2402dc20d83e4a1feb263ca0a87fd066c444c1ea3b2a1a7909f901672bbfe977

Analysis

user interaction
yes
max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9f1PSdyeN3PgphnJ.exe
Size 9.0MB
Sample260928-vsdewaygqd
SHA256 2402dc20d83e4a1feb263ca0a87fd066c444c1ea3b2a1a7909f901672bbfe977
MD5 c37d8e3b7cd5bb4e540104210d407949
SHA1 e20cd60b651dc1bf93f1089ca1a63ef8faf014a1
SHA512 c5de4a7dd4e5019405240d886764a1730f0cf1519023dc59a8a415858e2ad878da65fedadef1f11d54a5f809b25a39f213fac3c101596dd1aa5792dd3b82e822
SSDEEP 98304:IXp9ddnysc3eBKtuPiVQSvtTJYUNzxkL90+rEo6rOcnPqT:Q9ryscbcPGQYtVRxw90yEo6rhPqT
TLSH
T122968D73E796129CC576C53C865ECB22E37FB8011720A7DB63C069656F83AE45ABD380
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5888_796758284\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5888_759080591\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5888_759080591\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5888_760970860\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5888_796758284\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3948	msedge.exe
3516	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{CA9DE815-26D3-48E7-9118-5EF343553055}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{26FA153E-1DB6-44E5-80F7-504409ED9F73}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5888	msedge.exe
5888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 2452 wrote to memory of 2772	2452	msedge.exe	91
PID 2452 wrote to memory of 3948	2452	msedge.exe	92
PID 2452 wrote to memory of 2556	2452	msedge.exe	93
PID 2452 wrote to memory of 2556	2452	msedge.exe	93
PID 2452 wrote to memory of 2556	2452	msedge.exe	93
PID 2452 wrote to memory of 260	2452	msedge.exe	94
PID 2452 wrote to memory of 260	2452	msedge.exe	94
PID 2452 wrote to memory of 2724	2452	msedge.exe	96
PID 2452 wrote to memory of 2960	2452	msedge.exe	95
PID 2452 wrote to memory of 2724	2452	msedge.exe	96
PID 2452 wrote to memory of 2724	2452	msedge.exe	96
PID 2452 wrote to memory of 2960	2452	msedge.exe	95
PID 2452 wrote to memory of 2960	2452	msedge.exe	95
PID 2452 wrote to memory of 5088	2452	msedge.exe	98
PID 2452 wrote to memory of 5088	2452	msedge.exe	98
PID 2452 wrote to memory of 5088	2452	msedge.exe	98
PID 2452 wrote to memory of 4776	2452	msedge.exe	99
PID 2452 wrote to memory of 4776	2452	msedge.exe	99
PID 2452 wrote to memory of 4776	2452	msedge.exe	99
PID 2452 wrote to memory of 3684	2452	msedge.exe	101
PID 2452 wrote to memory of 3684	2452	msedge.exe	101
PID 2452 wrote to memory of 1944	2452	msedge.exe	102
PID 2452 wrote to memory of 1944	2452	msedge.exe	102
PID 2452 wrote to memory of 5196	2452	msedge.exe	103
PID 2452 wrote to memory of 5196	2452	msedge.exe	103
PID 2452 wrote to memory of 2504	2452	msedge.exe	105
PID 2452 wrote to memory of 5596	2452	msedge.exe	106
PID 2452 wrote to memory of 5596	2452	msedge.exe	106
PID 2452 wrote to memory of 5888	2452	msedge.exe	109
PID 5888 wrote to memory of 1288	5888	msedge.exe	110
PID 5888 wrote to memory of 3516	5888	msedge.exe	111
PID 5888 wrote to memory of 3632	5888	msedge.exe	112
PID 5888 wrote to memory of 3632	5888	msedge.exe	112
PID 5888 wrote to memory of 3632	5888	msedge.exe	112
PID 5888 wrote to memory of 3864	5888	msedge.exe	113
PID 5888 wrote to memory of 3864	5888	msedge.exe	113
PID 5888 wrote to memory of 4872	5888	msedge.exe	116
PID 5888 wrote to memory of 4860	5888	msedge.exe	117
PID 5888 wrote to memory of 4860	5888	msedge.exe	117
PID 5888 wrote to memory of 6012	5888	msedge.exe	118
PID 5888 wrote to memory of 6012	5888	msedge.exe	118
PID 5888 wrote to memory of 4792	5888	msedge.exe	119
PID 5888 wrote to memory of 4792	5888	msedge.exe	119
PID 5888 wrote to memory of 560	5888	msedge.exe	121
PID 5888 wrote to memory of 6096	5888	msedge.exe	122
PID 5888 wrote to memory of 256	5888	msedge.exe	123
PID 5888 wrote to memory of 5676	5888	msedge.exe	126
PID 5888 wrote to memory of 5676	5888	msedge.exe	126
PID 5888 wrote to memory of 4360	5888	msedge.exe	127
PID 5888 wrote to memory of 4360	5888	msedge.exe	127
PID 5888 wrote to memory of 1116	5888	msedge.exe	128
PID 5888 wrote to memory of 1116	5888	msedge.exe	128

C:\Users\Admin\AppData\Local\Temp\9f1PSdyeN3PgphnJ.exe
"C:\Users\Admin\AppData\Local\Temp\9f1PSdyeN3PgphnJ.exe"
1⤵
PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\AddRestore.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x334,0x7ff97c66c188,0x7ff97c66c194,0x7ff97c66c1a0
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,6959964610888008273,10324571208473304780,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1900,i,17214067840612741660,12261453561195772814,262144 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,11380283597078560222,16132092020817750385,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:13
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,16288411361790623098,1356666247957277824,2097152 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,14892041768494613358,10508202526429318263,2097152 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,4422470415683187123,1990096160170319298,2097152 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14193760583986947045,10995176364086857665,2097152 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,9736699835907112334,2255490748013229375,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,16149938046862202018,7631846960728418622,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,3364271761514312627,18242707610764123980,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,13860812054741574429,12089655362177588699,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,13860812054741574429,12089655362177588699,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,10106916955065521553,4703377735078777347,524288 --field-trial-handle=2556,i,16437554728834094738,9054947840593029413,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x318,0x7ff97c66c188,0x7ff97c66c194,0x7ff97c66c1a0
    3⤵
    PID:1288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17296864245376275664,112119687000742035,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,200586190859131908,4206794716340058088,262144 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:2
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,16677022527928866807,18070123759610751847,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:13
    3⤵
    PID:3864
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,16643019084046038112,15218021243543402269,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:14
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,16643019084046038112,15218021243543402269,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,9404247370324269407,14184833598151071353,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:14
    3⤵
    PID:4860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,12885958164334126997,3482431788557774920,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
    3⤵
    PID:6012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,13855919830211747960,18418474508314872169,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
    3⤵
    PID:4792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,5877711257518381367,3066137878544288898,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
    3⤵
    PID:560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4201946823269960122,3483595698484316226,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
    3⤵
    PID:6096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,5736052724988844365,13384532219238803438,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2940,i,3385970688723947106,1181765382274977242,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:5676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,9371682156539173912,17027906824262525885,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
    3⤵
    PID:4360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,3007506801321387961,171521633142193391,524288 --field-trial-handle=2496,i,3721802441936512975,231165257079453258,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
    3⤵
    PID:1116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d310879288aa06c86d474e0348360d9544f217e717ae41dcd9a5de0bffc242b4
MD5 1a5953c46843eaa7cfe5c4df1740ad12
SHA1 cfd20ce57fae5691d68e51cebca0701e4ada9768
SHA512 a1b8246c8ae1db78e907bd11b982fa792d6bbf484f129b627f6ad66aefde86853ba72f4f0a1ac8bc8881377c873aacb62a94556eb8c7818ea21f442354108d5b
TLSH
T1D6D08075F979EEE2D154107C01610910757435576F7902C6570244384D3618759527D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 76832b81d374b40e198af7ba5e5c34fa30e2f663f2b7c36e09cb0e676d272d98
MD5 53f1cc99cd85bf32e4b4b1859db4679f
SHA1 698bde8465ecaff724f2fec8ed8d6455ea32e7d7
SHA512 552a1722c5c3a425b5f4206b553d450fcd7797201439de36580960aac8bea24bc2846b3a0bf60a6a745f484644bff62aa69842a550fac698e43c352a9155a832
TLSH
T167D080F5F5749DD5C240047C00415510B5E477557E7651C1AA039038252765565521D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

2fa70fc4-ec6d-4e93-bf45-3b2d967a165c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2fa70fc4-ec6d-4e93-bf45-3b2d967a165c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d655f7b948495a51f1a6b45c94456527e2f18b437833ad22741f02ee776147d2
MD5 ef9efa1819185e91eec285b045a98847
SHA1 598ef27837955c4deca7ac1f6324afb9c231401f
SHA512 ffc1e2d444e7fcca75e2d2c4fd74269795876633907df2e8fcdcd991b7cf2ac8b014cf9a1f9647966f578a43894fb3179b205abf88bd6bec6d77a82efa12082f
TLSH
T1CDE02B56CC31EC2708FD0B6860104B46E701132B2BD0495F3E3DD1588FB123B55469AC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 84c0e9dad10481fac6fc35d3922a5f5b0f3dd876f223dc2d9e3281aa6f5959c6
MD5 d9bebcb749d8d96be1421e316445da8f
SHA1 37f903b8e1ea8b723dc3576c5433b3c6a6aff29b
SHA512 f91878de0690eb6e22d871fcdf9e6bd276ab01dcb13297d7fd7fd2f8e9156c7f1c37435d17f2affb14d3c1c4c9fcae3efffb292a82ae1410d80db3a0c40342ac
SSDEEP 192:Cbu0RnPxALbdfimpIePwuXbAsZkOw5Ncxnm0doK9wCDdHHk5kRkWkXka7K+f72jO:Cbu0RZcfrpIhO5Rxnmi07K+f7IO
TLSH
T1E5131D3D72065C16F2E7123D4DC75F79A3B8F698E2D5091F0632F54D2A6034AAC8F968
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 70b3dd5cb5a2ede0418389a4947d1b060efd29f6481dd16ab3b5bc2720346251
MD5 f214e8b9dda9cdd22397bee3de96ecfb
SHA1 4601906ed77e3696cf69c10e54edba9343315a6b
SHA512 5d00faa23d6155f7a92ac351860410598ddc046bf49e0e497193bfca1147e5609e2bb625a8492afcc882b41b8134737d7d10830044c11ddc6afa50d2da71dacc
SSDEEP 1536:q6GUFL/F7L/xAP640xF681lm5IJfLTjOYdtx:qpUFL/BL/oqr0G2Yd
TLSH
T12D4460F70951601BCBA852F5D6033E3DD17B401E7CE1F8A9E1788C952829F31B6BCA88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 cb4b1e19924a7356588466b9ec8655d9f76e8c1c6d2c312934d584ff9e23f5eb
MD5 e31d9aa208498ce3d81fa41b445d229d
SHA1 680ec23528fb47151c8c7f85e4957e3ab4597148
SHA512 2ae86e2cd50761e35d8bd03ef70ac2bac53602ef8b1eb1d7c1ef9698f2877e3051d14bf1a92c23832bb04c484c9f6a6eed1cf17fdcee2fab62c76530a01be8bf
SSDEEP 12288:MDYDAL/a2dAko5Smcnxo0NrtvdgqKNrbCR2BO16XMwDT3nNjZj/TwZvvxdO75FSG:6JWq+L55GCwgIflh2sKrcC
TLSH
T1D9166CEDC97858C3CD63AA30B4F0E9477C7413C3F955C1D6889CC58402ABBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 30763c57b138525a6ff9436e00bc2c9da23373afb4dc5c4f14e8947b1bdfb215
MD5 91b2af065579b81e2f10914e7d1b6953
SHA1 2558cdd239e6ccf2515798aa906944f3bffd0931
SHA512 fb49c22ba493bc12a343f5db7ecbb0b981e940d94b714fd1a504e754c34610c6f2c71ffb06712fd2373100374bfb51a6e8223f34a06c23d8f6541c2151dd8878
TLSH
T158513083D1D8A553F76E0E728DC89C87BA38DA88B9831DE504D8E5BD5D833B1509CC5A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596bef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596bef.TMP
Size 2KB
SHA256 14ca035a0d5f67f52345acbebeb67280e2019a003781d0befcb2078ff2993c6a
MD5 a65fcc88c72d14b484880d7227b9e160
SHA1 82522d80d62cb1351cb6a3f2c719a65c865710ef
SHA512 8689b8af542dc2b860458833e4c3beeb7664c3a9e0d04503b7ab9f1a71285e9de576204cbf5f6eb4327c0c2fbdaef64d2f5f8bec4c6a1397ea40cb72a7f88d38
TLSH
T1AB514083D2D8A153FB6E0E728DC89C87BA38DA8879831DE604DCD5BD5D83371509CC5A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 009a81ba9e13b5fb2f2dd3c21c3fc1a2b732746ba76a66688bea513b2e978335
MD5 e64dece8e2ac831f5d5e6b3e07866804
SHA1 28856b32448aa80ad46d1fa47867d60013b4ff3f
SHA512 85d77cd8b4cd36e101d570e3069183475afc436a7ca14b3d3e60fd583abe3de35dabf5ab2de4663e7893a34919fb7b377e5da1f6a5dba43a4ab55521d2982225
TLSH
T1A7E0D899A8C7C25D699434C7416C6F08A2C03593D789AE03AF108CC47A07121F352947
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 49a25f9460478d59eec13e1d038f70e90b0f9224bbdeddc577b296068ed41bd4
MD5 2e6921bd27692adbda08f4ea14dddcf2
SHA1 2c7a22d58f94d1e5e32964eb764e7b65f09650b6
SHA512 f06044d0b4d15413fbbde2bff73036d5f4f90bce9b9b0bd62600da1ac4f281755ea01c356e7e207de2892189102b55c45b28bdde6669deb7a9d5502b4fc52eb7
TLSH
T1E3E0260859C8C269E5947893836D674882E03683A38C3A42370C98466142A41E3CB2C1
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 6b71176049c7559b1c49eb87501949399cbf96ab45e930f1db7b3b368ac3f35a
MD5 003e291a4e2c8e6fc992e1ee4e17e3c8
SHA1 ba72d053abb180db4c6febd47db23b9c9a3c5776
SHA512 a83d4d197893ea91f748cde7528c2dd9d237ed849e615d08d4a13d6d693768326acd9e4751ad9a87f7d53ae5a3d42391cbe6ae4c100f11cd3178784c05a8ea03
SSDEEP 96:rfgotejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/NtqbbEOVpZf24JkMfXSFR+CFq:rfgnH+bF+UI3iWGVoWN3qL/LUVVV63
TLSH
T1D0240F4E5F342722CDBD813668E744A35C7DF03F8B1366DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 00ae9490e7ccceb1117d231bae7a2776693bea3dbabb59d93a5521eefbfdd550
MD5 85ed7e48b6790c761894261553b895bd
SHA1 508d2e6da98fffd1b33f76c261a771a840657b75
SHA512 92c1ca1d24e3b0775c8c7569f8e4b3f70371ec5ca00b98abc9ebf8be4da3a26cfc0dd829b03e1cf4f2b17d511cefc9196a9be3a9a58e695fc0f1f63046b336f6
TLSH
T15DE0DFA459CDC1AA6684644B823DBF08D3B0365BE78CBF02AB089945B886104A38A6C3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 48808dea9744cc081602f578104474922532fca761a5392a8321a3ba6dd67cb7
MD5 c29c826eafa8f53c287c12d8dced6148
SHA1 a16c5753ff94ead154665bb779aea77656fd5f19
SHA512 931f0a77b1b93e5c25d9a56f58efbb4033c7b04ca10df6de50bd4704716c41f16ca0479c9cd9ee094c1c4516d8c8b9f43e86ae31475039d0772137c60757e4df
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oVwbImIsm:qDeMatha9RARiSn
TLSH
T1B2B2204D1F342221C1F05B77EDD1C8223E7C111D93B366199E1460F2CEA3A6BF616466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a066ca3f2733894e964a41d0cac91924c723687f60761c5158a001570ff8a38d
MD5 24c49d98db52ead89dcca86bafb88bf1
SHA1 f794a65803ea752eb191feb856044f2af73ad967
SHA512 cb72e844789a76228de3dcc6e3a6afeb136164823b7c4231c8386ff8bc19fc502447d7319a09e701747717cc091d8f21f4e0ca9a1e780e7b8a9fdd1daad119ac
TLSH
T16741DFF3C3E8867E891196F4EB186E2BCE1D0914432C3D5AC9E49E1B93E38B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5446c2c9068c1903d6520ad5d62f56d12279f40817487ae9b7f35201e4a8f582
MD5 eb914ace369de6dd4b802a21b8bc5d34
SHA1 be72c2a2bb7b2a6f8285c745298f826025c13873
SHA512 ba96060b875b257ce3ff9fefd9ac168e58a5c4f64115e1d1093765a7057e518db58c6e0e47e9a384bb03eec3d883de9997e8a7c5da65f07cc8d0360dbb7199c0
TLSH
T1E841BDF3C3E8857E890195F4EB186E1BCE2C0915532C3D5AC9E4AE1BA3E38B1E14059F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 7100946d3bc5e78a435101dd1edf374c83664ef3bfa2b43de216c1d64752f490
MD5 a8bdbfcea1d8f83f6c54c1b35d9d611b
SHA1 a7da5592cd7b5e1eb2ea02fa500fab915755414f
SHA512 520cb46e087936bf2519dff046b0c03cab8f5025368579aee0af443b652683a4396aaf51ac8b5681070a5190a8ae1618ffbf2adf1cc319d0e97f3e9c33ee181b
SSDEEP 96:i/IEumQv8m1ccnvS6OqN6zcf6CnF68x4g:i/IEumQv8m1ccnvS6EO
TLSH
T1ACF2CDFA07376205D98444B0E5009BCEAF1A004B47B2B6EC76D447F3F7A21E2B5B9756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 b03aeec29757f76547d0aecf01eae3fc217b54761f1c60d7d858f531bc7f168d
MD5 89fc7c43efcfbb838967fe6d0abb5543
SHA1 e458506f0ec9b1a9cb01bde9b7ff82bd5515b0a4
SHA512 7c801fa275709ddb15ed0f4ccd5676fdc2a39a919873b492ebb0485933013f347818655f77f78d0e6e8c87f847fe22dbe8be1d58cced4e00840d608e419c4bd0
TLSH
T1C0C0221580FCE07220B9883D6D84E8806A78C0312001A0A8CD95833CB0800FBAF01029
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 674b74e3ec83233944226cbf959b378619943e7577d996c507025db6f9c0059e
MD5 bb56528086d63e06f22fc1e4e89fffda
SHA1 ace91ebbf20bf94365b346a57ee6283648111f83
SHA512 5452d15473b26588ea7edc84a4cb652a4256bfabca33168c2b95636743781496e0024f9a480ac644e4c8d38963897632caf1ed0cf81a09bc2125531d124b3e38
SSDEEP 192:sxR0R6C2/fwsWWpVQvbYQvOzoA8p4s/g6+WNIYmua5g0UIgVTUJ:sxR0T2/fwsWWvQvc+zd/5IuO
TLSH
T17242B715AD28A97B8CC7E21DFB65BF13D7F91036A0955E48E6FC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 45a03a222dec5cf1bf7bfc4c58ac043362efc0e6a6754a55e8e276a6bbbac929
MD5 9d29fa20b2c220e34fc6a5b3eb28536c
SHA1 c85f2727acf7ee5a82534fa0a896a14409d55f84
SHA512 9b04bd1cadafcb6b3f3149ece2472a0f7e190aa51b74c9368fee93346fe113aca4ded9cf18c52444a6030acad8077d2f344a3c4f9ec2ab7c4fb84eb744bfe20a
SSDEEP 192:sxR0R6C2/fws/wWpVQvbZqOzoA8p4s/g6+WNIYmuapG0UIgVTUJ:sxR0T2/fwsYWvQvVqzd/5IsO
TLSH
T1F742B715AD28A97B8CD7E21DFB69BF13D3F9103660951E58E6FC8A1C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 51add0c5082e6cf569d02b2198329cff3aa72879368c097d4379bef264801fa3
MD5 f636a1bdecb0ddfbdc714d50f14c82ff
SHA1 699b991424fe4fff87535e723327e0d91e8fde84
SHA512 b1a3fae3316f800e508d5030e1b66a7f195fbb622e29b532339eb029fbbb6fe33138bb928cbbc053a5723bf1a76beca2bd77b41f898554e9f484f70d01c1a10e
SSDEEP 192:sxRTR6C2/fwstwWpVQvbZqOzoA8p4s/g6+WNIYmuapG0UIgVTUJ:sxRTT2/fwsiWvQvVqzd/5IsO
TLSH
T1DF42B715AD28A97B8CD7E21DFB69BF13D3F9103660951E48E6FC8A1C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6e9127339fa6106e1abdda7b547d76382fcc7ca8345f7872bdf02ba519db8b90
MD5 9e0876cd558abc6207d80cb3eadba542
SHA1 e61894c66166d91d2dc7c0435a79bee79a4988e8
SHA512 67238e4c02528290d5bd618af8c6774fa3d19641acfcf5638f5a2687b8cc0e4ed613a4babe826e2ebe15f6edd1e6e7e301350e947f81984b09ccba2bb2624030
SSDEEP 192:sxRTR6C2/fwstwWpVCvbZqOzoA8p4s/g6+WNIYmnapG0UIgvTUJ:sxRTT2/fwsiWvCvVqzd/5I5E
TLSH
T1AA42B715AD28A97B8CD7E21DFB66BF13D3F9103660951E48E6FC8A1C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 732a9f164af39649ea6a07019e1f7060fe8cdf525538310706eecc3afde798c3
MD5 6ab7a424271a8dcad145d3ede80bd645
SHA1 3bb45536d98a771144ec7c25bc0a58ed8966f65d
SHA512 b419787b97ed655171caa44d07723178e431c910891323a72fe087e8fcbef8e9c604f4f27584ef3d0a6eaaf157d300d486424923fda5ccd10bb72a1052a8fd4e
SSDEEP 768:XIDmA17pLuLbdoWgvHfnv8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaIljeroTHD9:XIDmADEbdoWgvHfnvu1ja9mj1THJ
TLSH
T191C2DA7B740DCA7F4F9006DDAC297E9B6DA802CB5A98C94047FE941C02C6BEE511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 13922a261306ed588ffdd90788ac76bc3906eae78963e97cfff350de0276ccce
MD5 af356b98c279e64ff3c233f5fc0668b3
SHA1 593a040fdec8651b49ca6d704cfbfc6b72d5fdde
SHA512 3737b73e389e9cae21dc37318281d26ee6cb9b5af2fcb568c515116d4a349c20fba9f83f256e86343f7533731dced95deb299bd3a5eb3cdd729b94c701658451
TLSH
T1E6E0265C29C8C17D78D62047022C9B0892E47947DBCC3E423F01DA4469E3704F3AB182
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 b8825896d4c5607e83617cc31d0ed47dc7bd1ad0c86d9a43e1145f9018b65a79
MD5 b13a9ba26091b648cbc448931ec39f4e
SHA1 7fb2e3eddceab180e85d24bdec9149b1161bea09
SHA512 48feaab3a106205eb6104b22b60588d7ff9e8dd6f4dd810fb5e7adfc0d91d258316d41fdcbe0ad101c34ed1d216ca8703d36cf24f87e14838baec34be8d1a407
TLSH
T1F8E0D8283AC9C22A75C6208B421CFB4881A27943DBCCAA617F0CA5446697240F357141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 be20b3f3e03023b79b76b0c680214d4563558df623bf637d29d1bcd5e392c905
MD5 28e11388c3c4fe480d0c777d21beefe3
SHA1 e8faaa0e151720867b53fa5fbdf4856c8c163e37
SHA512 b25a3392f4265d13317a5e4f97736e18238a8bdd9b9c7d917f3dd33494055d82c6d9b79134469aaec94c00dedd1df62d1350ce44a4723836129b6efeeacb10c8
TLSH
T1B9E04FBC9DC9C23964856083467CBB1DC2A17E47978C7A96771C4944BD52244B3AA581
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 72e104d07331f5867d40ffa49d16eacb58d72c7981b29b83c4a24dc23b4a0064
MD5 1a37a5ff99fbfc11d8119914d52ccdd0
SHA1 e5eb5023cdfcf676b668db8ead4b5b3c7b781ab2
SHA512 f1bbeb9eb8b2f2674675edb62dac5b97474254cb703fe4abd6b18246c50a6b8d84adde30be7c12713b961063b845be43e57d14b8f00a2b799b6933ac34a59e58
SSDEEP 96:KUowK1+KW/+3S+MUkmW0NN0+mKMj0gmA2eFwe3bNCvz9jXXW/UO0bXKM20BXAlC:qje+3S+MUkZ0Ne+Oj0g92eFwe3bNCvzH
TLSH
T1A1911110357A1240387E2D0994F4DA3F124136E37169E67B7BEA05A28E7BE084DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2984967e9e27482f56551093081a3acba97491bc6bf72416183780b2859dee68
MD5 189c0cb1cc8a37da83abb18e826c1c4e
SHA1 27e58e143ef32c8983b397500a255616e6132fbb
SHA512 969c4ca50ff5d534a030eee58117c7b432ab86e9a401a09f7c3b411f7485dd49a6b29d4695cb2be5f21677666b997219e601f9fb72e8ec69abdc54149ec23f01
SSDEEP 96:KUowK1+KW/+3S+MUkmW0NN0+mKMj0gmA2eFwe3bNCvz9jXXW/UO0bXKM20BXAltO:qje+3S+MUkZ0Ne+Oj0g92eFwe3bNCvzH
TLSH
T1CAA13324357A1240387E2D0994B4DA2F124136E37169E67B7BEA01D28E7BE080DFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 34ba7be9b6a29947a5eb79c68dc31229bae5a12a5de8e55e86da0b0891ecb364
MD5 e6332ee0720d95654507ad9e44eca5f2
SHA1 765b802d5a4fcec342f321c974dcbbbdcabeaa90
SHA512 c102a06a7d0143f25fa824a1729133d0c1a6263ec426c57b8cb6c93da674c97ab696f13ab2bf0496399bf543eb24124c9ca274d4d13fdd01b0704edfeb3f3245
SSDEEP 384:DNrRZyCSDnxTIC5bMEhIKyll7svbFKfk7:xFZJSDniUwyI1l7svbF9
TLSH
T11944740A7B747001EDE6D9721CB080771E3C716E8F22E6916DA254694DB3853A63D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 d0195216d9c0460807e504ed35ac83bc564f5c8a048ad76c7971416d72e3490c
MD5 c3e99c9001a4a3e0faaee783a7fb7915
SHA1 a177d1036f470d6154a24ce62670fbe1f4c69d06
SHA512 ec31ec4fa10af2d9d4ff3a59c81e13b5e2e7c08ed7b70504774f9d8dc1665eb7b8433e25f508e3f98cfcc99c32fe3d3abfce29603da7fb3cee97725174f00c71
TLSH
T1CBE04F9077BA20906AC8AD42C1392A0771843BDA678AC676375A46E54F46C0C1F6DE7A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 16c1222ba4aafa0c054d318c6133e4ee8d6170c1240061400345d0fbf5a88ec7
MD5 dcff38bf2fa51c4e0f0257241beae505
SHA1 80d8ff0988eb9792599aac34f424fcb1974d7a87
SHA512 0517243cd4b27b7c7b1c391e6e53e13ad87385fc2eb59b80ae89339f7c601e156104857bf821ac2b591fecf67b2c58bf96412d332947e584461a8932d1fb821f
TLSH
T1F1F0AEDB6E031977CC02903554336B83FB2189CB0024B467038D242B5A6D1F1C9CC0D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 add29c6184f1f7cff5f3baa28a21f2edec5b619625570d4b52c8db5bb0af3045
MD5 cb58391b018b2714cff0380e39270e05
SHA1 c89ce8e32899b35a64874d16d91ec4edf2d0a46d
SHA512 69f0f90b5c7d103ead107eab1574b5f356f5bb7e871578e21b54c824bb88aee120141afa13736a1b4e48db8cae6258832d21a580885bc9578c124212bbf72999
TLSH
T102E08654BDC9C2EEF5942087017D9748D2A13B47FB9C6A563F08C85EA502184B7BB582
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6abf58ae25f638ab3047ca2faa12a4bfff1f1de32fa3777b1b6782f1f9abf2cd
MD5 87304482ed0c2c94144657b8a3c492ec
SHA1 052545d7ee18b1b3ce436bb765d15b71b4a97a9e
SHA512 87b65af98d6253b2637f52251d1cda015592b9087e5160290a1f9a720f8243ffdd42721a8516adf171ec164cb8953cd8d7f28ceec3b386d954b820057f95fdc6
TLSH
T11321B515F330C004F14A827D507B9B250739E8569FBCEC0F857920756E76B080E4B6E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 ba77fb6d28da5913ff1e478bcae03e8a4088c4ba053ba22a91cbbd79c0dcb68b
MD5 7ff23cd59b0a0a6bbf9454ce8c038892
SHA1 583d4a359aa42e502dcdee0ca1e1b196c5f1cafa
SHA512 0c6ec58ac8337f5f85aa15f978ec4bfecfd1f3613b41940c267d322737b9e04a459504e1dcfe7feb7e2d8ebb6409596a643204813223f0411da2c72af21fadf7
TLSH
T1B2E0D86CFDC9C15FA4903083017DA74CD2913A47EB8C2F812F158A595502945778B142
MD5 SHA1 SHA512 TLSH

Submit Download

218ba96d-5bb7-48b0-bd9c-d43f952102fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\218ba96d-5bb7-48b0-bd9c-d43f952102fe.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 1b73b310c31b13697912e7fd8ba966b9456c4bc2aa946b35290cdc4e0007541c
MD5 657aeb611b8703ed21fc718c74403bab
SHA1 0c2879fa6ecd53e6f712c1b4ff6987411764541f
SHA512 44c443f0d5c6f1955b898e240da9fd0d54ee43731900f85cc16722c4279a06431b9acc718a293fd5b51055c90987f4eb82f50c7092541ea4ee133483ecf92bcd
SSDEEP 3:MsEllllkEthXllkl2zEfl2:/M/xT02z
TLSH
T1FA4404047FD40405C70110314051C35013F0F45415515FC374D144735CCFFC00C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e27c795db58bb5c60157e444ba9709bfdd8c286c9e4f718043567fe95ab6a97a
MD5 32a93b01db8abf9423f2627906fa9c6d
SHA1 bdb82968d4bd8cb9596bb834b5122575443d12fd
SHA512 8d927dfe656a54588f82164a3805c67c32a38d91ee27f391e7ef1339a411ed5d92137c47faa25c99d15b7dad3ada1b15ef952f241bddb9f0debeadae75e4ce3b
SSDEEP 3:MsEllllkEthXllkl2zEfl/Sx7/:/M/xT02z3x7
TLSH
T1804404047FD00455C50010304051C3501370DC1055115FC374F144335CD7F401C0000C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 49e51a87a2fb6604ba0afea32a8540a69674829de95d6a4cd70502126b466833
MD5 3c0ca7ea0277b2c32cb62482bd183c34
SHA1 b36b7341a1f93862fc14364cd0e5faf61788a94d
SHA512 52824a45a8050c300f5462d47a0621b79ac3c113947357b5f78b967a408e7b1ef6ec689a020c0fb90fb0584f565148693e568b779797dca89b98d6fd5379f56f
SSDEEP 768:z/UxvxjgC+b3/IcZ0rfZWmYoBBw4Ot5AEl94BHYj/PAFTN/:GZj3+b3mBVa5AEncHYjXAFB/
TLSH
T14F03BF39ECA55927CCF7A784771A738BAEF18463A5C16ED48DDC2D1E0A8725D1307807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0317c8e9c4cf8b68c835931e2079513b351902dfbb38fa79c2dea6a7ca79a43e
MD5 ce519cbcef35ff78788dc47142753ba3
SHA1 5f5b42386111949a8494b1eabc87179d5f54472d
SHA512 2deced19c8139fc38d20628fbd4c39c6c91a837ba58b2b0736266904288a596bd0e367bab7259d823d5c3994e40520751b0d1e3f32e83bffe3e507727591b7f9
SSDEEP 768:JA3jUM9XcZ0rfZWmYo/YomBw4Ot5AEl94BHYj0k2sC0:JA3jUMCBVa5AEncHYj12sC0
TLSH
T144F2AD75DC758D635CFBE284B61733462FF054A3A8C19EC4D8D96A0E098329E174B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 25f0de5f4fd3fe455da5a92fb234500eff9257f03821c4fd8a52c67cf4f81d8c
MD5 a01d7211f646d4e219f3d51935036280
SHA1 6f1ec44a1cec6c25ae617ff6f819b392079f5607
SHA512 1a866ec1535e23757561a389864b868bd1ca7d94db96585ef56d9b95796b906a8d6ecbece2e98d9ac57f87debe75005c5f595d75910ab3a4b53f13b5f3efdcaf
SSDEEP 768:mA3oUM9XcZ0rfZWmYobBw4Ot5AEl94BHYj0Esr/7wd8sC0:mA3oUMPBVa5AEncHYjjs7A8sC0
TLSH
T1A6F2AE3DCC658D7B4CFFB784B60A360A2EF09533E5945AD4DADC2B0E056359EA34780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 56KB
SHA256 5eaa7919446f4366cda96ce6bbee5fbb95b10350d11fe915a4fd9a72b4f31796
MD5 b8ebdbeb139c97ba96620bba0b91e26e
SHA1 4ae180bc1c990de7432c27ec47546d666e0cf463
SHA512 b7388b032656af72f28e9fd2887bc29c8905aa8bb307f14b21aab92388f6d04d9bc01022ceb6f61b335d94786aaf8e570ec00935ebb69bb674b5d2a233a056b3
SSDEEP 1536:wA3CUMcBVa5AEncHYj3xU3FPq2gvAocgmts7AAsC0:wyCNwEnTjhjd6tskAsC0
TLSH
T1DA43BF35CC94CEBB5CFBAB85F70A76166EF04173E99899C4EADC1E0D00564AE530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 20bd991ae286ba1a4200553f6f8dedf7d6ea6908957f7d76bd5e5de778868d7b
MD5 f75ff80ed0b1bc2e7be9325b8d16871e
SHA1 615a3cd6c93c10616dad663caa4e5cf0ff97ee3c
SHA512 8385488a98b10925c558db94cd061c86e341cc5ef62c4d62805c6fd79018a743ed54173e67f95a06f328c2c449fef65f398de43762438360b826ade46ef7dae7
SSDEEP 768:fA3oUM9XcZ0rfZWmYo/YomBw4Ot5AEl94BHYj0k2sC0:fA3oUMCBVa5AEncHYj12sC0
TLSH
T195F2AD74DC758D635CFBE284B61733462FF054A3A8C19ED4D9DD6A0E098329E174B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 f0511f4153943f839e1715f3c7f713ee0424ec1c2f0e0ae11ce0c615cf5c1b1b
MD5 54d466c5b7cbf5de08ceb7ac218891db
SHA1 2e312dfd1f4df09d6c83198a6981084bcf1557d8
SHA512 679c2b18a0cd29f5103475afe2200c35adce66b8376d63eb5a0f887323b1702602c81139b50ef8c55a989621bb21f28ee060dc04d526f7369d3885249b29f9ae
SSDEEP 768:V/UxvxjgC+N3vUMnXcZ0rfZWmYo/YoFBw4Ot5AEl94BHYjHX8/mv2s0F:4Zj3+N3vUMPBVa5AEncHYj36mv2s0F
TLSH
T15F239C3CDC659C3F88FFB744760E229A5EB40577E4A159E8CBC81B0E8963199F74780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 37f851b7be2c6859324f191293f20ebe60c96f1245309cf157bfa44bba5733b2
MD5 d1640c70d98c20c6286a3c563451bd76
SHA1 367126587f0aa3ef857446f37264ecb3426ba7a2
SHA512 1bebe3f4af1e0de1dbf3ce1c0cca10b87e9ea885375cf3207dd44d6f53e1ee92f7624f2c1a1b2c702515cca37ada3c46cd0b925974e0517c348c4c575926aef3
SSDEEP 3:MsEllllkEthXllkl2zEflChl:/M/xT02z
TLSH
T1004402046F940805C6402034545283501370D51465129B87649144326CC6A401C01844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

d1ee5b6f-2439-4b5f-a80b-052d80d992e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d1ee5b6f-2439-4b5f-a80b-052d80d992e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 98a55546e41fe03178af27446c0389ccc2781038f0b7348d2ad50846dc33f5dc
MD5 ed12c620433363f3bae135c5d15dca2f
SHA1 5414b1db440c59cc15f8847894da1f79ac9843e7
SHA512 3da4b07665fb714d7203dfd8512ceff56b29f2a6e7cb17d602a3dee21969cfb4a20236fc1605374054268d634d1412a3887a4a76a931bda931eb469c22b04b75
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfLe:TY/IHRH34kWqB1kQnjhHmr6ITmU9Le
TLSH
T10323886EDA2CA9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54d558a1-a804-4ef8-a751-a99f62a89234.tmp

Path C:\Users\Admin\AppData\Local\Temp\54d558a1-a804-4ef8-a751-a99f62a89234.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 8bc75b6576901a29e7315b185c03b5b5ec147e0d1ab99fc2e8d0af9c6ca24ad6
MD5 f1a9c1d1f822829a1006806e02e732f4
SHA1 a8786c0fcb7c85667edc5b3148172adb09795255
SHA512 fe3534c4c1eac789296392c9e6c86eb65e96b8ad6e112553cc8680e5f28ec4d76fff6a97491c55c151e66f3f14f253eb0b4f5aa32c4a7fef61491d6eefd3cb8e
TLSH
T13F11E4D135726B3F1BC61BD4A0314D982660E180073F6A8CEE1A5074ED9CEE36B6E3C9
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5888_1312337170\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4608-0-0x0000000140000000-0x0000000140900000-memory.dmp

Download