ba773b1f7f81d1b186ed2f83660c7ced470d27f7f697577378bfcc3c26101f27

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
alle-programme-oeffnen(1).bat
Size 2KB
Sample260930-sdchxsvt3n
SHA256 ba773b1f7f81d1b186ed2f83660c7ced470d27f7f697577378bfcc3c26101f27
MD5 3a51bb9456b0f464b9489fa8b9da9ccb
SHA1 e8c813dcebf556cfb83d3db3f9b9fda8e22b7a07
SHA512 d0fd4d89b1363950f545937c5d7bc47ef3de7965036411f91dd6dc6f21493b6f3b47069873b0218794b79c83e9330277d80e1e06787d123e928e5888469f019e
TLSH
T1A7417656F62EA45382D7DF80C88B974DBD62418FA2092EC674FDD16F5C427C2C79D202
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery execution

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1520_2088450558\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1520_799271878\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1520_2136243371\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1520_2136243371\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1520_2088450558\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4228	cmd.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5444	msedge.exe
6076	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2251218687-1689653882-3767565116-1000\{F8385764-FCFE-42C0-8E4F-6BD867E0AB66}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2251218687-1689653882-3767565116-1000\{9791B761-4F9B-4146-BAAF-F9821B0CB034}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1520	msedge.exe
1520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 1816	5100	msedge.exe	93
PID 5100 wrote to memory of 5444	5100	msedge.exe	94
PID 5100 wrote to memory of 1276	5100	msedge.exe	95
PID 5100 wrote to memory of 1276	5100	msedge.exe	95
PID 5100 wrote to memory of 1276	5100	msedge.exe	95
PID 5100 wrote to memory of 3464	5100	msedge.exe	96
PID 5100 wrote to memory of 3464	5100	msedge.exe	96
PID 5100 wrote to memory of 5544	5100	msedge.exe	98
PID 5100 wrote to memory of 5544	5100	msedge.exe	98
PID 5100 wrote to memory of 5544	5100	msedge.exe	98
PID 5100 wrote to memory of 6088	5100	msedge.exe	99
PID 5100 wrote to memory of 6088	5100	msedge.exe	99
PID 5100 wrote to memory of 6088	5100	msedge.exe	99
PID 5100 wrote to memory of 3648	5100	msedge.exe	100
PID 5100 wrote to memory of 3864	5100	msedge.exe	101
PID 5100 wrote to memory of 3648	5100	msedge.exe	100
PID 5100 wrote to memory of 3648	5100	msedge.exe	100
PID 5100 wrote to memory of 3864	5100	msedge.exe	101
PID 5100 wrote to memory of 3864	5100	msedge.exe	101
PID 5100 wrote to memory of 1288	5100	msedge.exe	103
PID 5100 wrote to memory of 1288	5100	msedge.exe	103
PID 5100 wrote to memory of 4576	5100	msedge.exe	104
PID 5100 wrote to memory of 4576	5100	msedge.exe	104
PID 5100 wrote to memory of 4164	5100	msedge.exe	105
PID 5100 wrote to memory of 4164	5100	msedge.exe	105
PID 5100 wrote to memory of 3172	5100	msedge.exe	107
PID 5100 wrote to memory of 6008	5100	msedge.exe	108
PID 5100 wrote to memory of 6008	5100	msedge.exe	108
PID 5100 wrote to memory of 4784	5100	msedge.exe	111
PID 5100 wrote to memory of 4784	5100	msedge.exe	111
PID 5100 wrote to memory of 1520	5100	msedge.exe	112
PID 1520 wrote to memory of 5956	1520	msedge.exe	113
PID 1520 wrote to memory of 3396	1520	msedge.exe	114
PID 1520 wrote to memory of 6076	1520	msedge.exe	115
PID 1520 wrote to memory of 3396	1520	msedge.exe	114
PID 1520 wrote to memory of 3396	1520	msedge.exe	114
PID 1520 wrote to memory of 3788	1520	msedge.exe	116
PID 1520 wrote to memory of 3788	1520	msedge.exe	116
PID 1520 wrote to memory of 4072	1520	msedge.exe	119
PID 1520 wrote to memory of 5052	1520	msedge.exe	120
PID 1520 wrote to memory of 4104	1520	msedge.exe	121
PID 1520 wrote to memory of 4236	1520	msedge.exe	122
PID 1520 wrote to memory of 4868	1520	msedge.exe	125
PID 1520 wrote to memory of 4868	1520	msedge.exe	125
PID 1520 wrote to memory of 988	1520	msedge.exe	126
PID 1520 wrote to memory of 988	1520	msedge.exe	126
PID 1520 wrote to memory of 5328	1520	msedge.exe	127
PID 1520 wrote to memory of 5328	1520	msedge.exe	127

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\alle-programme-oeffnen(1).bat"
1⤵
- Executes a command shell one-liner
PID:4228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\DenyMove.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2c8,0x300,0x7ff9323bc188,0x7ff9323bc194,0x7ff9323bc1a0
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,17158469373628375072,14164980194679070538,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1920,i,3119387446010747603,9683403856030612578,262144 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,12890569860847666575,4334002132346299514,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:13
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,36353720594281048,15568206494962063943,2097152 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,4560633688009185107,4923534067464159814,2097152 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,17260842042187351730,13591016356502002051,2097152 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,18073962689881873557,8000631692195653047,2097152 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,8053856853260860424,7195552657563267317,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,18257290919751990299,13516304414775634040,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,1799627352041061810,9409520840247557378,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,2149223705710488273,12990955796369985106,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,2149223705710488273,12990955796369985106,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,11297255056686920292,8370763325615928047,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,10954058769286485435,6213824476427297956,524288 --field-trial-handle=2348,i,283256508755530807,12294774331600165642,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff9323bc188,0x7ff9323bc194,0x7ff9323bc1a0
    3⤵
    PID:5956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,15396843923269536654,311702242512024247,262144 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
    3⤵
    PID:3396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,11079445341812418867,1844382114025451392,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
    3⤵
    - System Time Discovery
    PID:6076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,13694917413070771484,12084420758007100849,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:13
    3⤵
    PID:3788
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5931985311944564493,5437111455278373927,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
    3⤵
    PID:5104
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5931985311944564493,5437111455278373927,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
    3⤵
    PID:4072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,6160127824943913408,11101715229434969559,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:5052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,12386412811354269789,8029081238079803371,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,1073623900000558550,1222068846422267215,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15355228841265620480,6380600717587543501,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:4868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,2527157955766020198,15878481680322538016,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,1939632029354179251,643020675773649115,524288 --field-trial-handle=2292,i,11951960323578550969,13255554710157487256,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
    3⤵
    PID:5328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4188

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ae4519203ea4a71f8bb5a86dffca3b288f02f1bf4cb8d6f78e8a591b676414b1
MD5 1293a304484c7d4be275f1eb20c69a28
SHA1 b568174debe43e00bc9d8880e0c5166dc6720312
SHA512 ffd84ca0277d7fb25239662676bdc1988ee3267dfd6a7a17da4c4ab32edd7fa146f36c8d8b2c5f1b06efedf5cf636eaa55943e5f89902c62e6a914ebbc3ae1b7
TLSH
T143D02BB1E0DD8473C0503078000581815215F842BEC555801F25D07C091014C234B10C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9da7eb4878a6027aba4b99a96529081310463f7258d2bd96a8f30d8970da7a75
MD5 a42ff7872fc07a0650237993c7e95026
SHA1 98112e42e8b72d035e5a5c2c6ca5030660baaac9
SHA512 3e34a04c7cdecefb5d52748ec84b5727ed1e0e6853c72b0c477d36c455b33ca7640f89f0acbc0718e8e561575f84854c2bfaee664dee6d5e1c42345d1a974b63
TLSH
T1BCD0C050C4EC56F0E030303C03204201724CCA93BB8331065B6081BC0D31186029BCB8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c8c3aced0e5579810b7773ebbdcd5084df989b4ab2c9b9ebd48eb8ff676abd7e
MD5 f1a8ea3f5b452b549d71ffe67b88fead
SHA1 797fba65685044e2ede0e2625c44fad7a9fa91e0
SHA512 bfea5fed9065b002c292b461e30b8bfcef8aec6c9658a0678796168a4efb5990d3ca5804949e3ad43797f7c79f8252b3fb3a3e9ef67fc4205448861dc7129814
TLSH
T194D080D4E0E84574D021347C21159241B28CDB91BD537445EA61E17C3627655135A0B4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a23025f4d05b749cd64019222483e40f71e2bd4380052e2b64a234eb0323dd12
MD5 f2999f57642ce17248d9900b8034961f
SHA1 5a92b97bdc3c0e5222e917e766218a9ee7568f1f
SHA512 001c4dde433f6d4b3121bd2e5736ab1443818c9c8ef22f8298c411039f23f15532e8510ef806e0f54b26c4ef31db9b77ed6c750a42b27167e98f8b691edafe8f
TLSH
T1F4D02BB1E0ED8473C050307C000681815205F8426AC555801F25D07C091014C234B108
MD5 SHA1 SHA512 TLSH

Submit Download

98fcefa9-05e9-4c7a-bc4c-2d162898b3cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98fcefa9-05e9-4c7a-bc4c-2d162898b3cd.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 91e1c67374225f8c5f8b4dc50ea67c2e46c13bdb7a8da1e363992da998554650
MD5 9047df3eafba91603e4a28f7a511e230
SHA1 e7fca597bd4850b01dafdfeb9fe9e933442cfc42
SHA512 4cdcedd42066c7bc138f827c142cac7446f3f0f911987660f198426fc951ca60ef304945cebaa61de94cfd3641c5379f7c5f6b4cf691e3b35ffd18defd9845bd
TLSH
T117E02BF9CD20EC7708FD4719A0950646F70803172A42498F763C91088FB0B36868AC6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a87d4bfd58f02a675e90f875b37dc1f19ebd51499edbecf4d67981306f252087
MD5 cb15ca2bf8f38eed299c754636f73ee3
SHA1 38c30b56764e0e456a64490671e727c491da81f8
SHA512 c46e905c5a5f755e3a59f5f501965bf368cbbebb8149eda09f686c09f1cccb3085c10e0a35ed6662e1e4845bd112ca13ba96f488651e2c1109555d275ba1cf09
SSDEEP 384:D0/EaaU21DZEcEzfmxgcy02t83bUDU7RPK:D0caaU211EcEzf4gPK2URP
TLSH
T1BC135A7EA6026C12EED398BCDAB31BB22F76B974C6E041B326F9F50813E5B041C0E011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 7b685d0d52cf7369fa511c162f1fd40f0fee7ba6cc142d959ce7ed3fe02f4dc5
MD5 5413fb5539bfee21f0f68312e1def57f
SHA1 b75c42ed10b4a3d99a0320c8ba6569a72310e231
SHA512 9c4295deb5866ea055deeddc5b2f7d3ed93fa764d0983ed6f8cb45f256492a27102d74462ef3ee59037f35b4793cd274af3234ad7398d9e59c320644c8d06459
SSDEEP 768:OMq7NXo0h/zL/Kbl0L/XcOntJFVVbFOqUYTxWpzosGWoNPareiRlYSw1CO4od:OM8h/zL/KbeL/XRJKqNWfEZiRlY
TLSH
T169445FFB1951A01BDFA852F5E2033F3DC5B7451E7CD1E8A9E1B88C852825F31B2B9A44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 bf35dbb56b912c03df15d2d81f1ba1125ac6043c091c63cbf5b770be252d7eea
MD5 cb4042c08a12f418c384f4d364f8d0d4
SHA1 eb0be0f300c01021fa28bc9330ba1051efeefbe8
SHA512 859ba2a54229120cd19205a71a0007ed93e7381f2c22fc022d2678f452af2ab98a70c38c4453ee9d03cf73b9f2caf9be4fc1f05d6861cd455d855f1a8e4d13e3
SSDEEP 12288:fi9TuZ5BEMZxiCr2MIp+FXx1gCvcgLj4KgRFU2TViwD1pOGz5XwWcQ2Q55S+AAIl:twIID+8XLCRmMS/Ln5dRKVXESfG
TLSH
T1E1166CEDCA7858C3DD629A30B4F0ED477C7413C3F965C1D68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 17505fdfac236c6b4bc38d68ee79a5daa49826f12330ca44a75fcac2ad1a1bb1
MD5 81c30acf6f0bce8b8657a6b01c7af3db
SHA1 9596c833560f3bf35e85b7e6061cf7ddf9910c43
SHA512 9d4d7e3a9f483e4587a27ad917f94caf7bdc8c44e001e6e03c7d985efea80a99f4661fb221be23f64084f267b7609ec8764e6ddf082990313d57f5602cd2bc44
TLSH
T13A514F85A2B880B5EFA84476E7F216A73A74FB7D58C31E720F94DC7A87E63CB0104144
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 70176d5017d187d5bd7d6c189195d27ae3cb819f792de36ed5eda93293ba0995
MD5 7e516e7ca5c0aad4fc7828b296118ce1
SHA1 c948f6d4035d2f93572ac5de15f81c5e32757a6b
SHA512 ec68f87fd10c6669b30c845103e794519bd16ac77e8e05d252dbba4dc272c8e3a822c27252d65b519e88940600c2123e354cb929a51f10534f0c557a79578e91
TLSH
T180E0D896B5DBC21D952C34C351B46B4D91913962D7C96E035700CCC0FB42409BE85AC7
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 e623aa583bca1c2bfb0d20f0a83761a3f912512f2644a8513b8a164b5bb15dfa
MD5 8d2656f5c37e67ce63b041939327ddcf
SHA1 90298231ca4ef69d6b29707560a9efb41be50676
SHA512 5c7157a7a7a46d07306160dd10e6aa9c2d3dc65a9f215607b428f25935814d57add0ea970a6255617f5c4db011da5fea71f377bed9b8b1d477b24ce7c646d299
TLSH
T139E0260449CAC32AE31C69D786697B0883DC3992A3CC3E02170B8844F949B4DE28A7C1
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 a9906cc5709ef5de07f03107c6af7ee492450a107b28b609abe90de6566cfd57
MD5 eeae5b452d449ecdc1dc0db8068b5977
SHA1 5e3eb164f363cdf3e4628042e1d2f937c0f26d4d
SHA512 e57a2b212179db01316d3bcab3ec8b01061c1f1226f71429410b03bdd1cc98b4fc808e4ba6b1df95d7fd084404144bfc5798aab515ac733c424e2557dc24f08b
SSDEEP 96:rmOWotejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/hoDbbEOVpZf24JkMfXSFR+Cw:rFWnH+bF+UI3iWGVoWN3qL/eVVV63
TLSH
T1E724014E5F352722CDBD913668E744A35C7DF03F8B1326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 4dcf086735121450b51e2c08eb283a769377992601aaf1402cb982ed2ab1210b
MD5 212f5ccc95bdfe3ea1cc1c00a4473823
SHA1 f4b879dff180eb00803341ca944214d9008b26c1
SHA512 8e1a344aa9a9d97ead429ed383ac048f782b0577805b8df3be7b5d802cf607c8a3aa121af81c0c876a4b711d3e0a66a455a3bd374adfcc5026608af5ba51dec0
TLSH
T1B9E0206585DEC21DA24E218F42197F0CD3B03907D7CD7F032B099880F481648F7866C3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 70dcf154cb48b9891a34a42e648b5d059214eddb685ff79f9c3eb52af4750da9
MD5 1126c421944d9ec7e90ff7c98606c977
SHA1 be696064e5dbd0ef60d7a75f94281a9d9f4714c2
SHA512 7b95680b3fbaa0b705f3a9d819c1661f71c69632cccc8ed513bc4df71f814bda16039644ca5876d9e8411f4b9134839cabb15dea2f47628b3d11427be677328c
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7owwHOM/BPr:qDeMatha9RAUGVj
TLSH
T10BB22E4D2F303211D0F89B76EDD185632F3C402DC3A3364AAE1460F2CEA355BFA161AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 069caf89c0c64394321cf934b491f3e35cb6d75b5911b2a75619503650eb6106
MD5 f156b32b9c6a53cd4bab9abb9f402b7b
SHA1 c2454afd4ac814e33721e0eeda05d1c2ce4838d1
SHA512 969a0587da7308911d6ed7f5e48ce582465159f35f6d57d67122211accac0418954836734149cbaf2ac534ab238754c24532fb982dc908324de9090512338f0d
TLSH
T19E51B0F3C3E8866E8D0195F0AA186E1BCE2D0915432C7D5AC8E4EF2B93E3471D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 5d263a40aba608ccc93810e015bf44b4130adb50d97c32676163265a80e20fdf
MD5 ac2621d2aa20dd05178a620b39b81bff
SHA1 1da68f23210753b7ade915e30b522b1ed561ba46
SHA512 9d226c296e1252aa53870fa4c4c12faf527f76ef1c750a0be401cb630f3cf18d724df2d59cc1dd9d09e0e680044d98df3aae633bfc1c7ae2e180c45ef28e2dea
SSDEEP 96:OIEumQv8m1ccnvS6JSx5kacf6CnFlQ9Q4g:OIEumQv8m1ccnvS6JwE
TLSH
T1BCF2EBFB17276205D99444B0E4009BCFAF1A000B47B6B7EC66D447E3F3A21E2B1B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 186B
SHA256 2363bad33197679de58c7732b4344a9b154f7bab510e3b1dbf06c31e18ce645f
MD5 c8dc60c3e778277f5691d48aa44e5c3c
SHA1 4b43e6196c94dba6dd6891233bc4f4cfe4a01b08
SHA512 5e06dcd0f26ac74d7a01f09b30f8d2b5394d550d97f3ef57f7e593a48a25f837a66338c18f12fea254b77e6ddc5ae6004a1e4c153d468f1cc2fdad970ef7bc1d
TLSH
T155C0222691F8E03250244879498C68C2667AC830144040A0C8E6C37C70E00BB5B1203A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 692d38357273ac37f4e3d84483be14ccf1c659e2943e680696b37d00e94edc69
MD5 7ca8eb90c3c75783a875f33d91f24d21
SHA1 336c78233a3be0e26151a2634305104934d451fd
SHA512 7ee81e600f9f018cd1991c5ae869df33142c87a0e6960f091b61b5f092a5e495e75d3149630b16bb7f7d9470825a5de60fc9bb248701711d86a790dccb4b3f0d
SSDEEP 192:sxRcR4Cr/f9sXWpVRAfZIT2ffmzoA8p4l/g6+WNIYJacrrgyIgVRJ:sxRcRr/f9sXWvRABI+bU/5IM1
TLSH
T14542A515AD68A87B8CDBE21DBB657F13E6FD1032A0911E48E6FC8A1C04E76DD520384F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8142a80403350bcf6d838d4e17920ddf8b981eadc63284ba224e096fb4ae242a
MD5 4c84969912f241c188c45347bf5e31c8
SHA1 d14170909aa539fcda1f755788ea0e37189adb47
SHA512 7aecff9df2c47c192f1ac7a636d23bc2427d51e73ca97cc1ad2fcf6ad100c7bb4bb37ea1323cb75c354abe48f5f4cc45bb69c84c88733eb9d68511c9251bb060
SSDEEP 192:sxRcR4Cr/f9sfWpVRQfZIT2foV8mzoA8p4l/g6+WNIYJacrnGyIgVRJ:sxRcRr/f9sfWvRQBIPV8bU/5IC1
TLSH
T1D342C715AD28A87B4CDBE21DBA557F13D6FD1032A0915E48E6FC8A1C04EB6DD6207C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a9d71652d618ec61b35eef51453b19b8d883ca54f5d5979a4b5bf58d142ccb7e
MD5 c5b7e755bfd1c9765d1b72c049747350
SHA1 3d1f4ac67121e1e2f287de961994f46ab2846ff4
SHA512 7d8be12cffc069cb2782ff6c4be72312503b9de09814228c5b83b8146262a97ce6bbd0bd9f37cd925bfd58421315bd49fc3a73b300ae9d4acdd18358c889c6dd
SSDEEP 192:sxRcR4Cr/f9sfWpVYQfZIT2foV8mzoA8p4l/g6+WNIYJacinGyIgvbuJ:sxRcRr/f9sfWvYQBIPV8bU/5Izz6
TLSH
T18952D755A928A87B8CDBE21DBB557F13E6FD103260911E48E6FC8A1C04EB6DD6203C4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 49afe0a23a11673e8523bf3d791aa479ea475067d4549e6c54181676523dea45
MD5 4791d7cb0d2c1ff9aad7a5df47c6db6c
SHA1 af70fb02aff5fa654d3cc7808a550e25324f943b
SHA512 717fe95768d368f09e295ad3a90d42aea37cdd7c5beb91372ddcd32d178b0ad70d3a9f30730614c0be90ef1fbe90464bc7757064bcce19e58b3bf9555cc8fdb3
SSDEEP 192:sxRfRUCr/f9sgAfZIT2ffmzoA8p4l/g6+WNIYlac+EGyIgVRJ:sxRfNr/f9sgABI+bU/5I81
TLSH
T1BA32B655AE28A83B4CCBE21DBA557F13E6FD5032A0D11A48F6FC8A1C04E76DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 d36b10c715ba996df8a11f16e4f5e6e5e4765608d588dc66abff514fced01ffe
MD5 cea76c17fde1599a2e1dd2f355ffec82
SHA1 855100ec76b385bf50e0faccddb57bebb80361a3
SHA512 4ea5822d889b25cec05ae86da669835aa09fffdf32ff7d7bc4a79f23669e91c23c1e24a431a0713b7157ef21a02d9066e1266fe8a6dbe99d9470e693aa7e62c7
SSDEEP 768:ksRdaG7pLuLb0JWgSwffT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvS+2+gHroe20iY:ksRdamEb0JWgSwffTu1jakS+rgUe27H4
TLSH
T1D2D2D87B640CCB7E4F804ADD9C197E9F6DAC02CB9698CD8047FE841C02C6BEA91164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 3cd5dc165ef2c7775643450b4e58f45088a14b4342b8edd91215e863fbcebf4f
MD5 c7af72ce3fdb94bb8e9941fc1673dc4d
SHA1 7a04817298965cfb99db93c99d1c255c399cefc6
SHA512 ed6200aadbd2520ced1ec830d84ba4656fbe8d17f6a2db84cbe4607681490a4124b6ee0f7e9c946e48185577d091a95dcece7605c002f1bfef8a6b999aa19364
TLSH
T1A3E0865086DBC27DA41D218707A5B708D3E4792BD7CD3E062F49C984E5C2B48F59A2D6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 88487a94f379729445f71cf4804f51dbefaf5a95c85bb57f9877e0964050971d
MD5 f69846bf5c869db71bdf8bbb362c286f
SHA1 1a2ef51c7932261ccfa5ed2d94824d14ec593bcd
SHA512 8daeefeabbe61db4b33c7d6c7e5f40255c70ecfa96260a2a83e46fc93f4b09b9dbd1f392ba1036f0de133aab0992e54ee51c7ed656d40ed34d1ba12947f1eae4
TLSH
T1A3E0D82066DBC32EA14D30D74315F708C2A37923D7CC3E192B09D488E246A48B247281
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 d87e611d0661fad5a7ae139dd5138c4178a42be3bd716c766be5ea7119ff85e2
MD5 3b8c9bdc4f5e3d4a9e2098543d5356d2
SHA1 09864d5ef304db4ef053f68d97593969c96be442
SHA512 c0176426ba32bf1380a094b39eeb96402b506d2fd30ec777bdb4d866166dc79ba4297f4471d31387d5aef2596cb3a522219cfd95c449fe5ef00b1bb5cdd6cbdf
TLSH
T1F4E04FB186DAE339910970C2436ABB1AC2A17E5697C83E46570CC844E541A58BAAA6C1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5f4f6395f3e573e1dc10c9375442284ac5452c1487074e5a83c86e182fbf374a
MD5 e8c6f443b4f95f40ccf504294c9ff136
SHA1 ce561d24c1944ed2dc0163c035cc8cd1344d35de
SHA512 7c043202fcbc7c0317d701de2d8dfb193cae0afb1e88f10035191347b8824bd78b41cda2eba2e610d5169ed3a842f7d326991935a19c49bdae813caf6ceb01bb
SSDEEP 48:K0dcRtfLPwbD2jISlwK9l1Hwx1gYmnddyLNsh9P7/gbTmzIS1gK911XgxlwY23B0:KMGEKLa2KmoKHKonmKks7C
TLSH
T106911F12B57B068038BD29488169D71F124232B67159FA6F7FBE10B74B6AE080DFD5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c3e7e16b65cee31d2efe66d5495915203db21acb7f0ca27db31613ad8b002ed0
MD5 16286575beebef26fc7c93b80c5735b2
SHA1 b3a98f9ffdada589d9ddeebfc9faecaaafd44206
SHA512 110911330168f8d75084c6bb95f728e3c9fdc3302c1f1fbc300bb7ffb8c4abd9b3c9e86af4c40dea2ced96ac8cb944c5d12ad0609e5bfaa8cbcb22a1a2652c75
SSDEEP 48:K0dcRtfLPwbD2jISlwK9l1Hwx1gYmnddyLNsh9P7/gbTmzIS1gK911XgxlwY23BL:KMGEKLa2KmoKHKonmKks7OzeK0IK
TLSH
T1D6B12F12B17B068038BD29488169D72F125232B6711DFE6B7FBA10B74F6AE081DFD5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 0bfd5ccdeccee94bdb6eb0bdb6353c20ef4cd5cafea7ed3b36775c587983ae39
MD5 feeb25ad5f06ac609d49d07a5d890d7f
SHA1 7603ead18347990fd4bde6c324373e84263d0e8f
SHA512 d933f36485dd07780d068e75258870bad9f2b7f9839fe97e3677ec63bac39a1ce378765b4e1b253942cf7251be762f202eb6ce8c62ae6a01f6547e41072e5940
SSDEEP 384:DNrRZyCSDnxTIC15yOMEhIKyll7svbFKfk7:xFZJSDniSsPyI1l7svbF9
TLSH
T14044740A7B747001EDE7D9721CB080771E3CB16D8F22A6916DA254694DB7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 a151d685f0a4461462fc16533e03a44675f870b2a913814af86835fbc8e3ebb6
MD5 33c7ae4a7dbe4c1be1bece3994bd10a2
SHA1 496a90aefbd12c3510c5870b938d12d0a9e183e0
SHA512 98a734771f9fb63dc1b2b7f45ec91d8638df6a19f99a185f5983268ecc58b812efc47dfa69268f67ae122455942fa6fcf25245b7ca358cc7b5c12bb5cd86cb35
TLSH
T1DDF054C3736624C46A8DAA80C11D7A0B60943B75260EDD75337F45B94B48C1C1A7EE37
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 0821c4ddefa673a5d79f0d42f06a82fdb50f856f222dcb527c7152fad0e6d4d0
MD5 c2bbfe6b29bc0e45e11c30076615464c
SHA1 58b8ed959c10209e0353be327ff857f7f55e57a9
SHA512 1b68785dd71bc105f0de40a7f97edee4f07b40fbfb971c83e03a64ac906a801d8e822ffd3082da8525ea7ced33f3f27bc3cd39ff85df99309ead299f86dc679f
SSDEEP 192:d95QkIIIbbLMIMNsYcYeMOuo1As3l9HBusLY:d95QkIIIbbLMIM2BVuomsVWs
TLSH
T14A42935E26151F37C15E9B36137B87917BD488828172212D3352AC1F8DF3E9786D92F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 8a39b4c70861ab19a5182bb04706d23b57d2c8de33c7f05140931bff1fe43864
MD5 fd63298386d528504e5f8858582bbbbc
SHA1 9b0ac902059f8ccd5b470a4f6837639723a58a9d
SHA512 5141fc22d1a84ea289f946254b8da9393f31c9a9c03ace9d9b500d0558c8832cb36358be8555da1c041452cd7be1e482a4a97352c99d2f198cb22a3590f81728
TLSH
T11CE02624EECAC36FE41C21DB4139770D82843F1BEBDC2E062F01C448E441608FAAA2C3
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 eb6eda801a5871910daf445cddbef6d7b9756cbb7d0a512bd049614a3b0a1ad4
MD5 a1a0922e81a0fec1baa9b44bff60d64f
SHA1 7227294d402f3427b0195c3132e8c4d3390e7d80
SHA512 77f1f31aba18b2e33069b67e564fbcd7acb51ac5753d33a4a087f80ea119353a8686e676d9257a5086104af763e411e07708bc906fbfdc214dc356465b0c666e
TLSH
T182212B55F330C548E14E827A603E87251378E9538FBCED0F447931382E72B081E876E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 72a5e16a25b5ea50c31947baf90799cb6e10fecd5abf68360b28da490804acd7
MD5 ffc1c0cdd3868f47e3c853b3a3c81c6a
SHA1 ce628d14453f143708f0771ae34fd10435c80b39
SHA512 751d57611f91a4d95e5090c08a47eea5d5ad8abbc227b99a47c1fa1be1dd387c17cdc82e976e7c9f561c630e0d04105da483ac2678e51dcd6120ef88fd48e9d2
TLSH
T164E0D820A5C5C35F901C20C70275B74982D63E17EBD82F016F018848D941645BA5A283
MD5 SHA1 SHA512 TLSH

Submit Download

4adc3aa4-ab7d-4ce9-8bdf-364cc26c2b8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4adc3aa4-ab7d-4ce9-8bdf-364cc26c2b8e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 c20909e3486282cfc71a749a9c1991392155e234e1135bb3aed125b65f07e93d
MD5 dce3351b4489d7cd3c1da2578444eb57
SHA1 84ea85e020e266bb6baabe72a4fe2ebb7ef75109
SHA512 c097098c93ca583ef3d0fed2b71f62c9d266e60f4aa2d7aceafe46949912fcac630e283d2cd2d589907e8d39f0b976f18e0ef925eaa3bbf6cd4878dafeb28f8c
SSDEEP 3:MsEllllkEthXllkl2zEfl6sc:/M/xT02z5s
TLSH
T1184404047FC00505F50030307051C7501374D4100511D74735F147375CC77400C50000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 038bd6398d1df89b7a16e1133a72b7e8480ab5b23be605cda2228cb95ec5812b
MD5 ca96b463941f630db988090f7a46087e
SHA1 bb045cdff00a40449d44e5fb76245868d8031911
SHA512 6992c8cfa382fe45e7f644236490af86cfe5ffe7ed4106c94854c359f018a5ba2412b574cc62abfa5d36dec9d2139f6696f4480c5ee616952c318c06d7282197
SSDEEP 3:MsEllllkEthXllkl2zEflIBKll:/M/xT02zz+
TLSH
T19C440404FFC00405D500103140D1C350D370DC11051D57533CD544335CC75400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ebfe09897b28ac9c65ad3a436a66a10813018cf001e5c45a2df741c1b2a5cda4
MD5 aa2780caf44efea10fb5e215ceae753e
SHA1 fe6bc6d3536a6796c1f70e0dfd85d0838b496664
SHA512 bc42fcaee4ac792e53f00a03e603141183833c02c67360646984520e1d69d2d095b4c633a0455c426b3c493ad894e75978d9f049477d0d1a070767377775c6f4
SSDEEP 768:do3dj3SSFaju2X9nqMwQi5BgK5/CwYcyE7kkr+jYGHgF:do3dj6T9VmBg8/dNYkajYUgF
TLSH
T1F6F2AE39DCB08DBB48BDB745A64A2706ADF49273D1A90988C3D95F0D817789CB307C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9fd51a9cdf2aabbae9f1841a411b9f3e89fa848cba1a47c19bf0832665c980e3
MD5 64d089f1988af714ee78480f3a165fd3
SHA1 1b34fe949b54bcacf60f6305a9c56800955980d0
SHA512 1dfd57fefddb06322622582b1761a215f3fde43096f9cbcf0d40d6cb735d54f5a6b8dc5a817b0e74cb2c6e7b9250664033ca6b979a5ceaf062b5be40ae8ec23e
SSDEEP 768:to3LjNSSFaju2EVnqMwQi5BgK5/CwYcZsF9+44YGHXH:to3Lj4cVmBg8/de+44YUXH
TLSH
T113038C3DDC7089BF48BDB344A24E265AAEA88277D1B50498C3D91F0DC1769ADF307C5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6c3646c55aa64f8a3d237243466160b63bfa28b93053746d4818767f3499b20d
MD5 594e02139cdcf977f1cf79db8aafefc8
SHA1 fc10de06b036586b9fcc4265e504bc1f7749e61d
SHA512 32afe7ddea2b0f87a4680facc966f3ea8d041941571872a7a00c3876c31aaf727f9a67281dc5d0cae6f38ac2e0fcc4d8880d46e76b9f689c8b1b8f6fba486ad0
SSDEEP 768:O/UxvxjgC+Ft3SlPSFaju2wnqMwQi5BgK5/CwYclBA8Dea:DZj3+Ft3SLcVmBg8/dHA8Sa
TLSH
T1B603C036ECB49E778CFA8244774A638BEFF451A3C481099489ED1E0E06979AC530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 b62c92a6e61772242bee39b4922f737258de6c5ed06873b58bb9c9a305341259
MD5 1c2245410c858020d8464f86cfba9f6d
SHA1 830ca5c65d8604f7ed74d5d9c37d1e7ac606b402
SHA512 1765f6af21ce4953a224249366dee8cbc5cf82ce7926b9c81f9941b41b3879f7ddf504df35d8ee91e6ddfd5310cd483cf4b09fdf7be386adde62e14b20bb3dc5
SSDEEP 768:B/UxvxjgC+Ft3LjhUSSFaju2EVnqMwQi5BgK5/CwYcZH4YGHtW:UZj3+Ft3LjhvcVmBg8/dF4YUtW
TLSH
T1ED03C032ECB59D7348FE9210B24667DBEFF451A3C4860CA885D95F0D4687A9D170BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 bbb265ab664a73de13b962a2d60cc9d74f7b19fd8dcacd9aa4143dc612609485
MD5 a46a18ddc01aa31ee5474500f9236d9e
SHA1 10ea740c5cd802f6f99c4e7dfdfe9075c075fdfa
SHA512 d6e25299dbb57318aec8489181abd740c221d755a40278282874dad09891b7ee178c8e4eb549e29041f3444e6b45283a96e6ac3c2c555b1d58326a0040425b6c
SSDEEP 768:Wo3dj3SSFaju2EAnqMwQi5BgK5/CwYcyX4YGHgF:Wo3dj6RVmBg8/ds4YUgF
TLSH
T1EFF2BF31ECB5CDB348FD9241F282778AAFF461A3D4990988C4D99F0D41979AD270BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 54KB
SHA256 83fff894d42a0d45751e04b9038b468c0338966f7bb9e75a222b8957ccabd488
MD5 fd6fc5bb3bd60821c4b20e25ac1f2930
SHA1 b417392b6f33178a8265dc46550987b5cfcc919b
SHA512 b8cb9d208c9772222ca5863e42cfcf2271b182c5ee1c69e1b6bfefbf1bffeeaced313db0d24c52186523c08bfdd03cc3063c2dd507b5aad67da30a108fb12df8
SSDEEP 768:oF2o36wg2j3Sl4nqMwQi5BgK5/CwYcjFapPe/V5rRxe29+Q+C7S9k9mSpE7kkr+f:3o3TjZVmBg8/djQuPz17SmmrYkaOYUgF
TLSH
T1AC43AE3ADCA0CABF18FD6B81E64A3A1A9DF49263C5B848D4E7D82F0D41A74DC5307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 eab0486d95acce9d8ab3d1cd8dfc913a8e9ff3e60f31b87067fb6cd00b928399
MD5 a1ffa3d6d339dff14032e0cefd2b2187
SHA1 19c4437b0eeeff62a4bccc789ef420106652a746
SHA512 468c7c868cb4742bc6e0ab47290e0d1d3f3ae1aa0d692414cc68f41b653b2e564543a5ce67a1da4487fc1b0da5c8a3b8882abba56648fe301f12faa3d17093d8
SSDEEP 3:MsEllllkEthXllkl2zEfl1:/M/xT02z
TLSH
T11D4404047FC00445D500103054D1C7D01370D410551157C374D144735CC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 f35a4f569a8d6e9a53c7abbb2fdca981cdaaf4108e2934925648d90000b72a42
MD5 29f0806ef1eab44a9cac51d6178104b2
SHA1 da9a041647bf896631ff9a3a1470aec96da1eeb0
SHA512 02d7f20c525765b0a77f7738b19fedba3472edd6c259dff60db5beb1f82ebbef1c72f48fa68ede5aaf452b953f8d1b959494e48c37cde60ada7cef9e322eec56
SSDEEP 24:TLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/sufL:To/IHRH34kWqB1kQnjhHmr6ITmUuL
TLSH
T14C23896EDA2CB9A1FEE40B3DD7D1D4127B36AA0EC2E4D9F1099B406746C540405EB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 1092b503d711898d33c35080fcd56515a973932192907524f4ec6089072a1188
MD5 a8cf55bfa9b9a4188835b917e1932e7c
SHA1 0347fe77d831ec2ff360e9da7a0ce7168f458f78
SHA512 bbf3945b0def201efc817bc133510ea9c224de9c302990d1560df8450476299d87cce5cc6e9c4b1b5ec9aae76d55dc8a72270c654aaa372a7de5848da252bf5b
SSDEEP 24:D0ZsqOPf0RqLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/:LUqo/IHRH34kWqB1kQnjhHmr6ITmUI
TLSH
T15342896EDA2CAAA2FEE00B3ED7D1E0127B35A60EC2E4D9F1095B505747C444405DB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5100_943471245\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download