769d0dcac8cb86f7fd9e86d7da433529c79ab100d7770875b4e6c7336420afa0b7728adf3254371d39a3f96a3
TLSH
T13EE0E5A894CED59FE2A41352512D7F0DA7A3360A9ACCEF826B47C584A2810A4A5AE150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 b7b3ac8eb60d2947858469b93c7e9ddeceb18f9eecde22f554adb1d6d3112580
MD5 92d1f52d099fa8679c57a459e4f23ec6
SHA1 235949ca9193e10356383f3214ac5cde1f21788b
SHA512 bfed8a8ae98fb4376d9114c99033d54bb91b442b535a63476e3209c5030d4ebc21b422f3ee56a75e15c76056415ca393f8aadd9a38340f0df53e8074f10ba4f7
TLSH
T161E0E5A885DED71FE2941352516A7F0E96A3370AB7CCEF816B46CB41A2410A4B1AA150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 88a713ca41acd67f811558ec054e8997e4de5bc28e3a712ea216115fee00083e
MD5 67dd43a6b11d69339f587e43ea547047
SHA1 d2443d0931280556e152d72687632050645e5853
SHA512 98f37a62c2cf15a2b969dd80d1c8d91f4ffa345da9161bd72959f25846c01866b1fc87fcc868f8fb34ded6c274c1c6cc00233f98a8a614ae6435a28d6cd6e4b1
TLSH
T166E055A8A4CEE11FE350124392687F0C87B3360A93CCEF81AF06CD41A2860A0A1BA140
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 f2e98cc9596567c30ecd93ebb7bd1f1a2bdfd8fea669b166f6e33fa36aac4e0e
MD5 0f13e1eb1bd3a12879b42dd6224ec750
SHA1 13814617f31887c8d4c8bf8ba4ca735097e1962a
SHA512 a9c5f755f1120596135ec030d2ad735d89b66ac8d22b6dbcbd42f21ab434d7dad319685de93830f838f3b21a3a02a89de4f2d1573a5d8bc318d3f9d71e8c77cf
TLSH
T1B2E0E5A8C8CED91FA254125361697F0DD6A33B0B96CCEF816B55C951A542094E2BE150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 b7bcaa0c06cda3ade6011cd77fbaa305ba647da089ff3795745ce032de60d554
MD5 8fe60d7cac52a34beacd0183e660888e
SHA1 04c34dbf8752be3cb343581ae0af7ec33dffe776
SHA512 5bfe6e59e80602cbd6fbccd3f29e04fe8aa91ceb504ca55cc478bcedb96d35de9e256ea800746000a14a858ad5e85d5d8cb44d4dc1766997eec158128a0aba09
TLSH
T168E055A88CCEC15FE2605206A2383F4C87A3370AE3CCEF822B0AC541A2420A0A0AA141
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 34aeca161e97b1502a3c417cdd9a9dcbb40f9b5347d8ebc62d51a834905901b6
MD5 c374905d522f4cb4a7232c4e9b0a12f9
SHA1 bdb5a2e3a13f9348ec1d78bcc499c2e2946db717
SHA512 d17ee90f8586a5d73adf1837d7f9402b5397b48c0d8025fbbe4e78c54b32070e0c040075dc14c8f649740f33ceba2a5434af670f0bb9c56aeaab78a10f1ec9be
TLSH
T133E055A884CEEA5FE250131350383F0DD6A3370B9ACCEF816B00C598A080194E2AE150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 1d401098e36b9b9085ca16e4cf3133bf636aa3d6e6297ba4ad9d7e4039ad6083
MD5 a037570924c53e2548c26e298ff47206
SHA1 dd79f092e0f591b6140db34f0170810c6f016fc0
SHA512 17f17b3a6c186735bbd2eb09e00be69cf13450f45963185ad62aa389a544800ba2c8836722409151c7d5064061c2c60fe2a07421609d46d6594218b1fc0564d5
TLSH
T178E055A8C4DEE95FA260130290383F0CE7A33B0B9ACCEF812B10C950B0C2090E8AE141
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 56faf35154b18e7047041f60f2ab169781c2a0f642823e465f58f7cac90282f4
MD5 8f59192c589a663ee4278d4cc6d68340
SHA1 46ad8084515dd4f0491e5da0ed4b4b79cdf85d2d
SHA512 ac92b80697cb6f3495716e003186ed09a7307562ae4e469144da1390d6ff42b4342c05cdf65ebdca8b7de9a4173f1f5191fa1da7ec1ec92d65c4ff8d23caff50
TLSH
T130E02BB885CED51FE2541753653C7F0DD7A3360BAACCEF82BF46C550B2450A4A6BE160
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 a9deb629a8b5dafdb8d5947d24dd938582f57b7066eee6f35c99f1f1e114e635
MD5 7b1943431e600b95a6a084c94c5f337e
SHA1 f59bb15ba71369a02a0f52543ed5e566003bca17
SHA512 6d54394ed8c6e0391516637ffa11374950c0df4982ed93c0a24fd9a97b0820cbbcc67262055f8c56a440fb9b8aaa413254d20fd947798cf1f5b28e74882763c1
TLSH
T155E0A37C45CEC55FD2901303407C3F0DC7A3360BA3CCEF811F05C94272800A490AE150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 954139106369a0e134dbc5b2e61401bb0499b1a814dbfef512d08fa6a0e0625d
MD5 8a7b2dae6151dfff0ac5116dd02773e0
SHA1 86f5f5bf6d61bc2cd6a99e31dbbd4ba81d7e4c51
SHA512 90012945347816991b80c56154473f90ec940d52ea7a83a6d9ccaf87c7a4737b039a30f7562e6f66ae3c31a1c8f1c7cbb9fc20b1113ed518a482e84c88051af9
TLSH
T141E0E5A8C8CED51FA264129261A97F0DE6A3370A9ACCEF855B46C691A141094E2BA150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 d174e273c4fa089c28a2b0cd35f45fa1e559d561a4e56961749c173fad87c326
MD5 7565977fb694349479aa17a99ab5abd1
SHA1 b3f9e9e7647addaa8023bb15569aee08e0ffcb98
SHA512 006b7b338dded75d7b60d112640313f182de7e388cefc578c2b183429ea322da43b76b405a1992b172373fd5e10a85ea07ba7b9b2396163367b5255d06fc22ee
TLSH
T10CE05CA854CEC25F9170111640387F0CC6A3770FEBCCEFC29B01C54074C2010D069162
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 d88041b6fc59b086cd70829781fec02e5d7c4e1182b9aad1cb19a3927f9045a0
MD5 62493a1507965dee38aa40d286d3663e
SHA1 f8b21fc07611472aaf44364a1fab5eb281dc6919
SHA512 735860593d8e2802cfa8f7d8e86e680da55dbf54de1aa4ab9a03c66600e8f7c84df6bdd9d6eaa21f11e3365011413a91dd0b3bc9587ef8d6462c96cc0283873b
TLSH
T153E055B884CEC99FE2501302406A3F0CC7E3370A92CCEFC10B16C5A5A0C1098E0AA140
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 4b6694766eb0427d0712a540552c1b18625ea87f2f35f6ca58f6980ee5369517
MD5 4cddeb3cf7e047eafd8e0e18a471d347
SHA1 572a890f46a315ff7bfeeaf2067bd87cb2cebdd1
SHA512 14ebb2f546ea344a9e281b799e467652256c992dea4ac7482153c69da9a57e250b556df85f2a12a2b3028ee6058fd42e24a4b733ab22f1e539d549eb66112573
TLSH
T15BE055B8D5CEE25FA264230240783F0ECBA3370A92CCEFC18B00C651A041094E0AE141
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG
Size 405B
SHA256 81d6d9aa265630585fe4318e4b52eb4166cb1161f1ffd573af61609e933ebc38
MD5 425168808a02532a5dc6bb2d0f89cefc
SHA1 e82ee448dd5b96abe8786874f2e9b18ffcbd7951
SHA512 270cd00615779acc9caadf84682ea9873bd4cd25aa2fce88e0b3408cf79ca0c842868d8556f91a51a62c923f680050a02eea8c2ffee53e1e1b7678032bd4eb56
TLSH
T1DDE05CA458CFC51FD250124351683F0C86A33A1A92CCEF926F05C941E140064F47D140
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG.old
Size 365B
SHA256 317882f4a4c915f51e8a3a5b663d0dfcd6e21e3405161817c336f590221e998b
MD5 c371acd0cc1db96ffe45396d9f869555
SHA1 c4cf822af9c27dfd409bb087e804abf13920f30e
SHA512 f77a3582e27d88a51b0344a9258f30a4e707864c7a9f1829170ce05b7236de55f0e3de32ccf70625f301ecb9049092795987ef3e47abacccd6c01cc3be9da4bf
TLSH
T138E06138C5C6C51BD36053D551347F0EDA63220BD6CCEF415F45DD047186054D46E141
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\LOG.old
Size 405B
SHA256 195a820bb19ca8b3ebcf0e60e14df96f7a10bf0a5d974755aa5416eb749947f3
MD5 17502c56784b03b2ee8e53aa0748fd64
SHA1 4494cdfcc63d866daa301037be03329e0ca958d8
SHA512 4dc7bb6fddeb2f79be1785e70cb50713ab8f3eeaf1d01f3cbd8cb3ed5232867c7ec7d2e3e80f63799e5e5e7bc3637a8e64ad372f0c879e39cf0a0cffe27833e2
TLSH
T143E0EC745CCED51FE2941252516D7F0D9BA3360BA6CCEF816B45C54261410A895A9150
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.image-line.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 87f738bce5a885dcf31c92f1ffe6162e3912fa62fe45f6c486d5cbd1ba5a3f76
MD5 ce7830fa9a8dc639746021b95298549e
SHA1 6c62e908db773ecad25193daca181ab8d32ff72f
SHA512 707ed9e12b7ac262bf18ee809366e11ecfc0e2ee37ae4e34c141b6f9404be6d9c60a88c6dacf0222e39b3532350ca00ebd08d88dd8cdc55526d64c1afc29217d
SSDEEP 192:D3x1xsxIxgxlx7Jfx1x0WuvaejhskGx7iOx7Ax9Ex9dxixyxRx9Ix9kxlxj/xvx4:D3baWmz/fnjuvaeykGZiOaXEXdQkXXIR
TLSH
T132D15AF782E4862ECD1152F0A7187E1BCE2D0935572C7D6688D4FF5B93D24B2E28168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 21126ed03c3a1d81b4b7d1f3064c9b4c73ea0b22ddae3feb400fd09bb361dbc3
MD5 d735228eb737e8acdfc2c61265d7fdd4
SHA1 407fa475f084e254f93ca212e24f1e4ff91518d6
SHA512 9794e5e784fae2ae17dee765ce7a3ab1582334eb0bc788c4a9a41270c821896c4eafb8e98007ea05a7d2858f3d1df42c9ef45cbae05b06242d8ccd6022a55dfb
SSDEEP 192:sxR9R3Ci/fTs0rdZNNimzoA8pji/g6+WNASohe0TZq0te38jEVxGPIgDoJ:sxR94i/fTs0rTNNkO/5yheOGgQ
TLSH
T1DA42B716AD38A93B4CC7D21DFA65BF23D2F91032A4D41E54ABFC8A1C14E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 885e11bbef4db0dee9f49bfe6b219657d0efe3605550c9624ab825ee5b748ed3
MD5 8307b3da107928340951d95d4e80e3a5
SHA1 d00d4048c156ddc8ee87e03852e17c2ba278c419
SHA512 ee2d578e5cac2cd7f05a51e51b7cc955a1f0a0cc71e0499640cf581da04d5c858cfe920e4a27f376722f1cdefde8169558da82e1c8c1480aa545b5de41cc205f
SSDEEP 192:sxR9R3Ci/fTs0QdZNNdmzoA8pZu/g6+WNA/FZe0tZYQtG3NnE5xGPIgDmJ:sxR94i/fTs0QTNNJY/5aZea+jG
TLSH
T1FE42A616AD28A93B4CCBD21DBA65BF63E2FD1032B4945E54ABFC891C14E76DD520380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4f6e38b1a17bab18c1a696f1daa799690a1c2457409817e9b438e08fbbb3b90a
MD5 faed9a649d99cc9300e2b78a32e49440
SHA1 eebe28e281fe9db68145a0d641b2c7ee9b53181e
SHA512 f3ac6b9b635e0426f84d515f00df522942da6a720e32f649e87dac3fb2ebfd29209818b5d7c07ba0ef883f48e7b19e26370c3754ae1a38a4cf075dfd3ef5d990
SSDEEP 192:sxR9R3Ci/fTs0rdZNNHmzoA8pZK/g6+WNAuNrbe0QZrTvtO35OExxGPIgDoJ:sxR94i/fTs0rTNN7o/5Lrbe/NomQ
TLSH
T13842A716AD28A93B4CCBD21DBA65BF63D2FD1032A4D41F54A7FC8A1C14E76DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 95a2f4e5a160b9063e8b7ab943791c48fb26a44a66c170babbe7adfcfeb19365
MD5 82673434aed33e0f44b87b9e8c8f7f17
SHA1 7eaa8f4ca15182014f3040f27ab852dad72d6d7b
SHA512 eb0b065a036ae8ee106c1acfc171cfd305bc6fa41356850b66717864a1643428a64fa695b995d78016b5a0d354ba302b6812e8f1e94b1b513271a465877efd31
SSDEEP 192:sxReR3Ci/fTs1QdZNNbmzoA8pZi/g6+WNArw/e0WZCtw3F/ERxGPIgtJ:sxRe4i/fTs1QTNNn8/5T/eVRH3
TLSH
T1D842A616AD28A93B4CCBD21DFA65BF23D2FD1432A4945E54ABFC851C14E76DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 c33d7070820093f9c303898d3abff62b8b30ed8850aa875159395f763289d508
MD5 4d0430c1c5c1b8c1f316e89ea3c19b2a
SHA1 3449c589a1269e4c27ca8245510500acd02c93d4
SHA512 5ff5390c5ec853aa0b4333132b8759660fde6e1c0a90dc7cbee89653b8200db72b50c2156f41e9c914d972c122ee8dc664c57a79ffecfcc429abdee21f72c517
SSDEEP 768:U/pCPx7pLuLbLmWg8Kf3L8F1+UoAYDCx9Tuqh0VfUC9xbog/OVlzuyhpkroJP:U/pCPnEbLmWg8Kf3Lu1ja2zu8pvx
TLSH
T1FED2EA7B740CCA7F4F804ADDA8197A9F6DA802CB9A98CD4047FE941D02C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 52ae17c56161ab3a0b4f61752d6b1b0242a687d06a72eda39f84dd6dea102aa4
MD5 de2bf1458c810f4eefa5ec8ceacaf15c
SHA1 637c71be91e7ea7dd26d834207f1acbf4fadf54e
SHA512 bd02a29b1d4c57309f513ce287d2864dfe275612ad17bd4a698f96827bac445d1366f0a804f6fed557614c2f986e3559915b881fa1321ea32de6d1f2f13ecb77
SSDEEP 48:KbwIDKFqcDyBGI3KP6Aw4NcIaWSMKm3XIvQMKsZUSMYYcV3K4Ry6Ba3rZ7w:KbwgKFqyiGkKP6sPSKMwSJ
TLSH
T122912C4071BF12043CFD690A9161976B9A8236B37118E67A7FBC10B28B6BE051DBDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5c5c50.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5c5c50.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c6422a2396db59017a1593d394ef070b1cafed847bbe6ae2c116792eaad76134
MD5 4bf8295d18a79fd498f601616368fe49
SHA1 ec42bd521d90da3b29d3813580a27d1194e091d5
SHA512 17a857969dae7c354a2a828924dc05f0393be21ad584646c554acbf224a535d9e9920a4ad2efa7d915d40c3960d3637c8d15488df93d0d64bd03112b3780591a
SSDEEP 768:R/UxvxjgC+W3DAgc7fZrKrp5XSwQs88uBkiTCB5Z/P84g:kZj3+W3DAtrgILNBg5ZHg
TLSH
T19603C039EC946873ACB3D385365A275BAFF06153C4C41B9849EE7A0F028B35D6707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 97d1c659df63aecef14c5a77fcc0650af1ee1596a2ec715fed58ba0b1876da87
MD5 51f9d5da70fd61d797c9498e2a773abe
SHA1 c2c9b84a9b9b69d47270a6c0e5b4db15a107d7d2
SHA512 a4a1d8ab109d7efd5c414b79bb2efae31a030c6631b2dd37a2f14d5b0edab73ea80f5f0aaf493f4c2d61659d084f732884b38755bb52996d739bc6733252f75a
SSDEEP 768:CH3DYg34c7fZrKFp5XSwQs88uBkiT2QiDvcv:CH30g7trMILNBhiDw
TLSH
T1B5F2CF75AC959C639CB69381798B3B526EF46053D8C40E58C9EDA70F008776E3B4BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 5f4e06ffe5865582fcf459e33ddfa4df743e83fd98faf1e5c34648d1e854b6e7
MD5 6e8bbe46f20b57578e245d1711ebf75f
SHA1 f639c7734f56ce732deac6445fc430599141ae65
SHA512 21451575211dcf2cc6a11444d09686808f33182ec19cf2b9c6623b4c3f986c7de46a0152d6429f30015b78bcf1f30d3067217e9d4767cf037c0134f1a848f656
SSDEEP 768:bH3zYg34c7fZrKFp5XSwQs88uBkiT2QiDvcv:bH3kg7trMILNBhiDw
TLSH
T1FDF2BF75AC959C639CB69381798B3B526FF46053D8C40E58C9EDA60E008776E2B4BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 341de4c1faa73867a62fb3d2864a219d055b4f57a2e35ded03b5c90c3695c6df
MD5 da741263b829fb104ce85ee894166d02
SHA1 604c3ea9e4784d546efa1c527acb656ef39d3b4a
SHA512 9a327dba06f6481141a1929d580e5f4113efed26dad9a2bf6074c35c6e6b628acd8a49a0d65f9c7082863385954403af334b90ba33eae59fd1004c28ec9a722a
SSDEEP 768:FFHz3GwgHYWcgerKOp5XSwQs88uBkiT2QiDvcv:Dz3tprFILNBhiDw
TLSH
T15E039D36EC95C967ECF297C2BA4A3B569EF45093C8C80DD4DAD95D0E00872AE274BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f0842d5b4934da1a35f9a4eeceae5abe660a9267738fba97b7ea489fa673b618
MD5 c389d8a0c928bf7cf198f0d427a8b026
SHA1 b76cedd3db1aa3422fdd75c27b928e9b735cfcff
SHA512 e6781d1b8415ad8c2a31b4fa9c52ff185c263db37900ab92906bf99bb42984e3ef3f4404c1973bb11559b2ecc2583fade05acbc804be0e19ca1f57c70d73fc1c
SSDEEP 768:xH3zYatec7fZrKDp5XSwQs88uBkiT2QiDvcv:xH3kKtrWILNBhiDw
TLSH
T16AF2BF75AC959C63ACB69381798B3B526FF46053D8C40E54C9EDA70F008776E3B4B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

6904ceb6-55e3-40e8-acc1-944d871efc5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6904ceb6-55e3-40e8-acc1-944d871efc5d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ILSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\ILSetup.dll
Size 1.2MB
SHA256 bee6fc430a05bdcf82226adcbbfba9abbe08fc065b97c1f2cfeb9f9c4e34cd25
MD5 494dbd5993a47b3b720f5e0f6eb04c59
SHA1 08d3f00ee435a9ddbb0afe7869a3183bd3e0a284
SHA512 2e9305862c5c55e37d5533b6392a428694858880a8ca533f9a7260b7ee4220b79b5d45f5645526b631a05bfaa9fc0725b6e43b0a5681cb36b7b6c413083f386e
SSDEEP 12288:9eOGI93yacPkwfUdKTzX54vZxYyQB8Og4X/WpeW9UnLDbXBF:9e+3y5MwfgKTL54vZxb88j4vWpeWqP/
TLSH
T130456E23B2C6A43EE0EB19366D33E557583F776125129C5A97F4098CCF293806E3E663
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\InstallOptions.dll
Size 15KB
SHA256 f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990
MD5 998189882c9f1be220c9faf0fd2bde15
SHA1 787d50c46c9a2a48565f684fabc7503aca8b0493
SHA512 e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6
SSDEEP 192:zkByiog2tkjvs9/yb2GC5E5RatZzMHjphLAykyc5MT5/9v9GwBCMFauVizLY:znio7tgOO2GaW2zcjpAT5Ot9lVBZaL3
TLSH
T1AC622B117FC610B7EB9226712BFEA7139BB2B21018D19C0B8E7339462D7A605EF35652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\System.dll
Size 11KB
SHA256 c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9
MD5 24523fe14bb9ba400a3950016b187915
SHA1 6ec152b4e4ac04038d4608a8a206070185116036
SHA512 ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257
SSDEEP 192:cS8LqFZBOtRG/+VE6HwIobhj+PJu97wI88QF+wnY5LL:xZQtsh6HQdj4Ona85LL
TLSH
T163324A0347A081F1E151833C08673B27BBB9A72566F08C23AFD35881BD596D6BE79713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserMgr.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\UserMgr.dll
Size 23KB
SHA256 7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f
MD5 9210597fba3dfab3c69b1eb490205419
SHA1 6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb
SHA512 4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06
SSDEEP 384:qy822ev7imqsdMCgfwnvmau3+zK8E1Iz6P/RdJ3AiMtDVeNvOCcN:q5TehhMCgfwnvmauiK8Eg6P5TQXBe
TLSH
T1E2B21A01728D4081F216BA3B39E6DB379BFC73B5571988C7F386270B61539C2A978236
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioAllUsersPage.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\ioAllUsersPage.ini
Size 1010B
SHA256 c0313e195465e521ef5cbd94e19a1abe70cf0d564ec38b017f1e09a276e30c15
MD5 634fd2633a884035690fd3635c7ae34f
SHA1 91af7c2af8a41563d33f944868d22673c6116e2d
SHA512 810389998f4eb641228e5b4e2ec43849102d2d9e1890c17aff5067cbcd0e46bac7850f732815746cbdf62d4f698cc47002cad2aa2f3b442cec3a5652558b058a
TLSH
T1C2117C533AF85514F0AABA0DFAF94035A7397942082DC95EC0E10E0E54FA680817BBEB
MD5 SHA1 SHA512 TLSH

Submit Download

ioAllUsersPage.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\ioAllUsersPage.ini
Size 1KB
SHA256 322c5f191d562093db235181e287570eca08793b09cb0979a31effa75167c65f
MD5 9e75b56aee83833933468be79284129f
SHA1 d189bb91fce90b9bc440fdee6c7ec10efe60edf3
SHA512 039e239d413f416b88b5e8067d68af59a7be16c30f9f94321746c0600eb6cab286511f9c7dae22eef0a0d1490fb6da932b014fb14160be280e0bc6ce12fcf408
TLSH
T140218B133EF90525F0AAB60DEBF54035A7397842482CC95EC0D20A4E44FAA80856BBDB
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx1ED0.tmp\ioSpecial.ini
Size 1KB
SHA256 963dd4782d15f935e6c515da54b1046bc3252f3655fb273fdf250226af585b07
MD5 ddd13ded7fba1f0d4e73a240f562b16a
SHA1 16d0f8a835675f0905c77291d09b7aab8849c69d
SHA512 01c421052dfc44e58f8dba73d81b0516d7c4af1cdf2e73925c228c3bfb47891bb1e42de4f52f9e98ec030bb339e8d9055ed2e90ec681876c0d70a312832b03ca
TLSH
T19921AE037AFD1504F2BAFB14FFB541758B3A7C16A839D91E51C10A0E09F6B408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1216_1754959593\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download