873fd333cd8e687b874af8dca2f043c50ea1f4bc64d496015ca038da383b91f0

Analysis

user interaction
yes
max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 07:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Velocity/Velocity.exe
Size 32.9MB
Sample260930-h224datx2l
SHA256 873fd333cd8e687b874af8dca2f043c50ea1f4bc64d496015ca038da383b91f0
MD5 83da367e14fe39262fcf57c39dc3180b
SHA1 a0d2655ceff2d35b7eceb55e2be1058b966970e2
SHA512 8ce8b77b95640a111d43b75ff76bdfdacfd8680a39c5d5c6a97fdef7aef18bd7470a4df4716fd3c67a51cfed69a710d6c33086c864a0b91ea0c03966b8a97df5
SSDEEP 196608:ktQ56WdpH6emXAro0JTToUgmwh8qZYOCu51ZTAFLzbjblIjvT7CThIPPBrYjPWDx:kt6pHxmXf0J9A8qCFqAFLKnCTMGPWl
TLSH
T1A9779E22A3A44E3DC99F5773E4B603254335CA06AF43939E581CA69C1F933860B59BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
79	1152	msedge.exe

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1900_1968219549\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1900_1968219549\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1900_1959235440\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1900_862093072\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1900_862093072\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Velocity.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5836	msedge.exe
1152	msedge.exe
1656	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{9320E197-EF31-4886-98A9-D6263A49D578}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{B7A0C9D1-2FBB-4E5B-BC6F-423E24FA5E2B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe

Suspicious use of FindShellTrayWindow 13 IoCs

pid	Process
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe
5836	msedge.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 4332 wrote to memory of 5836	4332	Velocity.exe	89
PID 5836 wrote to memory of 4812	5836	msedge.exe	90
PID 5836 wrote to memory of 4208	5836	msedge.exe	91
PID 5836 wrote to memory of 1152	5836	msedge.exe	93
PID 5836 wrote to memory of 4208	5836	msedge.exe	91
PID 5836 wrote to memory of 4208	5836	msedge.exe	91
PID 5836 wrote to memory of 5408	5836	msedge.exe	94
PID 5836 wrote to memory of 5408	5836	msedge.exe	94
PID 5836 wrote to memory of 3324	5836	msedge.exe	95
PID 5836 wrote to memory of 3324	5836	msedge.exe	95
PID 5836 wrote to memory of 3324	5836	msedge.exe	95
PID 5836 wrote to memory of 3944	5836	msedge.exe	96
PID 5836 wrote to memory of 3944	5836	msedge.exe	96
PID 5836 wrote to memory of 3944	5836	msedge.exe	96
PID 5836 wrote to memory of 5860	5836	msedge.exe	97
PID 5836 wrote to memory of 5860	5836	msedge.exe	97
PID 5836 wrote to memory of 5860	5836	msedge.exe	97
PID 5836 wrote to memory of 5908	5836	msedge.exe	98
PID 5836 wrote to memory of 5908	5836	msedge.exe	98
PID 5836 wrote to memory of 5908	5836	msedge.exe	98
PID 5836 wrote to memory of 5128	5836	msedge.exe	99
PID 5836 wrote to memory of 5128	5836	msedge.exe	99
PID 5836 wrote to memory of 4872	5836	msedge.exe	101
PID 5836 wrote to memory of 4160	5836	msedge.exe	102
PID 5836 wrote to memory of 4872	5836	msedge.exe	101
PID 5836 wrote to memory of 4160	5836	msedge.exe	102
PID 5836 wrote to memory of 4832	5836	msedge.exe	103
PID 5836 wrote to memory of 4832	5836	msedge.exe	103
PID 5836 wrote to memory of 4832	5836	msedge.exe	103
PID 5836 wrote to memory of 4088	5836	msedge.exe	105
PID 5836 wrote to memory of 4652	5836	msedge.exe	107
PID 5836 wrote to memory of 4652	5836	msedge.exe	107
PID 5836 wrote to memory of 4316	5836	msedge.exe	108
PID 5836 wrote to memory of 4316	5836	msedge.exe	108
PID 5836 wrote to memory of 4316	5836	msedge.exe	108
PID 5836 wrote to memory of 4580	5836	msedge.exe	110
PID 5836 wrote to memory of 2472	5836	msedge.exe	111
PID 5836 wrote to memory of 2472	5836	msedge.exe	111
PID 5836 wrote to memory of 3956	5836	msedge.exe	112
PID 5836 wrote to memory of 3956	5836	msedge.exe	112
PID 5836 wrote to memory of 1900	5836	msedge.exe	115
PID 1900 wrote to memory of 5464	1900	msedge.exe	116
PID 1900 wrote to memory of 3708	1900	msedge.exe	117
PID 1900 wrote to memory of 1656	1900	msedge.exe	118
PID 1900 wrote to memory of 3708	1900	msedge.exe	117
PID 1900 wrote to memory of 3708	1900	msedge.exe	117
PID 1900 wrote to memory of 5352	1900	msedge.exe	119
PID 1900 wrote to memory of 5352	1900	msedge.exe	119
PID 1900 wrote to memory of 5988	1900	msedge.exe	122
PID 1900 wrote to memory of 5424	1900	msedge.exe	123
PID 1900 wrote to memory of 804	1900	msedge.exe	124
PID 1900 wrote to memory of 1980	1900	msedge.exe	125
PID 1900 wrote to memory of 2324	1900	msedge.exe	128
PID 1900 wrote to memory of 2324	1900	msedge.exe	128
PID 1900 wrote to memory of 3500	1900	msedge.exe	129
PID 1900 wrote to memory of 3500	1900	msedge.exe	129
PID 1900 wrote to memory of 4884	1900	msedge.exe	130
PID 1900 wrote to memory of 4884	1900	msedge.exe	130

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Velocity\Velocity.exe
"C:\Users\Admin\AppData\Local\Temp\Velocity\Velocity.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x86&rid=win-x86&os=win10&apphost_version=10.0.0&gui=true
  2⤵
  - System Time Discovery
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7fffbe68c188,0x7fffbe68c194,0x7fffbe68c1a0
    3⤵
    PID:4812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,16959831562250757140,16320516451430542778,262144 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
    3⤵
    PID:4208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,3449121882534787667,12508474022347652972,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:11
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:1152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,12252149183000036118,7375387539028529223,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
    3⤵
    PID:5408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,7039014398926321669,3838703283927649381,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
    3⤵
    PID:3324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,11064997497900027321,11797201951005274902,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:3944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,11136843190802194851,2905701141439565680,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,17823553347006141310,13798895578108597918,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:9
    3⤵
    PID:5908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,11700034945601067539,7708782085349947525,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,12299222296074631252,964982354446577422,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,504909147182237174,8598638442484006798,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
    3⤵
    PID:4160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5600,i,2377178394262533551,1155136453267343463,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:1
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6124748990592059263,6155444820729413143,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
    3⤵
    PID:804
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6124748990592059263,6155444820729413143,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
    3⤵
    PID:4088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5624335591879768524,5105186324484036577,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
    3⤵
    PID:4652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6652,i,893039153160758335,16180075289317411735,2097152 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:1
    3⤵
    PID:4316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7332,i,13828792706723634688,9840051339733524846,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:14
    3⤵
    PID:4580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,17932446686988631428,6038564083075427533,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
    3⤵
    PID:2472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7232,i,9793101044910802910,8971631967698674511,524288 --field-trial-handle=2840,i,1211167287637330412,14145511181197435245,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:14
    3⤵
    PID:3956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1900
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x238,0x7fffbe68c188,0x7fffbe68c194,0x7fffbe68c1a0
      4⤵
      PID:5464
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,16376871413378205412,2919555243073907246,262144 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
      4⤵
      PID:3708
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,18360020832241925033,8763886875293695401,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:11
      4⤵
      System Time Discovery
      PID:1656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,9439055344659327093,17022266729910207674,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:13
      4⤵
      PID:5352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,10002781875267514733,90407987513820831,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
      4⤵
      PID:4764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,10002781875267514733,90407987513820831,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
      4⤵
      PID:5988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,1445929099888152027,7500381313208145307,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
      4⤵
      PID:5424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,1373251596977507351,8606798581368597567,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
      4⤵
      PID:804
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,4369836977728352720,245767948451908904,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
      4⤵
      PID:1980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,5818957173021300712,9897834724891554414,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:14
      4⤵
      PID:2324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,17406242398554598988,3670530866243100475,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
      4⤵
      PID:3500
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,12611493684214206251,17648849404835345786,524288 --field-trial-handle=2252,i,14831274810011969932,5078375487290355657,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
      4⤵
      PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2404

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 7331d61b72578f10058ae20f1a7351dc99070a754006884c0b775bb57bffd9cc
MD5 df1098b0a62fea8609e624a81ae2865a
SHA1 eb148addd613d8dae155058eacdf967eae295b15
SHA512 0ec5916b4d090394f668a1ee0ca76c2125146f8b8507c9e7dd1bb90a8aed21e61551b85c2a32b975aea241df7bda238c513a58ebe378cd3af3d77e71803ef6d8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 96c680b7d9e4e7e0f896cdf02d9d2431a54011a91632f5b22a29cf507f03dc9d
MD5 19c4943a0e091420a0f1a0c062177e4f
SHA1 b264c36989784f970abdda4f5daed24d9761c4c7
SHA512 1b5aa543e3df6dd77d588b6b032c2d27f9559f79005be5cfa2784128698c635c88959389694c446b98c66a38baab01729cef89e67d56c526742a7f4c19d4457f
TLSH
T1D7D08064A97DDFE1F037257E03355A0471DD5557EF031206A1514D6689512421551DFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62bae0825198c391eb9f25dccd394c0438df38cb6e2b51fa9e8708fe44c894c
MD5 73912a39c584583147269dab42c05009
SHA1 b4e548c39b95cbf9274d9702007fa1d3bed618bf
SHA512 2fdf4c188fbcd20489a7a3b84cbd22ca16c3049b4a2a9b8206bb006a5e29ff8bcaab7c081f6de6e491bcd236643f9ea05d9d5fc4029d795c836c4c8a56e72145
TLSH
T19ED0C0D8F13C8ED1E01314BD0210A70471C4D214FC033001F0425175210320011000F8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e4776c6af3646ee918ac9e9451a2be60f936718bc04563daf06c6db0fe7a002c
MD5 f9b2c42ddf5601fc1f256f82f3552884
SHA1 f0c0307a3008ff9690d3834d3746f5d008c545ae
SHA512 b3df63db1ad3557911e4cf5e169afe76f3b3c60df2bd46d55cb4ede45c6aec038dd4bde9cee867e93069cce5f435db01caf065a190bb74c9681a96bc52421df7
TLSH
T114E02BDDD8659D6708FE1718605507CAE7C5136B2A81594F3F3C80084FB067B0AA6C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 4db069a08e4f6501ef997900971df8ea5cd6d2d4d728087976877c090a440229
MD5 a84d2ad31372d0574163eee0ed075c80
SHA1 166568693a49c513942c32de193df724286e24a0
SHA512 b72029466af2db2142c3a70ce4e211f40d327b47ab5d690f7d717f6962cc7112ebc8c2aa93cdd578476fde7353d5ec974b6157435cb13fa05de7eeb571b09237
SSDEEP 192:LP+3rdu4dcyb1wpmXaB9uwW2fJodnOmcMv3cM0slQ+aGS7nnvee4cWl1wdHfR3lf:7+byidqiwYcMksW+aPnjVW/ydu6N
TLSH
T183133B3E76912C02F2F342BE24EF9B327B3AD8F8E2E942171339F6502B94356181E555
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 7ea41ace9e7370ba3b4d9a0c43fd6df9ce88e176eac0655eea5614c47233562a
MD5 31aea1c0c08a0043b8fc738ca0c80044
SHA1 bea20fb9ef0ad5da892f38d9dc1953a9a86908f2
SHA512 db8a5adefb009477b4f19dbd885bdf5de089c32746d8dfbbc17d926dbfb316c73d532909ae15020fc51afc318dfee7ebc8772770efa52811ec10eeb16ad016fc
SSDEEP 1536:9dfL/8LL/gn18pE+kxBNQDjI5gpKmsmDGDL/rL/eL/HFFu:9NL/iL/k1okRm/DsL/rL/eL/
TLSH
T16A444EF74941600BDFA852F6D3433A3EE17B015D7DD1F8E9E1788CC12825B62B6B9A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 c6b02f8b8f1cbbe7ecd5d690e978ba01de9859467887a8487b405969ace0a151
MD5 312e023663d091e5227150eee8bb79ce
SHA1 2fc72c15ddffc4ad034bd076efb414a1493aa1e5
SHA512 3c65536fb47066503ab6cc79a96100dc9d5f83334d16c267a49a96b3e694e7075b490ac6fc11cca7bc52cea703a4da260d77023fc1d7a0ab3154e7eb80eae783
SSDEEP 3072:fv9G+bW0THEns7MpczwktyrsfouoP9QJ/YAe2BOc29xpzQEdWQJBSKWoPpOGk9oD:fQu3MmMkty+hJtvBOc4SybL
TLSH
T1FA2539EECB681C82DB6B8770B0E0D9077E712182BA9DC0D39944C5D997D6B8175F82BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 8c3591ccb361d603d64cecc87a15ac7cdb4e72b26f23105b1273c852c4e0fdb8
MD5 7dd10ca5ec5003336804f9322c549864
SHA1 83ff93fb7f728175dc5054d767da07d0cdb21a86
SHA512 9a3d846b3223e888ce06bdc284925f52526191ac6ebe7e6b6b6bc6d6c513fc436701f6bce1d9251e099d780548f1fa4bae11c4c77c2dd407b1720b5ff1fc80cb
SSDEEP 24576:Yz50ZxRUi/sNcKAEEbGgQQg3matBu9q5NGD4yVfir:e5KUi/Sc4EbwWatLNVyVq
TLSH
T141867CEDC97858C3DD63A930B4F0E9477C7413C3F954C1E6889CC58402ABBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f5193508ffdb686fb761254fe92f1eb60c7da0ad1d81e41e5179850561dd5771
MD5 089e2c58a62d6c0fbdf3cce229b2261a
SHA1 17c4faec098ae950675b8292afc8dc5b58e7b3c7
SHA512 189d804afed27af343c634cfe7df136d47827349fa77d0ec6b43d886c4ec76a8c2c2fe1e50caae7513b6b402b0d81a49ef0c42fb70240adeed681d10962c83d4
TLSH
T1D17185BE99AC5926F758043388E22C8739FA73C240472E134B74E57DF9D7751A1E804B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cc7e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59cc7e.TMP
Size 3KB
SHA256 a0334534ef6fb43f520107fa01233a94596c569e2d8f71aaca1d248f1ea2b872
MD5 fe9ef95ce613901986694ee91c68675f
SHA1 acfabc5bbd2db85b93d2cb420b4f158012b9b5da
SHA512 20ce9dff70a255c54488dad5b7681eaaa7f095b23d837dfdb47fdea8bd8b0fcd27bdea7d2bc41adc3986886c81123a51ebd88eae0925fabc88babd0825b0acd2
TLSH
T1E86195BE596C8955F75804338CD22C873AF4B3C1404B2E1307B4E5BEE8D7751A1E805B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 8ffc047d9b146084586247330c57382b57c3d0d963afda9189b6a51ea0f04b6d
MD5 0c13a2d077c0d8d3ddba29341ed799e0
SHA1 16039f9d0254f610aa506f1c0ca3587120e9f236
SHA512 a724aea615ee1cea5b6e483d20fa1ae433d76de55764e815163e6f433afac1823b5274666d85fbdb05ff449a882d8cb6a974bb568bacee6efb525a0c3228d15f
TLSH
T1ACE0D8A4EDCAC12F9A1434C341286B08C2C13E47D7C97F031B0C8CC8BA02406F3A2586
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 8d4934d8fdd8d7421cac818146913a476550fec5c7902471fdf35bb06ff59ef9
MD5 977b04d36504ead223e461c0448787d4
SHA1 dc280f53b3c1276c4ddff4556f15ffd5282b391a
SHA512 26002112faf3d53f34c9566afe43c40c71ecbfcb3419c06ac943cdca9d7c43e6a3aa5239055de3f221b9db5e794c6fa51cb201fe34905457df93f4318963b5ad
TLSH
T14CE086B84EC9C22BE914A8D7866C6718C2D13B97A7CC3E42174DCC58B605646E3962C0
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 e78a6bd126cf434047da683b7159650df202e1d4cca3f79519ab42737683631f
MD5 711c5548b851f488731b971f922c120f
SHA1 1227b02be9529eccd42d5135a40a4cab13cb0dbf
SHA512 eade6d50955f6bcdfa89a378940ee793b4d7fe7dc4d459271548e9d1c73daa5eac6c1143750768374d4eda0b1a1bf5cca59cd0885af08943f61f412048008c76
SSDEEP 96:6BCxLY9IOzqpIg14zq6yuXl87A307BKT+QsmIOzqCIgKU4zq5j0:waL3j7A307B8xcz
TLSH
T172925253EE70B403DF501A76272E8035CB3BD11A6F8BDED83CA54450DDB22D7A0622AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 894dff35122d3ac9a9cb7bdf2afa872da640c11016b8e7da5d178bfc5e5acfac
MD5 57830511e90725faeb35e07113eaf0ff
SHA1 8d29f8cb2299bb9de30b32c0087eaea6464173f4
SHA512 a1c678fa07010c861d8d11c1d7757fc1cded92fd67716da1508d2bf2638ee6be243cd694d71e2a73d38dc313eeac0d55d1efccf288f48cfc64df90e8eff71aa3
SSDEEP 192:E6PAiya+tIVH+bF+UI3iWGVoWN3qL/Y3VVV63:E6PAiaeVIkUI3ijVoWN3qL/Y3A
TLSH
T18324455F9F302212CD7C51366AFB44A39D6DF02B875366DA6CA10470DEE3692A02C5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 598B
SHA256 afd5fedc4fda3f766ffaf24d198769d4521ef702465f8f3f67271cd4d1e18e29
MD5 b00a22de85cfdb6794dca41f6527c253
SHA1 fe77c9ecb883194d803869f12d4d23de4a7ac52f
SHA512 549ef8c2f25e27ae7a91943a6c3bef895f101b4b1cba970a7b4e1cf6106358da40a33838db44f63c2a4fa0956c1eba3f9228a2481cc8d0f5eb7df490bd7579ef
TLSH
T1FCF028B3D10CC4A7AB4023924644E664725B773AAF40E7CDC98EE01484761D8665A591
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 2b4f78945b68a0c6339979a5a2b74ba7eb320461b8673db6224f7a22d4d6d8cf
MD5 ab6b6ec19bbf925fa721840c7f030a9e
SHA1 385b502d7b828a7c5ceebcd386b57e1ed6b2edc2
SHA512 29f206311eb7271490bcec8c2ad4defcfdee2aeefa001d6e5dc70accf874adff30bd25ccc5377dfc78cbd9751cf591127e8f328448771b5361344f901af578cb
TLSH
T186E0D8708ADDC19AA60470A78239BB4CD3A03B06D7CC3F421B1C9C48F805805E3821C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 b86967fac268c10ffb236c2c78801a203271a7db9cbb459557ab8e4b34a9d01b
MD5 9738b16d7c64249494a8bd1e88433e27
SHA1 2f07efc452b498dfac69b73295a8df3aac55ed46
SHA512 4bc971d7697c6a99a0c501ef342711ab6032dc11e2cedd1e12030ba116446463d8bd6b2c8506873efc70e8f04e873ecc6b083cb97f6154da030b548b7cc20cf3
SSDEEP 96:qDeMatha98JYgx9k8ziFHZUbV5iyYxHcoCDxQyhO6H+Pkd2Q5xPTxk8oIFFck:qDLaTakb7Ymo6H++q83FFf
TLSH
T1DAB2A55E6F116103C2E23736ADD9C837293CD21FA713679834E9A0718D33BDAF9020A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f61613de0a56ff1ae7acbde408619a81f11dcee904b64506081df22d509a01ca
MD5 8af63e63b7df4952114fdd35a289cc48
SHA1 c5ce1f89a5fcc8e767ce9984bc2e7c42a9049c7b
SHA512 cc91c32894cd48e5729f6239a95d8803975a57611c3eb817b727f7fd3557f2af4a5d32fedbca2f85456cac42aa9e3beb5aed2c60544ca08cf71777069f0d9324
TLSH
T1C5819CF783F4856E8A1196F0AA18EE2FDF2C0615431C786989D4EE27D3E3472E14265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 57e358c5b3bfc60db17fbb811db348f04a4a9c4530a9988e6d4a967950ef3701
MD5 1b942108f47ab68602aa1692e56e0511
SHA1 182f12c36fc897d12ff9a0cfdcd65b2bbb0030b1
SHA512 37d1b162b4ac0b85ae8d7b5b7b4116d531f7dffa894d5503eaa8aa6df6da79b0a54a7fd11f5fecb7ecf60f30b8c74bb64f60e2801655a49beef05fa0be926495
TLSH
T13E21485B96BEB8AB203A5A6B0A44FC453EBDA4315111E8FCD956826CB0994F70721427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0a7708091d63338865015a6e355af32fbfece8237ef5b116d18b93694f3f50bb
MD5 9c35a93e35b37db2249b447e8169ddb1
SHA1 31e287b28eabd65cc7aa5ffe03839ca0a1255072
SHA512 62635e528de767f5fbc1fc986bda0d9dff0b04500803f24bd99d6ed6f1a8e36e440f15e8c0a30bf946604ce222a40cd5429d544f35154ebb3f7e51b7edd76430
SSDEEP 192:sxRcRhTS/fexsIWpVqZZkSB5zoA8p9O/g6+WNG9zyv8XA115kqU3g+IgDloZJ:sxRcTS/fcsIWvq3kSu8/5mX+Ubk
TLSH
T11252CA06AD74A97B9CD7D21DFA55BF23D2F91032A5D15F88A6FC891C00EB6DE120384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e2d1f180e45dbf591d54f4c4ac087e9419ae82252cd7d4ddf5e30b293b2cb5de
MD5 b0e1aa269f4691a603b5ba68ce9023c1
SHA1 dc408044aef339ab91a165a40e041ced4b3828c7
SHA512 80437a6af7b48b3fd3f2977ff6caf5a13b70f14ff1025d3ecec7bbf734cae56359813bb722f4fef8aae78824f609fa28f383bcd6045a3f8c8bc696b1d76772cf
SSDEEP 192:sxRcRETS/fexsgZZkSBOzoA8p9O/g6+WNZzyv8XA1xvBqUqG+IgDloZJ:sxRccS/fcsg3kS58/57XtUQk
TLSH
T1D642B90AAD64A97B4CC7D21DFA55BF53D2F95032A1955F88B6FC8A1C04EB6DE120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cf6c6591ab0156aa86174f9196ad7bd0ca7895ac493a06c9a51353bd85d5fa99
MD5 eb0345b6dffc582ba32e6dd7f77b3bd9
SHA1 bc3e788e5436fbd0a400edb7b81cc6b4df459be9
SHA512 ea81886af0ea914deeea40990535a49a2bc6aae97c08a91c1e3bf0bdfea6b3793a3d13a4af8adc548faabeef410e7b2f1af23aab64024a56578471be7921c462
SSDEEP 192:sxRHRETS/fexsJqrVizzoA8p9O/g6+WNZx//A1x2qUqG+IgVoRJ:sxRHcS/fcsJeii8/5n/GUQA
TLSH
T14A42A81AAD68A97B8CC7D21DFA55BF13D6F91033A1951F48E6FC861C00EB6DE120384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 695bb07ebd8e3aefc05567d6fde4e8202476cdc0fceb0ddec3bf9999a4dc3240
MD5 6a881a7c475bf413e1b4cf6e1f8bbfdf
SHA1 4383799abd4be5fd1b1be82c9a3cbb1cd84ed689
SHA512 087c982b7e285685a20de7f70cc9da6efc2cc56017639012e2919870d16584f6e3b1f537a236e34915264c178fa0b2a403818aee7b2720a4d2b162ca3465a8d2
SSDEEP 192:sxRcRhTS/fexs9WpVWZZkSB3W9KgzoA8p9O/g6+WNG9zyv8XA115kqUXG+IgDloD:sxRcTS/fcs9WvW3kSJsKZ8/5mX+UZk
TLSH
T12952CA09AD74A97B8CD7D21DFA55BF53D2FD1032A1915F88A6FC8A1C00EB6DE120384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 60fec17953d8296399149e043cdf8ff6940b109f9c743dcb9698f2fbfca86248
MD5 0a8467167dcafbc4f71b4ec5483f7282
SHA1 ec6511ee5be1dd61c9d6d0efc8d9f94ea5b71a5b
SHA512 35c1be596fe6b1820d27ea8c6ab0074f79c4916175ffc5a6448f31eeb668479a92825aebda976cfe4a9895705be1ea290d2aa40686179f63bec9680d923e161c
SSDEEP 192:sxRcRhTS/fexs9WpVkZZkSB3W9KgzoA8p9O/g6+WNG9zyv8XA115ZqUXG+IgD/8y:sxRcTS/fcs9Wvk3kSJsKZ8/5mXlUZAx8
TLSH
T1AA52C919AD74A97B8CD7D21DFB55BF63D2F9103261915F88A6FC8A1C00EB6DE120384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 291cd1028e036284f082a0817c5bfdb186288e1e6c1a89cf845994b96deb380c
MD5 d3a5ffe044849b639eb4af00233ad90b
SHA1 c477e6d81016c766adab75a072d5a2b5db223c3a
SHA512 5bacc9f3bd51fa99c10644b2c24195865652dc67f2a0866260dfdcbd7778a22f2737d7b7ed83109815a2a2740a445801c516227a8de9e02788e2a517dd25f410
SSDEEP 768:zBDnux7pLuLbYFWgbjfkW8F1+UoAYDCx9Tuqh0VfUC9xbog/OVeBK36roaT+t:zBDnunEbYFWgbjfkWu1jaR03xU+t
TLSH
T143C2C87B744CCB7F4F800AAD98197E9A6DA802CB9698CD8047FE945C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 3560c7a408548ecb5705bf8e5605c19526526119f9c03609c68517a93a915291
MD5 b9f4c27fcfdc3bd2ac2d6fb57dd6e7cb
SHA1 8da33c1fd1f196f7618064708f84f75eb877a583
SHA512 55ea04a7539b08955a10a4b0bd8c7cfb6396fc9beb672623322f41a1af0fa89697d4b2d7da252626aec9e8d567169887de3fff43a5ee52de59068d96d36e5386
SSDEEP 768:zBDnux7pLuLbYFWgbjfkW8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4oZBK36roITnU:zBDnunEbYFWgbjfkWu1javoZ03xSnU
TLSH
T181D2D87B684CCA7F4F800A9DE8197E9E6DA802CB9698CD4047FE945C02C67EF51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 c0c61c6e6a5bd3bf3383fef626d09ff5dbc271be9b640862dd10ae92bff1f95e
MD5 0ee32875a32e6db4dd4c52b7326d3e72
SHA1 8b77a306d732a0fab28994dbe1cb983ad4af885c
SHA512 170756ca4246a3d617bdb0bfdf00d95123f91c1e57f9fa6c3a5a969b15dcbaac6d256c6b988974ea51a9aeefcfb46170e7ae2d90ba247ee729377be681bd91d4
TLSH
T16BE086784AC9D1FFA516288B02649B18D2E57E17D7CC3E023F98CE8CB5C3645F2961E1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 d0e5dbf2b5c7cf710d266190d5726e8cbf1851e11799c4bf8a936c0fdd86a90f
MD5 a38f97145ce53c17237b4263e1f0f84b
SHA1 43bc71e05710f7b7b82b0a08747c3b1e412a7648
SHA512 8baee64f733ed714f12ffd8dcaf4f9a3300ac3bd0dfc6d2304316b6dba0ee96249eb4d326bb9986740bb6e2e30d9a15a7c56397d10ed6da11fb87e0332f7f5c2
TLSH
T143B01286BB406116C8CA4C730E844B80A710F06212008803C814CF149C157B8EF058C8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 b7563f51811d676289c1933705a20d1f595a92373276071b8ab2ce0969fd5d47
MD5 39fb5d67e89d3204ab45d8b3e21b23b8
SHA1 b747d9761bfd2b71dcb1d0487f87231c64928e64
SHA512 6d9c32159f7ac1adc3a5d1a86d0e5896f858c8a207e38c8217a7062c2da0e264474fd8f6bf36ba8d593eda7b5ec740976e013370f9600b1f5e3fd8e28f3aba00
TLSH
T1C7E0D8705ACAC26FA54528EB4314F708C2A37E03D7CD3F113B0D9888A246280B3435A0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 7e2f8785fb861ba0bacc7aef67219c72d48070ffbba33eb40de4debeb314adca
MD5 e426af3952d272f6feef30bd820945c9
SHA1 77bd4211125d0e324f420fbb5e033443e3c37a52
SHA512 21155a5368b8d253e2f1f47eee2846790121e5ce8f1fc78833cb521d97978191a75b0ff4e6a077d5165f619734ecbccefac6e54a0dc920fd5a9b461910f8f4bc
TLSH
T18CE04FF48AD9C27AA415A8C34375AB0D82E07E0697C93F46A71C5C9CE501245B3A66C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8bdda6a057f6056cda0d2a18a7b838bf74eee5c9a4f7a528a872979b959a3cd2
MD5 e70ebffcfc8fa29e547aa2b9df644462
SHA1 e4b2b6622d2ad6a6e5bc43cb57850d1e1e2e2856
SHA512 9d6d9a000091626314ae67507cb9707e7fb8543337b49078c9d949827072746cddc71f1151bde037131f2f987da1434b4f89b9b873f1ca74d76ebf5d95fec575
SSDEEP 48:KMds5tXr34TjerIaV4KVd9/4RVoou/tVyFZIhKasMryNXI5KoIcNg8IXKJ:K0GAKHq6uZ2KasyOXmKoIog8gKJ
TLSH
T148A12591B13A0280383E698491E5967F524236A73138ED3B7FF905618F2FE05CEBD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 eac3d2a9c444def83d747e9c8014988c244c311f7efd21a05b55bf45faa80bc8
MD5 27b93044712897e911d3236d0b390f37
SHA1 499f1ce27f7d14304f88c9c95b80c4c37bcddeef
SHA512 ef70cf59acb820cf3621086769da69cbdb7e8a4b76a4419b4e93ad10658a934008d106e1407aa1151ab6b62975e2f0d71e8aa5805d2a06c7b4dcc6438aeb5dd3
SSDEEP 384:DNrRZyCSDnxTICDMEhIKyll7svbFKfk7:xFZJSDnihyI1l7svbF9
TLSH
T11144740A7B747001EDE6D9725CB080771E3C716E8F22A6916DB254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 09e772cbcf94099dd6fe57b94a1b434924de3c2eae2af80122a3435b9b766537
MD5 271ec19ece98d52d358e1b4e53c45923
SHA1 5216a1263535a6b5d580a8db9b77339891eeeb66
SHA512 2a8a51522b6bf4e690491054073b8c944eb5f6c0617d1e4e09901dfc03ad502d3d5888b31b572f3e572aea12ce49ac821e4985e8e8ff9e29baa9130d02765653
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:DEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T14252879BEE342212DCEA83318AC001E17E7A903E8FC1EB0254D610211FB4691A31E58E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab5221d7-5e77-44b6-87f2-a5087315c019.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab5221d7-5e77-44b6-87f2-a5087315c019.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 756a204f9abf1db30f3dd05c20f3ba5e0e842b18eab2ca37a49418aea2d990c4
MD5 1d7815e1e77958fe82d510c4638ebc11
SHA1 e12f65ef4b0cdaf08f8d00a118e5591292a307d9
SHA512 b9a0e1070fddfb77ebf280b7ff18e26595507e7a45f28a29f703d727b96fb7fc783b1a3de90c76aaece17083f1216f301805661ea7cb933a145ba9f0d053ff95
TLSH
T1A2E048C0722A24D4664999D1C15C152B60843B67361D8EB1337B4A648B4D80DCB2D972
MD5 SHA1 SHA512 TLSH

Submit Download

968139d6-f077-4de5-9ed0-45eba7257e34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\968139d6-f077-4de5-9ed0-45eba7257e34.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 f8393654d4e75a15c6dce7d474195251ef3091ff87f5c09d41db7a16a0d7f27b
MD5 9ea5a8e6d3fea50d2af4c68cd6aef81c
SHA1 ce076cfa8c89f5d93bcc9162c6f6dd6b8a7e73e2
SHA512 05c767ef78dc26c2a9da1087ef42fcb0f5791cd8e7e13f920ffe66b4e448b1026c8d00b49a16936ef24da301cf165fa13ac611d7ab973b1089acd3bc25da65b3
SSDEEP 3:MsEllllkEthXllkl2zEflU8/hl:/M/xT02z18L
TLSH
T1D244040C7FC0040DC50010304051D3D11374D414551177C334D144377DC77500C40004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 70c76e4b1e506a83587365c1526675770a5b99bb0b608587f0312c0b18268ba8
MD5 7a668306efd0fc614902565178b3f64d
SHA1 d2a5f4b9a0ff2718f1439bfd19f560433474a46e
SHA512 68ad7ebcb249346b37247b07b2d94ca43f4c3d843ba45f608075b325e89052dcf99bc6c7b59c04eb3b503104b86704fb40db73b9ded559623e3e0b6f587359a4
SSDEEP 3:MsEllllkEthXllkl2zEflL4:/M/xT02zr
TLSH
T191440404FFC00405C7001030C051C3D15370D410551177C334D145375DC77400D0011C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a3820053dc90e22314d65e74c4d809bb545e4139f26943593efacb1c24655937
MD5 a2031adf80573c203e229a435beae9d8
SHA1 4e6db9fdbf11b8587a740429b6ab0e1c443da6f8
SHA512 00f49c44f2220a773f9e3cdb5245bb8ca0f84b216aa3ff961c1d42ccf250735aedf23f9c331d08403d65bf4984e00b5b26c663b67e789b045fcb04f2d6f88bee
SSDEEP 768:Uk33HN9TOf7fLGJYe1ELsAvC8/YX7Ql93rYGHqu:Uk33if7fIYe1EQujYrQXrYUqu
TLSH
T12EF2BF75DC649C7B4DFEBB49B34A1B17AEF44223D0A85998C3D82B0D806369D730786A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9d4b506118f0cb116c5c0573862ff8b47893b2c780793a20af94af4184bd4ffa
MD5 055a6909e6605d1d1f1996fadc287517
SHA1 3d0f65de603f999122f1e4f92560d4b0d66b989a
SHA512 3ecc82b3b0e392f5ce7c9c18182b31050c3273742b57db1c4af2e0cba708f5414b682fb88b32d7eb36d73824af9459d60849987bcad90d51193088c8eb63f23c
SSDEEP 768:Ek33HN9TOf7fTfqtqzJYe1ELsAvC8/YXB4YGHqu:Ek33if7fTfrYe1EQujYR4YUqu
TLSH
T194F2BE71ECA5DDB31DF9A689B7462B43BEF4412394C84E88D1D9270D40837AA270F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 afafe9671dbe1f432c442dca4bdd5cbb91f3ce172a5313cbd18fe384f02428cb
MD5 d4157c6f7fbf6c7c950ee19d3c0ff8cf
SHA1 60ee693fe085a078383779f470193f08da04b7cc
SHA512 19cd0b1171919276ac8aa0a50771cbde987975373b4c5cb9fcca3ac7816fbed71f5afafcf5806d5a575b64f5b418888e4cdbe668993c72a417b74255d77e6ae9
SSDEEP 768:h/UxvxjgC+i38C9TOf7foKJYe1ELsAvC8/YMJLSHrkw:0Zj3+i3mf7f1Ye1EQujYIS4w
TLSH
T13F03C035ECA49C774DF2A7C8774A5717EEF4812395C02AA486DD2B0D05C73AC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3027e3c181ce815319f14f7b38e022ea01f2ab30be030751c00f7c06e954eda2
MD5 02d00e076913d89ddaa02cca00b53679
SHA1 1c63c31fd3c7146e98800d1835903ce00e2b8c5d
SHA512 bff8bba112edca6c90240203e5c674b480301c225d97e1c38699ba894b6db7f289ce9fba348054c76dd365a456192e63ffd67d776dcecd0b9cc49ace4e777c8f
SSDEEP 768:M/UxvxjgC+93hsN9TOf7fTfqtsyJYe1ELsAvC8/YEkI1L:5Zj3+93h5f7fTfiYe1EQujYB2L
TLSH
T13F03BF31ACA9DC735DF6A658734A1793FFF4012394C41EA896D92B0D05C73AE270F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3a720b9ea14eaa12559dfa3cd535926adf45b1797ec5600b2c29ae8d275c513f
MD5 ff1052fae127d0e801a80725b15e6e14
SHA1 a110962c17bbe77167b4461571aef41f78aafc50
SHA512 c82c20ae5dd1203e13c4ee9e3bca326ad290cc795a4c3822e889d23bd158c42626963ba979854b99e945e89a771eedbb9786b273797f6857346a6ea8652ad501
SSDEEP 768:ak3VqN9TOf7fTfqtqyJYe1ELsAvC8/YEqRKgBee4YGHtM:ak3Vvf7fTfOYe1EQujYxRK6ee4YUtM
TLSH
T106038D7DDC64987E0CFEBB49764E1A16AEB44233E0B44998D3C9270DC0B3659F34786A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 3ab8909ddc8bc5982603de9c80fcefee5564a3033de993600d3e4cca6ebb4677
MD5 88c990ad811f4efa6a25275f0af6a775
SHA1 52907814465762cce2b2fe3ec78f8e981413eff5
SHA512 beb0053a24bd601b6bdba377c2622bc8f334510f2bcae51102fd7c7336077a648f6c7b2807848bfe44d36a91d32f6954e7ad52383f470b9e529d9d7ad534b800
SSDEEP 768:7k3VZN9TOf7fTfqtqyJYe1ELsAvC8/YEk4YGHtM:7k3Vcf7fTfOYe1EQujYB4YUtM
TLSH
T1B1F2BF71ECB5DDB31DF9A689B6462B43BEF4411394C84E88D5C9270D44C37AE270F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 59KB
SHA256 62b3aee20f9978b766927ec9793382145340da903bddb3dede82b5b11e204f6a
MD5 1cd75a4b4aa826c753a463ea4424a499
SHA1 909ecffdb591d8aba574c8c322f06bcf19f43fb2
SHA512 308bba5a623eeeff67ff330ddc30798e0a426da05f6a6aa8ac83e8ca5a8133f84e524339df08a8828fdc5e015834504da11930ab930515deaefca42258c52a08
SSDEEP 768:2FOk3Hwgv6lUArJYe1ELsAvC8/YiwI6zNYbFKTSWtnA5+apakGIEY3i37Ql93YYQ:lk3BoYe1EQujY4y6WtnA5+LzVQXYYUqu
TLSH
T188435AF598D399BBC8ADA747A33D2D069EBCC123B4985484F7881E4DCC521BFE30A855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 751e2db454c9d2c9fb6642e8879836a2c8e67e41a855895447f420053a66bab6
MD5 f1637e9be0723e5fb60b7bec41dfaa46
SHA1 5f7e81a5929be5d8d0f67d84a32c00d8407e1405
SHA512 8999e8de4b5f09e04ac8af45759d8079216ef4b448109a8ce653cfe3d41bfaec936719a79c1f68c75e54b6097c0ee0f5e369d38a03792a058f28011b1287a38b
SSDEEP 12:TLJYJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3iscQQtydQUVIzcQAB:TL+j0afDdWec9sJVUOP3ii2Vjy
TLSH
T15292DF2679351473ECDA473ABC5389E10EBC165EC9A7B8148ED40C2209B2BD2A2592FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8bee1d108733155a3f6876abb44ca58fd05a3f1700a6bcbdc9ddbd6218598948
MD5 1667ca175931dfdd83c7fa67b4117e57
SHA1 2bf1f650e5f34fe8afc17fb7069d17433c81128e
SHA512 0490eef84855fc8fbadbb9a5c495ee9dadf4c5e5c18aeebaa6d70d5d62a23a8c8b8d9c9b258ed3934a002e7ec9fabbbef4bff5961e957adede190c87d0b549e8
SSDEEP 3:MsEllllkEthXllkl2zEflQ+c:/M/xT02zxj
TLSH
T1974404047FC00405C50030304451C3501770D410451157C334D54437DFC77440C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

29910397-c089-4597-9958-b63880b67179.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\29910397-c089-4597-9958-b63880b67179.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5836_636672668\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download