924dea1bacc096e99663160d53f348dae3540b90cae6b7567611cd1d7e21a328

Analysis

user interaction
yes
max time kernel
116s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 02:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
𝐒𝐄𝐓𝐔𝐏.zip
Size 27.8MB
Sample260424-dd3msadv4z
SHA256 924dea1bacc096e99663160d53f348dae3540b90cae6b7567611cd1d7e21a328
MD5 e285a8105f165013bb8ee8700ef8827f
SHA1 9ba6ad6491b34df92e92586e23008f7ae8cc2386
SHA512 3b52a392de40b1e97b2982011027236924f4ded381bbc830a7a937307489299685372d32e60d829bc11473859169a7caa9840f1ff797d63783023d2e5af8346a
SSDEEP 393216:JDE3v0+WImyOzshuvoM4UEoUzoHB7e/OCGo9BGG+JsGG0sENyvNo9O98n1YNAoVO:lE3yItOzsQoYi/OPiJZK9c0eNNVO
TLSH
T15B573334CCB7D16DF93A06F7A5E1B4B3039997A563118824AE6F4654CA41CA032ECF9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
216	msedge.exe
5432	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134214730312326510"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{E3C9E604-296F-430A-B865-4BFE788B7A03}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{1A974967-742A-4B64-B228-D44CF901A0B9}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
708	msedge.exe
708	msedge.exe
708	msedge.exe
708	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
708	msedge.exe
708	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 708	1104	msedge.exe	103
PID 708 wrote to memory of 3308	708	msedge.exe	104
PID 708 wrote to memory of 260	708	msedge.exe	106
PID 708 wrote to memory of 216	708	msedge.exe	107
PID 708 wrote to memory of 260	708	msedge.exe	106
PID 708 wrote to memory of 260	708	msedge.exe	106
PID 708 wrote to memory of 4324	708	msedge.exe	108
PID 708 wrote to memory of 4324	708	msedge.exe	108
PID 708 wrote to memory of 1832	708	msedge.exe	109
PID 708 wrote to memory of 1832	708	msedge.exe	109
PID 708 wrote to memory of 1832	708	msedge.exe	109
PID 708 wrote to memory of 1892	708	msedge.exe	110
PID 708 wrote to memory of 1892	708	msedge.exe	110
PID 708 wrote to memory of 1892	708	msedge.exe	110
PID 708 wrote to memory of 5320	708	msedge.exe	113
PID 708 wrote to memory of 5320	708	msedge.exe	113
PID 708 wrote to memory of 5320	708	msedge.exe	113
PID 708 wrote to memory of 4944	708	msedge.exe	114
PID 708 wrote to memory of 4944	708	msedge.exe	114
PID 708 wrote to memory of 4944	708	msedge.exe	114
PID 708 wrote to memory of 4584	708	msedge.exe	116
PID 708 wrote to memory of 4736	708	msedge.exe	115
PID 708 wrote to memory of 4584	708	msedge.exe	116
PID 708 wrote to memory of 4736	708	msedge.exe	115
PID 708 wrote to memory of 3092	708	msedge.exe	118
PID 708 wrote to memory of 3904	708	msedge.exe	122
PID 3904 wrote to memory of 5436	3904	msedge.exe	123
PID 3904 wrote to memory of 5432	3904	msedge.exe	125
PID 3904 wrote to memory of 420	3904	msedge.exe	126
PID 3904 wrote to memory of 420	3904	msedge.exe	126
PID 3904 wrote to memory of 420	3904	msedge.exe	126
PID 3904 wrote to memory of 1896	3904	msedge.exe	127
PID 3904 wrote to memory of 1896	3904	msedge.exe	127
PID 3904 wrote to memory of 4536	3904	msedge.exe	129

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\𝐒𝐄𝐓𝐔𝐏.zip
1⤵
PID:4752

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://setup.zip/
1⤵
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://setup.zip/
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x2ec,0x7ffa0ba2c188,0x7ffa0ba2c194,0x7ffa0ba2c1a0
    3⤵
    PID:3308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,5091111481692927008,11713901894449955609,262144 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,9517587815579639415,15429259568351353014,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
    3⤵
    - System Time Discovery
    PID:216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,3792962324491701694,16294967679854944869,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:8
    3⤵
    PID:4324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,9907696987421622142,12114496423302753311,2097152 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
    3⤵
    PID:1832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3404,i,4050946159229578063,17989738480035716603,2097152 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
    3⤵
    PID:1892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4868,i,15744049917902461662,5591036469683402454,2097152 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
    3⤵
    PID:5320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3500,i,11392691830598111322,9735488778014813449,2097152 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:4944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,15948186504774823573,13320767814493141371,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,14869147198336546464,17113647021634483605,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:8
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,7404375411621717848,3877077294315339604,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
    3⤵
    PID:1700
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,7404375411621717848,3877077294315339604,524288 --field-trial-handle=2340,i,7298250547440302151,15183500109761850245,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
    3⤵
    PID:3092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:3904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa0ba2c188,0x7ffa0ba2c194,0x7ffa0ba2c1a0
      4⤵
      PID:5436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,5476580428723279457,38264485112265841,524288 --field-trial-handle=2432,i,2375985409592563697,9437827568739211563,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:3
      4⤵
      System Time Discovery
      PID:5432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,15728837841857930838,3073362792855543158,262144 --field-trial-handle=2432,i,2375985409592563697,9437827568739211563,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2
      4⤵
      PID:420
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,1561915203048719590,14400194408143735080,524288 --field-trial-handle=2432,i,2375985409592563697,9437827568739211563,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
      4⤵
      PID:1896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,932358668672668529,3948907570471620961,524288 --field-trial-handle=2432,i,2375985409592563697,9437827568739211563,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
      4⤵
      PID:1184
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,932358668672668529,3948907570471620961,524288 --field-trial-handle=2432,i,2375985409592563697,9437827568739211563,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
      4⤵
      PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6c23f342d424deca5491df9d21a53a6740f7d2bf4a4d5d64500e470ea28f20de
MD5 d2b808d227f5d7e8e23a3ff97fa49900
SHA1 02ec36b5251eb49d666d63a16ebe2a41e2f9801b
SHA512 a55ad3163d9e9d0cf3a8da66994727991cc0a2a217b85572b3dadbf00513603a8447a9e1188b61bf214bfe57c0888db12330c9e9c5df1c7501d217408ea2351f
TLSH
T1B3D023353D9ED40DD23D003316A2F2957756CD0A29874401B157841EF81C5BE5BD54CB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
MD5 35e76198d1c2c61d3c2a49119ba65747
SHA1 a5ae8329c9e762bed0a3d6bc5584e8faf6d26a77
SHA512 8b21ab6c5e29ab0ea7652b7adadb04a05eb734a52faa779252fbec4acd45079c7ad3f83f36227a419f0a59fc94eb1cf408bcd782459cf4691b6eb727be746fd3
TLSH
T136D0800925B7DC74D059847018977B4D7555CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 baffe03eae15091af8c091c3405e82f8a3c722b5ec7b67d652ec3dd8b5a41c72
MD5 371f1716659dcfb0398aa2ea8e55fb2f
SHA1 704be586a6585e926ac33301314e54f8de22e0c9
SHA512 dc73592257cd24a895b4f8da6cde63f1cb9cdb12b5509a178a0224150b9f0758f561be82df7422e6680c8e421fd438695a6b64741cef2c38fba25e37d044ad4e
TLSH
T131D0A7613D4FD844E22A107358A1A68AB3D2C91A1963E5013063842EF8095795BD64A6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2eb2290b08a4428ae919fd783dbc773f9b825e78ef578af07dce38c00e77405e
MD5 10164a8187a233053629c00aeb213eeb
SHA1 ed50071c007cd24f398d795d74f76cf3846fe388
SHA512 ea1f628d9a13dc619a677252928286033dd36eb82b62d2bf6a740a9674ca908af47a94aa0232bd3a1ecde8e18b93c62d4cd584127d5a680bee323cb0d97d502b
TLSH
T197D0A7613D4FD844E216107358E1A68AB3D2C91A1963E5053063842EF8095795BD64A6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
MD5 6a7649ad8529021b8a0bf012adb69564
SHA1 bc6cb8e64c0f5c84a887a19005280de2e2ff95dd
SHA512 316ecd29696eeae0002f91778818c1c4166e5bbf8440eddea3560a6ea0fb49f25e4e33c48c2d7c73eb08507c015f5aa7eb4187e6558ebdc4cd44c5bd980d8c3a
TLSH
T133D0800529B3DC74D055847018D77B4D7665CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f29b7aa6d18bc248f118245f80e0cca7fa67e0e4cffa65263765852f5f8ffe13
MD5 aad8330da26f6f9a24f209cf04969e62
SHA1 353886a83579fa701d56e0cc3f00b4ca295f37a7
SHA512 5c91a79f5ec26d6fd676335a11eb80955da04fe02d3a100050e467c8ce173bd212ac8d9df6fc742d44a8b494c44c128db59a441f9ecfc2cabb656d2289e91f7c
TLSH
T1E5E02BA9C862AC3708FD171860540686F744138B2781488F7A3C87088FB1D7B459685C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6483217a6a0a2b62df609fe74a15c1f3154b978a469688749b3e683be201828f
MD5 29d378aac169b935b84e3d719c3576e2
SHA1 33a9ce0354dbb68d97a3dc44080e989fb71f910b
SHA512 3cd732d87e898cc4081de74f22fa7b72b75031b70d43e0101cb456be41a32c90c60b4dbe036a09d24a961b9402996ce54829a279be7260074f90860f15f69e26
SSDEEP 384:Ytbo6eDCjvKzHS/PlT7Hqa+K+KMu9kAqscEZKzlc:Y66eDGF/1LkVtLi
TLSH
T12913C67F721E5C45DAC6297C8E3FCA346739CB25C8D21163B731B9118B67B9A380EA14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 daafbad6b58395ca3c02bb7f62db15f2ca84a8497ea8c1e3d1f183931bbf8c6c
MD5 5761ed47d0faa6cfc9405bc56b1cc5db
SHA1 7adc1c43fcff77f02b5a623cee7ec556be7448ec
SHA512 1fcbc55edf7c9d852f304c60f3d061a761035a01f97342cfb7ed6f9ed1ada7810051acb82721634b4a66dbd9f7b00f0d0cfe779631486d76000988857f781058
SSDEEP 1536:31kpabRIABBtADLZ9nhvjapdcUyAtn3KZ3afhM49v19cUG1I:36LZDC/AqfhMojLG
TLSH
T19D4470F74955A01BCFA802F5E2137A3DD17B011D6CE1F8E9E63C0C852925B22B6BDB94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 ac24b182d1bd8715681baeb0faf2178e92b4ad242232d78b54f98ee72e08ab35
MD5 45d2ca6793ffb7c48156f2912fa4d590
SHA1 c18782005efc9e7819e22a1365f31d7656c6cea7
SHA512 0e21b5d19d5f3d6a8b286b6a00b4c2c8a54cbcac6954b297d318fbb9ed43c90df5b1cb1da91e1f337df3266147c0e9dec1877d792691ad0f1c6ff65f044e559e
SSDEEP 3072:Or5mSxmiHQGbDhAlLFVt0HNtG4I68LwaN4rZtnB:Y5bm3Gb9gLx4Nt/I68LB+ZtnB
TLSH
T10B256BEE8B382C86DD6B4D70B4E0EC22BCB412D3B51AE1D34818C990975A3C667DB5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 8b52f71c56b070f1666468ef55e70cc5673c144002a1c874a341c9cef6ccb102
MD5 dd3b46a707cd89cf819f099efa86f743
SHA1 e3bc4033f9476dcbe02e713ef71885acad1a7931
SHA512 b9eb0cb3134cdab11277872d445ba428ea243f4c64edbe1ed419a8806c18d0cd1d081867d4b635d8932ae091d5f1040d334b624c44171db68369b3f60341ee5e
SSDEEP 24576:ZPWkfQCJPQhezWEMMjOBT019mhPgba4x1pVIIjmPkYXA42RE5mtpdMKOaQEJu:N1basA/BTF6b9LpPjmfpgE5+KKJ
TLSH
T17F867DEEC6685C83CE678A70B4E0EC477C7412C3B955C1D38858C59452AB7C1BBEE2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fdfc5026f511537e17cb68595140e321b51ee745b58af7a71b8cda3f5f141abc
MD5 6fdb37a21dab1f00fd2f256970ecefcc
SHA1 7de3561f2507cfaab5a6b32ee51f0287db188211
SHA512 e0d25597f623121833763462eaaf49415a94b97a3085ee4e48fc64dbc690092b1ff08714970110c7c9f89b11013645f1dbb29c4e0d3702d58ff412f484e36fc7
TLSH
T11B615B8F6196847CE3E05DB1CAE1E04D76788759140E0F2A3DFD8C7E8632F12E0859E8
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 708e73df372c4e1e41af1a4c80fedf7b1cc4fb9264831d21d660539db0eb1edd
MD5 7cb447aaa8241ed4a8371e70301cb990
SHA1 d2099cd2193a1c1efb4f5c2556894d864872fc0b
SHA512 ff6c76b2cb31bffd9e319818592960ed633cc1f7fbfe033f4cab2723cd8fc6dd5cb4f5776c3507ed16f30270a15e53f728620ca90318146c17c8b0110cd7685c
TLSH
T1C9E0209655CEC25DA65034D742285F8E91C0346AE7D6AE035709CCC8B6C2465BAC57CA
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 a55cd7a82352a01ea48c5c32b3f4aa0436795ed133e2e6be87f48440f3167617
MD5 25461eb66fb2459a8416071714f22061
SHA1 38aacbb6351ae4a3e9b1dc440ce958d11b1a0fe9
SHA512 13b2e99fa5743f37556da9dd23e683824ddbc2fb41076f2a1e1e43577465753b09742ba82b3cf047ee424c57a1bb50fbb49b818c86fb9bbfcad19384081f69d3
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jM58AW5L+52K5fKFtIWqYpf:Tyi+7f+UZD4jJ/BiWxPCKFOWTpf
TLSH
T1FBE2AC8D3B11F912C8ED733EA0C2C6E55EBC687C864DB171923C99768C526A1F49E14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 748ee6c9c3c722b8d5b8c3de2285843c5add448299fb97b1f16cb32f1a1bd02a
MD5 5dc88e9d8a1527e2a476bce8961f0936
SHA1 cbc63943ff4d2ef8388ca124b3b26aa788030668
SHA512 d102b90c4cbc6cf2df70b62ff34b0bf4135e1d8387955555572b45fd078449fae79f061903627826fe18ff970b5a7a4c87008310de9139dbd811ccc99f08bb1b
TLSH
T10BE0CD5409DDC17991557CD38B6C5708C3E2384BF7AE7F06170ACCCD7541E45B2962D4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 023d34762c7610c4bdfa4c89a258dcaa4abd7bcc7a2cfa03ca0c701c4147ccae
MD5 5642d8663e925457de8cfe721b701bd8
SHA1 9a5402ac76ae019ab4133db36da948a378e58a62
SHA512 559e6a9d2a1dc73299f08b0eab7f18d92a6387cd06517de5ec4458148a1b595d8c4cbf072f7803ae96e00618b3608af516e769291ff0bf0fa65dc763b190cde7
TLSH
T1B4E026614DDDC3EE6309208B832D6B0CD3B1380EF78D7F029F099848B081804A3826D6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 abc1d907c48055ae0003d3decc76421d227131531d108d3fd76d476224bd5ab9
MD5 212844ae4e887a5d73165134874824cf
SHA1 10e38c395288c68718866ceedadaca7e6334eea7
SHA512 bc2273db82eb0a9ad6370a777eec735584b63f15fbd4f5791b53ff145f8d5da06cda75d017f70f112cd78f20ab23d349f85370858c08a4556f351dd73511e76b
SSDEEP 24:TL68LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T2SLopFMatSaw/auUOt8B
TLSH
T171928C4E5F346220C0F04B36EDD185672F7C211CD3A72A99DE5410F3DE9259BF1155AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 090a0bc25a5c5804b61ec79fb4c19c793fac1b6a44576851c2b219da2e372eb2
MD5 b522270f4a2463d62b040c4425605d31
SHA1 46b074612b804a9aa2dc3623651d37c1349a574e
SHA512 ad1a90c264c878bdfc4a075a058574af19b9d07f4e0a951a0aa76bc89ee6a321fdc47f9d475d61e749b303df23d90dddfca165fb3216753e3c93e4996aa22f4f
TLSH
T1CC3190F783F4857E8A0196F0BA187E1FCE1D0510836C3D9AC5E4AF1B93E2471E141A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 43942575051af1c865c11fb0acb8931d7bb6c7129ba667a0574c344f847580d0
MD5 b3be90b4bf884743e009ecb1e71f9fd8
SHA1 683ff631ac280a3504d82efd82edf36f97a37664
SHA512 ced3286087c23f16e2105e97dcc95ddaa351c981e368e6de936b90f558c89b3ed79c9007122c711b6200a72a1e49a3ccfeb4cea9d3eef60b394de84b661b80c3
SSDEEP 96:uIEumQv8m1ccnvS6NTx+kref5nFXXsj4g:uIEumQv8m1ccnvS6NF2w
TLSH
T1E2F2EFFA07276205C98445F0E4009FCEAF16000B47B6B6EC76D447E3F7A21E2B5B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 33167e9536abce0c037575d00dbaa916af0d95e664d42d22ac4270a6406c3f97
MD5 c2b8c866c9da06a9660d7f58a9e0e6f2
SHA1 d91514eb529d863d0fbc324ff37f00b9d26511ad
SHA512 1f03e208c4b2ea5c1172476d70a27af3c22cb7dd33e4181cbe229502f2e3cda96185f971a6c848b1709070f2fcfb6e0b40074478c5bda7f59facdc284a5bfb32
TLSH
T146C0221180BAF0321025C4B94EC8AD907BB7E83005C0C0E0C9A5923CA0901F7AB1A039
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 439c4d229479db63fea902825a46e1e524fb049235ca0c44d08382fd15d88ff4
MD5 17d3b5d3bdb2b1c8de7cc7c0a777a01d
SHA1 7c9f4f134a1d4090f7b43a2c6d563e925e76824b
SHA512 b32a115c538b5fbd5085328d7b6f5856e5e0b5280ced60e9abd821b9d56f015be4b473ceb56c11fafd82e9561f760906cbd1e07bae87e5af95e7328e314dbc81
SSDEEP 192:sxZbRDyMqZ/K1Ml80jM/fAs/WpV14r2DqrjT/zodp9gsH0U6+WNGYuQEXmBFIgZx:sxZbk9M/fAs/Wv14CDik91HmGNmPZx
TLSH
T1A272E7056A28997BCCDBD219FA557F63D7F91523D1904E48AAFCCA0C04E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 7420ee00ee53b77d9435ede6de012d8eb41d5ccbef8217ccb23ae47e657a983a
MD5 ff4e89aba5e0cb334b944290dc806161
SHA1 a6c487e4a5a739787924e16a07aaa3812057522c
SHA512 f626722dafda71770a8a855d62093f88ef7741368d6a61689f2f09cb2316e12f0c8e2bddcae523f271aeb056836978a7b1c0e7e90ccf5ab89ddd1a9c35ee5499
SSDEEP 768:DcgLiAo7pLuL/aeWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZMKJLlhzCpUrob:DcgLiAUE/aeWvaShqu1jaYMKJLDOp/b
TLSH
T199F20C3B2C0CCB7E4F844E9CDC2ABE8E6DE8028B9698C95447FA445C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 689445eb3671d7f05107d32b9bf7c407c68acfe95cda85b404575e5ed9fac334
MD5 16968961493f3aba784bec4488bb8e5b
SHA1 4e7416926378a79567ddd106c361e60568391a5c
SHA512 2a4e8d1363110686b531b45dc3a4709930e2bf2f24d1b742bd1cc77f3b92fce3415dcc4c33cd4c5fc6b338a9501b4eb7294fee605ec10c232e84b38aab423370
TLSH
T1C4E0865005E9C2BE66253283076C870892E6751BE7DE7E022F55C94C618AD44F5A22E5
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 75a727e76b5b4cfc48d5b96ab53c3c5b0c43ad51cce53a0f2735fa95e0066ed5
MD5 3a2209623468d56ed7ede0113a5ba8e9
SHA1 54e1dc04c264be0fabfe54ab84f39bcf407bb8d2
SHA512 321c135fdaf7e9b1d557520482dc9ff7095a14b81e17960dba3ba7d44c14bcb23e8a7abaf940cc75bafb0cc3a3d061e724a8e4c2ea849efcbbbb21b29afd1337
TLSH
T1B3B092042B486229C2858A3281988B41A220F0020045365B88499F210D1F3A86E07D92
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 52d01cf76d0d3c1e6526512012bea56e404ebbbe84d6a1ccf57496ebb0eaf334
MD5 8d32945740464e6a5e0366b9a3b8d66f
SHA1 31b23c7ab5d7d788b718cca97531a23b9ad0ecbf
SHA512 a86e5281a773a72e3c368577869e36cb80476877a171a5317c564edb5b5213964078f7a47237ca9f82324787ad2757f8c757c383d9eaa71207088937c196af3b
TLSH
T1B7E0DF6016E9C26A714530CB932DF30982A3B80AE7E96E122B0DD48CA246940B383290
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 6bce3ab3b5e81a563ddb78e6d64c35d0307a719aecbedb35f944d0aa40f460d4
MD5 5654bc8a19b64ca377fcc289bf2bd74b
SHA1 6f2be2a4b677ffc3ccfea469b38e1ffdcff1a0cd
SHA512 7e1a7130b4786f0744f66152c69128cf909bb7edee0bc60aa3395e39f6237c14d8c77b6e0b50bb107b86cb67ec7ef0c326cac08bc88a818304ce24275df2022d
TLSH
T1F7E07DB055D8C2BA5080B0C3436CD70DC3F17C4BE3D93B025B0844CCB241910B3B69D4
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 344727c779d91fbd36d56048db5e1698f87be06516701a0381677d63ea25e519
MD5 8bd2d600db7ee402516d1f428d5e194b
SHA1 57a7f982d81336aa4eb62cbfa7d4d3a39f32fb20
SHA512 b8241bbcbaa289ca0b9a92d9980d09b2266d43a8142300cd604c8d827eca5429c772b87c89f117d3b9cc90a4823e92f54265d3b9041ec7bb5da88df010933f19
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3B3FhZVt1:krN/INhx+kcxKBzx3fZj1
TLSH
T1C4C25C11317B1281397E398D8594B86F66C230A33198B93B7BB914A60F6BE20DDFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 48264ffb84fc971d2233ec7ed99ebf37eb6734450d2ba015c95e949d94935a1e
MD5 af5d8d531a55495b692efc3f170d259d
SHA1 feaa38565a09c9564a4668875f336cb86de4323b
SHA512 c386bfbdd1889b2c4aed76a31893b615f7c716f09eb9eec06408bbf099d0ebfe6abc29aa88433a44cfed9c51c95abf4938463285d11bf7e670675bbec4f32a25
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3B3FhZVg:krN/INhx+kcxKBzx3fZ2
TLSH
T1A2B25C11317A1281397E399E8594B86F66C230633098B93B7BB914B60F6BE20DDFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 4235d95e6d0ed71638909745676b697ba1ac78333ae3c6e0197b38cd0cc09a42
MD5 10c48157ba1a379b613555050ef40ed9
SHA1 c07a71f7080eeb8cc1894437ae991aaca39ea97b
SHA512 513de3dd6e36ec286625e5f6b2bb69fe143e6a79d9b86090108cefb783db54950df0946107a0358bcd8ee0ed3bd9e02ab0535655d386fdfe68ce148c282bf0f1
SSDEEP 192:P+xW0FyfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxtYfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1DB24730A7B747001EDE6E9721CB080771E3CB16DCF22A6915DB654698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 b5366483bd1559ed0c30f49b5709a668ff804059db0cd20ec59d304660be4054
MD5 1d64b044d2b241f0747638e541369f38
SHA1 abda2eccabe1b0f8e67e68313b64a1cc5b7fca76
SHA512 0b4763f721382313a385eb9e2822ee865ec0a2c3345d7fdd1ea90cdf4d99bca18388a43d13036fa1c242177b8a82a800d4e4fef08567bc4fae1142da869ed0d8
TLSH
T1E45175C0A3F964C56F89AA82C21D7517B5E13D67220E5C72236E84F45F88C248E6FE36
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 233d9f44564ff251c30f3bb0cdee9ff874faa74cb736de0b5c000d50b04f337f
MD5 5cfc668ae831e622b76ad234991221e4
SHA1 9fefb6204f2fc94f3f68cee832d8ee0eeeac3ea5
SHA512 ac8c635667df464027dc5851a9c5af8fe2eeeac4b8f1ef61816efc2e0b54f8a62e720117247b40213e037206c41013b1f1884ac1bef6b59f4119b31ebcf1be9e
SSDEEP 192:bpO76IAsKLl8MNssKQwHejlqQ7IIICbCMIMQJYcYHh:U7ksKREsKtlQ7IIICbCMIMmBE
TLSH
T11D52732926051B77C15E5F7B12BAC7971BE688814E72226D32211C1F8DF3B578BC52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 220f8b38fd096eb038fef89036f7bcd73bf776a5d80112d02f1dab9671bf9a7d
MD5 fa7564d3e7b7011470e1dc9fdac2e1a2
SHA1 651ca65268ad3665157993427096ddec105b5534
SHA512 4a81d8ea9a1c46c278d913c5b6d856a65ac34bee30f51f56e345fbb38e42df44cb2c6eef85df6c3f564cba0ccea195f929a494ad327660af9abf41d91f00b429
TLSH
T17AE07D12AAC8C3FFB11421C7033D438983823C1BFBD82E061F02C44CB241D00B6C61D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6d011067b3bf035d237f274afe613da6273923818a61750e39a2ed5fe337d92d
MD5 6b84b7f2654365f3e3cf76e2a0329277
SHA1 2394283888d0feaeb5bde76486cadaff86752b56
SHA512 e74cbb7bcf115b60f1f6a8b46ae8284abbef2460bb4fbae54319782899d826b559340750385b40a8395dcdcec44a4e62890149244a6741b180dfadfee198fd0b
TLSH
T1C9218F56F320C159E14E863EA06A9B351378E8529FBCED0F94B934356E72F001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 830c26c8e34139e226d6c208a64aa3fff804b4e64051173c0702720259420bd0
MD5 60cf53470a4779fcedf91ea4d1bc2dd1
SHA1 d43469d97b091efe9630b5373e4ea5481a089f02
SHA512 a95ed5b991ca9485f7ae05dd3fa85cc764181ce0fc3c69e74e14962312d4925322aa34884c5c8cd9bafcff39dcb88dad38750a441a7d421f414bfec2b6784e18
TLSH
T11FE04F90B8D9C1AF905420D3066CD348D2933C8BFB996F061F49888CA541E45B29A599
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 212ccf43e8004f79133b1a31a37963ed73fec3fce47a06cb591582198a2bb4e2
MD5 773475bda4428eda4bf2e73516f68f1e
SHA1 48c31061318e2d1a205088b85e74e9938566b278
SHA512 516fb6f594949f9e6744336352217c89db1debe79c34bb527c83683a920e9e0e51a98eae49f3a0c13ca6063cb31c8828cfd06de6ea4186ab05ba0f9a4a1d2a0f
SSDEEP 3:MsEllllkEthXllkl2zEflniIl:/M/xT02zW
TLSH
T1A9440204AF854515C5501530455183909370D52005229F4338E108375CC6D401C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5d46ac8fbe018e069ad0dfb35d4d930c6f9cc94ecc6460131536e63a7f1fefd8
MD5 d5f10343b5c93b7da2e89f83b953b12e
SHA1 586418e6427dde854f33a67fe40ed8dbe23bdcdc
SHA512 927e69f27958ebd3467eaa572761d59c913882359e2db5d35ab6cfcfb408faffd7d91f5e69214fff7661a50d0f37ea7c9f1792aac921930328c59efe232c36fe
SSDEEP 384:nKiFavqMg3sNO8TUNTUlIm2ZTPENf6OwfjYyr/hwThotyRYV/Vw1mRNrN1k+5vIA:BFayv3LwgH8uYaJmhooRYk1mTJ
TLSH
T1B1C25C35ECA4DEABEDEA4FD9AB0A3607EEE00267D58C49D4DAD81D1D00971DE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 6d301663ad79ded5e40cf9852ab64641397980abd65e68987caedc4b354aced8
MD5 879aee951b6145d36c90ab8914cc6052
SHA1 e5446cdff882d220e8ecacea297536d24fe06eaf
SHA512 8eb57745e69c9c12d5412df3d17d285e00b9032f532a608323c0c591b73ad2229f6cad939e36b55e75908578038c5583e90faec1e03fb9b8afbcd1970295680a
SSDEEP 768:PFVccQoVwgTdtYaJmhO+28Wu5p4e0fFp0oONlk:vccQof1w0fK+zfFp0k
TLSH
T1CDF22875D890DDFB98E6CAC9678AF643ADE01133854C499CDAE8BE2C205F4FD170B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 770f92e470bc9b0a6ebca148a6d0a5e93982b0b69e0b569c063c32b4b943fd51
MD5 ef7bef62bbf7250fae12d54a736c2178
SHA1 f90ce1f28c678e97120176ca476e57db30017496
SHA512 91215d76f0e4782976173b40f1e4f44f9df4851498ddbcd1fdb20d08acdeaef4a52c1d669e602b1719470d11c7b0a6c654a42147df11d2ad6d764d8b24ffb461
SSDEEP 384:n0iFavqM83sNc8TUNTUlI4XZTP3vXOwfjYyr/hwThV4Z5taqop09+fWprN1k+5vf:PFayv3Vwg27tYaJmhO+Np0oONP
TLSH
T16CC24A76ECA4DA6BEDEB4BDAB74A3603EDE04263C58C4AD4CAD85D1D009B0DD530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 eb878a6a421581cd0e5407e4e1c8059d04358702591424db885f162d9122faf4
MD5 e1a54878cb11b2b6e0d62e9b78e6fe91
SHA1 5e223f2efe9c8cd09783d0f42de580999e4396e6
SHA512 bcc61dc750ba5a806d7848202d9a06d983a91fc66654888a7944e084cb22c121c5f53b28131303614d835cef203d579cece8167eb6fdd6887f5af89745691577
SSDEEP 768:PFVccQoVwgTKtYaJmhO+28Wu5p4e0fFp0oONlk:vccQofaw0fK+zfFp0k
TLSH
T1B6F22875D890DDFB98E6CAC9678AF643ADE01133854C499CDAE8BE2C205F4FD170B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 92e919cd0d01752b000b37f2d87222c85713c1763bd9a25c007d97ddc042eef7
MD5 7111a063428e8f6726a5ff781dcad129
SHA1 dc4a38abc81fb928d8cbbb6ab8a1cc3c2416cb6a
SHA512 fc77686202dfddd49fe423f3593abf0d63d07353145c578c303721194c5168dd7f54d2c5ac42c49fd24bf682324de42afb368885633dedb40086d5d7860bb96c
SSDEEP 384:nOiFavqMg3sNA8TUNTUlIm2ZTPjVkOwfjYyr/hwThV4Z5tVqoRYV/Vw1mRNrN1kQ:lFayv3lwgHVkYaJmhOxNRYk1mTJ
TLSH
T1F3C25C36E894DDABEDEB4FD9A74A3607DEE04263C58C4AD4DAD81D1D009B0DD530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 985dc5b6415da9e903e409b5cb2b435e948ee398248850e2dfdefe380727f894
MD5 62a3110d53b372617b3f5655840f87e3
SHA1 d3f02d4550d62c0e11e683cf4648760c3608fa3d
SHA512 cd4dac2e65b07636070e470b6ffae5c0349288db50d3a02c1f8a02e19ff51c05377a63b570061432ee59ce56aeb7a6822b390851ec36862dbd1db48e0ab0bfb1
SSDEEP 3:MsEllllkEthXllkl2zEflS/:/M/xT02zb/
TLSH
T1DF4404047FC40405C551303040F5C3D057F0DD1107117F4334F354375CC75401C05000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 8KB
SHA256 e967274ac9262e15be64881afbdfb6a5ce7e61e693771915eaca9ba578e6810a
MD5 3592bf80aed80d5bc5002a5353d18da2
SHA1 29c7508dccb7f2e35542b55892f17a25a8a1a7de
SHA512 296a98db864ff95f086f61d2938021be6ec0f8f7e711fc93b228417472b01de4f1cba566d01fddddda5480b9e9105940cff57ff2ae031eae0023f310c6dc57fe
SSDEEP 3:1ulu/n3llQ/8QuQll/lZAOSl5eqJ/cSFYojpuyOV9RUIJubqaq5AblGKQlaWJFu7:1uW4/ZlaeyEGyoqaq695fOy
TLSH
T17B0212431B51C833DC855F3F62C640DAAFB3360C0955FD238174CC1B1B556C9A68C66A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a9daa2cfe2d3cf4c7b20db168df88995532aab648383bf2edd604d1c92facc4e
MD5 8eb5e0edf14e5a2f625d8611db06733b
SHA1 a28ad3ce205a7de8496bdc0f7473396964fa5e2f
SHA512 e035e4a86878039bbaed82bf4c478581068807e2848e839dea1c2af72442c68427e72431afc4a174117afcb216de6ced7e7c6760f71b9e49553149fb12c3e1f0
TLSH
T15A412858BAFE1108F3B76F5A9BF6A86D847E78672E06D45E10110D4F4A63E40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 a331c74be274261b33948c97d419f1688855c04047af228508ca0f6ac4124ca6
MD5 3ad4c212e5bde4d59d5ae555f894c251
SHA1 b82833a77ca0294ba7731d1b400d5ed9600ab8fc
SHA512 1f4ffde8738a23d4831505f85de4e31e807762121b313911aab33a4f97aa06e4b371ef0158afbcaead482b629660585523a640791792f706a32545ab01a4dd12
TLSH
T169515C686AEE1158F3B7AE5A5FF6A86E487FBD332E07955E00050E4F0662B00CD61737
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 931b37484470af32686ebdcb974870cbc0d9c18fec320fddf2ec4cb799d05909
MD5 158dd01669853bf04875fbf8c09366d0
SHA1 7c454ca1ab0eb4c51b85d672e07f5d81db20e7a1
SHA512 3ad6bac03cc83788d2d2171660533ebc431b960aec19ddafeb8e89560cc4084e880fc3ef6dda7b1e3861f2df3fe279e61783c932bf8144a020467498d578eccd
TLSH
T144512DE03935A23F9BC38BC870754C842871F180036E5A5CAE668435BD5CEE1A36FBC9
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads