e5b3c4e5f21b7297b2f9e4ac2f0be0d9548ea9e8c729cf3624003cd8dd08f34f

Resubmissions

28/04/2026, 18:55

260428-xk1ljsdv5t3

17/03/2026, 22:11

260317-138xesfy7x10

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
898s
max time network
900s
platform
windows11-21h2_x64
resource
win11-20260130-de
resource tags

arch:x64arch:x86image:win11-20260130-delocale:de-deos:windows11-21h2-x64systemwindows
submitted
17/03/2026, 22:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
z7troll.exe
Size 3.1MB
Sample260317-138xesfy7x
SHA256 e5b3c4e5f21b7297b2f9e4ac2f0be0d9548ea9e8c729cf3624003cd8dd08f34f
MD5 5a269353710e9487f3731bf973412598
SHA1 67ea643b84b2c52e954418040c4e6a5d70680996
SHA512 3d10b9b057062faf5336c8f83c87b7ff2aa5152983ab519e7aaa62ac3f67ccabe05a73e5cf3e258c5335362ccae02cf67bcb7703acba6e5ae126b370a6719462
SSDEEP 49152:zxWRi7FAbN8a1h68S+QmfMWByT8+HE90IFTaaplWMZhSHW:ciKbZ1LHFbplTZhSHW
TLSH
T1BFE5BF67A3A141E8C166D47CC6479713EE71780B072096DB6BE04F5A2FA3BE06A7F341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 30 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\shopping_iframe_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1403710930\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\edge_checkout_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1403710930\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1667495876\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\product_page.js	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1667495876\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2036033354\typosquatting_list.pb	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\auto_open_controller.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\edge_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\shopping.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\shopping.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\edge_tracking_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\shopping_fre.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1403710930\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1403710930\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2036033354\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4044	msedge.exe
3012	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134182591383217940"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650218026-1419908266-2856590055-1000\{EBCBB11A-E30E-490E-B475-03E00105D775}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650218026-1419908266-2856590055-1000\{19B85134-3859-4487-8FB4-605F75C3E8AA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6048	msedge.exe
6048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe
4928	msedge.exe
3720	msedge.exe
3720	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4928	msedge.exe
4928	msedge.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 4964	4928	msedge.exe	79
PID 4928 wrote to memory of 3012	4928	msedge.exe	80
PID 4928 wrote to memory of 5016	4928	msedge.exe	81
PID 4928 wrote to memory of 5016	4928	msedge.exe	81
PID 4928 wrote to memory of 5016	4928	msedge.exe	81
PID 4928 wrote to memory of 4940	4928	msedge.exe	82
PID 4928 wrote to memory of 4940	4928	msedge.exe	82
PID 4928 wrote to memory of 5672	4928	msedge.exe	84
PID 4928 wrote to memory of 5672	4928	msedge.exe	84
PID 4928 wrote to memory of 5672	4928	msedge.exe	84
PID 4928 wrote to memory of 1160	4928	msedge.exe	85
PID 4928 wrote to memory of 1160	4928	msedge.exe	85
PID 4928 wrote to memory of 1160	4928	msedge.exe	85
PID 4928 wrote to memory of 2868	4928	msedge.exe	87
PID 4928 wrote to memory of 6064	4928	msedge.exe	88
PID 4928 wrote to memory of 2868	4928	msedge.exe	87
PID 4928 wrote to memory of 6064	4928	msedge.exe	88
PID 4928 wrote to memory of 5172	4928	msedge.exe	90
PID 4928 wrote to memory of 4136	4928	msedge.exe	91
PID 4136 wrote to memory of 4396	4136	msedge.exe	92
PID 4928 wrote to memory of 3632	4928	msedge.exe	95
PID 4928 wrote to memory of 3560	4928	msedge.exe	96
PID 4928 wrote to memory of 4260	4928	msedge.exe	97
PID 4928 wrote to memory of 5360	4928	msedge.exe	98
PID 4928 wrote to memory of 5360	4928	msedge.exe	98
PID 4928 wrote to memory of 3096	4928	msedge.exe	102
PID 4928 wrote to memory of 3096	4928	msedge.exe	102
PID 4928 wrote to memory of 808	4928	msedge.exe	103
PID 4928 wrote to memory of 808	4928	msedge.exe	103
PID 4928 wrote to memory of 6048	4928	msedge.exe	104
PID 4928 wrote to memory of 3648	4928	msedge.exe	105
PID 4928 wrote to memory of 3648	4928	msedge.exe	105
PID 4928 wrote to memory of 736	4928	msedge.exe	106
PID 4928 wrote to memory of 736	4928	msedge.exe	106
PID 4928 wrote to memory of 412	4928	msedge.exe	107
PID 4928 wrote to memory of 412	4928	msedge.exe	107
PID 4928 wrote to memory of 792	4928	msedge.exe	108
PID 4928 wrote to memory of 792	4928	msedge.exe	108
PID 4928 wrote to memory of 5484	4928	msedge.exe	109
PID 4928 wrote to memory of 5484	4928	msedge.exe	109
PID 4928 wrote to memory of 1252	4928	msedge.exe	110
PID 4928 wrote to memory of 1252	4928	msedge.exe	110
PID 4928 wrote to memory of 1452	4928	msedge.exe	111
PID 4928 wrote to memory of 1452	4928	msedge.exe	111
PID 4928 wrote to memory of 3720	4928	msedge.exe	112
PID 3720 wrote to memory of 5760	3720	msedge.exe	114
PID 3720 wrote to memory of 5520	3720	msedge.exe	115
PID 3720 wrote to memory of 4044	3720	msedge.exe	116
PID 3720 wrote to memory of 5520	3720	msedge.exe	115
PID 3720 wrote to memory of 5520	3720	msedge.exe	115
PID 3720 wrote to memory of 5240	3720	msedge.exe	118
PID 3720 wrote to memory of 5240	3720	msedge.exe	118
PID 3720 wrote to memory of 5996	3720	msedge.exe	121
PID 3720 wrote to memory of 1080	3720	msedge.exe	123
PID 3720 wrote to memory of 1080	3720	msedge.exe	123
PID 3720 wrote to memory of 1080	3720	msedge.exe	123
PID 3720 wrote to memory of 4700	3720	msedge.exe	124
PID 3720 wrote to memory of 4700	3720	msedge.exe	124
PID 3720 wrote to memory of 4600	3720	msedge.exe	125
PID 3720 wrote to memory of 4600	3720	msedge.exe	125
PID 3720 wrote to memory of 3988	3720	msedge.exe	126
PID 3720 wrote to memory of 3988	3720	msedge.exe	126
PID 3720 wrote to memory of 3988	3720	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\z7troll.exe
"C:\Users\Admin\AppData\Local\Temp\z7troll.exe"
1⤵
PID:4668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f0,0x7ff85fb2c188,0x7ff85fb2c194,0x7ff85fb2c1a0
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,15366253676303419675,3655622620356129270,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,13872533130084376698,3227653657615380489,262144 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,5980002830806346440,5807482340701934112,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:13
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,15507150301658880617,5131368491928782731,2097152 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3520,i,1179518471924423866,16682161158879712136,2097152 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,13784795492761050340,8314446607036383353,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,13191497254433932463,17459526627073770238,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,9107326961526791346,12501011029812116177,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,9107326961526791346,12501011029812116177,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,17945920673607552848,1861423311812825827,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4136
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,761504756123271075,15245041982314089637,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,4640036711583574138,4878553266004124788,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,11813739792006693090,9013257461554924716,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:14
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,7261212180419344381,16303868319794576112,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,5345965263651992799,13168119183662062190,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,11760604080686216564,1607748651962997343,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=876 /prefetch:14
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5964,i,32487832411541571,6306444700971928567,262144 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,14998614201287161713,15059302990852470655,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,4476667448230387959,9528553678731709852,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:14
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3252,i,9695505832493788792,6838800656995777383,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,11607638543068408062,9468270337372310424,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:14
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4748,i,8705220562861302829,18115637804649695164,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:14
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1160,i,4553833256537959571,11494460460906728356,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,5972082552181075733,10089596397322764667,524288 --field-trial-handle=2128,i,11451323795563666069,6251948696137975151,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:14
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ff85fb2c188,0x7ff85fb2c194,0x7ff85fb2c1a0
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,12809997778114536808,7533255008590077740,262144 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
    3⤵
    PID:5520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,3612397504179737039,5638939875325504684,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,7992023846398541659,16368871843641609092,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:13
    3⤵
    PID:5240
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5889097700580766031,12202018808490287691,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:5300
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5889097700580766031,12202018808490287691,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4768,i,10051220034258845783,4342586967521519626,2097152 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
    3⤵
    PID:1080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,3155633075883735641,17729768357389165510,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,4730244893177432117,11545057809984265990,524288 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:4600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5560,i,2902779126536513704,8812529308881376014,2097152 --field-trial-handle=2032,i,11828448521366983282,6301534694945474297,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
    3⤵
    PID:3988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7529f30a45225a033ffa40b5dcb9f928373fa3b869ef5437577b6ec6cdd09095
MD5 ed9ca3aa432b49cc8d209a7f88adc2cf
SHA1 4ea17e6067bc430442b0504e18dbcaf56808bc15
SHA512 a0e793528066259d4b47c90ccded88b3193dae83ed0510de868d07ed23b02ef6f18c65083a3e937ff95a2f0478e42e67638f4c3f4b72898a089b9da834f8c79a
TLSH
T12AD02351EDD81E00E4082937246DFA905718DFACD547D65255F5CE7E7F800D544D0DD2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9c299257744a0d771bc44f82fb292938d466ab76cc5595c9f69831e0f518f902
MD5 4a495b7ea0fca1f30aecb348ba51f5f9
SHA1 e13ab436eacbcac9017f598298a4924eb7f99797
SHA512 09b3bac4b618cf9daedce99cc1cf4d14c097a29fa63acc9c2f031994bf74ee03b259afd51c5a512951cdb54cec01a8c4b9807e65c0b398dbb7ca65591e8e28c2
TLSH
T17FD0A751ED981D00E8082937246DFAA05718DBACD546965255B5CE7A5B800C54490DD2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a218e9a81e4ffbb3cfea3069a8c488d5cfd2a2018911e9d65334ea4feaf8c4ec
MD5 c7efd027cf9cc3621caea5d9f1b56126
SHA1 42fe21773a4df63a6c715dc017e508cf6623af61
SHA512 cecf55cc8e7d8d2dc8a6603fe2769bea9f5e6cdabf9983bdf2d777a552bb878301870995c3448c784ae8fecae34398d0487b284c8603056e16e402d9998931d0
TLSH
T1E6D0C040DAF01920D8006471242CF3C00E09C8A2CC43DA2124E0EF79AD810D644C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 09d43745b7beb0d2574056dfdacdb3449b786708a0b1a5f978e5c9d69f81a1ce
MD5 c5c86d9c5f7c32a8c4fd09d6ffda4aa8
SHA1 8d3978b900d523ba08075019d6235c1e176294cb
SHA512 e14f89cb3354fd6d7a68e1c291c8723a5bfd3d28140a150bf75ef42a2ef8212eddaed6f6db92cd69e603806f0897ef93b8761a51acd8b8db67878c4cf26ee23d
TLSH
T10AD0C040DAF02820D8046471242CF3C00E09CCA1CC43DA2124E0EF798D820C644C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 60bbd606ec8251dfde1e3f19924e63841112d9c976f3fc25f198d8594d978909
MD5 548d2a460506ca1c497f5f75aaa7dc25
SHA1 7ee9a789c4e022aca33fb54d65fb03d2c7087998
SHA512 c93287fa20e8b3b7dc9cee332f0a7fe38d7d1518a879aa89d91ddaa0f097e2b88d8db68c4bee00dcfca81726304cd5da7cf035122c4bc57b20c32da0337c369c
TLSH
T11BD02390EDE82F14D5043833303CFD95164C9D65D546C51755B5CD7E7B840C600C0CD3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 810B
SHA256 c84eb9c5a3733c7372381288a639a4770364933a1cf8e0c4a0b4013b32adb230
MD5 32eb571a340b85ea18f60e06bf9be985
SHA1 b03c009b153ee26209ef9ff3735cbb5b08e03a26
SHA512 2abd80715d5a2412dc236ad7b229e372699f296360507e4a2d7e04ec321bb42ee84f29d4fb9a9409444e7dbceb98d8c4daaf30c835083c0ad333e62db7c7264c
TLSH
T1CF01D62733F29AFA11D693638B4899B7C396F5B6AA4E48CD3ACC708C90A124181595D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 335B
SHA256 a824b983482e7df69161055cafbcb4ef68bdccf33662c455979a378a47f1f784
MD5 3cfa2a8a9a52ff04284b601f9963145d
SHA1 609e67fcf1daa1c9a20f29fabf453df84ba37f7c
SHA512 dc9de88f98a1210121e2bfc7caecc48d2d4a726f4c0f9ccab2825df730bc0ae74f7d0f4d8ac629336e000ea3ab7f8a895ceae90d36ba69c7d80c58d6501ccb27
TLSH
T15EE026E226C8C3AFA284E4C7436C431D82D0365BDACC6A8E2F44C888F2C245069866A4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 666B
SHA256 1e5a66bfb4a42b7caa9a0a866ab234c7c2712f3f500be55324343919eff93fce
MD5 88b35cd75226c7bfae2dd3d51eb34611
SHA1 7a27827aa959108ffbf75a56ea632758028bc382
SHA512 253882e747ecdf6071501d0ad54ae31d5b2414ba3fab802763cd6c4354b8e43a4f76a0fe0d4856bfd16fc1ce48ea0fe31caf26fc5724ab0ec626b4ac771ce584
TLSH
T16E0126ADB6DC788ED7E80EFCA532B1401F2822D6C85EAF134620FD91366A6F01B71425
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 14180b3d38553d0feba2fc43b7dd245f3c401a0444bd00e8b2f155da60749358
MD5 8ac598dd5ff3f26a6d2b93129ea157c2
SHA1 3eb6bf95384082bce4cde5220d9573616dcd9e79
SHA512 4de55bdd51b3667aaaa544dde33be67c641d9576d76abcd70b3250797fcca12da479b81ce8ddfd596dad2731b311586f8e5f2f68b44c0e8bc24ccf1e4d99da2b
TLSH
T1D7E02BE5C869EC3B1CF9173890240745F76013672A81889F3A3C910D8FB4E37828291C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 d34b5c54f995300b13e52607535b2fa5c9f1c928398bc44e9c4ea20e32e277ac
MD5 f31bd8d8611ff346a4cf5be84feb0555
SHA1 a733edbc152ef76520828253984819a39678a884
SHA512 ce5b97779bbbc1c5ead71b3d082103d08a4d35d47db76d5885955d1d67530a0ec1be81e4529e23b80b4996f50256f844b4bbb2e29d4f350d5c41fae7613e5346
SSDEEP 768:iwiWDMnZ6hD2m/iW3Pv6mHZdf5S5JFtF8yg:imMna2VGPimb5S5JFv
TLSH
T16B13C43CB6390F52E6D3D73C6C6F0A3023618920E6E6145F5E7A7066529EF4E28CE1D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 338446df0abe19eb4bab59528c7f983ad55558b5e351587214dfc8c56190befd
MD5 581fe34dbe0236d9365443fd6d553103
SHA1 a69ac748e59d3d837a1b0fafe99b2c14f7cb5b66
SHA512 99a429d2e53d2ef3ac7eee93aa3660927b0ecfc7cd7c6257a2177e5d79a8a4932235f650d1421fb71e8085f20316aa713bbb3cd9b90a86964b1479b165c9fd2f
SSDEEP 1536:jk5E1A0BFdvs5Llh/end+sOwb4CIJ6PQsiTDwViC0XIkRAk2/y4TeNqWjQfA5wM5:xFdUGosriTDwT0TIy4ijLPmC
TLSH
T137B450F70961A01BCBA852F5E2033E3DD177051D6DE1E8E9D63C0C952829F32B6BDA94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 062440022837a20016f353a6c3f54d9ed81e3beb42dc1105faf5347c080dc13c
MD5 1fab0b82faedb7c18956e46a7c719e9c
SHA1 2dea3fd02200d2d6c4a7862d8b84661bbe250e35
SHA512 26548c8b80c4ded5a4c9d0e9abea7ac4af452ee485c1b60effec439098a41f7ca722f7fc49d65951c4f3915cb5ecb650549c6a59d1a54d859a994c3dd2007bf8
SSDEEP 3072:QCle5mWwGhF9DiHmjDDW7MUfH4yLJLGYIQDrIKi3ErZyoODacgdJ4tn:be5jwGhTNPDwL/4yLJfIQDrIeZx65OA
TLSH
T15D254BEECB282C83DE6B4A70B4E0EC137DB02183B659D0D35848C59497967C577EA2ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b3808c14fdeacd7bf1ca81846516be30a7491234c58d62cdd9d5700baaebd246
MD5 7297428f3e30c5ae44d79dd9f32ac9e7
SHA1 740f624bea7a4763fb4f4df9686018a4a6137be7
SHA512 979f7563075e77e69b04615f3feb031bdbdcbd32b839438381d7f6391ae66fab621dd517a75b18d191db3918a1137f8b113231a570828135a1cb5362217e16b1
TLSH
T1F951AC108CAD3375DFF1C3315AB69E18B5F041FA604A5FD66C9A5E2E3D22E8432E20D6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dc51.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dc51.TMP
Size 1KB
SHA256 9f312b77c6107b4ab1c46269ae02b6afc4b3682886000aebd6150e2a9ec82eed
MD5 b3db659fddc5d44b6fc256d66d161258
SHA1 f0f0fe65056aea9d93f333e52ec2d714622954f3
SHA512 8ef6445bc53777b7dcb9c800d3e04adc8eceb18b2fad7e9e06abe6197d51747b95abcbe2b069b07e4cff20244448de71161a680cc0410cbd5177d5c273805e70
TLSH
T132311054012EB01DE3F183358AD2CF20B27456F945DF9E6A5DF1463D6D65F2133C0406
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 513B
SHA256 388c5c95f0f54f32b499c03a37aabfa5e0a31030ec70d0956a239942544b0eea
MD5 c92eabb217d45c77f8d52725ad3758f0
SHA1 43b422ac002bb445e2e9b2c27d74c27cd70c9975
SHA512 dfd5d1c614f0ebff97f354dfc23266655c336b9b7112781d7579057814b4503d4b63ab1263258bda3358e5ee9457429c1a2451b22261a1f1e2d8657f31240d3c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e7c57732043d40cbf76b41087a7c79d0f1640264ec51384a14e625d597248d70
MD5 49a627f396043c5a490264ecf51b44c8
SHA1 d61cb84ab212d9387c312ebc6cd95aea0b31b927
SHA512 4a5b6e8aced2ae5ceb426052314ec5d8f7ea7b606e9bc6e72df7aa49ea1c619314c6e84491e1b8edb8d4493c641fc967f9c07a8af979a8091a052a8d650f01ff
TLSH
T14BE07D8A39DCDB699054E8B787A8471CC3D03483FA8C7D4B2F89AC487181741F687394
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 c6e477a0ba2c1fd872cfc3375829f665bf276be2d5039593b1e5eef3c348a856
MD5 f23b41f179a2c1d43c828847506d8739
SHA1 816d88c1e17a5d607f14544585acadd75c91f40f
SHA512 c4a53091d74ed03fa8949dc06db49fd1bcf914ce8dde17f6df04c816e2a317deea0927ee7403d44c02f0296d7702cc4d5cd801011bc35cf91e6738105b5ad9db
SSDEEP 192:ESsJOr0+G83uxXBBK31GkSJdQEJH7DNspU8:9Ra83uFBBQ1GkSp7DNspU8
TLSH
T1C614420F5F342211CDBD813669EA44A35DBDF03F8B526A9A78611471CEE3B52606C8FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 107KB
SHA256 2d15d1a30785666c49831a5f576a862cbcf96e20e769a85459f93b023a1fb8d0
MD5 8b81c51427788daa7c346b9f7679e4c1
SHA1 b466666ca62f4102f15a65b4b84907a97b184028
SHA512 170baf598b42456ff411222239f85c936c74e063f1b5677f763c9d2eb99ce633d4ec96e49eacf6a0981bb5447433c3c030c17b43ca40ca5aba08d9a798b5051f
SSDEEP 1536:RfEE4+V7loQNNGZqW3w5PDuVjbpBuW8vRZsM62UhPq:qSVOZi7ZU0
TLSH
T1DFB35227D6A64C6B01F16264EC754382F325436F9282A82F3A3C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 be1d6886fe7a69aa29ebe586ae84e18b3034c6b27bbfcf6d7b420ad00fa566e7
MD5 1790809c6b82bd59891f54da1a49d10b
SHA1 05b716d4e79e72f9068ca6a9a468bacf36637117
SHA512 39c709ccd1f107bab72b80987b198d130e0cc77d6731ac4f80bd71adf0ee5c8c24f3239e1c12f291394caabbfd4ef1aaeb316c1b3253e33dbfee20857191c647
SSDEEP 192:CVN4JwR8xigVp6h6tXzEq3tBvdFiDVg9s:C8JwR8ohcQq3tBv7D9s
TLSH
T1BB1274BB1C0CE597C7C154E596B3AD99D392C87B9FCAFD9AE16CD0AE04D803038B6102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 3e2ff9041969a015762de1f9ae6199dc29a23c73dfb5cc24c3264a7b3dc6f395
MD5 ddb3016787e1db68deb9f3ebc0b842ad
SHA1 16a80ffacc44c8bcb79fcd1f9952d804d42d92a6
SHA512 bc12363357981c4e4d02507521cb1ba059f7b1320ed04c41be0529b599da7e86c04a9b670055ff91f4276fe51c2d2a852acdfb0bdc7a28426b3f3db6b8fc2be7
TLSH
T1E2E0206575DDD75D9254605B83187B0CC3F03447DA8D3EC61F84AD44B285204E7C13C5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5cf945a6ea9165129d0b75ea36a4200b42dd22fedfd5d9059c2df07004c3c34c
MD5 3ed2158d513ecd222c5eea8c08464d5e
SHA1 cc93fe141b0dc51cf07c61155bee64a97ca74f53
SHA512 007f351e2a02d463103a012707b2dfcfa04aa0dfa23e6fe8d96474e33926325df28317d27da0627dd449e5d0b1e089d63001be2801d0b6c7b1c65c5d3970b19d
TLSH
T10331DFF3C3E8897E8A0085F0AA187F2BDE6D0910532C3D9AC5E0AE1B97E24B5D14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 396aafabd77dab0956b89137cd449167e9dcd3a82b2dc2049a54193b71c2a9d4
MD5 aa10e71b8ada6852846a92e70b7a551b
SHA1 9319cff6ba19e1deea28f7d09ea344054b5f9477
SHA512 5841b91a155436d4a0fd3bcefb157be84449de17dd8a968f8e2fb9e2fbb936346884034c3a6f20aeefcaf6f5ca16db09ee6eaf1cfa20a87055b144d47cb6120a
TLSH
T191719EF783B5856DDA11D5F0ED08AF1F8F68045243AC7D9A85E06E1BA3B2871E051B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 eaf03a67aa6594f39b3b0868ee2fe73f918a72e55c85d3d0476f29341b029563
MD5 5f027fe05637e9e04bbce8b9873e1eec
SHA1 87342ce56c1a1348ac2314b4f2bc7959a76a36b3
SHA512 f095cc6c5d4c86dcb5fe72bfafc26de6067bc64767fb0cb503879ba1f591d3e2bcb5bcd2d8ceea8adaa13ed646027016b8634260cd63db48e35a9578cd02d21f
TLSH
T1EF71ADF783B5852DDA1195F0EE086F1BCF18045243AC7D9A85E06E1BA3B2871E051B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 41dd640d1ff4ef120f8ed1f5372dc270f02781a4f4119f7a51b240dd79b81911
MD5 8cb1e979d1f862c2cc45ec2f8d5c5f38
SHA1 33dcd977fed333c5ece6c95312b1a3f2129a2d08
SHA512 515370982d1a77e381bcf849c2a8a772d4254750c6e6ae3263ac881a59c7167b7beedd4da77b92c0208fe58ffc47d35015307ba535f940ab66db7d5a64adf1af
TLSH
T10C81CFF3C3F9852DDA1191F0AA146F1BCF19045643AC3D5A89E4AF0BA3B2871E051B8F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 690B
SHA256 ecf2af8e7afcf585f60126956d642281ef729bf6e370812f83fa6b2508b2223a
MD5 57f4aeb06ca5ce0f16a744352aeda84e
SHA1 0477fdb54cbe5410795032785198a97be9d3192e
SHA512 3f9c77cb1d29601903fc7c61253f8cb15bcd5bb953c3d7f97fd52b04e98a7426b94f8a1a8cc5bf403c7b20e33e40a134eb09df4bd97867e90baea6f4fc930137
TLSH
T1580194FB427EB82B607C8DAB1F18BD492D75B53151C474F5C7E5423C60848F7560206B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe65a4f6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RFe65a4f6.TMP
Size 690B
SHA256 64a94ade6961dd06eb2401d808994c33873b8630fa43dcbd365035fc390cbb56
MD5 9ce1364bee1a6dbc8ecf6073c411f705
SHA1 0ee1cee5cd7c9683c7762bf0c9db1bdf6b007fc1
SHA512 1112727be757ccf149bb9efad2867cf385e9d148743520728e2229a9ef75d3397d348ea89aaebbccc02a92c68a567eb5ba2629f7f497986468ad253237306b06
TLSH
T1B3019EE7827EB83B207C8DAB2F19FC892D75A87151C074F1C6B9433CA0959F7860206A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 0ae01c73a9f656da7c30ae99c5468d3f319ddf4d49a0561588c515a69aa4d194
MD5 20b516fbf55faeb3b37839cfba7708c7
SHA1 f1c0f782584390b47d970ca35457c9167563ff1a
SHA512 f189fb656b9b20ce63c7d92d6a8d02e669bafc87f7ebd8df6a9540aa475f57d274edcf51794cf92ba393599f90d96bbd44dbb160a7191772c5d92299ad7164d0
SSDEEP 192:sxZ1xRsyijBKOMl8MHm/f4sZ7nBivbRFs6Eodp9a/W6+WNBD7/ovO0twVxR3Ig5t:sxZ1xH/m/f4spnkbR5xs/bN/oLUZbL
TLSH
T1E082E8066938697B9CD7D219F945BF93D7F91573E1444E889AFCCA0C04E6BDD220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 87951b5ba9eae03cfac653d12f301293ded4422e03542ad27e546057c4ff6284
MD5 a9d75447d9de218284916a3207c1208d
SHA1 a87915844436d55ea55eb0e2882b63c43ffbdf15
SHA512 bc93c03f70fd919696c5804052d751c8b1bc9821f94b5fe0dc9577cabdfd26286a6925ceaf9baad8756d8d3e7ae1850373a2dfd1471153db301b5e939f64ea51
SSDEEP 192:sxZ1xRsyijBKOMl8UQ/Hm/f4sZ7zBivbRFs6Eodp9a/W6+WNBD7/ovO0t/VfR3II:sxZ1xHqfm/f4spzkbR5xs/bN/oLbZ+S
TLSH
T10382E806A938597B9CD7D229F945BF93D7F91573E1444E8899FCCA0C04E6BDE220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 444d7e0ef5ad5929869dfbb6d6739ca410f2555e9b73da20024537276c68eae1
MD5 74980efdc2b6f943e39ca897c8eb4722
SHA1 088f2a5644cf17a400051ea09e1571b1022653e9
SHA512 6dc376d62552e1e046940208e443de28f06300d78f0410fce0d3fa58402d864a39dc150d80a9bcea05f3ddcf801b63e533a7ffd6ac13405d05f3387f81915f4b
SSDEEP 384:sxZ1ynVHqfm/f4spzkbR5xs/bN/oLbZ+S:suVKfm/fNzJ/bx6b9
TLSH
T11D82F806A938597B9CD7D229F946BF53D7F81573E1444E4899FCCA0C04E6BDE220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 3b23afd85237018fa8aab6871ff835b3c1e8051f1246b219a760158c242a6774
MD5 4ce4cca548997f3dbb9b2ad46eb0499f
SHA1 5442bfe36191745089fba2a86f5678e800616140
SHA512 55b6f9eee609774d2eb9c191379e01a5cf495ea123d7060cb6f030a4a4f3cdc3aad710e477fed9bfe446dacf00daadbcd9e4793c41ab329341ecb59a24cf80ac
SSDEEP 384:sxZ1yneHqJGm/f4szWvezkbR5ps/br/oLehAS:sueKcm/fvYezZ/bT6e7
TLSH
T1A092F906A938597B9CE7D229FA467F53D7F81533A5544E4899FCCE0C00E6BDE620382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 bd5a67e3dfd66e7f56c3b3b5966aa7e48740534451c66a12a01ae73c9c8491d2
MD5 5f564c32fa08b4ad246618693876d21a
SHA1 e9966d66e6efbbf4d9ca1d567a13fca7e3fa86ca
SHA512 ed732b6843cc870259b0a522da63ec159f1422e34ea97cc12182c201cadbc89da4e3d20812c09d6875503f746d5d47ab24a8fb9488ea8cbd2c4711fbc3721850
SSDEEP 192:sxZ1lRsyijBKOMl8MHm/f4si7nBivbRvs6codp9a/W6+WNBD7/ovO0twVxR3IgjL:sxZ1lH/m/f4s8nkbRHZs/bN/oLUZjL
TLSH
T17A72F806A928697B9CD7D219F945BF53D7F81533E1444E989AFCCA0C04E7ADD220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 fc70d1fadf466c5e7aee7edf6f6607a6bd16e6f6e76a0e34e8b47e1f709863ed
MD5 b1c7d12f7b06ddbf3522789e6ffd01a3
SHA1 74d2e5b6a56ce0bee45a76cf35b2cd548c2ad738
SHA512 b45e48442ebe28ba187be5288a7e90f3b8d10d000ec71934f08f29a7303e9d6c888f55f3ad3fe64ab23f7d5524b84aee41e52e32aef95facb892fd11e2df2bcf
SSDEEP 768:2DhVP8b32hP7pLkdL/mKWRmmeQRe8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3zWWlLG:2DhVP8b32hJkJ/mKWRmmeQReu1jaKzWN
TLSH
T131030C3B280CCB7F4F844E9CEC27BE9A6DE8018B9698899447FA444C03C67EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 063ad32a66700abe8ab94aae16decab30c102fdf2acfdf1c1673b741b3f3a7ea
MD5 e3122a64b21ce0031fd0d8cf78424de5
SHA1 0796d5831b754cb79126f5aa042fe1a0039975bb
SHA512 ba5d499570f2b0e351a0e776d9b6b769c64d1a974bf9fa9089831a88a40ca7143551b4fd526feae1bc0dd649819774c54941bb3847673ca18b62c19ff58068b7
SSDEEP 768:2DhVP8b320P7pLkdL/mKWRmmeQRe8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3RWWlL6:2DhVP8b320JkJ/mKWRmmeQReu1jaKRWZ
TLSH
T12D030C3B280CCB7F4F844E9CEC27BE9A6DE8018B9698899447FA444C03C67EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\54c53f7a-c4a4-43b7-9915-19858d169173\index-dir\the-real-index
Size 72B
SHA256 d9c58eff08fc282157ca5ce5123e7e76ee9aaf73c23348526d1dd4846027cdfa
MD5 d9436b3137f8b9d765e35649e1c049f7
SHA1 8a12f9886c4a9fad924c5639b1382593ca63c6a0
SHA512 09e7a83c9d8bbe5fef4177bf7c39e8f8e235e909b89939a53f669c51d20d64f8ed6777e4e31894cc5b8a97b983d07d4749acd0d6756a90e9d3e8c1218b58fd1f
TLSH
T184A0025811430BC5D6014778214D06C563108C7425152205C1E0C58AD9541447213448
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58abcb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\54c53f7a-c4a4-43b7-9915-19858d169173\index-dir\the-real-index~RFe58abcb.TMP
Size 72B
SHA256 1e4225468b320a2190997217a814db9f0f294d6d499d9ae9c9b9424bb210fc03
MD5 e5a9ae58de7adc993281ffe99619e7b1
SHA1 188ed07fe6286ba7ea6722486d98ca32efa02d8c
SHA512 fb6584222d94a502ad8f8785077218b97fe60a687d9bd56aba18561b6e75fbab13a1c2f4a4de5a950fe7b7eb15bb34df609c261024b747906f65a30ff0d4c372
TLSH
T176A00258824360D5E685C2B6521342952E50CA505041165646F1E4AC8DD049995C5050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bfd31c79-dcb3-4a30-94de-98ae2d63164e\index-dir\the-real-index
Size 96B
SHA256 62733262f5da2460b6730ae2f53ae99a260b0ae6a73782e361f856b06fcbef72
MD5 9ff623b8b2710abceb57f10193a87c79
SHA1 fee3b941bb4d45200b04cc455358612144827a59
SHA512 631ffd8c7a9c890e62018e1dac8e4cf66186762b7c98ca7caf7947e87490aebd449cdb756d00eb48bdb23e2205010ab60abb082f05110243b7ee65ebabd20777
TLSH
T19EB022B002803803C003BBBC20C320C333B0CC30032323A3C3B00888CB00F82028008E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ad14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bfd31c79-dcb3-4a30-94de-98ae2d63164e\index-dir\the-real-index~RFe58ad14.TMP
Size 96B
SHA256 348d4681e0d01d68b34735f02a32e2bcc6337df668a517614fa6801c735b2c04
MD5 a4ecfccbd233c015e1d78dad40007e6c
SHA1 91fff4f956b43555acf49d19a3c1467d3ec0a220
SHA512 c3039adfa7702cd44c25db75094d80dcf152eaad0bca8a6a6f1d988bfe6a20eb78578114c2eb477c35707e4707b1dc8b226b04ee33aa4b526c93b4605904ad24
TLSH
T110B002B143D01047D6129FBA55E671916610CC60A617935785920165CF61A838FC35EE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c62679d3-3ed8-4233-864f-c73e30ee629a\index-dir\the-real-index
Size 72B
SHA256 36dd0bf68682ee073a92c83df3445ee0c913333bea7c11b70035df578b54e8c7
MD5 50cd69dd92e7dfaad09ac7c31f865828
SHA1 29ed16daf040ac5affe6c840e5752f14dc5627ac
SHA512 a15e72287f35cb56e9baf094802e5246a91ae21dc8a71823a1b831380377035ecdb07f57744b1ca5228d427dd72a77154ee72660c75e46365a26e3c9b30756ef
TLSH
T1E7A0029181651501D451CA7466C7A24527369C180203164350F6019CCBE915953650E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58947b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c62679d3-3ed8-4233-864f-c73e30ee629a\index-dir\the-real-index~RFe58947b.TMP
Size 72B
SHA256 9f3500e96d3b2b1b5b169478585ea2ba3c6c01fde5e8139fe32421d8605f4caf
MD5 08223bdf4332cccd94d2658971b03aa3
SHA1 9c11361b0a5ebd2f456668f621205d86531c560e
SHA512 9603a9920f5b91c6d85439aa87b452999403088ccc9f053d4e3afe3a9bfb27a07847faff43d553086d6aeececb642e7dbf787aa8f542c1a114d3ed2c5fcad63d
TLSH
T103A0022412E55415C4E4CA702011224752169C200003366744D400C99F9075487714F0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d18620f5-2f8d-43b3-aa25-6763ab1bcc3f\index-dir\temp-index
Size 2KB
SHA256 a6ed49f0d95470facdab76aa9e1e9f06c64d78eb270d63d250d8e5b48cb00c7b
MD5 1131abfe55a5f949abb7ffe9e62b68d4
SHA1 316bf938cc713996d703a12157d72c8045e13e6b
SHA512 f97ec20cef92c4524701130669eaca2acf3d869ec9b93a6da21af8b559142c0b43d91bd812d64a7cfdb490983caf11e768561a7d1fe15d6cf1f55528dcca8b4c
TLSH
T1B451B45E8D468727E96D42F648FA049433392EED22D49B336DAC9234AC4711A6EE5B08
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 476B
SHA256 296000492a42734e2b3c28b9bc2bfae47be393c3c607a685349db40ab1107e4a
MD5 23bf57cf310af1e637ed274251722b5f
SHA1 9f366f035d589f1d13be6aa6d2d8612e54057a7b
SHA512 2e5bf42040556fdc59b88ae488496eee9a569a221a737a2326604548d27af7296a67fafc03e0b0eef46555ec7c1d8187807bf7dafc898d521d79d2cba97a1bd4
TLSH
T126F027722EFB1808F9AAD7E63031456501167968D511AC4F141B72DBC0B3328286DCA2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 8KB
SHA256 86a5bc55523b47cc60890600532001c155dd210a6341f2f095b6b27c5a00588f
MD5 baff447aa6adeb13c42e5ff058584d2d
SHA1 36ec19406598d318540084deb5586d5e4103d34c
SHA512 9d2d9a9abc9bdeb626df76ec31175d1a1dcdeb7a8e6c3c12b76dc3a2887bb7530b376ccbe165f5063c436eafc5596f5ca9d9eb4d8bc23907801f7eec621602d1
SSDEEP 96:F1m5HTJp6Oejpkqp6XpRfpxuapOpy3vpPpv:F1YHFCjxEPfvV8K19
TLSH
T1D01299E3DA14A053C9C966FB2039F5D9551DCA066FFF87A610BC8FAE52412D63328B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 8daa0f1b5af067bbf2ddec4d0c9cbf33e5a262e5c764589874a42a0a30c45009
MD5 65789d2c42d89c90ac5fb93af2b5910e
SHA1 4a4f53ae909c6e4ddc13f4de642c4751947266d4
SHA512 2bcc1f9d2b4d8b694dfe1c0c0e0d5ac7293f807c88642a3ef1186adf11d4437fe5b43207644385ff45f7ca72e1e7ad04ad86644a09c5c2450ee174a226368aa6
TLSH
T12BE0261027DAFABD60A560930334931AC3E47447DACD3D462FC0DC88658AA04B5A62C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 cc8661af1d6fc189ea32ee1fbe0f9367ee1ea65fb95d49ae13af953f97904c29
MD5 bacef97b7f130d29a703c5b0f2dc881f
SHA1 06b1891d655a301a924bb1790425522669fcfa58
SHA512 4d4f41db1459909b39d9113961f1143c992f25efb3fe53d670ce7e9444d8b692b40594071d73684d4c1ae36c7696fd4cc26855d471aa495201d50ad2524d2a14
TLSH
T192A00291C1D99501C4005A712189954433E04A110107130D48D491EBAD97351D14A145
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 81b12af33e52b0f8778c25ac4b6b52a5448fef0e86b3427de9a86ec866385b1c
MD5 225ba60b2f0e82bd7db0cb85482504b1
SHA1 83f782c5a823687285b33023f0ab61e247dbddb7
SHA512 7c4cf95b8e28b1feabdbeaa93d25743ecd53d1afb0e2c3952dcfc51f47593fa1da9950e3ff49b4055c78bed9c251c85ac7cad8031c3db2d089b6e28091ea16f0
TLSH
T1B0B0125477004257CC87053005744B59EB25FC45140585038D8DAF230D0D7743E0E8E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 abdf0df1ffe3656479d82b75736c9ebdf0222382be435c177618eeb405c9bb2a
MD5 314cdb89f088c188a002bffa0dc99a14
SHA1 893908fde8543cfb63a10049d978e0c748784312
SHA512 08eb8420b822b9304935f01af307332bbffaba919bfd7cc75cd769b9fccf9f93dde4e03c28d53564819fc05098e3d68d98f40a1d640957a905131a60c9882050
TLSH
T1AAE02030B7D9DF6F61C571974328D31CC3E27543DADD6D592F48F4486A4A2807247344
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 7501badfee4c1c5139ce93d003b085f5f1fe8f5e0f6398cc7bac789403064c10
MD5 6bfdf69696bf099005a68401a2c21b4f
SHA1 3ff9edaa4f319f97829c001bdef121aa9af564d1
SHA512 7818d3a79d8ce2f5d0872cffa32d9642a5b07308dec931c81b87b1cfe6244930c789979d957263ac0b2e4572b3937fb1258897b2ceaf3efb84bee1bb68c2a1e0
TLSH
T197E02674AACCCB796050A5D34374D71EC3F078979FCD3B8A5B485444A189601F7AA280
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 4964408c6a28852f868e5ae954c2685ddbbbe7d289b684728b6cde9440f9fa46
MD5 5ea21584a16d0654d1a1d9ee9dd7442e
SHA1 a1572989cbd46f6e9f7cda03821569720ca2d3c6
SHA512 df954e20cce3eba2a26bb930d367bc918dddda4225321cf19d72881c93a655262f3038e3d97d345dd09fb1f748225840f98f5ca1d10dfdf2ae4cbcae49a703e0
SSDEEP 768:qRr7YzViOzdTkbn+1+++R+F+z+n+L+o+n+c+5+d+Z+Bx+r+Y+l+F+8+z+l+WzwHo:qRr7YzViOzdTkb+Y90I6+iT+3swMBUCA
TLSH
T167C26D11713B27913ABD258A8155B8AF42C271633119E83B3B7D04AA0F67E24DDFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 538b99d8c228296f78db4d27ab8ac94dc9a482aba26e7ca0ae71341764f2f36e
MD5 43b88adb5d72d3d5d7892f1573dc8fa3
SHA1 61a9a6f6a13d14f492a8669cfe3a4f4b33bd0259
SHA512 3ab081d86ed47f86bca9327949b235dc40dc80e1965eda61d3a4a0eb804e7f193f34f05b906bca9c78f7e7b9a5653fb62503914b4140909ef2db5ab0ae4afb63
SSDEEP 192:lAONXAszlrhNCsiV3HPBD9QlIIIobQMIMCXYcY:ZNwsZqsK59QlIIIobQMIMuB
TLSH
T11C52513A3B891B73C25E1FB7126A8B501FC688814A76222E3430185F5DF2A5F8BD51F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 fe947c02b9e128efd77b479ae0f9a69c62553e4583d0ec0801c2d98c7238f1ee
MD5 343334c20251b7f89cdf9845d1bcef1c
SHA1 d9577044c62d775146809db03b65b3aed34d9a09
SHA512 b951a2b000102bbfb4df1852b96f42710e9fb3dd81c662ed8bb98154c2500403e255ee7d2aa403cd441f3b249739af65af834a7e0579a5f3cc51fd22be9228e5
TLSH
T120E07D14BBCACBEFB05C60D70334574AC3C13843FECC298A1F40CC48A849300BAAA2C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 1dd0e0339aae7782b2693643aa9f900b6211314defcb0bfcec5219b31fab56db
MD5 282277c0c7a16d8428f0a8d7f5aaa7e7
SHA1 2b4b057f5af0103cd7e5614c5d165567b68c8c54
SHA512 e6e65de2341288e3ea37f6efbc92f58f3ac769c6a867698e2dc4cbcc60457c287e68fca800f6ad05c91c172714504bcb1fec8d151f356389c7ba36b812087eb4
TLSH
T12E217C95F320C108E54A867E902BA7351368E8029FBCEC0F447924252E72E010E8BAE5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 d28f1b8e3e2219646220e4dfe0195d1d302e9844610467f38c21e64291889162
MD5 4630b4523fbed9e0aa717ab41c9cffb4
SHA1 f118a077a4875dd12fe95e29cb588b1e1da136d6
SHA512 ccd2fd7cf3e8c726349980a4c1054363d97159fd884e400ae7f00e93be3565538b752cd9ee4c1bba5547f55c1642b8ca104cf455eceefcd0acd721f9431c4b09
TLSH
T1D4E0201475D4C6DF6055A1D34375934DC3D13843EEDC2E851F40DC4871453417A4E65D
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.1\data.txt
Size 144KB
SHA256 a2982a165c36b8f3624762f10749be694c8282f9b28c7e35965491794efe9591
MD5 868418ae9c5d2cb6622da65faf86702b
SHA1 1d7923eeef3d6b584513d6db8880d26c52f3aa5f
SHA512 8935a3cd42725cbd2f331e97b25bc823867698f8128a628a05b03ed1ff040e083f17e790f278e66651b92ef6fb5cabfa4c0d8fc400e2ccf3f1a3866a2ed0571f
SSDEEP 3072:nPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEp6+DC3gY3w3U:PX1aI5aZoKzMJ07N4fwY3wk
TLSH
T1D0E3F120CAC45FDD9FA82A1C60BE0F1973D1C7AEC8166686E773FD0B6F97908411719A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 938856190e864e0b2a966825f2952e57332c66640111a9773504a56e88c90165
MD5 03f0f01bbd051db998cd0935b494ebad
SHA1 ea41f54edfa9f5a3896174cd3705eb1e897cf73a
SHA512 0c229c733f478ceee833f5423f8263c74bd3fbd6c4134afbddde137c41f97ab956cb3d74021ce30fa4098e3f453021f43ad7c6ff5fee25231aeed751364424e9
SSDEEP 3:MsEllllkEthXllkl2zEOlZTKlt:/M/xT02zdt+t
TLSH
T1634404057FD04415CD10D0344013C3500370F41045115FC734550553DDD5D500D01004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 13361fb456cb14aaf9b6522ee24ebfc2a02e41b070ed6f9d25e8c0d436201ef7
MD5 3b7036e1f127bd9ff1e517c1c81a84fb
SHA1 7f9836cca70a24ca7d2902aac0c0e11c33f1c416
SHA512 89c92b7bdf5798943889a84069130d9ee1e96dbbdd00d94f3fede41d9415d13c51b12cfbe2b6d54e4af79715f7abcff15d3a63f39a9145f0fb277ff6ee4c3626
SSDEEP 768:jFJczSO13QWwgD2ZcU6Y8b0sPa+82KQn6:vcH13Qw2Z8pLmI6
TLSH
T123D25B71EC98DEA7ACEA4BD5A34A7A43EFE01167848C5ED8D9D99E1D00831DD230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0b72c3574f8db58ea30dc8f73c79d72e77d56c4fe099179516ebd589dd4635f9
MD5 16cb95e8395bedc1e26a96d5ca5950da
SHA1 d614221b404b96803af3fe8472aec5a9177d1e39
SHA512 a390f7cad6beb9cd220d92e6d782eded332354878eb4ecedecb02c427bbe28ee2e0cb562a0bd6dd8f5cfd4c4652885c18af581a1d37da0fcaca88e45e3c6402f
SSDEEP 768:1FwczSOhwwgw2ZPU1Y8b0sPUVkrx545wG82KQn6:EcHhR2ZGpqaOKGmI6
TLSH
T1B9F2187DAC949DBF999E6F48934E6A169EE01237C1BC4998EBC84F0D807349CF346825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 19261b966de595ad4ac8bfd0e4d64f5c2def2f996df35e16a396ad048d79a21f
MD5 85a0af2b81263bd0ef4fae72eeba0cef
SHA1 c82baa8db700bdcd3de4b9be0f12f782b355a75c
SHA512 2ed5c1e30fa82675d325a23ae298ba37f3f82e9700fa94870703732337566ea43ed4764338abb18e971fe08a3dd155ad8510aef4fd1f66ebe7301740d47bc405
SSDEEP 768:1FwczSOhwwgw2Z0U1Y8b0sPUVkrx545wG82KQn6:EcHhR2ZRpqaOKGmI6
TLSH
T1F2F2187DAC949DBF999E6F48934E6A169EE01237C1BC4998EBC84F0D807349CF347825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b79f426325a33183be1b99501ad0340f7597b5e8ec4e7fb140dd12605059817d
MD5 ac0d2417183cde606a3ef7ea99dd5379
SHA1 2c5a8ef110f2521ad7e1d9c62fd04979478a51c9
SHA512 e9f48d1364f1b52f2fa4a21a4571e30262e68588078e4496bac39eac387d92f0a8a3deade1fa5b93a2073ae3f627cfa1e3fc007c180122383027781658d27890
SSDEEP 384:nviFavqMg38Nnj8TUNTUlIxBO2+4Or4LJr+SO22fpYRsN7b0spbX/tmVbVw9rN1l:6Fayv3AjwgO2Zr+Y6Y8b0sZvt2w5l
TLSH
T1EDC25A74E898CAA7ECEB4FD9A7497A02DFE01263C48C5AD4DAD41D1D00D71DE2307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0b51aa7298a4487ccd9932f4a080ac19450da7b22e43b95eb037acc24a35c1f6
MD5 2041334da69da96e84d2299433aa549d
SHA1 8e24ff5b4b7ae35b25f10c586c7478d6bee31932
SHA512 4ef1a9848a9579fb32d0983baffabfedb17f8e0cef918018ff4be538fa0eca077c76bd620a93e590873a5c5e0f06c682f60681ba0694a0014ae092b90ef16afd
SSDEEP 768:nFJczSO13QWwgD2ZQU6Y8b0sPa+82KQn6:LcH13Qw2ZQpLmI6
TLSH
T18BD25B71EC98DEA7ACEA4BD9A34A7A43DFE01167848C5AD8D9D99E1D00831DD230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 dcefde26c791724ccee8f77f2562d16577314086fde5060a26552392d4ee39f4
MD5 f78f3c32b6432469ebcb6f15362380d8
SHA1 d965087addfc17bc5e25460448434d276c8f07ea
SHA512 dcccbe14c1f85add0bd516aa6951ccb5a7e81a84749b3c88a17c951bd47ae6af4be99bc9c7db2fbed5e8b6c45d43a9bd85f9dc11406e87753eaa15b8018fb291
SSDEEP 384:nMiFavqMg38NnW8TUNTUlIxBO2+4Or4Lop3O22fpYRsN7b0sPZ3+tmVbVw9rN1kk:3Fayv3AWwgO2ZKx6Y8b0sPl+t2w5l
TLSH
T151C26B70E898CAA7ACDB4FD9A3897A42DFE01163D88C8AD8D9D55D1D00D71DE270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 480d9f6022eb7955db3c1182a2b15de1a8bfe917dabeea3b599ef3303da15507
MD5 8d9ed24ba22b0139a7b6de984babd683
SHA1 3ff629198f0f17b49e1bf61719d8e1165b70e36f
SHA512 ed8d4233bea1d1573d125febe064a90bbdd47e08bd5e99aaa352f829020fccb4811c3af5dc156ca313c1460135aa421fdf267cb8ecf1f9013d02a1d9625c89c1
SSDEEP 768:1FJczSOf3QWwgD2ZcU6Y8b0sPU+82KQn6:lcHf3Qw2Z8pdmI6
TLSH
T1DDD25B71EC98DEA7ACEA4BD5A34A7A43EFE01167948C5ED8D9C99E1D00831DD230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 92f9040c47e4c6c38f43a87386948e0c2cc7df479570839fd38698c9711ce360
MD5 1811fbe54375084b0d12864de63e803e
SHA1 c05c2838ed44f78d780a4ea57ae94ca5f887e7d7
SHA512 ac290975a4c3250142c13717e2c43cc7e944fc0d3efcff634fff6c425775a86ac668ccacea0547959ac77ffdc2457adc0eef304b7b6d4e1ceca080327c8744ae
SSDEEP 12:TLpOPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isOmQQtudzzQd+VzcQA/:TL85UOl0afDdWec9sJY7GDB5fc
TLSH
T12F92AF62B9252063E8EE0B76B95348D10DFD12AF89A7B844DAD04D6109A2AC2A6951F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 9413b1f53ed4138c83b09fccc46307c913d6574cd4c0f5386d6075a14804ebe5
MD5 05a5d7817fc1cb52c2b575d3e8eaf0d6
SHA1 7a1b4c006fffa973fd9df30e98569bf2b93f536f
SHA512 b55f9e377fac990d6483ceea4bd0b33858b05729e79db336bbae80137f3bc249638db79d6f3afca08add64af135c4ed93c399aa6ddd436fd8280b8f7425c3780
SSDEEP 3:MsEllllkEthXllkl2zEOlGmO/t:/M/xT02zdGNt
TLSH
T1A74404047FD04415CD0050344013C3544371F41015175FC7345D14D35CD5DC00F01004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.3.4.1\typosquatting_list.pb
Size 1.6MB
SHA256 72aa7742dbc03dc4fa7a0a6719aba9fcaf7dc3cb5f3250d14cd8dbc83d7b4aea
MD5 844528b3019b73b587a49542bd544a34
SHA1 f35b8ef5e9289e111ce699ea3e5b296124745d7c
SHA512 334329ccd92c7a2d27e5a49fa4e546632b0541f1d300c105b311d1a3b7707babf0590c4f2135cea37bfeaae1bfcec87fcd469ebb1458a67ae052a1da36b1def9
SSDEEP 12288:JPgRKbF63Ji3Qyd2DNBclST9kXYXHX0WEbENbtvBOJfWQV10ySzqnkl3Sm:JPxlAA2DNxT9kXYXHX0WiAt8JvSV
TLSH
T14585C6F9DFC00194DAB8112D20BE71D8081412A540E5EFEAFE7C855F2BC6AC977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7daed39320e80d1ee3e1b804225bcbd1cf7ad379b01f3376495b18d8c34f3e2c
MD5 f3b9be4b28e91cbeacd3d021b9243646
SHA1 9471af501b3ead81090488839db082faf19dcc19
SHA512 14deda16dfe2c6ddaf19c72232a8b9d6b7f797606f47aaba9a24825d8045d083bbdfd5e9a0d4df6d0576ac42570d74e4c547ae5013a1a4f9f7b9ecbcd8ac0963
TLSH
T1FB5151E08C7D66C1E0BD0A3EB45B38FC94ECC725F8A4743D6858EA884A7A719648447F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0baecb8db1224bb50b7d72c645fba583b8913c36735d51cdfc96f283ead06113
MD5 04aef5883b8fe629d9bee17ad72fdfc6
SHA1 3ba9013041178ac480520d3ef13e4b01290177ae
SHA512 8b35b2359db54d705d18bf8a24f5a9b3a96c04ba50c4d2f660a88c06e113e265b87179dd045dfc7d11712563ce7b74fc2c2994b5b72b7639e40489272dc9b7e8
TLSH
T1385164D04C7D5AD1E0BE1A7EB45B38FCD4ECC726F8A4343C6854EA88097A619648447F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7a19e1c25373182ac6502d18bd02405268dc7ce8083832d4589451138374e627
MD5 8965eaa9754392167b6063374e8f20e5
SHA1 3b6defbb639ff5aaca1b3052475c506587d70c84
SHA512 4ef0bf052dc9378e51058d31a682a4ebcfd5ff1348b997a85bfe25265db7ae9c3f0129402fd3aa108474a6626f078e7b3de937ab1ce5241aa487acdbe9d93fe2
TLSH
T1DA5184E04C7D56D0E0BD0A3EB45B38FCD4ECC722F8A4343D6854EA88497A719608447F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 61f217e344d30715f14518898532fda8ded0abec9b6b046f1da6753932de0316
MD5 7012009e9a4fa1c844fb9d7f9e6f456f
SHA1 3a7ad7e767efb729135e723993dcb3850b163f73
SHA512 a6272a53b33a151d5c2ae25456c495d69852abc4f2da7e39af33954e542a61c9d94ac180cf66fb27d89d401477c1b9d02d6439fc6d4cb1f1844df0152b969d39
TLSH
T1F05164D08C7C56D1E4FD0E3EA45B3CFC85ECC725F4A8347D6468EA88097A619A08047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 26afd3014d77c6205d4683779d64b56e5fc1a0fc0654a41047a4cbeb903a0950
MD5 02318dc7fe849c19946a417527751b5a
SHA1 82a00720104b3bfe2d9b8adf946751241eab92f1
SHA512 2407d968fdfa8b854e2ef4e7697e587d8684e886429d045fb062ed37f58240cdad6354af5aaa189e4f9bf3a7c84c40b2533bd68c20a7ae9895b04e9cda139120
TLSH
T1FA5141D04C7D1AD1E0FE1A3EA45B38FC85ECC716F8A4343C6454EA88197A65D648447F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 839165c51e36394fb577f65dd08f16075b3c8de4d7f8f9f9cb8088ec58882e21
MD5 1a286021f9d876f8aaaddb3414984936
SHA1 37ca9198a8c0dab8ce3afa8a2938223d4ef61459
SHA512 473006dfefcd715afac6bec9059aabc5c542c3448c1fac2efd252f2ba5a665b7719c47e560620067beb880d7412e35288cbc8c0d2f438ac4e8570da6e4d968a4
TLSH
T1255162E04C3C2AD1E0BD1A3EB45B38FC85ECC726F8A4343C6454EA880A7A609648447F
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\keys.json
Size 8KB
SHA256 722047d2502aaec9c2c80b0f7d3b60b29d3f6aee27d656f489e4fbca9a7c1a00
MD5 48cb5a96ba70f0dfcca0a2185a9a0c79
SHA1 efdbdf44f7cfea2e3b34c6b2fc0dc37a1b5cef3e
SHA512 77eb7bc1bdea2b121b8d95fd8b5d14603d5e105dbf8c8e777b44109b1eb2ba65785ee3a094e18ffb591f81fe140ff83af1618d82680a5bb3a29144c58895dd2e
SSDEEP 192:uNtGbRgDMYPyR9Pm4lOvMwkoR9PuGMXcy:Ol4BKjA
TLSH
T10912B2BF14A01541CEBBC16E4F0B38B78FB038065BCA3983578BFA4958428AD173B4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1398220601\manifest.json
Size 79B
SHA256 8f8dae05e2623c591dc44dc5a91385b4355da91492a770f0ca99b509db6533e2
MD5 44791df1f32899ba8f0fd1f235cd4711
SHA1 e5ab30e8b7610e92c81c99adb110e3a429fc3174
SHA512 729578ec403ba1410c5826f622d4db774d68e243112351f50cb5fcf231ebdf7fd9759bb5e2bd4a7bd6433c147ede44b78f4eef2eb08c456d4a430b55a149edd2
TLSH
T18EA0126018019673148807600170878643501C012029380005521040258413611A312A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1403710930\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_1667495876\manifest.json
Size 52B
SHA256 06e5abe50177836b7b929390b260ce06a3d26ef79f0b4cb7873eb354ca26d6f9
MD5 475ec9a4e5c674add6cf767f5c7d4169
SHA1 f013a3715c408287043b3d6e743ea81b529531e0
SHA512 fcfad595263fc60d219f360774e6f6c9ebf7baecfe21483ef0cb40c02896e3d936fb1916b05e27422d91374896ae4addda7443a632ce158dab96eb3abd9ebb57
TLSH
T1DF900260042495171AC10E506570F8859391661995850D1D04451548029556CE0502A9
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2036033354\manifest.json
Size 117B
SHA256 39150ae100dd2eb2db8b0fa5a088e914110d872e36c959401ed0c490e72160b8
MD5 ac57313a478dbf89884edd1a33b99fdb
SHA1 a042b69993424222daa8f5a81c7411d54d295209
SHA512 28f508868e6ec2e93ab99950b3aeab51cc50ac54ba8b4d49296eec9066a5e30b90e29b4be539e5e16c8c8b405b7467f342c990155f569fb83546d84b5452dd0b
TLSH
T147B092B00C1AA43B26809320ECA0A68683F80218E8021B1E08803A491F8827881363B2
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\edge_checkout_page_validator.js
Size 988KB
SHA256 08ace81343ed18e68e6549c1660931a4dc2c1ddf6f8977ac86aca3c4e26f4659
MD5 f71c7464705b0b3e465eadb1abb73caf
SHA1 495df57ffd33aa471ef6c0f9126f9504035c4513
SHA512 3cf2176cac4a9f3b3e5e12dac53c88119664fce0c393a6979004764eb621c644a6c5084a082e39053af716e274665f1296df6588984a2ed07e2f451068d8e71c
SSDEEP 24576:cs4DmRAps6vGNkrQAdHAQUwzEBCjiWctDBLIfIK1Rerpis89XKLRzMEiJsfasHP7:cs4DmRAq6vGNkrQAdHAQUwzEBCjihtDt
TLSH
T17C253C84E1E2253466D74CB960B7D2C4B9DC04583399F1E4FA6C588ADB0FD4723F6A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_2075960960\manifest.json
Size 145B
SHA256 32abf553ff9a72b666596f7521b1244b656633e9a71e9900c7b20f3399bfe7aa
MD5 e3291bc8dc4e577efb9b6dbbf94c8dc9
SHA1 76bd76eae0ace79cb8e79d9d2dac9265c0e2360e
SHA512 aa51487f9d35a1e5954e53b1db14d116b304cfb8f2808699333d29e9be2fffcb0922fdd5126221c13790885ab777b29f648185a798900447268a0bd42c2083c4
TLSH
T19BC09B73C831AC7115744BD40DF59645EF74574BF511B0563730018E0F3D57550616E1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4928_505938694\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download