bbd13990fb9d448de3ad42d02bb7e57cbeb2022e902b0f364cb8b47119d2ea24

Resubmissions

17/10/2026, 18:53

261017-xjnwcsvv9q

17/10/2026, 18:46

261017-xerrfsbz8v8

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XKRKRKN.html
Size 751B
Sample261017-xerrfsbz8v
SHA256 bbd13990fb9d448de3ad42d02bb7e57cbeb2022e902b0f364cb8b47119d2ea24
MD5 d6fb9445bb9ef29f7911f41456e35748
SHA1 1df85559994cecbe7cf3298bb8760d6b0f408810
SHA512 cd6fa354dcfebb2dfb93103b797f76816b9f98c2763e0774a064463b53cc362c9a630c5066c1cf67a44f0a3d7d34505f31b7184e212df7967ea6d4cd819477b4
TLSH
T1C501D0E64CE5E24066708021C5C5721D6B8C28CB40CEB02179ED92B13B9EF18DA4366D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2108	msedge.exe
4592	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{0E888993-089A-41D4-B5CA-FE53C249D5BF}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{C2DFF4DD-F4D3-49B7-9D53-3CBD1FEDF28E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 1312	4896	msedge.exe	88
PID 4896 wrote to memory of 2108	4896	msedge.exe	90
PID 4896 wrote to memory of 3660	4896	msedge.exe	92
PID 4896 wrote to memory of 3660	4896	msedge.exe	92
PID 4896 wrote to memory of 4376	4896	msedge.exe	91
PID 4896 wrote to memory of 4376	4896	msedge.exe	91
PID 4896 wrote to memory of 4376	4896	msedge.exe	91
PID 4896 wrote to memory of 3940	4896	msedge.exe	93
PID 4896 wrote to memory of 5748	4896	msedge.exe	94
PID 4896 wrote to memory of 3940	4896	msedge.exe	93
PID 4896 wrote to memory of 3940	4896	msedge.exe	93
PID 4896 wrote to memory of 5748	4896	msedge.exe	94
PID 4896 wrote to memory of 5748	4896	msedge.exe	94
PID 4896 wrote to memory of 2140	4896	msedge.exe	96
PID 4896 wrote to memory of 2140	4896	msedge.exe	96
PID 4896 wrote to memory of 2140	4896	msedge.exe	96
PID 4896 wrote to memory of 1328	4896	msedge.exe	97
PID 4896 wrote to memory of 1328	4896	msedge.exe	97
PID 4896 wrote to memory of 1328	4896	msedge.exe	97
PID 4896 wrote to memory of 6044	4896	msedge.exe	98
PID 4896 wrote to memory of 6044	4896	msedge.exe	98
PID 4896 wrote to memory of 6044	4896	msedge.exe	98
PID 4896 wrote to memory of 4628	4896	msedge.exe	100
PID 4896 wrote to memory of 3040	4896	msedge.exe	101
PID 4896 wrote to memory of 4628	4896	msedge.exe	100
PID 4896 wrote to memory of 3040	4896	msedge.exe	101
PID 4896 wrote to memory of 2996	4896	msedge.exe	103
PID 4896 wrote to memory of 1492	4896	msedge.exe	107
PID 4896 wrote to memory of 5656	4896	msedge.exe	108
PID 4896 wrote to memory of 1900	4896	msedge.exe	109
PID 4896 wrote to memory of 4164	4896	msedge.exe	110
PID 4896 wrote to memory of 4164	4896	msedge.exe	110
PID 4896 wrote to memory of 1900	4896	msedge.exe	112
PID 1900 wrote to memory of 4864	1900	msedge.exe	113
PID 1900 wrote to memory of 5848	1900	msedge.exe	114
PID 1900 wrote to memory of 4592	1900	msedge.exe	115
PID 1900 wrote to memory of 5848	1900	msedge.exe	114
PID 1900 wrote to memory of 5848	1900	msedge.exe	114
PID 1900 wrote to memory of 4332	1900	msedge.exe	116
PID 1900 wrote to memory of 4332	1900	msedge.exe	116
PID 1900 wrote to memory of 1604	1900	msedge.exe	119
PID 1900 wrote to memory of 1128	1900	msedge.exe	120
PID 1900 wrote to memory of 1128	1900	msedge.exe	120
PID 1900 wrote to memory of 1784	1900	msedge.exe	121
PID 1900 wrote to memory of 1784	1900	msedge.exe	121
PID 1900 wrote to memory of 1812	1900	msedge.exe	122
PID 1900 wrote to memory of 1812	1900	msedge.exe	122
PID 1900 wrote to memory of 3672	1900	msedge.exe	123
PID 1900 wrote to memory of 3672	1900	msedge.exe	123
PID 1900 wrote to memory of 3924	1900	msedge.exe	124
PID 1900 wrote to memory of 3924	1900	msedge.exe	124
PID 1900 wrote to memory of 464	1900	msedge.exe	125
PID 1900 wrote to memory of 464	1900	msedge.exe	125
PID 1900 wrote to memory of 2432	1900	msedge.exe	126
PID 1900 wrote to memory of 2432	1900	msedge.exe	126
PID 1900 wrote to memory of 2732	1900	msedge.exe	127
PID 1900 wrote to memory of 4796	1900	msedge.exe	128
PID 1900 wrote to memory of 4372	1900	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\XKRKRKN.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ffa379bc188,0x7ffa379bc194,0x7ffa379bc1a0
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,1282573466764057004,11552756697418014379,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,122198305523504168,9741691842324461290,262144 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,13869781079348121047,9362577614495597431,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:13
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,1558905590538843888,11814897241795616756,2097152 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,16865752857552174250,9696295048965856973,2097152 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,1050254910713132828,4265837496598103815,2097152 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,2217027925705105842,5903222205535264944,2097152 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3708,i,5058298051983434066,8848980734088657909,2097152 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,4297148922392534420,2254366866758229664,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3904,i,9742837122714481989,2552293971979055685,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,7876749087579611942,6341911596660072872,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,7876749087579611942,6341911596660072872,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,17459677268341526879,6994295004264746805,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,10861077738939979097,14967680185835741239,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,1994428412735192870,5783147812548765875,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:14
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2985667702451312779,5162101672197628064,524288 --field-trial-handle=2340,i,12262201991867761523,2626374845204105797,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffa379bc188,0x7ffa379bc194,0x7ffa379bc1a0
    3⤵
    PID:4864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,10052403983167003539,8761502601378142147,262144 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
    3⤵
    PID:5848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,3268409474898264671,15141792156861106890,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,1493902070011957286,12857983271035267247,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:13
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,363919147518557292,11315922079194471260,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:3468
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,363919147518557292,11315922079194471260,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:1604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,16929817498245869100,3178938544688036726,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:14
    3⤵
    PID:1128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,14577385589812137965,1609105261131355362,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:14
    3⤵
    PID:1784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,8933847263262509922,17276938899681518355,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:14
    3⤵
    PID:1812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,15634987806755350553,5095457568365536605,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:14
    3⤵
    PID:3672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,4946567222400668698,557707160538875235,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,12680141885651281400,11718215153502990373,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
    3⤵
    PID:464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,14114684104787348399,16617911844582983556,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
    3⤵
    PID:2432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,2665219831385006859,15951855901597506668,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:14
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,8984232903481362012,5796536021555503099,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,17734208929476348219,9353952990348363471,524288 --field-trial-handle=2276,i,5608768767816607705,13439994742837145174,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:4372

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2876

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1898bcfe-d408-41de-8569-2e431b45a84f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1898bcfe-d408-41de-8569-2e431b45a84f.tmp
Size 37KB
SHA256 4ab92a647517da30e315c573d1347160d11e7bfdde4ce47d51967ba9bc780c83
MD5 223f67040cefd0419f3ee869343f2198
SHA1 df6ad963474846cd638435d2d681e8646efed2fe
SHA512 b235859f9e98cba3aa686e3222f18f3144986f43fde482ab20feb7d7499ef27731cf58ebf9f6a2641f7bae60ea066610afc448886b3ff23891d99a2ea5f595af
SSDEEP 768:R/UxvxjgC+W3lrec7fZrKtp5XSwQs88uBkiTCcG/P84g:kZj3+W3lZtr6ILNBAHg
TLSH
T16E03D039F8946C73ACF39385365A275BAFF05153C4C40BA849EE7A0E028B75DA707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2532ea29-217f-4db2-997d-7bd5f7803da1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2532ea29-217f-4db2-997d-7bd5f7803da1.tmp
Size 38KB
SHA256 0c6d2d04a21ad4c7054ee696f76273d110bbfd699a461fc52ab0c4468f115fe6
MD5 eceabfa3894d628e534014a4410ea85a
SHA1 3348ab5546ae793f288632c651c3cb453362e410
SHA512 5c0ca4e9352d47fcdeaef745e24df2ae4cd95aeae063b60e0868ba136765b0904c89f0ca576bc714e0593313b6291b0b37a2b124e8e608c53c885838a6c79f55
SSDEEP 768:M/UxvxjgC+W3Ac6c7fZrKlHFp5XSwQs88uBkiTz9Y/P84g:5Zj3+W3A+trkrILNB3YHg
TLSH
T15B03C03AF8945863ACF39381365B274BAFF05153C4C41AE449EE7A0E038B79D674B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37ff0cc3-80ed-4c07-a43b-c293ccbc0de5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37ff0cc3-80ed-4c07-a43b-c293ccbc0de5.tmp
Size 45KB
SHA256 06cb62503797d94fc4084b69b2c097baf2a04b117fbaa9d3edf418736e10fbd5
MD5 5713cfddf28b664ac2dd21aaadb471a4
SHA1 ad187cde4c3791c244b6f07e82d1efb1b4fa72e3
SHA512 82b06619de3d3653b9ca2e0f3536e42d1b8d87bc4c29c00f9f01f70abfbe62fc0cb3af9761c8c9897389b5b46b8fd5a980a35cdacb87cfb2a4d5a332dddcca50
SSDEEP 768:NFFI3Twgk32EQc7fZrKlHJp5XSwQs88uBkiT2Sxo9aMNxTxLO:RI3NMtrkXILNBtx3MN7i
TLSH
T1082315F9A8C3897AC8AE6743637D2E125ABCC127F8A00554F389570CCD621BFF746842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6242e8bf-2b43-4e94-8bbc-512b1be18955.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6242e8bf-2b43-4e94-8bbc-512b1be18955.tmp
Size 33KB
SHA256 be27e98fd78496f31f8ca6b1eff3146934a7b9ca47815e9dd5edba44c0fa62b6
MD5 0c03b82264304fac784587f68b15ae1d
SHA1 acca096407b5b205b3dcd843d9f7cd9af6e0e06e
SHA512 b53199143ababde47c716de7dbb8640e7f4f83c96d83e6a710be92592f4e295bfd693dd889269e13abdb1ed0b5b1799fa44dd0952d134baf2ed0a6a2499ca48e
SSDEEP 768:ft3t32qQc7fZrKlHxp5XSwQs88uBkiT29YxTxLO:ft3k2trk/ILNB4Y7i
TLSH
T186F2BF39F8909DA39CF29391765A33476FF09107D8C80A94C6CDA61D02CB39E7B4B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a44f5b0-77ac-4873-aebe-bf6651bcd880.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a44f5b0-77ac-4873-aebe-bf6651bcd880.tmp
Size 43KB
SHA256 6cb74550156bbaa8f2a45d636691e6419691882df4c0e92606dff3e21378281f
MD5 326f379b28be8b75bee9cc83a725c65e
SHA1 37e06fa0af1dd6539e43fa70c46f25e1fed13c73
SHA512 5cc5ad7b1f5cba26609613ccea10b9acbf03864df648b4f56054cab2997446709ce8441d358d54a568fa2c635390e15254bb2a740071b155776a932ff28dff7e
SSDEEP 768:kFFI3gwgk32jQc7fZrKlp5XSwQs88uBkiTllR6kAr+zTALz:WI3eHtrKILNBZRbAaI/
TLSH
T1251326FA98C3897AC8AE6783677D2E125EBCC123F4940654F7C8560CCD521BFE306996
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d94841acc41ca658a5ee48a1ef8763d968ff86dec9b648ab9d4d5f3d4fea0d3a
MD5 3ec4eb6dbe24df0552b56af18c05a2b9
SHA1 fd334aef86650c95ae106374f1bb923cd2432390
SHA512 44bb44d7dffcecb78e155155b9571e4c572f63ed79c2a0c69cf356c04a91ff7d4cca3351e2c6a641095a4fbe0d38498ae9c3f0ebaf029b3ba42f1da7597e026e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1B6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4376a697841a2a5dc871f77b5f0719b1d4a38c467bedfbd7d5dae536616547b1
MD5 40c596847315c42a85c89d5bbbf477c8
SHA1 3ac6dc372491b92e7a3e9815b3d40d0a27da2ff1
SHA512 42fede3ca69b61bd7a09b1c7b8746090d4216fa096f7b9fd744fb895cc2cb1c7634dfdbe97e27524e44009fd335dd7b3996ccf8309c471ea30a2bf4135e9e43c
TLSH
T1BFD08015792B7EBDD57F15F584D496442655DFA3DD10011515035C180B743821891DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c0bf94ce7049b97e529c3c256749eb100b5310088f7f4db7498be6f858d75764
MD5 9d285667f2e36e65333db53a013c23ae
SHA1 e05b5329a98d4631fc0898453ecb9ed3f05813bb
SHA512 ff334e7580dc6bb6bb6d78c71f77b3f9d3efeed0ff9e457f9d26aa64d2817b0520118b18eec5e5a3d5f3d28beebd9e917bb66da9ed36848c1fefb601ed41883b
TLSH
T16BD08099F91B7D2DDD5B58F14ACA97842345EA62AC01007915074D1C165074524C06FC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 796e16d1c3a57fe76ce7ec6bc99c4da5b4cbd1dbc8a48a159f3aee30c8c14cc3
MD5 1ccf75215cf1b2e435c267d911987805
SHA1 fe8221630cad6d2aa9238ee04d73cda862f21a3e
SHA512 e381f1d6b74598c7436254d576283d0700bef24d92609b57c8d25c06afb8ba5724a6fb75301f01b93cd4a2918e9e5a098884e392f119bcb2631ae222b97312d4
TLSH
T18FD08095F91B7C2DDD5B58F14ACA97942345EA625801007915074D1C165074524C06EC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

3718b945-8b9e-48d0-826b-08df0d4acdbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3718b945-8b9e-48d0-826b-08df0d4acdbb.tmp
Size 23KB
SHA256 217de625fb8039c97f913979dcad580423e82c12558e005555fab77b34acda2d
MD5 7ad4d9b7b3b499e9c930709abbdee97c
SHA1 b3529292e8cee7601202415c3e419ec98ac27076
SHA512 525f75ac577ca0f606d08b5a030dbea13afd62b28a6a3b525ac93eece7444a42845bf6aebe0ce19d26b04870eb7002b2a56044936f1b739bfc8a6c88916bbbca
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXcroJeu:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0Va
TLSH
T1F9B2D92B740CCB7E4FC04A9EA8197FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cc61815-9ca8-4243-8c07-ea27aa85219c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6cc61815-9ca8-4243-8c07-ea27aa85219c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

847a9887-318d-48cf-afc6-260c443c402b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\847a9887-318d-48cf-afc6-260c443c402b.tmp
Size 12KB
SHA256 c0b086254caa3d5a8140cf62facd6c0b47738d7e57745606b37a383cfee66631
MD5 e2905af9ef169b6e2e1add396432227a
SHA1 9c0be464c8ec0d5a1902eef79f9b1296291ac9cd
SHA512 2d6f407f36050dd94fff5b088b32bc76fb7741fbaa2385f394fbe0a899bff3572ef84e2e9d69c3eb32a69813f1e93bbf58b913208e390fd91606f589e8022bef
SSDEEP 192:sxR6R8b5/fPsKWpVxHR35zoA8pevS/g6+WNzgYMqHxgjIgDRJ:sxR6M5/fPsKWvx6J/5MVf
TLSH
T12A42C715A924A93B8CDBE21DFB66BF53D6F8503260911E49B6FC8A1C01E76DD130790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97442473-f985-44de-b0e2-ba9f7e985425.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97442473-f985-44de-b0e2-ba9f7e985425.tmp
Size 11KB
SHA256 31f56b24e995a34f54b376d337e582ae605ef851374dd3492c06785e5643f2e3
MD5 cacbf16841077d11d52f7b693fad8eb9
SHA1 7a26231b4df837717fccdc2297bf0edd417734cc
SHA512 bce663c3f8d0fc2773aaa289a6ffa02137c0a4162b93d946053d2c2702976c818dea09858a19c3cbf4a372d5780d50fa597eca29a7cad0fbb2ccfdb759da61db
SSDEEP 192:sxR6R7b5/fPsBHRw5zoA8p4vS/g6+WNIYE+UtGjIgDRJ:sxR6F5/fPsBHr/5Iif
TLSH
T15632C715AE24A93B8CDBE20DBB557F53D2F95033A0951E49B6FC8A1C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5875404b7533d36c9879a14818f6e7c3807c574fef45e223d0da831b5d00690b
MD5 e3452d2919bb4b0cf168e28801041afb
SHA1 c23939968428669b30f61e32a3cd1bb964c5767d
SHA512 0341cdfc434f5b171ef00b6b08536bf027f1907d6671164058b69ddedc3487a40d2472f9795dc0928591c91fc6e17f5100f7c83f1bd664e50519a76a4cc12478
TLSH
T1A4E06199CC24DD3749FD575D54684746F61813473791584F363D850C8FB06370AC6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 ff169531aadff500e5e8824a3d0309b9f65803b5e0b8b07b10f1b0e65ebebf4e
MD5 31cb11d5c9d4d78ee83af24167400561
SHA1 58bcd526b3237543bd0f2dc10fe2d1e736d90d5c
SHA512 8e18b7d980c86e129722ff47774dadf16c0eaa6549155aca70cbf40c760ed169088ede966f2ee0a843adc78b8472feab558afdff101252b54a7c8c447b5197eb
SSDEEP 192:djaFbBy9yylhnJc48BGkx+WT6f6vUZPe99khWQl8dvnPs+GVd9:wFbB2yd4s1+PSvUZiMWQl+vPsxP9
TLSH
T1CA135E3D27145D93F3C3673F325BAB39D3F2905AE8E6102B067AF950A6653228D4E834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c579189fd2e1f94faba7c4ea8e1d6088d631f492350ebbfd0a4d3ebdc8660084
MD5 1372beaf5019746311a03f838e6df7ed
SHA1 bc512cccc96ebf81b0765182d9f1d498a11f075d
SHA512 b3459a04cd9d118db42d6e6b0ff99c83d1474c84b4e0ee5fedfe8159f8cee4256af3f5be8b7849d21bf2a753da578bed7461284a532ea359b1ef2c4637497eed
SSDEEP 768:LxWIN88SL/8dzL/dbXN1ntlsbbAa70iY2l2pr7gG7L4Ht+NR:LxyL/85L/dh7e2prUmc
TLSH
T1A8443EF75951A00BDBA852F6D6033E3ED1B7014E6CD1F8A9E1788C852825F31B2BDE94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 6b2553c835b1f3bba2482e2618f43ce5de1d475510f9890640a9903b7f630931
MD5 c873433ce675dfeaa5f72e05bf1a87f4
SHA1 952aa7249ffb4ae9e2e77616ccfb750b951059b6
SHA512 e88c67892487b6648a61f4006d52dcec779dc6bfba6371e26dbd0152ab6447f8be0a500d8639c5438dd6b9ae9eee3742fddd169c252b5ff5fb22bff0890be45d
SSDEEP 1536:si49G+PhpWrMRO/9s7O7h7C747zY717iRK7l7KHvy7b7pb7i7Uu/q7z7170757vR:sv9G+bW3T1rHv6MsSJN0JUDl
TLSH
T1902549EEC7682C82DF6B8774B0E0D9077E702082B69DD0D39944C5D997D2B8176E92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 fc3dd426d30123931930858b7fedbba0c31aa366376d6250481eb72367e51820
MD5 549d35194e4e2a7b234465f50931cfa8
SHA1 b097ff8140d6fce180d85d4544430632c23ab874
SHA512 70b25f2130812f2210d1a248ffc9e4cad15d387fbe5bfcde3082a359d0c4563abfce8f4c76fd6b18a028d7ec7d6b71fb6397bf5f666d44ac55b95d24071eb23f
SSDEEP 12288:1dBe598u2qhlFTLaIrU2UrxSB0WcL08csLITKTSwDuHbBWXWy62KY5Fo7TrRP4DJ:rodKILIMLbitlsFwp+GRm
TLSH
T10A166CEDCA7858C3DD639A30B4F0E9477C7413C3F955C1E68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 9c6b5bd7ba72723f9edc01a7775f07f675b5fb48f98808220507cf2347b19048
MD5 2df8d0f46df2dc257fb0248e5711c440
SHA1 0f9b80289c62255e33f7571f706e59d6fa53d770
SHA512 7a3a51f82a7d6e4f30f9d96bf2879d7ac28e15b2af244f8bc46e5b144be98998553711230fd84c749d3f61abb45ad64d11bdf875c03e59ba12a375af4bfd77c8
TLSH
T15A519580A1A0644DF7FD4BB250DA128FF7308F8AD0039EAE3A98CC75E946B10B43C55B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 29951ff380ceb17978a16584b2d5418b53ad1417e4b9959fd7c456e0d9385e66
MD5 2969c01283dde80965ace432edd46c18
SHA1 c4e89c135b05d2838b8d3f017d76ae27bea66e8e
SHA512 e04e009cd62b843c855fc1119603978c1a2b682e9c61fd8dda4f0a00ba927aa64a0a4c7e2c762b64e263ef0531fd59e1ae22168fdec473adf83949b09edbadec
TLSH
T1A5518880A6A0644DF7FD4BB250DA128FF7308F8AD4439EAE3A58CC75E946B10B53C55B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b21bc8f9300a3b2fc9a9e29ea29872aae60ac65082cfd9a0066b1c4b86a51b05
MD5 d9b4579bb694be30e0e6b85d16129462
SHA1 121f2a8b74406b687c12c2c98c2e7b9357957593
SHA512 dc453ad134550deb629d899eff500e982b861c2c409e42228c6b5fa8bad6858833170b29b542e9402a8257fb3d06330ab59e44647afbb331ce9a09d853b95713
SSDEEP 3:MsEllllkEthXllkl2zE/lIEl:/M/xT02zbM
TLSH
T15A4404057FC00407C50131F04055C3501371D410171F57473C535437DCCD7445C01405
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0ab3721-d5bc-44d2-94da-554f32d88028.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c0ab3721-d5bc-44d2-94da-554f32d88028.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 a609aa978c311adc9ced8c1257b2a7d121d6ebdb732b6c72e86337c1b1fa79ce
MD5 df4210ddb04b04233ea38593b7f034b9
SHA1 b86005c752a4ec869a276d88dcb0b5c5bb166bad
SHA512 3f5ad85ec769fab901181542d54f5342b487bb607b046d45ff84baec666d8d28ecf5e702258fa181133693c2a04f49219378c3abe457e2b8e6c3ba896de2aa06
TLSH
T14BE0DF94A6CBC12E6728F88202A46B1CC381346AD6837E071700C8E4770B601BAA7A8B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 c80b0d84e849c1a036ab282c99afcf185f3334b196a9741339e3369d9eb19115
MD5 b1e70bafd454640b99f3cc4a2fc29e67
SHA1 2b64f4774fcfc65c221426a9ae8e9f2abb7c480b
SHA512 1cf57ad14b042277103d9bfdf7edc20ac7c570b47381c211d8a722b6217f42fd65e92622271f84c9733597796e698e03ea47cdc84fe62b7386ef238614b3c742
TLSH
T16BE026444BCFC22FB268699303ACB748A7D23413E2C03E0E174EC8447203349A6EB381
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 caf51192f9789bfb5ba091ed2a1ac08fb274c79c4acb22ddcf49807158ef076d
MD5 9d6ef88e915959e23f029593c9ac22ac
SHA1 aee8d97c9ff603ecbb0564ca953adf0007048aa8
SHA512 a3818c3c74496503d58fe0c2a8ec97881f24798670aa279aa8e6e395b1432dc245ea7d5fd9ff8c3fc6f630a97656dbd2bc4401d194d4257fba1d43b8c7b1391c
SSDEEP 192:K3BQCH+bF+UI3iWGVoWN3qL/ZyV7VVV63:K3jIkUI3ijVoWN3qL/ZyV7A
TLSH
T19424200E5F653712CDBD813668E744A35D7DF03F875366DA686114B0CEE3A42A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 19B
SHA256 ab5c71347d95f319781df230012713c7819ac0d69373e8c9a7302cae3f9a04b7
MD5 0407b455f23e3655661ba46a574cfca4
SHA1 855cb7cc8eac30458b4207614d046cb09ee3a591
SHA512 3020f7c87dc5201589fa43e03b1591ed8beb64523b37eb3736557f3ab7d654980fb42284115a69d91de44204cefab751b60466c0ef677608467de43d41bfb939
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7c8394e009d0351b480368db3764340e8fc5bd374cb7bb539b52518d4ead4099
MD5 02701a3e660e20bf9c30896b2d172cce
SHA1 e3b83f5128f3014097fe909834e25fb4d483d801
SHA512 a98f4d54e390a50a7e9f4116f0dcf0b24ef64af6f9f4a0e3e4883071d68497437eb4a6cdc1ca62d6ac02ab93d164bce815f7494d2823d8d2c2c23a294e3b055b
TLSH
T148E0DFA046CEC12EB388605F43A87B08E7B12417E6843F861F09E944B30A608E6E72C2
MD5 SHA1 SHA512 TLSH

Submit Download

79ee7219-1519-4b9c-a3ba-0cbfc354c23b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\79ee7219-1519-4b9c-a3ba-0cbfc354c23b.tmp
Size 2KB
SHA256 f89ed32b40e242d4dd2c2b36f975aa8d0f952a3e70f7dac0dc17f937a630479f
MD5 36de11361c5cf0c0d74fda6af76fec26
SHA1 d5e9a6aebc1b61ed15ad00847fa74b94ce369eb5
SHA512 e472031c58189f121d7a88b8601fb6a6ba936f28b6878bf555e61dc0a647b18faa3d20d84353001d08f72ad3754e0444c499c54598100a1b23ea8d1c350d76c8
TLSH
T19351AEF783F4C62D8A1596F0AB146E1FCE2D0518432C7D6A89E49E1B93E34B1E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

9adf9356-674b-403e-8efb-2623baf079ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9adf9356-674b-403e-8efb-2623baf079ef.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 d098f048dfc8504277e2a0a6bfdb0b7fb9aed26f31bf5dae812f460ef933ebcb
MD5 bd92c05bdbdce87a8396c28426825b03
SHA1 525ee47e8406fbd16f3bf3c1e6264e037ee15f0a
SHA512 169d070fe8e6c50b2128f2dd291efa22f23934ef928c9009357d503c045afd9769e3d9b1c3c1a03ce262ae4702b9cd112cb3f5702041216a417f8bd00414b966
SSDEEP 48:TWt/LopFMaty423w/a9NUuTZwTosywm6mP:6DeMatha9/My/
TLSH
T1C0B2404D1F342221C0F44B36EDD189672E7C121C83B37649DA5860F2CDA365FF6060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a2a70e7ca4fc0a633f77ba70f9a6ee2411f98b11b7e99a5d266baf5e55026961
MD5 7886dc3d3b6ea160b6a30d8837e93270
SHA1 0f542f6b76b76d6d32b2267701bd05d4a0068b67
SHA512 fbd564a2ed9d5e4e95671efb608f3c0464bef6cf05897d0e789a8dc0aff03eae0f8bdc7c508f06157a16970ba2e2619458b585379b4d480fae0ff119aeb221ed
TLSH
T19651AEF783F4C62D8A1596F0AB146E1FCE2D0518432C7D6A89E49E1B93E34B1E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 cdc72b0bd989c6c95b8fe8ee46eaf25cd36a30225a9bada3f433c2c3aabe936c
MD5 6cba6d009a7a52869a295b7977856352
SHA1 1850262b2bbe69c2253e8cd04da2b08364c6942b
SHA512 dd568257b2ca51829b1aad1a9256c2a1f892dc36ba14be84dd3328cc67f6016b23745e322575f02515c1fe0d5d1a8e292195cd0212e4b0051875b256da9586c1
TLSH
T10CC0126280FAF4B6103A49795A84B8C1A6B7E834104194B5D996837CE0D24B76E5702D
MD5 SHA1 SHA512 TLSH

Submit Download

b8ab8b63-85cf-4eb1-b698-c0f6e3986c9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b8ab8b63-85cf-4eb1-b698-c0f6e3986c9e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4b3573a11158af939813def743fa42f7a2dc0020f0bca54af2928b46583f316b
MD5 826663cd0881140eb7bb2d37f7cb971c
SHA1 505ba845ddc50333466bb8dc1d4e57745db7ec3e
SHA512 7e496e43ee64b025b30c6becca10eb22c2e5df35d5f48f6dd31f051845cedb9a9a495c35f9cbee5064d4512605955d8c9c460e9c0f8a0a59867d2b5b2f14a283
SSDEEP 192:sxR6R7b5/fPssHRw5zoA8p4vS/g6+WNIYEGUtGjIgDvJ:sxR6F5/fPssHr/5IUl
TLSH
T1C932C715AE24A93B8CDBE20DFB657F53D6F95032A0951E49B6FC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 20b036c9ed78f05518d8f9fce46e25a6361c8e3f36b598537a40fa3ddf8dd816
MD5 65dc34d8f9e2dd5107f048053891a152
SHA1 995a30bf4d756ed14b421e108654f341e9a77226
SHA512 fdf74b11366a10d7138a5003bcd42ba7520a8ef629ba7addaa6868da5842ab41f54da9ea9aa320f97c3982167a5eed6b1bce092a50da9b00f477dbf2a0af1e89
TLSH
T128E0262016DAC17EB21A20830329A308C3E5742BD2C43F076F81DA8872C7604B1E7282
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 eab5d5726a4625ea15ac5ac9df4b0358456ccc9b265d1a66a9193f67bf087cf2
MD5 347aca27eca08f84586d63417a7c17d9
SHA1 249cce1e5a179901491ed94b0651028636ccd6a9
SHA512 8820866b8407fb45b7e77e4d2d7cf9bb9c503185b2d7907115df880e2e22b40466a70754fe49bc6a4f9960c46cafb6688d5f4159ed6782b983f48526dd9cfbb5
TLSH
T195B012143B02D102CD8D063005808781D220FF120010AB679C6CAF30CE0FEAC3E00CC5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 bfa01ae787e3fe8fda1a3a26140efe0e0c6287723d053f9424db7b4f4c5355d0
MD5 5de6a40a61e93273ee77a665977c1faa
SHA1 b05523dfa640c893eaa79d3c83426ec0bf7de16c
SHA512 0ee12bbd3fa0b05bfb380a01ea5af4ab3445a5e2d9623ed3b6e2bc392dbf70e04e1e95a392112ef4d778c99fb5e47c24409d0859a534d95d1689383c9862dea4
TLSH
T147E0486017DEC23FB34B219F1754E71C87A37416D6C43A156B09E994A34B2447697641
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 4b394e9a064915aa1713502f56677e81738d7defebd5d8fc3307da6751a910e4
MD5 2b9fa6585eca359fd5f1786a008bd605
SHA1 e0f4c2dfac1f89f20cdd35683adc9c371c3bf4ca
SHA512 e2a1f416e45ed96db33a676910199dc8dca43ff63d75dd17626584190d60813eaa79f13a0fe07c7bd9efd8d1d980c913a57678db89a1a76e81cb78a1ff62e633
TLSH
T17FE086B096DAC27EA24A64C30368A71D8BF1A81AD7C43B4EA70CC454E246344B6FB681
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 b12eb5a5fb880cafcb2472209c3a83810e0ec4bd9b3a289ba49ea3f791599dc9
MD5 b5d7bdc5fe5edf4ab6fe24b86815c189
SHA1 db7e8c5df84c14b2f1d7d74f9c07d2b50089c0ad
SHA512 c5a83f9fffb659d561cbbad93975f16fbf46eeae10051499803d43a0c2e11858fc026ee88c11a0e52046887a0c9160451d4f785d553678e6449c474af082a7de
TLSH
T16F51B1113A3A42417CFE2B1C0699D816536730B73516B5BFBBA881990EAFF054DFE8C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2562e15a1a0cb54c68f8445a11d6d93213e606b7c329e163f6b29c5c90258e6c
MD5 4b6a835470c12ee026f46faf613a2d03
SHA1 6e5a5109a461d7e56331c110738f1d3d5bddbc50
SHA512 4b4d14a37efc71154582581a2033bdea2b669288c7e72a9d6e9a8b542b6e499d45fbbfc19c340ec295c4dd0470c59cce390253e8b2f856774ffcf87162a9bfc8
SSDEEP 96:ZWzW+W3WjWtW5WVWklW5WwWPXWrWkKPWBXW1WkbWDWjWQWtWDW5ogf2qgGmRlK1H:g99ijPO
TLSH
T15291CD153A3A42023CFE2B1C1699D816136770B73416B5BFBAA981A51E6FF044DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 ac2433a14a4e3abe023c22703bad43f6031a0ca3f320303195537510fadd8e87
MD5 d9d460a623b268a31ff28883c7ca0347
SHA1 f73f645256fc342a5e24236e6ce7cec26b26bb3a
SHA512 a26d65ab0ebdcbed060ebdfb25dd4ecb217ded769dd8fe4096289616e4a4ef190dfd222bf953a629d92eb4e85e635f985be83e4c4bcac59a1ab8509f4c140a74
SSDEEP 384:DNrRZyCSDnxTIC1MEhIKyll7svbFKfk7:xFZJSDniLyI1l7svbF9
TLSH
T13144730A7B747001EDE6D9725CB080771A3CB16DCF22E6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 6292b33390dd83a5cb1fc073064a41dd5784832f3a7c269579b1457b63f0d450
MD5 0d5e9372d4804e8e03034ad9689496d4
SHA1 871d76f516aa34c2277479e2cac1a11540a7eb3d
SHA512 03c9e496ff159e0a29636b785b15cddee1b1aa5b19710f8888bc507ec07737aae861d2e48d0e4e5eb6c56cc83c980e62bbcc27b7b1622d21d7267752df3960b3
SSDEEP 48:zEK3tjkSI5IUltGhp22iSBg4joNeVmUBVjoNeVmUP4NRW7PohjoNeVmU8W:zEtSyGhp22iS5o6po+URW09og
TLSH
T13A5262D79D243241DDF4C272DAC561D8AFAD14EE4DC2F6224DE4813226BFA44A31A65C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2098847-537b-4259-8572-803c783d1925.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2098847-537b-4259-8572-803c783d1925.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbc9c2af-33b0-42a3-8c42-7e6f8a79dbb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbc9c2af-33b0-42a3-8c42-7e6f8a79dbb3.tmp
Size 11KB
SHA256 992c160df5deeb4168ead1c3dee85a36ce3628d9a3e26ac62fee2cca96344946
MD5 b670a2e2f44768be5bd3a74545259c6e
SHA1 a4aec7236dc6c6db19c9c1af35c8014f41842cf9
SHA512 e95e5c9b7e0984dca8b744c75987b16470540ee7149bbb26154057087dccca92e8101b21640b85627f9e7c352f637bdc52de51e157257c41e5244909ad461a06
SSDEEP 192:sxRBR7b5/fPsFHRw5zoA8p4vS/g6+WNIYEGUtGjIgIJ:sxRBF5/fPsFHr/5IUs
TLSH
T11832B815AE24A93B8CDBE20DBB657F53D6F95032A0951E49F6FC861C04E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e04e6d4f-27d3-44cf-b33f-7e8f108a582a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e04e6d4f-27d3-44cf-b33f-7e8f108a582a.tmp
Size 12KB
SHA256 cc3cdb77876723fd30060657f9065ed1faabb58dab5571fff62e993c74d7146d
MD5 2105fccf72ed1788f17c6c4b45c69d24
SHA1 47bf5a665088af3fe8fb1a66b0988f9f3de47631
SHA512 0d825585e12a30c396f2a7507cc219815a57b74097d1034444e9b28f96d371011b4c67e216441222c474af1385173d44645f4fe44d8de594445f6f98d5043409
SSDEEP 192:sxR6R8b5/fPs2WpVxnZl7sdbs5zoA8pevS/g6+WNzgYMqHeGjIgDYJ:sxR6M5/fPs2WvxZAbVJ/5MGo
TLSH
T14C52D915A928A93B8CDBE20DFB65BF53D6F9503260951E45E6FC8A2C01F76DD230390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 a3d9729a7195f3da67acf4443b7e042aeca25b1e2502ac70e4b54d7890b05652
MD5 5d40ec6988bb4171df350e0ce4beb87b
SHA1 a31e67c9a5c9a63e68cf57af8f4dcbe01c172a68
SHA512 82d4379e31c872004d7c801b429a58755c2b40b24d2c705664a0c0a30a0230eca3e5e86e985b2e74662e1c800fed8181ee30f3cec868a7957f4b75407058c067
SSDEEP 192:7QxIIIwb8MIMWrYcYwTrOdNAsel9uEusxO:7QxIIIwb8MIMqBedes8ss
TLSH
T1EA42746E1E093B77C45E5B76127786449BD4888221B2262D31592C1F8DF3BF78AC62F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 4eed24000153afd1d283065e7fd2eb3142514e8ec3a43f9a6964da1c0ab9cab4
MD5 2f5b8ab941618664257f3d6013c3c2a2
SHA1 ab6fa48e1d545d5c73f493892072f394ad91191a
SHA512 f53010b35d84257190ebf5e65b832273f2335c21534101a1b98d1e8fe7854ab510d0a3e0be10357531a1adb131671edf51d2f2bb8481d1a243a602cc12ea03f2
TLSH
T17DE080515FD7C12FB35A20871265675C97912517FA843A491F05C458E106244FADB642
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 de5eff1bd34ff95bdc8153190e81c0e923b18b58147def8ae7a84b111f2c72a9
MD5 3e902c60921d46d1d4fb788711be9f4f
SHA1 18abca558ba3ee88155cc10f3e2ffddc01d46cc7
SHA512 1f86841d03153a9879d011f1eae6b27c00b033eea0a551133f1c2506214d4b837115677730e33dfaaa19a535b519d78bdee45a6196eb4ef970b861219bc0d597
TLSH
T147210455F330C108E14E8679507E9B2A0378DC868FB8EC0F447520796EB2B181E8B3E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 ecd7bdfdc6a730a0958ff8118acf7a9568d5a61c82815ef6ed5ae7de1aa82e11
MD5 e15d6472ae6cb4fba58f150e45139399
SHA1 75c8335745b639c933d93858ff5f802f64a83361
SHA512 ce7563a88d441ce69b83742a59ee56d635026b99e8b42fbf67713bac88b2f59ab9b2396f3a5fea81169298ac247f88633b7be382dc8ba46cc1b1dcc7051c544c
TLSH
T12BE020106EC7C11F735A208702A4B74C93923853FA803F052F05CD48D207241F6DF282
MD5 SHA1 SHA512 TLSH

Submit Download

35ea37e5-dac1-418a-9886-91100e2ea7f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\35ea37e5-dac1-418a-9886-91100e2ea7f6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 02f061eb0f85ea1a9bcd757d7a8b7e6d046688b5fb6f1d83bfa32148aefcc53b
MD5 08b915b86d2b9737ccf8fb98f3dbfc31
SHA1 184a9e921f2bc6508c916d6d1ab9600274f82e4b
SHA512 8bea8eee06e70f26853105decfe5bd75e898be02116254811e9ac69a7f156ced58e7302534eab915466be1a0fdbf680a94478dc2a7b457637c7e939ab5d142ff
SSDEEP 3:MsEllllkEthXllkl2zEkhBU/l:/M/xT02zVh2
TLSH
T1DE4404057FC00505CD001034D151D3D00774D4515D157747347354177CCD7741C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 9245d5e4998a8d73af0a0b04b66a19473d0393a47f4efd133b7cf2964d982566
MD5 408cc6aca1f5d728c762f028569f089b
SHA1 df6015a8d5bd3814bf0bda8a5d99a5995dce40ab
SHA512 8a493afbd14fdc074b266c1131fd4379a90f08eb0745c032996f182bb14c0116358f7dc28d1a3edf42333e20fd99264919cd38668237952a913ec47853c38ad6
SSDEEP 3:MsEllllkEthXllkl2zE7EXl:/M/xT02zF1
TLSH
T1E144040DFFD00505DD0015304051C3500770D41305D55747745354D77CCD5701C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a34a229b-cbc1-4fd0-8388-6d9c0cb2f242.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a34a229b-cbc1-4fd0-8388-6d9c0cb2f242.tmp
Size 41KB
SHA256 c0dba145b25a6a8d04f896bfc632293fb52be615f8bd520616ee8c1513599fdf
MD5 29023cdb055f2f1cfc77f50c29bcab3d
SHA1 47087d74a5374c08e8a404f66f260fe2c1acff9f
SHA512 f1caa5f07bfc6df0148c259893091786ba86e4b45940b18f4ebac259bdf6614b7cd9db8e83aa411d575f9eeec7d96a8a2a351bac82170dc484a9ea28414c2c5e
SSDEEP 768:NFdI3MwgU32WQc7fZrKlHcqp5XSwQs88uBkiT29YxTxLO:5I3Katrk8EILNB4Y7i
TLSH
T1FE1348F6A8C38976D8AE5783677D2E029EBCC143B8840654B7C9550CCD872BFE707856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abe5d66c-3113-4c4a-af36-01bb9f0f4cd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abe5d66c-3113-4c4a-af36-01bb9f0f4cd2.tmp
Size 33KB
SHA256 ddcf5cf6b8b646eda9ecd09277d9d962d45d4c480cab6049b25a5d4967f38489
MD5 2c84270d8bf90e697608cf8a9d253bb1
SHA1 3df6bea9b37cb71e2e9f9a27f930b2f38afbfdf7
SHA512 32328046c49417bdf24118283c3c20dbc6f8868b3482e169c320710d771bdf4e6db0a87f37557b12211d85f8d32f83186117c0dde97030cddcfb19a505b13f06
SSDEEP 768:st3S32qQc7fZrKlHxp5XSwQs88uBkiT29YxTxLO:st3p2trk/ILNB4Y7i
TLSH
T110F2BF39F8909DA39CF29391765A37476FF09107D8C80A94C5CDA61D02CB39E7B4B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed0afa38-1e2b-4261-a9cd-9291c04efc73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed0afa38-1e2b-4261-a9cd-9291c04efc73.tmp
Size 40KB
SHA256 924cc407911aebf6acae2ceb7fd490d860245d08c3b61506f0c3c7f7fdc06946
MD5 b286ae7824872c6ae5800ac1224e7c9d
SHA1 dd68a5e83ee9c874dd9a8169ef3544b8070854f8
SHA512 0131dbd6ac7ba81854b8d68f374bcd950ae33457ba9b7c1d6e8538b536796e9235abec1662a369aaa9c56dc4f3b5b2c920fda50d16a53d4d51209c182b3b11a2
SSDEEP 768:H/UxvxjgC+R3T32aQc7fZrKlHHp5XSwQs88uBkiT29YxTZB:6Zj3+R36mtrkpILNB4YXB
TLSH
T1BB03C039F8945C639CF2A395365A335BAFF05143D8C41AA889DDA60E03CB3AD670B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ec59581-6792-4775-aea2-c7293e48b463.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2ec59581-6792-4775-aea2-c7293e48b463.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fc66ffc9-7435-4775-8ded-ba2a6a72b1e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fc66ffc9-7435-4775-8ded-ba2a6a72b1e9.tmp
Size 41KB
SHA256 101ac16c0ec0570469b4d7686a15d01cfddb9b767d17c187b0eba59118cac5a8
MD5 9545c390bb8d5401bd17e7f78d080b36
SHA1 81e0459223136b9f23e0f18c3944ec771b3cc546
SHA512 458abee30289a60bd6c446ff8857e2a4e9d7fcf53a4535b1e0d18a4b788d49f66cf6ad6b16aa85cd629f8468f49536c9ddbffba1c6e7472c85902a6f3dcae62c
SSDEEP 768:xFFI3gwgk32jQc7fZrKlHkp5XSwQs88uBkiTlH7xTALz:1I3eHtrkqILNB77C/
TLSH
T1771359F5A8C38972D8AE5743677D2E429EBCD053B8840A54B7C9950CCD832BFE70B856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4b8961b-4492-4c15-b77c-64fdeb837fa8.tmp

Path C:\Users\Admin\AppData\Local\Temp\d4b8961b-4492-4c15-b77c-64fdeb837fa8.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e002591b-17fe-4f2f-8038-c58a5846944f.tmp

Path C:\Users\Admin\AppData\Local\Temp\e002591b-17fe-4f2f-8038-c58a5846944f.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1900_1279818027\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1900_501784095\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download