78d27f83b8a929018a91fc971a78e06a2ce932fbe1e74eeb1a16d71c47b21ff1

Analysis

user interaction
yes
max time kernel
150s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 13:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
skeet.exe
Size 6.9MB
Sample261001-q6e4eaygpc
SHA256 78d27f83b8a929018a91fc971a78e06a2ce932fbe1e74eeb1a16d71c47b21ff1
MD5 a85c0fb6b1accb42f3bceba66b505d61
SHA1 3c1df1562d1872da0eb763134850ebebf74efa58
SHA512 8a4e30f292a10724a8758b41eebb2ef0a4e151c7de7205e74b3aa8a5207b2a427ea4263f3589c4086b81c9a0286b20ef8eea6c1ab80e0d6d7f8f53e1d56d5c04
SSDEEP 98304:KTuNIbj8TzTa8b7q7iI2loKJBjqcX9uBXDw4/V83j/:KTuN2B8/qqlvJh16DLGz/
TLSH
T1AC76BF03F79650EDD42BC47886979327E631744A0B319ADB13C46B396EA37E01F3A792
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 5 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2272	msedge.exe
5712	msedge.exe
1744	msedge.exe
3820	msedge.exe
5980	msedge.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings	skeet.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{E6706180-2F3F-4B95-95F4-8FFE45D27559}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{620221B0-C632-44CF-A5CD-5FA3BA88E7F7}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{3308FE95-120A-4F1E-825F-F9121523EF64}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{5A6D1DE2-CAF1-4577-84F9-F74A4DD87213}	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe
1940	skeet.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1940	skeet.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
5464	msedge.exe
5464	msedge.exe
5464	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
4840	msedge.exe
4840	msedge.exe
4840	msedge.exe
5464	msedge.exe
5464	msedge.exe
2216	msedge.exe
2216	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3560	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3168 wrote to memory of 4840	3168	msedge.exe	112
PID 4840 wrote to memory of 4440	4840	msedge.exe	113
PID 4840 wrote to memory of 2272	4840	msedge.exe	114
PID 4840 wrote to memory of 3236	4840	msedge.exe	115
PID 4840 wrote to memory of 3236	4840	msedge.exe	115
PID 4840 wrote to memory of 3236	4840	msedge.exe	115
PID 4840 wrote to memory of 2328	4840	msedge.exe	117
PID 4840 wrote to memory of 2328	4840	msedge.exe	117
PID 4840 wrote to memory of 2408	4840	msedge.exe	124
PID 4840 wrote to memory of 2408	4840	msedge.exe	124
PID 4840 wrote to memory of 2408	4840	msedge.exe	124
PID 4840 wrote to memory of 3460	4840	msedge.exe	119
PID 4840 wrote to memory of 3460	4840	msedge.exe	119
PID 4840 wrote to memory of 3460	4840	msedge.exe	119
PID 4840 wrote to memory of 2776	4840	msedge.exe	120
PID 4840 wrote to memory of 2776	4840	msedge.exe	120
PID 4840 wrote to memory of 2776	4840	msedge.exe	120
PID 4840 wrote to memory of 3796	4840	msedge.exe	121
PID 4840 wrote to memory of 3796	4840	msedge.exe	121
PID 4840 wrote to memory of 3796	4840	msedge.exe	121
PID 4840 wrote to memory of 2908	4840	msedge.exe	122
PID 4840 wrote to memory of 2908	4840	msedge.exe	122
PID 4840 wrote to memory of 2908	4840	msedge.exe	122
PID 4840 wrote to memory of 3416	4840	msedge.exe	123
PID 4840 wrote to memory of 3416	4840	msedge.exe	123
PID 4840 wrote to memory of 2608	4840	msedge.exe	125
PID 4840 wrote to memory of 2608	4840	msedge.exe	125
PID 4840 wrote to memory of 5196	4840	msedge.exe	128
PID 4840 wrote to memory of 5196	4840	msedge.exe	128
PID 4840 wrote to memory of 5196	4840	msedge.exe	128
PID 4840 wrote to memory of 5216	4840	msedge.exe	129
PID 4840 wrote to memory of 5224	4840	msedge.exe	130
PID 4840 wrote to memory of 5216	4840	msedge.exe	129
PID 4840 wrote to memory of 5224	4840	msedge.exe	130
PID 4840 wrote to memory of 5572	4840	msedge.exe	132
PID 5464 wrote to memory of 1596	5464	msedge.exe	134
PID 5464 wrote to memory of 5704	5464	msedge.exe	135
PID 5464 wrote to memory of 5712	5464	msedge.exe	136
PID 5464 wrote to memory of 5704	5464	msedge.exe	135
PID 5464 wrote to memory of 5704	5464	msedge.exe	135
PID 5464 wrote to memory of 5232	5464	msedge.exe	137
PID 5464 wrote to memory of 5232	5464	msedge.exe	137
PID 5464 wrote to memory of 5848	5464	msedge.exe	138
PID 5464 wrote to memory of 5856	5464	msedge.exe	139
PID 5464 wrote to memory of 5848	5464	msedge.exe	138
PID 5464 wrote to memory of 5848	5464	msedge.exe	138
PID 5464 wrote to memory of 5856	5464	msedge.exe	139
PID 5464 wrote to memory of 5856	5464	msedge.exe	139
PID 5464 wrote to memory of 372	5464	msedge.exe	141
PID 5464 wrote to memory of 372	5464	msedge.exe	141
PID 5464 wrote to memory of 372	5464	msedge.exe	141
PID 5464 wrote to memory of 2056	5464	msedge.exe	142
PID 5464 wrote to memory of 2056	5464	msedge.exe	142
PID 5464 wrote to memory of 3928	5464	msedge.exe	143
PID 5464 wrote to memory of 3928	5464	msedge.exe	143
PID 5464 wrote to memory of 2216	5464	msedge.exe	144
PID 2216 wrote to memory of 2112	2216	msedge.exe	145
PID 2216 wrote to memory of 1744	2216	msedge.exe	147
PID 2216 wrote to memory of 1900	2216	msedge.exe	148
PID 2216 wrote to memory of 4868	2216	msedge.exe	149
PID 2216 wrote to memory of 1900	2216	msedge.exe	148
PID 2216 wrote to memory of 1900	2216	msedge.exe	148
PID 2216 wrote to memory of 4868	2216	msedge.exe	149
PID 2216 wrote to memory of 3268	2216	msedge.exe	151

C:\Users\Admin\AppData\Local\Temp\skeet.exe
"C:\Users\Admin\AppData\Local\Temp\skeet.exe"
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1940

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://%22c/Program%20Files/Google/Chrome/Application/chrome.exe%22
1⤵
- Suspicious use of WriteProcessMemory
PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://%22c/Program%20Files/Google/Chrome/Application/chrome.exe%22
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffe782dc188,0x7ffe782dc194,0x7ffe782dc1a0
    3⤵
    PID:4440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,10420498525205754635,9168526956944723555,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,7901660049006013749,14123455081132477432,262144 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
    3⤵
    PID:3236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,6184746548971544901,4943865028905798013,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
    3⤵
    PID:2328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,12703774900511195598,13750405799634221293,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
    3⤵
    PID:2408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,12557862404052457923,17395190467080331184,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:3460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,16620050428026417998,10727907673418264550,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,11615624772269578780,13029574830586448461,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
    3⤵
    PID:3796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5132,i,4251190808126883215,8352755949630873235,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:1
    3⤵
    PID:2908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,11284720881107767500,2458248683978383276,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,8354304414220241403,227013489400270713,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
    3⤵
    PID:2608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5600,i,10355835277399716326,3623788042177773522,2097152 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:1
    3⤵
    PID:5196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,4092340298120376705,2223344021070898825,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,8520907234489269231,11247471706412288752,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
    3⤵
    PID:5224
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13643529022177092340,16664634207943094532,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
    3⤵
    PID:5536
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13643529022177092340,16664634207943094532,524288 --field-trial-handle=2280,i,6032691741200971607,10697413843932957843,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
    3⤵
    PID:5572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:744

C:\Windows\system32\BackgroundTaskHost.exe
"C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
1⤵
PID:2408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://%22c/Program%20Files/Google/Chrome/Application
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffe782dc188,0x7ffe782dc194,0x7ffe782dc1a0
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,18313911489105865484,18032402039426155864,262144 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,17877106656104861090,9829804978177479377,524288 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,850814917321556651,14724199605346865431,524288 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,1354790765462538741,17128600395512428207,2097152 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,4627758750486946204,6226994275056350369,2097152 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4796,i,13148525509495856757,14175078909597243363,2097152 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,14071229491306265797,3280180317495276013,524288 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,13995744515127427192,9862112059810857647,524288 --field-trial-handle=2248,i,7514463781823012010,16540978629720176152,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffe782dc188,0x7ffe782dc194,0x7ffe782dc1a0
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,17661160021313428686,1727757896288421423,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,4538834963797133044,14032318299803772426,262144 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
    3⤵
    PID:1900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,17532126696955347060,6346773903609168789,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:8
    3⤵
    PID:4868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,13147244621768328175,16862537662475728301,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
    3⤵
    PID:3268
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,17277171201262474160,12215612441199939920,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,17277171201262474160,12215612441199939920,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
    3⤵
    PID:1492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,17634479387184568617,9399261908600734212,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
    3⤵
    PID:4000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,6905301081899776323,7365245896934955673,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,16237366644330385032,14675536655602089559,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
    3⤵
    PID:5160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,9877155819097268192,17277983861806023214,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
    3⤵
    PID:3560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,1758903501936219775,4843183482970547787,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
    3⤵
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,14962396876823810522,13362271135254162344,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,17646443726477486135,12645726748160093742,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
    3⤵
    PID:6120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,12501946201264593322,939644939629357688,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,2551548854823763827,17601805388782752683,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
    3⤵
    PID:5524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4792,i,17550341847551604637,13831311454857606705,2097152 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
    3⤵
    PID:5192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5444,i,15302080449856213119,13485252851789849026,2097152 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
    3⤵
    PID:2248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,12674461202109955493,5878860612603956144,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
    3⤵
    PID:5608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,14737728429638129763,16041034307155992915,524288 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8
    3⤵
    PID:5880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4916,i,8394290334492056311,16488045768753599986,2097152 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5980,i,17997792278251005784,12459426646261426739,2097152 --field-trial-handle=2252,i,15902115469818903693,11767114622953530523,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:1
    3⤵
    PID:5864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:5516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe782dc188,0x7ffe782dc194,0x7ffe782dc1a0
      4⤵
      PID:5468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,18155492856376255238,3769982555199291147,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:3
      4⤵
      System Time Discovery
      PID:3820
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,6826766205302298397,5009214250750612693,262144 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
      4⤵
      PID:3184
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,10412835203786753740,17620492800926298068,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:8
      4⤵
      PID:4736
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,18175196246241516337,1523720297844261650,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
      4⤵
      PID:3948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,18175196246241516337,1523720297844261650,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
      4⤵
      PID:2072
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4968,i,17794287516063684187,12065478913162971242,2097152 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
      4⤵
      PID:4300
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4984,i,14791706649048635940,8777387497250606507,2097152 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
      4⤵
      PID:1308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,4580773573635394806,17879323251470848990,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
      4⤵
      PID:5844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,18237224452931892835,1185185296084190189,524288 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:8
      4⤵
      PID:5288
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5552,i,1074217247523247006,15549761707245496888,2097152 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:1
      4⤵
      PID:5604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5008,i,6824274393430518018,2857266009514883399,2097152 --field-trial-handle=2348,i,1702775593725974975,13800338231716746667,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:1
      4⤵
      PID:1564
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies registry class
      PID:6012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe782dc188,0x7ffe782dc194,0x7ffe782dc1a0
        5⤵
        
        PID:1592
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,7784127887445941393,625698599377677585,524288 --field-trial-handle=2304,i,5119160585552645302,15488904422859960770,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5980
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14365933448875370030,6978380625095265057,262144 --field-trial-handle=2304,i,5119160585552645302,15488904422859960770,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
        5⤵
        
        PID:992
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,459475870050160389,7090608596207143599,524288 --field-trial-handle=2304,i,5119160585552645302,15488904422859960770,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
        5⤵
        
        PID:5760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,6336174846827190323,3959152126473620978,524288 --field-trial-handle=2304,i,5119160585552645302,15488904422859960770,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
        5⤵
        
        PID:5008
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,6336174846827190323,3959152126473620978,524288 --field-trial-handle=2304,i,5119160585552645302,15488904422859960770,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
        5⤵
        
        PID:5084

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5940

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://%22c/Program%20Files/Google/Chrome/Application%22
1⤵
PID:5180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://%22c/Program%20Files/Google/Chrome
1⤵
PID:5548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5984

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 aafef5a7140727b2374cee79f2a61df16f9a42d1797715bbf1571cbbf92be962
MD5 0593e2f8213e4787c306104c6903dabf
SHA1 a1088860dc9fd5b54aa592dbca1753248f905fed
SHA512 55407742bdeb932f1fe381d2ace7d43e8c582ad09bf1cd12ba6e9e6c1d25443ff0f4ab85d564f2a4e7d7ce8d528f7b2b96c4fc66ad2f74612c07250f365345f2
TLSH
T148D0809894B47BF8F035313D5135450177DCDF96F603235A91454956C8501C309F1DFD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 508e72164f1a6e84f887a98daaab9638b3bd574b3b4a7d6da2b3d5375ce2e5bc
MD5 8e39d5132e02b1513b4428bacdb6271a
SHA1 cd38053b90ec680606439e7ed35f83044120387b
SHA512 87e3644c76ffd27e694cae4acfddcc2cba7a2b1b83cf6f2a867c71fe7420045c8db9752fe14a6ee28689a373b3f0ec6e7426742b5b77327cb2c458b3ab461dfb
TLSH
T1AAD09B54957135E8E0282136512549005758DF97E203139951094C55D8600C55CE1DD9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce17fc3dce65ee2fe22efa87807e958646a06c22a81f7544de984c6416ec26b1
MD5 028a9efdf0fc058b59b400c32eadf21a
SHA1 03d6dcf81224852f600f32478aba3836e58452bd
SHA512 51c234482e75c05fa3e79ad0012c24fe1b74181cd1a9a9dd194f298e3248c6355ff590678f1260e85d3ef639fe54c7423f14b9c68968c730d3904c8a39f2b3c0
TLSH
T133D09B54957175E8E0282136953549006758DFD7E2031399510D4C55C8600C55CE1DD9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5e6f88c9de2304adf6a217965977fe7b573f16e25c324a0bb36706cb4762576
MD5 a25d2adf14ce54850b3a25c240d10abf
SHA1 21f95839dd5fcefe4566f3496dfc56398c38cab0
SHA512 439e9b979b872caadf3e91ad2782daed2ee1cc1caf0cbd05f70e77c41d6d006a02787c30614e0236000c874d8c87b6501c6c92ffd2c88544381be8ffff2f8185
TLSH
T173D0809494B47AF8F035313D5136450177CCDF96F603235A91454966C8501C309F1DE9
MD5 SHA1 SHA512 TLSH

Submit Download

960707f7-b687-44f8-b762-aaae1e940a6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\960707f7-b687-44f8-b762-aaae1e940a6d.tmp
Size 414B
SHA256 1157154e195ecc20668e5f510419274dd7e2604a18e8096b92441473ee825605
MD5 ab249a063e8663a551cf62e55b159b04
SHA1 66f23ebb3f4fdaf9a582ab576df9e640f5c660dc
SHA512 36dff90f40175b25e582d79fd12c79fc2a0dd0dff89d2d2641b6b4ad7c169f5a2438c717dbdb1293b3836c34baaaa07c4f3c8896a5cd89648c13ddf2c0d3a5f2
TLSH
T1D7E068AADD31EC7B18FD4B6950544749EB1423673A41895F3A3D91088FB423B4687C9D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 93aa29734855d0dfab427e31b92c97222ccc001d6ae0e4a375b7eaa8aee2ca23
MD5 c07401e0b2ac7d214e152cc9b504caa2
SHA1 bc2a86d09e66b7d8fcb1da489a3eb0f19c809388
SHA512 d789381a9c319390dc1820af03ba8f05ceed25b591968b878179383ce63e6969c74bb5de55bf683ffe4e6e2d208a9f9d0e32fd33e4e9b44011409165c113612d
SSDEEP 192:anYhPcMtT486GOXGPxTVFXlL0FgdMqdj5bEPJgS+X7VcmgH7IXROtHM/QjXXyMyY:aYhxwhXaxTVVvd37VcJbWwtEQjSMyY
TLSH
T1BE13917C7EDD1EA6F6C36BBC126B2B7A7739C165D4C0681323B8F8054A68343598EB41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b37764ba8ca94fa622c2f95e84829044ee1b4669c51e40fd4fb8c963f6c644b9
MD5 e9fe988bd835c717e0ef30285a864d1d
SHA1 3ea23234ab9753b7cabb57247c792b1daefa4ec6
SHA512 bbb2d4ff2e47fd273060e3ec0a8f48a9fc81c26d092d111ae254cb0db0bab5c3cdba5d7c281b8b50a3cdbc7bff974b9851fc0f0d4ac6a02c34f9117075a060fe
SSDEEP 1536:WayL/UtL/Vh1Shwf8B7B1ZtPhIL/gbL/eL/Y:WbL/oL/FkVjTJIL/kL/eL/Y
TLSH
T1FF4430F70981A01BDFA852F5D2033E3DE17B455D6CD1F8E9E1788C912825B22B6BDB44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 cbb99b8dc28eb9f92b6ce18c32cd21c6412f4e266fca17a2792e0ecdad0edb27
MD5 15a128d7b6b52bddf70b25a11f24d374
SHA1 bf7fd30592cf3436ea49baaf4730a83f8ea0342a
SHA512 e8349550637a30b59390643490a726fb06de0ea2e20f699a37bdad7245f5cc02b4d0722ba346ea73b1f581a02fed3bb7a46fac93dfc81a6141548635a179ee35
SSDEEP 24576:PlxKGlWUzm5G6L83Z+8C63K6CGKvCyULSZAaU6Affhh:dxKGJm5oKEjCGKv5USZAfxh
TLSH
T107167CEDCA7858C3DD63AA30B4F0E9477C7413C3F955C1D68898C580026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4926ed7a0896cb420438554c30008ef6a597ea593d8400539ab173d14e6775bc
MD5 20426f52b4558f9476878c8319c5f3af
SHA1 5af7f576794fc0ddb9421eec05ad3be297f72ae8
SHA512 aba02642585fee00505ca2aa7eaef6ffdb3dbbfdd4441903cc0eeec0dfa1f30efada5b79fcdf7359d78d6e601b47cb794b2b8f3e3908432fe861f62038bdeab1
TLSH
T15C6151F56FA0A8D0F7F86B31A9D6048739F57981E5531D0FD064D4BD190A3B8191437E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 1e6bab663acbe373382204b9c4b09eccf1b6f31a42d82b894e81048bb8a49381
MD5 bfbf8dcd2dd86ab936e1e055ac917712
SHA1 70879485752d262348044d811d7de626cf27f640
SHA512 d1c7dc5d2fd2aed85adfdc1f4c88ac7707bd642ba396cc72eff2cd65617cc5588cd21dfd401e0780e551ce14378f16b1b2660423be6cc3881835f0931f163828
TLSH
T1EDE026A405CAC12D9158B8D703A9730CC7DB341BA2C03D4B174ECCC47A0A242A2CB691
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 ab25e18901b51c11ec5a0ce4e0ae14d0865d3c1e187e5b0f6591c5b629ab866d
MD5 a3d01f22e975a6eca890e1012ab51780
SHA1 3caaffc040149bc9b68279a1132f18a2cb8aba08
SHA512 633ff8c8e53ac3ff2d34dc9f904cb82a5d158da4158dbbf552127a17161d37f9868e97cecb368b0b3838508bdb352f6235047ed76ad2a5ca4b9ffd11c55f0177
TLSH
T1FBE0D8F04ACEC51D5308608B02AA770CC7E03417D6C46A495B05D988B886108E3956D5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 5bdea7408382c1ae69b8e0666b7814134c9eaa7dfb5e5d95b07897dbe4a5ae4c
MD5 a19483c621011862904f0dff6b5a6848
SHA1 8ab512ac187961eb9a7e7fb8861058d4054b19a3
SHA512 fb9ecce9d949e7f82eb9453d4bb11358253d447a8e6dfa6130a6e3b2ec4c9bf4d1db008cdce9109562667122ac34051de44f6cef38d79bb8b9b6c096d998c878
SSDEEP 48:TtLopFMatSaw/auUOt8BMoBYwPkJNRt3mzz/cbAwH:9eMatUaAKINXt3mPcbAA
TLSH
T1D7921F4E5F346222C0F59B76DDD4C8272F7C201DD363369A9E2420F2DDD259BF50A0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 85c2150fbd28403bc906551d87b3740e4e6b0a67a42c1b54cecb1b61d66324e6
MD5 88d4ec795e16f30b135a395669ab9fb3
SHA1 7d6b52629d095d3eb98741f944b264c2b5e3e797
SHA512 42a88f773d63f1f45b6909c0601fed9defd19a4ae83657b4f9c96611dc9240e607e931a3c51fb4ec09a152a8dd700980a097d5b3d71ce0678c2b480b8ea52d1c
TLSH
T1BA21ADF7C3E4896E890156F4AB14AE1BCE2D0A05432C3D6AC4E4AE1B93E2475D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6bb235b2892818b4338fa3e8efb6c484029372e631ea10f7d036728868a09e98
MD5 5cc2daadaaf3453c2eb5905d78cc21b3
SHA1 78b5cfac306da9ff8437131bfe41b574f54702a3
SHA512 c692448db1599c1335abb0b1357293f2fdc8aa955cc1c84f185bf09d7d8d12adb282c4963c956e7e4896f2e67f3babb2b1e0f4f9f1f9f731985116d75bd62b4a
TLSH
T12B31B0F3C3E8896E890156F0BA14BE2BCF2D0914532C3D5AC8E8AF5B93E2471D14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2ff84bc5372e10d03ae9397a3d3e6945c62e22f2cb6c44272a7d40de25804285
MD5 9c148e958e19539f354b283963525c6e
SHA1 422f5c07d75dd41b2d278cf323c051d9d244bc24
SHA512 1684081706a2c3ef45d08b34ba436a3a2a09845aaa4b323f199582c6f57944197627581cff43e170ec0cff1977e2b21d34f0d0e7fbdd20db42ca4a6305de89ff
TLSH
T19E21ADF7C3D4896E8A0196F4A614AE1BCE2D0A15431C3D5EC5E4AE2B93E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 77c75a60d439fe83a94d6d87e348fe189b3f744ce1cbaf15b1466ca12ac2a726
MD5 9d97624f742661fc92116fac44f29922
SHA1 a7b058cad57f5cfd1e9b0024dab97b3d1a495c0d
SHA512 0f6bd4804ecdbb6a55733516b37cac22671c751872831545083b0e7dfdafc156a89d05d783e16f6a0b4da4f0aa11d1a5d31100addbbf1de9c1493388eb982ebd
TLSH
T14241B0F3C7E8866EC90156F0AA14BE1BCE1D0954432C3D5EC5E4AF5B93E2471D14195E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 07378352085caee91fdca39c12ff065ea1983ff20142e777a86b20ddbbf9c63a
MD5 6c3c0980aba5a9dbf7e1723a8d413245
SHA1 d43ebf7b164b9ce8d0ce90dd2aadff64e7b3b170
SHA512 40dc93125e852b7fc7f3b711be2ed133af6d866efcc389e46cf8e60afb5c94d276f6732edc99663186dc392e877c56164253015aa46045a321414629a29551be
SSDEEP 96:OIEumQv8m1ccnvS6QEI+0asirUxf5nFXlsNO4g:OIEumQv8m1ccnvS6Q6+7
TLSH
T1F4F2CCFB07276205D99444F0E4006F8EAF16004B47B6B6EC76D447E3F3A21E2B5B979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 6aad222329a83094282e02dc0d1cf5269843f99a0bf56149cf40774931a2d650
MD5 9f5d97ac94be3cfa370242539d94695c
SHA1 078d5a1b3a09ab7a3257ddccb6a8ad6b0cc490af
SHA512 bfb5cdd2267bc87faa82e7ce913a034d959fdf5623e30462cf1ad9c442f9710562c927274e4f0105687dff2bb2698804e0c14130ee0e70428fbcec66e5d25bc1
TLSH
T1B1C0125584FDE4761035557D1D84B8817676D935004054A5D995837C70914B79B15029
MD5 SHA1 SHA512 TLSH

Submit Download

b11cf15b-be6d-4c69-a4ee-6a7a87a54560.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b11cf15b-be6d-4c69-a4ee-6a7a87a54560.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7be3e9b7478de95be582dd776cf84e66900865d6c43b065192c31eea61851ec7
MD5 051892e3659ab26bd649408a235ea8b8
SHA1 58ffcd0afbd0cc39b1caaf814570bc925315a12b
SHA512 96d5e19531d2bde3c0bc74ae3baa813ee8f4a0baf46e1884056e4efabe3330aa5457535fa617c656adfe932264a3ec740991914750af46c1f832214b923ddd0d
SSDEEP 192:sxZpRyZp/fEsnWpVtUgEdpbDHW6+WNGYe5mzIgyJ:sxZp4p/fEsnWvtUnPHbGEO
TLSH
T14B22C611AE28A47F8CC7D21DBB257F53D6F91432A1951E48AAFC952C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 474de4aefe59bb62f876cdea3e8b98ecb7f4dc6c99bfaf52e9ef2a963c95fdb3
MD5 c94f9004d51323f4ff07d7dc9edf1d36
SHA1 4aa3caf1d7fb4628a8b5ed44e9bf5f6435d52bbe
SHA512 f68f6f7f660bff0cb1e3b7ebe8e57e95af99335c217395671d857bc4c24da1a5b37e4f5e998b94773ee43dbcf8fdbed60e8f144302cdbf0af22019b02d3e3cd8
SSDEEP 192:sxZpRVZp/fEs/WpVnUgzkdpb4HW6+WNGYeEOYzIgyJ:sxZpdp/fEs/WvnUt8HbGlAO
TLSH
T1C422B511AE28A97F8CC7D21DFB657F53D6F92032A1951E48A6FC9A2C05E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ae7e1c49087f823e6360112c386d6de1d1793318d5d1866e3509fee767c5586f
MD5 6ced9b5b8b1cb1dcf79ef9fe6bedb55e
SHA1 5df5748913c8e811ee0c04e64b218d55e1d6374c
SHA512 18a1cf32a439d69f5bf42f313905b4790659d72e00d7ce7ab04530b512a6977028c326e73c253e598378941a4296119a6920302b2c5d1a8f0550ee07db594153
SSDEEP 192:sxZpRVZp/fEslWpVnLagzkdpb4HW6+WNGYe9ahZIgyJ:sxZpdp/fEslWvn2t8HbGAnO
TLSH
T12732C815AD28A87F8CC7D21DBB657F53D6F92032A1911E48AAFC991C05EB6CD230784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e45a85fd54f0d37179e23ae1fe829d318c2f511366eebe5efd8f2431b7fe14f1
MD5 5466c1ceeeccf44a8f0dce97fd396115
SHA1 476906bc6854d258ef32fb180650a6ff8d86eb7d
SHA512 bac54d254e11ae2704ba7219edd836d543861257711713eed75f0cffd480037e9a3056356748d2236a51a8663f62f495b9b4fdaf424051011a61bde1ef24c87e
SSDEEP 192:sxZpRsZp/fEsFWpVfL7b4SLgzkdpbKHW6+WNGYelajrzIgkJ:sxZpap/fEsFWvff5LtGHbGYjvo
TLSH
T16542C815AD28A87F8CC7D61DBA557F53D6FD203291811E48AAFC9A1C01EB6CE230785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3c9c4ccc700d82b70498c57011e4fe95e0c06f9321e8617b75eaf64aba95c9e8
MD5 bfb1d85e11f037c5a2034fc2de7b67c6
SHA1 8fc37ff4eaa957a0af8c1bf1bf95891738313570
SHA512 b675ff74cfcf908e1fc45283facc6634a3149cf999af319d32ac5539c70f4dfdf4e6cf9bc089b315dce033a55c656eeed06b04c0d28efaf6fe9d059440a65e31
SSDEEP 192:sxZpRVZp/fEsUWpVnLagzkdpb4HW6+WNGYe9ahZIgyJ:sxZpdp/fEsUWvn2t8HbGAnO
TLSH
T18A32C815AD28A87F8CC7D21DBB657F53D6F92032A1911E48AAFC991C05EB6CD130784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 18be70a16b1f6b3a562b966e71d09c57bef1ea1f90aa9264659632499cfbfe69
MD5 e293bc06639f3191d9704971fe2dd4ef
SHA1 5b59102662187bafa98193b0db60e0757a77932e
SHA512 e6d6a7261a624b85c49c789128d15d0af2f97b1fe94930bf2c8fa9a37e24cc137481f38b81cae9274a331976fd85386ca79728a8e569a3407e4d101316b65849
SSDEEP 192:sxZpRsZp/fEsBWpVfL7b4SLgzkdpbKHW6+WNGYelajPZIgkJ:sxZpap/fEsBWvff5LtGHbGYj9o
TLSH
T18242D815AD28A87F8CC7D61DBA557F53D6FD203290811E48AAFC9A1C01EB6DD230785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9edff8200b257aac05be194aaf7c3a9f6d8f29399abf1af8fd77998af019bc1a
MD5 26e193aa026522135ccc03003a0200d7
SHA1 6bb7a53a42e4f40668c1ec4da3add1d0c1ececf3
SHA512 043f52369f28361f8a0963044fc23ced2ac0c7a2720cabb587710c753da1e51dd13bbcabc92a8d8c415678df41f5ea244a8387b1089938ac849d97d6176a91f5
SSDEEP 192:sxZpRqZp/fEslWpVZLagzkdpblHW6+WNGYeKza2zIgkJ:sxZpQp/fEslWvZ2t5HbG3ao
TLSH
T1C042C815AD28A87F8CC7D61DBB657F53D6F92032A1911E48AAFC9A1C01E76CD230784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c9e03889bbc6bdd7aacf4a053e304a6a7aa0e11c32cf364a1d9fe686e8bd8ce1
MD5 8e47fd8c003c1cf3f8bd6e736969dd20
SHA1 16b801f02f15bee7c58716e7d17fabb71fc7213c
SHA512 5e88154009d622b6f779b8dd92d2cf048f84a2429f3da81010293be2801a1b2bb12697f637abc478ea714705f3964d79629f878caf72d7ddec757f408ec15c5a
SSDEEP 192:sxZpRqZp/fEsFWpVfL7b4SLgzkdpbKHW6+WNGYedzazZIgkJ:sxZpQp/fEsFWvff5LtGHbGcBo
TLSH
T1B742D815AD28A87F8CC7D61DBA557F53D6FD203291811E48AAFC9A1C01EB6CE230785F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f018d5192a6211cf3955cd9e537e08727bf54944d4f3e2be663ae90f312a55a0
MD5 4edd9e1d2f91f4c2177b6384e2987333
SHA1 56af07eac5a2725019459bdda5b90fefe675194e
SHA512 af92d4558caf343edcb25585974ca504d808f7b9f8824f56fa72cc9ef3e932c596a12807051fb0d6ff3347d954998ca661c81a618c7efef9243f111bc649655a
SSDEEP 768:L1+yQRMrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVwKLlRXH3KCrojZEM:L1+yQRMrWvvlpZu1jafKLf33KZjZEM
TLSH
T11CC2E93B640CCB7E4FC01E9DDC6A6F972EA802D756588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 4c6e1a5aefc1b09d23afe36349c90ced57274232cf3d71e7b653eb28cb5c95b0
MD5 a2dc62d73ecc787efdbaa3e29bfb48d6
SHA1 e8a2439de03bfccce166eebd276408b83c192c00
SHA512 aaa5c3fb61cba0a84ade10eb5ffe3f961f0ffcf2ac406e0a297c5116137ac6ace801d1fcae3e0f0717e0fd318befe4f59214fc23a05b6bbe116cee960434ab22
TLSH
T1C9E026A406CAD13D613920C306B5B34CCBE9B427D2C4BD0A2F81CE886947A84B5AA190
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 697B
SHA256 7deb76ee4b225eb646d590ca77fc438e97f68f4bbd0b41dc0cec9ab1abb74d4e
MD5 0677de8cdf50d7bc9af8363a50c14431
SHA1 5b525f52a08f94b42650446e4b4ce34312e49d4b
SHA512 41b8f9bab9f90624faf93b19a185298c5f02c64f0363caf7cdbf04f8aef239e947349a90fdcc79a460cb87d52f48fea3dbc3458110ed8f00ebfb6ae33a3c168c
TLSH
T1E6012DE75914941ADF5D43F01C4077F89BB685EC068A8EC38A2DD54B1E53331391AC66
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 319B
SHA256 9a25546060734a202e88bb274985ab4639a890c713cb3ea8116633ec2670081b
MD5 89f3b6d2909941f660576a97083dd0ad
SHA1 49ab0223aa26c9c8c1647486bcd7c5706c64652a
SHA512 49a3aa67acbd6cfcd84c527a74dd836218e7106f3c2dc23230f7b29331b59999d2fef3bdc83b00a5c72dcb3c77890a6ed42a7bd7037db25ee2cd552f473851a1
TLSH
T171E026B409CAC12D939865D702BA730CC3ED3417E3D83D0A5B06C4846A0A105F3821A5
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13435336435191345

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13435336435191345
Size 1KB
SHA256 2edbcef9c38a4d81484e9857cec784e607e2c7e252af4e7e8e6964cc2504138e
MD5 b773c53503524cf3017a0ea83d76605c
SHA1 87886415be04a51c3cd47d09ecad2845e0602f6c
SHA512 ce84bcc0909ede8dda13e3b80d18df9e1371e6955a995c104db19cfc1d8311575f8c120fd7ae88190ed0cf6767ab54ff072676b0b30ad8922ba78d9f21984974
TLSH
T1C2217A46ACA18479E4BB983EA4E761BA2F32AD15958D4D0F6014B2150AB3701DE98B9C
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13435336435571112

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13435336435571112
Size 1KB
SHA256 825d693b2c0b396073aec82d02319dadcb1df8e6cc3489799a2e3e31bc466273
MD5 f150145362936f2622cff5ca58a01fea
SHA1 349037bb9a29bf004b820474015bd824df06d8b7
SHA512 4d4a7b0aa117cda11d6b6b0108f2c4b75f1f8ea1074d5660f5cf9dbb407e7b4e76bbc44d46775a3125bf4adfff333bc053dca67da8ff8db9206c9337c7b37007
TLSH
T19E114C99ADE0017EE97B893ED5B311B16E76FD2595810E0F102492040C32B0BFE26ED9
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 b701b3549bdcc057932ae6a23cfcb40b3e9eed2d69221414f5e7e392417ce5da
MD5 5a1fc647466769bf3df1f319dd4ce4c9
SHA1 756cca64964f6726ffad6c52243c767170a9b2c9
SHA512 fa6e158dc2aa752c1bf26416fa362b60a3e0aad70d68c5799f6deb70238eabb6bd70cb103c8245b34376612f235df84bded9c99d779d271340a5606738b18ee1
TLSH
T109B012907B004605C9C81D7542404BA4B304E0032098C913C978CF310F083ED2F43CAA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 91b41ec62c9923da1b10670f6881e93f93074785af281ce34c97ae69ebb6f3a4
MD5 3209d8a1515e4649c24da6022ed88145
SHA1 509896797c5b3c51ed372832c9c704996aa2913a
SHA512 16409ca0880326db35a9d6b4968f74ae7a0ff3d72ea1c2e35cc3bfb75533e504d7b7da381a2077699da5af1daa53a87d54006dbfb1ccb83b540deb7953c1ca5f
TLSH
T1D9E092B417CAC62E6249A0970255F34CC3E3B41BD6D5B92A2B09EDC8760A2407283151
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 6ff6ad826508610c0fcb1e87ed8ed2bccbdfb0f9ada2106990bd76e527c4ed68
MD5 b864fe65f4e37ff640dba02266057f38
SHA1 6b25a320c8289f34eac03c219bee66cee657ec47
SHA512 2e69f7c4c52d2c2c61b560ac0dff59b6d5b0cd881ce93bce491e8a4a8b93fbe41b014f50bdaec8c866fe2743e956c6c471247c05bddf1ff4eea2dce017c62a62
TLSH
T127E026BC46CEC63D6A0860C302A8B70CC3F0B85793C0BB0E5708CC88A90A204B2A6190
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 109771943c641cc2783f9e5573416568060bb7214108b031039c3e4305af5831
MD5 f9d19c31fb8e0e5237ade00a188a3158
SHA1 d8739833533a56fd3519f8919c45a9ca4bb626f9
SHA512 afed003ecac880c54e7aa3eb926c721d12be957f828e7ed98efa7f09d201150c72571c52c0b424eee334d2f463da07e4f01763d465877e2b22a622ff5abc549b
SSDEEP 48:K03pYl5jn7UbHCfISRUK9R17Ux5EYCDZJyLAPGKQ6uvbG9mISivK9+1Evx4/YF2b:KU2wKrCee/yK8YDzCK44CP
TLSH
T1FE916100717B1250387E295841A4A6DE928631B3716CF92FBBFC54A94E6FE084CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 53d272b23413a77938e0357b3f5f93d43272c275df29cfc5bb1163ad3131bf9d
MD5 af00ab9e3a67b48f89c7d4984de4da49
SHA1 54fd979864ca0d24ea11070038f7af419d75a951
SHA512 fce7edca15888493bbec0281c828ae866243310e0e41ca87311154532cbd4165f40d34941f6d81824729f228d095c443abfd2a719597e41702031198789b9be2
SSDEEP 192:/+5WYrMfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:W5MfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1BD24630A7B746001EDE6E9725CB080771A3CB16DCF22A6915DB254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 88KB
SHA256 8324c6ff91d432bf757f7101c8960013fc9dac157ec73e26abdcf1a25cb2d5b4
MD5 4b05d16596c5ccd711aa200c365d904d
SHA1 0a2678176e16d98efb2e5e0b7d3ad7ca2ecb7a22
SHA512 fe400a36d7be029aca5d6cb75ff98a7e8f08dedcaa6135457542ffc49960bb7d8f29edc799fc4219d3a47425f6c2c4befdb84ec8097f0d017377d3840dee8ace
SSDEEP 768:kkAL8TOzj1y2AWU2dbCZOG42OnSJkRXxtX1p8VsthtjHZ7ZVEI3SUEuyROXHRyNB:/SjFGoZF9y4HDC+c+S
TLSH
T1C793DCF7AC0AB1AAC9CD96B8D41BFF46557306218620C8F5AE7C08C33B79A033D755A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 8318a677cf0646da3d4df291840b53eb95f6c09a05e3abdb93070cab9e6dcd7f
MD5 17d3081364b8036066a9de8ce31e5455
SHA1 729e2bb97173e7ca76bd26dafd3f89e02994d154
SHA512 ad32c99e9379e4c1f2171362fa2c0d7135527d798b091c1c924b6803df91fd43f2e2caee228326adfdb8080dce7746c54915fbe63fa6094e70ac61e18591055c
SSDEEP 192:P95QkIIIbbLMIMNsYcYOF9eczOTO5tdAsdllrNNCsdP4:P95QkIIIbbLMIM2BQyqs9es
TLSH
T1F242742E16092B73D19E5F7A235B8A585AD8488101F3A12C71532C0F8DF3E9783D56F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 bb87c20b77f27a8a0a82bcfe78f01594aaa663aa2f9189342fb02586004504d4
MD5 c70fd3a91d861686e137011b5a76fd5a
SHA1 47bd66ba0db430ab22e4f99a7bf7cc43ef75765a
SHA512 c8493ab1a364dbf81e7917939b25238e4e8ca6a172606e3bb00329c1f4feae8522ebbe717adadf164388b8d79bcdbab423505f13fb07f3ae9715f8bd00ab6e1d
TLSH
T1F3E026E4FECAC12EB25C20C711A9730DC3CC383BEAC0290E2F01C8ACBA07180B286191
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 54953368916c7b9716e8037b382b5e9fd54fa46ce60a76da21b016b3153b96c4
MD5 9ae016b5a9c0971620a7c5b97c0c1e74
SHA1 22575f940628523e1929b85dfdc5c7e0abceefe5
SHA512 437d74d5abd228572514012506ebcb1fb94c3eecc2fca53e74d51596d9fbdc2e637707ee0802717266164fe8685ab63ae3c2b8ec8961995b0a531ef13785915e
TLSH
T1C8214792F335C048C2494A3A547EAB255334D8128FF8ED1F15B920747EB3B050D4B7EA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 8fc0ff5a381ade929181a68b722def9de5b4023346b913208516a9de282d5524
MD5 5aa8d39f57e97305d0c9fa273bdad945
SHA1 d6fdaf3298edbe9e78070b209d240f86dad40d0d
SHA512 f7870a6e8807228c430b33d4e29327d348a4efa2d21cb2e6901b2b3c52e0c0e6dfde0171eb24adeb58838f7d3c7f582f939b54027af56014040ae95e270dbe74
TLSH
T1E2E0D8A065C5C12F912424C306F6B34CC3D57C13EBC02E091F41C98C5987241764A561
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 2aba788af87626a603b6f4f69d5b08d711e470019489891b15b3909fb79eb1bb
MD5 abcbb49d5811cddafaeea169021cff01
SHA1 dbc586d5f61d8ee024b329d2c8406a55a2c6f725
SHA512 1d3bf4d1c759675d4e466e1eb93de44ed8a80f0267c15283314b699c45a44060961f1136f7d6b08352b61c8e964279db0d288933ba154b34da71b1c82210d9da
SSDEEP 384:nAZcI33sNyVdK22bp5u8irABZUP+KF7Iz50oA:+335cDkrAUPC0n
TLSH
T1F6826B356C786CBBA8F7E916F6467A039EF8106BD6D84F44D8D86B2D01C76A80307933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 8839f504cdc0e266036b61e0af8dd41609017a4ace2463437ef8301543f0d7ec
MD5 def6fcabebc85ed5081c42fb8c1ce61d
SHA1 16a0d129c60435daa688507f5bdbecbb0d2a5afd
SHA512 a3a7c26eed2c94ee639d1319cc4738f50cc783dab467a35f87cf5c3a2334d567a08ae23af9d699e5ba29d4f2d9ea6b56bc389455e7856e919097b6b7eebb0e69
SSDEEP 384:nOZcI33sNyqdK22bp5u8irABZUP+KF7Iz50oA:s33wcDkrAUPC0n
TLSH
T19A826C356C786CBBA8F7E916F6577A039EB8106BD6D84F44D8D86B2D01C76A80307933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 bd9f918033b4d34014fbde46cb45a0020dedd64123d2892eb8a6953703d2ef6a
MD5 05aea4e427f6dbb6227786dfa62f2069
SHA1 9f22fcd7f16ab22c9778f71f1193ea7637619d38
SHA512 80cf79078252afc6c84e89a0ed87f0e16d7859dfba01f88e4d3c1a27a59decab7df9f8278ff04565db355f4cdfdc64e4779b5070bc4441a13111a10757c451fe
SSDEEP 384:zH3sNrUZdK2Vbp5u8irABZaPdA81Lor9aO+KF7Iz9:T3zbDkrAa68ur9aOs
TLSH
T171720975A8A85CEB98A2E4C5B506F5036EB84177C68C5F4CC5F87B3D31AF4F84312952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 d4aa30157127a948c3678c28f26d64549d3569b8fcbd266162e29e40c3c4032f
MD5 a8d5cce0d3472c29bd37990cce550376
SHA1 bde694171c857e019e3be2c9631a526f577eaccc
SHA512 bc6ab9a8bd5be0499e51fc4a33e6629715c17b6e75ee0c4051c9c4204c487a54de5799ba2a154dab5d7ee72074e09fc2bc43f79163647a94ee887fde66c4dca7
SSDEEP 384:z2sNwVdKs0bp5u8irABZcxF2A8tKI7o69aw+8:ifwDkrAcxD8E69awV
TLSH
T1A7721A75E8686CEB98F2D9C5A506F6136EB8017BC6885E4CC5F8773C319F5F81312922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a5ba382ae3a802228f6f7ee9d872463e533d9a7fe3ee55d91d981c3e245f10fb
MD5 97567e4520b830a49917fb45eb725ccf
SHA1 8735fab003daba7bdacee372d905ef4fd2a17922
SHA512 39afe8d0e801310dfd0a1ff9514e6a90c031cff8df94352f0046612caefa4cbd86db34d8967429bc6c9c54c5aff23400e696f500c2729c8f4af5435bce11601c
SSDEEP 384:n6ZcIAsNEydKOCbp5u8irABZhlXA8fLoFfk2r+5+KF7Iz50oA:4AIsDkrAhW88pk2r+5C0n
TLSH
T1E0A2397698A95CFB58A2E4C1AA42F6036DB85137C38C5F4C95F8BB3D309F4F80712966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83b1409083f3bd23533816baf908cfba1d5d9f8c81f3ff2c3d853b7a44ee6ea3
MD5 84a8cc60c0b0210afd9061794e24196b
SHA1 5edf19fcb170265b06c219a65f48d317026d32b8
SHA512 3d8c601873ff8a0d1cee3b8022ebc414cd3312bbf193459ff74dfd25b61495f6254ec23b4b6756634f7afeb17a5af11261cf14a386548b7f4ca6fbdb422c919f
SSDEEP 192:SONz6iDCQmiUyhmHq5u88PwuhmwSqLoYfHU6:SONz6/1Hq5u8irA4LnU6
TLSH
T10802E738AC287C7B9DE3AD15B5873B235FA4113BE6941F84CAE81A2C01E769C1303926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 1dda14b2b068a990cad4d3f983bffc030fe55fd254becdd3d83b74acf50bebbc
MD5 9629342daddf66099d3b26f8c567e053
SHA1 996ce6b19878d693842b0457114552561ac1c54f
SHA512 50d10c08928c90857f1c1635de5f4a3a641c7fdf2398e45069b84d3d994e9306214863523c70750cf53780c1f6bdcb70ec1f9eb04438f9a281e534efd506116b
SSDEEP 384:z2sNwVdKsTbp5u8irABZcxF2A8tKI7o69aw+8:iffDkrAcxD8E69awV
TLSH
T153720975E8686CEB98F2D9C5A506F6136EB8017BC6885E4CC5F87B3C319F5F81312922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 1fa743f394f76a3bf3f82ce353d1fa0fdc15a94c6f6371980b8ea23709e04dd4
MD5 f03473428d26fbd4ec1d94a877933b4e
SHA1 401d8876d04cd96a727d9ae3398208ee114b5acf
SHA512 5322e3255038d1d341af5f8eb438932e2dbcb0cb8ed5b01569eff7068106361b7cd68e80bf1ea8cd481be4cf81c87d6cad4adadb337958a571f26d81522df60a
SSDEEP 192:zjD3sNyZQWmpDPNQQmiU2w0k4p5u88PwuhmBUohlHePq0BJgz+F7Iz9:zH3sNyZdK2abp5u8irABZUP+KF7Iz9
TLSH
T1905229357C78AC7BACF3AD16F61B7A139EB4116B96C81F54D9D81B2D01C72A81307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c0972e200ad65116ae54b21a8f36604d4a49df834169fc09472bfe69b2785b06
MD5 fc9e7f8fb7dd243182b308bc009b7fab
SHA1 d8d06ce636ee357307bba1c252ed627e029e361e
SHA512 bea67c206be36d3ce0d8bb7c1597294d6a85d1af30c1a0cf95857c4a830f89b5371006086128003db2c7854ee4e37398a97f3bd52646dea187cb36e9dc7850de
SSDEEP 192:SONZ6iDHQmiUyNm5q5u88PwuhmBUohyuZLUqzsU6:SONZ6on5q5u8irABZFLiU6
TLSH
T140121A35A8686C7B6DE3A861F44736139EA4426BDB886F84D9DC262C02EF59C5307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 68ade9ef4b4aad86068071bee03cd164ee70564c3ef7610cf99c46ce394b7329
MD5 dfc40cec6da796bf1da98523945b07ef
SHA1 978fbe4d258ce3c77f1eb0b332516b6e006de1b9
SHA512 15f77ec36164914eb6d1b5637adbef7dc01e9a5ad771b568b5ed1cdcf3812711a34e0ae47995ff4857fbbcc3da622b9da2827779630a9bcc3f71ab795d2db9fc
SSDEEP 192:zjysNrUVQWmpDPNWQmiU21Gk4p5u88PwuhmBUohZQRoqOJgz+F7Iz2:z2sNrUVdKsZbp5u8irABZ+o+KF7Iz2
TLSH
T16F5228366C28AC7BACE3A555FA1736139EB4416BD7C81F44D5DC2B2D02DB1A81307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 cc7d79692797fc67710758416d3cc1278cd36822c4851ee95806fcb30ceeb768
MD5 3690f6387054f68b95e4cf10ed206192
SHA1 dcfc5cd8554ca0f4fee35a3341566de09488418d
SHA512 84b19fb0142788ac2bb7afe74cfa161efeb367b2c996c4300c6a870b697068191d07ff45042296d66c884d4d2139288381f1ee5b658a754c296401494ae2743a
SSDEEP 384:nwZcI7sNH1dKMZibp5u8irABZzLFoA8fLoUMKW9SMz+KF7Iz50oA:O7GVoDkrAzLJ88JKW9SMzC0n
TLSH
T152A24AB1A8A99CFB54E6E0C5BA42F6036DB81077C68C5E4CD1F8B73D309F5B80716962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3e0ea7949554645ca1c97de7aaf364859d06c96f3035e5a9417151abd3c1f71f
MD5 bc950735948b81fcbdce9deb9811d845
SHA1 5cbc65a37995850308fcf033b0a1612de233ce84
SHA512 0a52adeb4533be34a901bab693d8d285751c14c79cd28e1ab731aefd0eba3c7a0806da8271ee45164ac953c41d00ba46fd332c77d135983ac918f061f223de66
TLSH
T17D414D9CB6EA1154F3B76F5A9FF6B86D447A79772E46D49D00010D4F0A22B40CC61737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 aab9079e5d7b468bacd1646f92980f3dd5127efcc1e133be0f6dc2b7acb90be9
MD5 158f9c84d399c3183bea06a4c702ab13
SHA1 fda399b695bd8901b71dcdf0b988440dff6dff68
SHA512 61767a2a92ad174908fc8be8cdbfff05cdac8f76fa358852dcef17e400317cb8c2667d5c6a46dd0d6e2c39b7500a5539b5ce99fee171089270db8e4bcd097d22
TLSH
T1CC515C68B6ED104873B7AF569BF6B8AD887ABD233F06D45E10110D4F0523A00CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

59eba475-236e-43d7-8bde-f60b5b971e23.tmp

Path C:\Users\Admin\AppData\Local\Temp\59eba475-236e-43d7-8bde-f60b5b971e23.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

89776521-8b70-4a0f-af22-2f84ef67c995.tmp

Path C:\Users\Admin\AppData\Local\Temp\89776521-8b70-4a0f-af22-2f84ef67c995.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2216_1450123471\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5d2a1b2-8e52-4062-a3f1-ebdff4cf3247.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4840_21744262\f5d2a1b2-8e52-4062-a3f1-ebdff4cf3247.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download