hxxps://exellarconstructionllp-my[.]sharepoint[.]com/personal/abdulgaffar_exellarconstruction_com/Documents/Notebooks/Project%20Execution%20&%20Commercial%20Intelligence%20Hub%20%E2%80%93%20Exellar%20Construction?e=5%3aMN6IdQ&at=9

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/04/2026, 09:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://exellarconstructionllp-my.sharepoint.com/personal/abdulgaffar_exellarconstruction_com/Documents/Notebooks/Project%20Execution%20&%20Commercial%20Intelligence%20Hub%20%E2%80%93%20Exellar%20Construction?e=5%3aMN6IdQ&at=9
Sample260428-lw8whsf14t

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_5724_814825626\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_1502346538\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_1502346538\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\cs\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5724_1718406699\_locales\gl\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	msedge.exe
5156	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134218437103479581"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{B2E1D80A-B373-4D1C-A1F5-39BE5E825BAC}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{FCAFFB4B-EBE9-463D-B507-44032FC3FD2D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe
5724	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 5724 wrote to memory of 2232	5724	msedge.exe	84
PID 5724 wrote to memory of 1716	5724	msedge.exe	85
PID 5724 wrote to memory of 3340	5724	msedge.exe	86
PID 5724 wrote to memory of 3340	5724	msedge.exe	86
PID 5724 wrote to memory of 3340	5724	msedge.exe	86
PID 5724 wrote to memory of 3460	5724	msedge.exe	87
PID 5724 wrote to memory of 3460	5724	msedge.exe	87
PID 5724 wrote to memory of 1336	5724	msedge.exe	88
PID 5724 wrote to memory of 1336	5724	msedge.exe	88
PID 5724 wrote to memory of 1336	5724	msedge.exe	88
PID 5724 wrote to memory of 2820	5724	msedge.exe	89
PID 5724 wrote to memory of 2820	5724	msedge.exe	89
PID 5724 wrote to memory of 2820	5724	msedge.exe	89
PID 5724 wrote to memory of 4908	5724	msedge.exe	92
PID 5724 wrote to memory of 4908	5724	msedge.exe	92
PID 5724 wrote to memory of 4908	5724	msedge.exe	92
PID 5724 wrote to memory of 5448	5724	msedge.exe	93
PID 5724 wrote to memory of 5448	5724	msedge.exe	93
PID 5724 wrote to memory of 3120	5724	msedge.exe	94
PID 5724 wrote to memory of 3120	5724	msedge.exe	94
PID 5724 wrote to memory of 6056	5724	msedge.exe	97
PID 5724 wrote to memory of 3992	5724	msedge.exe	104
PID 5724 wrote to memory of 5972	5724	msedge.exe	105
PID 5724 wrote to memory of 6108	5724	msedge.exe	106
PID 5724 wrote to memory of 3728	5724	msedge.exe	107
PID 5724 wrote to memory of 3728	5724	msedge.exe	107
PID 5724 wrote to memory of 1736	5724	msedge.exe	108
PID 5724 wrote to memory of 1736	5724	msedge.exe	108
PID 5724 wrote to memory of 2820	5724	msedge.exe	116
PID 2820 wrote to memory of 4212	2820	msedge.exe	117
PID 2820 wrote to memory of 5156	2820	msedge.exe	118
PID 2820 wrote to memory of 3484	2820	msedge.exe	119
PID 2820 wrote to memory of 3484	2820	msedge.exe	119
PID 2820 wrote to memory of 3484	2820	msedge.exe	119
PID 2820 wrote to memory of 5672	2820	msedge.exe	120
PID 2820 wrote to memory of 5672	2820	msedge.exe	120
PID 2820 wrote to memory of 3692	2820	msedge.exe	123
PID 2820 wrote to memory of 3348	2820	msedge.exe	124
PID 2820 wrote to memory of 1164	2820	msedge.exe	125
PID 2820 wrote to memory of 1308	2820	msedge.exe	126
PID 2820 wrote to memory of 4680	2820	msedge.exe	128
PID 2820 wrote to memory of 4680	2820	msedge.exe	128
PID 2820 wrote to memory of 4296	2820	msedge.exe	129
PID 2820 wrote to memory of 4296	2820	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://exellarconstructionllp-my.sharepoint.com/personal/abdulgaffar_exellarconstruction_com/Documents/Notebooks/Project%20Execution%20&%20Commercial%20Intelligence%20Hub%20%E2%80%93%20Exellar%20Construction?e=5%3aMN6IdQ&at=9
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff978e2c188,0x7ff978e2c194,0x7ff978e2c1a0
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,2762693038831112042,8412812227555710799,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,4615364755109245384,5177538258705703651,262144 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,10486452208924027350,12189595476486258568,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,11912671016636419077,15799468968659625610,2097152 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,7498994747826981247,13626260958211328326,2097152 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4940,i,10835145543423288247,1760857317028276763,2097152 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,12432754294047076804,13348477768860109690,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,8527223104736379076,12942372257209268597,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12787397870875028489,4262441209275961354,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12787397870875028489,4262441209275961354,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,3362943223731482883,6805972287378119326,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,10915788734273696230,6915913195828500772,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,15790445395747413163,16261908493123007351,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,6551086716401854774,13791140937867331877,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,7041414458209287715,16258032154101667699,524288 --field-trial-handle=2300,i,14492805994036522106,10252882713130306444,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff978e2c188,0x7ff978e2c194,0x7ff978e2c1a0
    3⤵
    PID:4212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,2130983312699115171,15502139716308564207,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,11791262119869214032,8468979896057319809,262144 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
    3⤵
    PID:3484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,431695722951919548,9442065610109129758,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
    3⤵
    PID:5672
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,11182746012671448737,13857223866184429241,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
    3⤵
    PID:5456
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,11182746012671448737,13857223866184429241,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
    3⤵
    PID:3692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,17665005518574377104,6693658740711477469,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,5146128041805783155,13776487040704435023,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    PID:1164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,3721694979699888896,701418419782517444,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
    3⤵
    PID:1308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,3574418356724435013,4883445881019051768,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,3912085243020589805,584408070485473397,524288 --field-trial-handle=2288,i,5899712168812696729,2847402912351709313,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
    3⤵
    PID:4296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2088

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2820_1502346538\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2820_325653368\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
MD5 35e76198d1c2c61d3c2a49119ba65747
SHA1 a5ae8329c9e762bed0a3d6bc5584e8faf6d26a77
SHA512 8b21ab6c5e29ab0ea7652b7adadb04a05eb734a52faa779252fbec4acd45079c7ad3f83f36227a419f0a59fc94eb1cf408bcd782459cf4691b6eb727be746fd3
TLSH
T136D0800925B7DC74D059847018977B4D7555CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
MD5 6a7649ad8529021b8a0bf012adb69564
SHA1 bc6cb8e64c0f5c84a887a19005280de2e2ff95dd
SHA512 316ecd29696eeae0002f91778818c1c4166e5bbf8440eddea3560a6ea0fb49f25e4e33c48c2d7c73eb08507c015f5aa7eb4187e6558ebdc4cd44c5bd980d8c3a
TLSH
T133D0800529B3DC74D055847018D77B4D7665CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d33c2e0f01b2f7d4ceb4c7c61f72cafab08ecdf289c710c9c8cf92e222261b1
MD5 a62ac0e2b2a10371e4b38a909cac8347
SHA1 34e400e25256576bbd235bb70f7a822f852886ff
SHA512 3e3db18ea12e825cb6a1d6df6ca6a9babbbe8c0469c675bf85c5ecbcac7376a6e7eb651e91c668c20d9785320671b22bdfdbc934c1a4c23128da234d8db99896
TLSH
T13FD023327B4EE48CC0380070059392543391CD0E30CB8003B303404C7D5C4C80BC008F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6440b0ad0b220f9d6edbc7070c3156bd77d423506737d585f63cf5664400c1ac
MD5 f7dcbdc68b4f0a013eb1688e7f86a65b
SHA1 fe95d59b83ac90c2f9cc721c53bb6f1817dabc6f
SHA512 dc5d442ffc4cff9cc7a821af51a0f4881ceb73efd95dbd9b1bd6759e4af4cecfa1352523212a5dcd8517563d0f322e8825be1ced47dc2fac641ff89c4f43eaf1
TLSH
T1D6D023516E0DD4C8D67700B36C93965573B14D097587A4073353444D7D1D8C447C649F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce7ed6a331e0d74c967728defeb1f8466896576319fac9eae0b9121988271086
MD5 56f492e9f07f9dd993808ef5873935dd
SHA1 485eb564d6ae9a8455ea6744ad40837a65aeb3fd
SHA512 5c24eddf2454df205cdd63b9ac874501a5a67e9a6a1976e2fa0d03663591c22e22adfe2ffdd6a03a490fd6f01999c2611b95555aee7364b03fe823952c0a8c74
TLSH
T133D023516E09D4C8D66700B36CD3965573B149097587A4073353444D7D1D8D447C649F
MD5 SHA1 SHA512 TLSH

Submit Download

9a474beb-23f1-4747-b449-3f5d737e0712.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a474beb-23f1-4747-b449-3f5d737e0712.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 384e655c4ff18421641b41b59f409259cc8c06cf077291500853d577f04772b7
MD5 31253956aa92c596a54020be7e6be6c5
SHA1 41ecfa35867fdd722ba5d58df7d8c66abf3a8897
SHA512 88e9bf15bab255c7e175e26d22f97fda83738c75d4338f56a2d28d0b1fc57a63460869662932a4731102ab98c7e25655d2c2f929252da5c1c9c7272ae436e1a8
TLSH
T194E02BA5C862AC2718FE1B1860505642F75423976781488B3A7D83088FB5A37458A85C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 b11f977f934def97e58f0823a205bfe2f9285cbfd0fe070275df3af29f2c961f
MD5 7c5a1be81d4f9da3d474d07a2ab92e85
SHA1 8cbe1eb828671f3cc1f101d984f98f7c042c3b08
SHA512 015d019df00a02d5e894d9296276104fb56eed31bbdb051b72e575d87501b328740306ad1e02d2855865a519b7a58acc1911f775aea541975d66d18a56f38eee
SSDEEP 192:YZSYyRAgaUIdaskufDxKCpuBgzvDThpgM7eHGOaSAeB6IpOYbZv80vZvPT8QN9l:Knasku7rtuMOhDnNF80vZvrZ
TLSH
T188133B7C724E4C52FAD655BD0C6F9A726378D824E6C01823833A35D6972A3CE784EBD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ce2437459d00000c380ce4360a898ee55905618b78f5bd3090a1df6529cd3336
MD5 e2f0b4a59b89e10f3596a5068578bc05
SHA1 979a639d74460cf69b7c68f48ac10ea1f339f185
SHA512 b7ed7d03c312cda758c2de1c3b2e42a8c90d8eb4b3f92032bb77b263c85360dca803f17879a468c2f1f5280681d4b9c4cbdb0469cc306eaf83207611c6da2547
SSDEEP 1536:W1kpabRIABBYACbEZCGnOt7olFByYpOr6F4DjkG+hWNvqvLVpsOI/2IZ:WAoZc7wcKG+UNivLVpsOI
TLSH
T1904481F74955A01BCFA812F5D2133A2DD27B401D6CE1F8E9D63C0CC52926B22B6BDB94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 f8177f3dcaa22e7af74b0b83c5c23b535aed287bd5178cde72b166f69829f470
MD5 1ed36eaf37da24e899c481271141ec7b
SHA1 56814fcbabd5ac83595d1884248eeefbd16fafe7
SHA512 df98e4bd70d0eae7a2435e92897f229a86682c25302ac36eb39e6586afc4c82dd31068019f982972cd261b95fd3f9e91834696f5f19708a76dfdc1f3a545abe1
SSDEEP 3072:Dr5mSxmiHQGbDFAlLFVt0HNtG4I68gCZlyr6tw:35bm3GbRgLx4Nt/I68gCZc6t
TLSH
T1BD256BEE9B282C86DD6A4D70F4E0EC22BCB41293B519E1D34C18C99087563C667DB6DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 31a94ae863511746c8a356a800d54130e6bbe99b74b3007a604c0086539054ef
MD5 d8736bcc4e6c79ffb234fe30d0775b12
SHA1 ba2583321ee3a7a8b36813f9baf186640c078653
SHA512 f63861c73c847801cb4be92368cf6258bc19e4bdea5f1b3e43acdad4d3437b412f2d50f7d529b73335d46656010d30e8b60cd58a7d09c602c610316453566d5d
SSDEEP 24576:LPWkfQCJPQiezWEMMQ5BT019mhPgba4x1pVIhDmPU3wD7zUw+rnAFwBca0BDQ:71baNAn5BTF6b9LpWDmdHzW
TLSH
T17B866DEEC6785C83CE638A70B4E0EC477C7412C3B555C1D38958C59852AB7C1BBAE2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2e8c415b266867e9695ce693e511c3e5015ae5c847f2ac1fd0d613be5f1d2c3a
MD5 080922d4e8e8ca977215f055b2497dc0
SHA1 29ad916cf29d5609d407fea70bef69a48c733547
SHA512 7377946a1155f6769eb4b63f66a6f91a8e000e41fbe06255f371738748a99a219eaadba1740ef52615f8dcf159f09b9f4d38e81303e2a9acb152298966777644
TLSH
T17A713A093397AC59FFE004B04EE7B446767CDE6881862E152AC6F33C9546B66CCA87CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 09a6df829d68ee11d91860cfc90d81fad24497e5bdb1a35a36dd468d5cd238ec
MD5 46a15ea8edd102c3b2308442b73c94fa
SHA1 65e638a76d409cfab7a39aba897e567b7d281dba
SHA512 c79e503ae351aa52b1629410d23ad858f3d0ea786510294ef268b131952f8e6cdbc9e8a043dfedf040af023ca07898d9d3967a0b517b978078cb61b2215b16ea
TLSH
T1386108097397BC59FFE000B04E97B0057A7DDE6891862E152ADAF33C9506B16CCA87CC
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 1f678e31d4ce785ca511b21ec4231de287a5057c8a1593c3f554cc5c0e785d0b
MD5 8947f108c9f252a17e9d8e079bb21ad1
SHA1 1f256d1b0eaca7b54d013488a03cd2200b7d7c07
SHA512 9b70ef8fda5247ef626bb753cafccb986b003e924606d9ebcbd958d45822bb28168379b57dff66c6466a82e8abd3353a6be14efc347bcee2915ada35af01b44d
SSDEEP 3:MsEllllkEthXllkl2zEklouPll:/M/xT02znoudl
TLSH
T1934404047FC40405D50010704051C3500370D414455177C33D5105335CC75414C000F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 77d687054aa7de60d07cb402c08c6c146a4c7c2e01f74f66e536a10fc722ec49
MD5 afd6adc88372bbc98ea373cdff1bcb27
SHA1 a1b0942a084f3f49dcc172f84848ef07e8ee0dbc
SHA512 11e73f386e3c50b9d92650689f89dd474f874589ad558a44af0c6a74d88ffc5fcd03b805bc37335d93be51917d2ae5f1ef458178b7eb256827bcd09965f5eed0
TLSH
T1EDE02095B8C6C19EE6103CC3523C774D87D13443F6956D072700CCD07A4B405B6C7647
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 4985e16be7dea348cea0ec9da61770d21874644414738f173ef8fb3730b2bfae
MD5 d9330024e45d6e022ae08842c59ffb70
SHA1 c7b4d3fb79d4a6ed5e94ca1bba6b81ea49e589e6
SHA512 a558e2bc8fe0529a4e95fa0c4c066b7aa03a684e43c4b39dd0c92367daa08793530db42e16418eeb0ab03388553f78926bf60281f6db432216dc520690ea721a
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+j8W5Lk1K5fKFtI6qYp0:Tyi+7f+UZD4jJ/B4Wxk1CKFO6Tp0
TLSH
T1B8E2CE8D3B11F511C8FD733DA0C2C9E05EBC693C468D7571913899768D63AA2F0AE11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 a3810c8263892586c84b827df936286c3b90031e16bee52e62ba834435a33baa
MD5 291608c673202ea1f754fb1de63058da
SHA1 5b122e75853cfced82a857186ef6f31d1fa4125d
SHA512 52a1321a6342e637c4b6347fc3b0c20633876f8ffb89b46baf937bdc127bd4561b58b4ac35be4642c8a52ce24b7153c5d4dd9c9ac4c203d3b34ca16dc1671d07
TLSH
T1CEE026A614CAC2E99168B8D3877C6B0D86D23516B38C3A0637088C527142685E6C7A91
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 b72a9b2493bb7a26a0a4a232d9b6b940981cfea4ab1274647e1b43ae7e1352ff
MD5 acc4ec4da5833c94ac3401bdf55c0991
SHA1 2503af21b6bca595cf095107ad41f96cea71243e
SHA512 2d557e5d7a2743ee15b9c15ddd80b50c30e14f6fd64e0063091439858806d3466311acaf60d31603ed4f9f4b74274eee5e9a67af449b76638d603d6df628e4de
SSDEEP 96:xBCXa+Msp1LPsQ8Gz7ugkcpv3NxSSJYqs48Gz7ugkcpv3NxSSJY2sehL:Hknx1LL7pv3WnO7pv3WnwhL
TLSH
T184D23CDBFA30390EFBC9047D601E336D8977631EBAE7AE19A54CC0595D70E1A843A44C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 e276d30ec24db720f1d04634ea50b00168ed2692d538781d2c1dab110bf2afdc
MD5 597b9cebf7a9ef35191a2a961e96a39c
SHA1 39b3e5b3baec7b09eeda62fcd54fb1e49144355f
SHA512 9bac198745c5376e8bd2df930d6cbd9cc356f3fa2681604bc71cb87ee375736f627409f5593a04855811cae179bc06390776b771da5257275cc8362cd82ec294
SSDEEP 768:y1fWqmfWcptTBBGYwhRRWDU3YfW7fWP1fWQ1fW:AwIYwh0U3Mo4J
TLSH
T1EE242A5F9A30331EDEAC007954DE365A0C6E712FABE3BA9D845600ACDFE3F16901D498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 614B
SHA256 82d7778a7bdd86486c5670c603d2577cbadb733cef71ecfe1ee139199bc7ee9b
MD5 9cf5d4b7e00b3ef40e4c40854ea8139b
SHA1 67b1a76f1073e49467f2770f1078c74c49b0bcc7
SHA512 b99eaf230d513c7b15bdf39b9658008239b27b107a6f8e64cafb579c8089fe47b3e107d05e7fa5762ef111fe14aa478c02e1767b0ea1662271ec159e37ce2044
TLSH
T15CF062F2441C9063F30239B417D4FA58772ED2BB49C0EB8CE3AA49422E433FD6186072
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 a8f415569199377088e0e9817371ad017df912913f8011192da3ee6b849c7762
MD5 79771f96019453d6f90db1715a15cfe1
SHA1 fa20c2bf63c7b03f91d87ee6a9a47278f4fd030e
SHA512 dd3e0396f0eadde2c5ef936a39a1ccd187eb1368447d580197c5c786ee75f6cf1d8d32984d79c905563f744960ba4b7b51d5049458406639e825a3ed4aa5cc51
TLSH
T11CE0DFE154EDC1EA6204704B833D7B0CE7A43406E7983B466B049D42B889004E7D72C6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Size 56KB
SHA256 29c43c424bf734f98bfce1aef9a3edfb39e5a7530b4b0a925e49232b03f301ee
MD5 463d3918db8c3a24a2154ac21d9a54b2
SHA1 a778e9eb0d77300efad416decbc6e7934048685d
SHA512 39c647a88b78ff90194b4321a2ac9981f25d125f815c173f5a020dcd29c71d05a67fe8b274748679dbe9da146b20dd5cdb8f860846df5f43db8161d0c30a2923
SSDEEP 96:PkS/KLPeymOoizhGNOnfmG38tuvsvsuskYvJHbn8MouB6w9fUPnP:R4oizhGNOnD5Yi77Iw9fK
TLSH
T13D43651F1B682802C8598632ACB195F26F7CA13F8F53DE926CB044359D75962B02E5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 fb9040a0f9922310922fd7cc6b9156e790049d8e43f5ca46038a06decf0ef16d
MD5 bc93664a3948eebd6c01d985d03e4f7c
SHA1 4ba96601938bdcdd8a85b9efc814c6067a2937b0
SHA512 fe8ae2bfeedc6d67e60dc7d0468c0192b46067d99ec2b6a4620bf184c83af4225937f43c7383bd9c106b5b8bfdecd313d90ed9307402a3c298397057600dc360
TLSH
T165819DF783F4852ECE1191F4AA186E2BCE2D0520436C785AC5D4AE57E3F24B1E142B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c69bd2662b4601eac3c2fed693e2855622fe171c62929242e0da9cfcfd7778ce
MD5 dacc1eac57578a4fb0cc41588a2a9240
SHA1 f24367fb43a770ca550e82247aea44b6e6790498
SHA512 baffc86ae109d6cf8d8ccc47fc0296419e415d56de8899bf1bd0174751f343f40394866d6e778e3427114402b9c787e7efa507fc8cce7aeb4ae46005f586f2b2
TLSH
T1C7719CF783F4852ECE1191F4AA186E2BCE2D0910436C785A85E4AF5BE3F24B1E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 76af1d6009363af3eb02c00d026ebbeb36c85c4ab8477926da54e627544545cb
MD5 a39c8ce8cfd775958d694c0528a7ed31
SHA1 5bf78368a1f5c002a74a259c4d18d6c15d1480c7
SHA512 f69eff46c8acffc47926eef7b23933ff47bfd6578f656977ee8ace1cf6f4d2ec17059d044c2062a37954dcd02c27955af6ddf68659b7dc0e4b73675cf42a563d
TLSH
T134216D97D1BFBC6F14BE08AB5F89780515ADA43502A098F9CF7682FC70C54BB1B11465
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 5d42281c0e090fde67b1a3496ad722035ed73a483b03f8357937c4f7f3f1e98f
MD5 ad7a89211cdb89f3c5db0eda3c03ab3f
SHA1 e560220e641a35db10ccb09094961891f1c463a7
SHA512 19f9c5be8d353b22b088f7620d8d0d7ff34a0a345ec53f65752bcc53e380b70f58829e7948703e39e50216453582ae3e4771066ab43c1aff9a15f33585cfb2e9
SSDEEP 192:sxZJRRyMqZ/K1Ml8Jkk/fqsrWpVfNYJN+rqrjmzzodpRQHW6+WNhuK4dYfyRk76I:sxZJGfk/fqsrWvlYjGi/iHbidnmzRf
TLSH
T1AB82E9166A38597BCCDBD219F6957B63D7F9152391804E449AFC8F0C01EABDD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 872cce15574960f8e20b87639e17df39b92d43df39874f3cd8461163aecaedc9
MD5 bd1e7a53a0e722192476dfcf831ea68d
SHA1 c90d06acd9681c989c31d4bccdae755619954d15
SHA512 fb42a5d63550b63edc355ad5f346dbef4afb7995ea810ec15b41bc8be06643385c24e0694f6a0c72f69f85eedf357f3c30608dac12ba3b09400f89eccf69fd75
SSDEEP 192:sxZORRyMqZ/K1Ml8Mkk/fqsONYJN+rqrjUzzodpRsHW6+WNfK4dYfODV6mQJIg5t:sxZOGMk/fqsYYjGiVyHbFdcmMTf
TLSH
T18372D9166A385977CCDBD219F685BB63D7F9152391804E45AAFC8B0C04EABDD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2c5cb844a4ac23e86a6664b68f3036babf2a9b2d528fd78bc55d32315ba834d0
MD5 5dd04b915cc88987a704ae096278e747
SHA1 a5920fe395285983924496c4f5c78224ef2cdbaf
SHA512 648d037e316d53c7469da320ebf767219c32b2f9a5f8b49b829e5a60e535cb0d7d63dcd7fd6af8f3b1954024decccab104c8f2e6bf75fb29f08ee91ee4d46178
SSDEEP 192:sxZkRRyMqZ/K1Ml8Mkk/fqsVNpJN+rqrjuzzodpRtHW6+WNfpm/YKvV6mQJIgjzf:sxZkGMk/fqsvpjGiP3HbM/kmMjL
TLSH
T1CC72E9156A38997BCCDBD209F9457BA3D7F91523D1904E44AAFC8A0C04EABDD220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2300aeb2565840b7b676f88f45d167a4d1b5ca6d8c3a246b3bf8b415a4fd82d2
MD5 29db7b9031bae7ad676b574ff3b2e276
SHA1 8ccbc2cef450ed187137866b12035ec31d92e7cd
SHA512 b9c2fb0cb56212e4a0e0fcbb436c997cb757f9876dd00e46168f70b07e037126c4f0e77c81d7f0c9653639aae0d974223d57e4e340d3311245d589353de163fd
SSDEEP 192:sxZJRRyMqZ/K1Ml8Mkk/fqsONYJN+rqrjRzzodpRQHW6+WNfK4dYfODV6mQJIg5t:sxZJGMk/fqsYYjGi+iHbFdcmMTf
TLSH
T19472EA166A385977CCDBD219F685BB63D7F9152391404E45AAFC8F0C04EABDD210782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 aa9bfbebf0b799eb22757aa71be4e0a28a9c157fe8de0c4819309f9e4c735550
MD5 9ceabe756c0c3a9ec02cd6c7d2b66930
SHA1 1d236f0be72b19f8ba9da77ce09787f948f1d0b7
SHA512 949cfad7135bd8d6b96bedd24d2dc5e7b681b306b192f3c4296dc20eb82bbf9aae7c8b736da33bd2a64971b19446ddc399014185948007d076fc6e5f1d8a4734
SSDEEP 768:DcgLiME7pLuLn9eWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OV8MKJLlhzCpUrov:DcgLiMIEn9eWvaShqu1jatMKJLDOp/v
TLSH
T106F20D3B6C0CCB7E4F804E9CED2ABE8E6DE4028B9698C95447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 f1978c2091f69153c8fafd942e2fffcd4dabd527ed863d48fb005a8b04bb80b5
MD5 33210b2dd219395c63ea316d7e574634
SHA1 c2535961125c2a73da3ade5f3d5f735ca8b65c02
SHA512 5c8c81bf9ea1020325b2b1de26376246cae75a93deaf1b47aef6bc59cb13464350230ee235f722eff832cff556e3eb8b4ebc4319c0703833ee1b369652133a89
SSDEEP 768:DcgLiAo7pLuL/aeWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVwMKJLlhzCpUrX:DcgLiAUE/aeWvaShqu1jagwMKJLDOp/8
TLSH
T125F20D3B2C0CCB7E4F804E9CDC2ABE8E6DE8028B9698C95447FA445C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 e988a2044553e38c2b8ed6026a7681c4cc7c41a4a2d49b499b82a8e1cfc8792f
MD5 31a207b61f42475af0a6a5a831c707db
SHA1 2ae5cfacdc8e7598d5f4f48b20dd2d8533dbd038
SHA512 8b376f7f71ac07f0b527b6c1a87a8ec8337111dfd548152019e86b7823142a863e622a7f7355dc78cbbbd4d3ec8b6bb3e73408a411c91c2ba7bf3b8c4f0f5a40
TLSH
T123E0262115C8D1FE61167287033D9F0C82E5B407EBCC3E073F00CE807946584B9D3182
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 ec1a79623e394d4fc8867f880f63117506dffd82781dcd639e36f940a0c4d2c6
MD5 54f81d2a134670e4d11e20ec68d1ce2b
SHA1 ebe4330d450ae121f8f454f0abdc02aa394a408f
SHA512 75f713465bf54fb30fe7841d82fc9ac380fec63d88cb5e36b29938a883d7f3829be6ac927b9194218c1dbb4e554a4c2416bb81d28c40d1457605187f4145ada9
TLSH
T1E3B0122A3704D29BF4C905340284AFA1AE01F201500005538C784F604D49EE47F41A95
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 3f7edcf13000566cab8035e3deb55efc82fc19dcc4409082c5009dea583854de
MD5 05874f0d3a6f36ac24b98a70b79ec405
SHA1 dc464e6120cfd4e884e77da77d00d5bbb379f7e1
SHA512 f43f85eafde2dc7773b0492ddbb03008c3acfb07239b40fb5584f68cb1652256e4024774182e4eb1f62aa6c3fc22066f4a74991ec567a4be2b2f5582d1943097
TLSH
T128E0487025CDC26A62857197436CE34CC6A2F446EBD92A253F08D999760A1447693542
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 4045c06f73d545a8784799fa03ae776c281f171e4c91445a493a9ff2a7ddbb7f
MD5 741625a87d3e3154bb0e550682159653
SHA1 4f3162b78c42007ed5042c11c743ce4865d902b4
SHA512 5ab993deb7f1740ed7caf301dbc480fab1fd99fef77967883de64410370bcc7bd00d22b7f91ff3107fb4718c96c6876c974a3ecf4299451c09052b11e1dc797f
TLSH
T169E086B055C9D3799204B183437CE70D87F0B816A7D83B5FA708C851B506144B2EB981
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 fd2b25c83f49a2c31e18abf27b4259a8678e1b57ade45e644b8e63815a99c75f
MD5 f73b9947d91c09f3c80876926e95083e
SHA1 2e3db9b198fbc8a70c7eef19f52fffdac2b82741
SHA512 9b04aaf1a7b4296676a8c16ff7ebe30dbeca959f842b4a4174ea659014da05a043cba498781dc4efe0832940bdd8e2c634548411b16ad4f531519f272eb5d70d
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3BbBHEb5tFg:krN/INhx+kcxKBzxbxE9tm
TLSH
T1DEC24811717A02C13A7E398A8595B86F62C230A371D8B43B7BB954A60F6BE10DDFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 cc78d9dd99e14e266399503ad77eb15e0f0db1aecaa7838442594aca85a23f31
MD5 75425937cf58079573ef3cce34aea200
SHA1 6a8878dce86130e13e46ee52d25844c36a8a6b7b
SHA512 df1e007ec38e858ce94e0d58b787e322b1dcebe22882ec2e58927cb90bfe99f04e74b9b654843fe37e7ca9f575fe0269e259644a592710a733c8aaf960e073f0
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3BbBH0:krN/INhx+kcxKBzxbx0
TLSH
T12DB22B11717A02813A7E399A85A5B42F76C2306331D8B53B7BB914A60F6BE20DDFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 18KB
SHA256 b908488095be597c6ccab8beead133c48995a5e6f7b303dc0e8b5208fa9743cc
MD5 1a5f0e087138405a7dc12df1aa29af85
SHA1 6502e2079e154ee2a86865694ce560667053cf2c
SHA512 d973e41af4f6ed1615d45e1e5d5b0ec301358616992d284b5bc8f74d52d4b94dbdf4770229adaae2598709e31d8b0bdb2a72c9f63750b1137ee16e72b9fece42
SSDEEP 96:ZEtSyGhp22iSuxysNsws48GBsBsU8Gz7ugkcpv3NxSSJY6H7ugkcpv3NxSSJY1sG:ZLTuNG7pv3Wn0pv3WnHxfyi
TLSH
T183820A97E870315FFED00979C1883B5D1E1E362BBED3EA5D429A408D2F91E25820B544
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 9348c923ad4079d9cd141366b232610bdfe33fa3717fd0d79d1e3442b202932c
MD5 fb1787960456b3e10ba198c6b6a590bd
SHA1 ced9f36e4540cf29241ee47c25549f62941dd5fe
SHA512 719cbf75e0a9c6891f2ae0f0923cb39fb8940e321373f22b9de6187ac89196e95950882c7f8f49569a868f878925cbdea830ac096fb2e01161ad3b541ce18927
TLSH
T1115175C1A3B955C57F89BA82C2196403B5E13E5B330E5872736E94F55F888148E6FE32
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 75b4e328045f47b06056bc1534765b4cf34239332233846801de810023dcc493
MD5 a98d4e39b3dbd236e713aa076248ea6c
SHA1 93c62be97fdb116f0085b16ac3a6ef91abdb0652
SHA512 bb45e31e90ac4fcbeff4813186d931ee3cf387c1fcee9dd9e0d4c4b038c63135956828f181b3f38f23bb91ec2de641966ec3c2613dd8df55c39148b667f37456
SSDEEP 192:bpO76IAsKLl8MNssKQwHejl6QnIII2b2MIMcVYcY9:U7ksKREsKtNQnIII2b2MIMOB6
TLSH
T1F052941A26065F33C15E5F7B12AACB961BD6D8814D72226D32211C1F9DF3B538BC52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 c2189d6dd2a5ee96413f9a58a9095dbea8c39fd2a2274f964a7de8134cfa5f22
MD5 1f15c79fd175d594834880a0c373ce24
SHA1 30574854d77962c3a21dc9db0d8c84d5b5a625fd
SHA512 96812a6cf7c0948f81bb5094f13ec9012d8def43d8dc07f05b38ec419eae073df9149fa4963125aeda74780e2c3effe6a4dac874482d793362ca78d882c54324
TLSH
T1D8E026A3B8C8C1EEA124B087023C5308D383391BFB983E2B2F00CC85B449100F2E7193
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6d011067b3bf035d237f274afe613da6273923818a61750e39a2ed5fe337d92d
MD5 6b84b7f2654365f3e3cf76e2a0329277
SHA1 2394283888d0feaeb5bde76486cadaff86752b56
SHA512 e74cbb7bcf115b60f1f6a8b46ae8284abbef2460bb4fbae54319782899d826b559340750385b40a8395dcdcec44a4e62890149244a6741b180dfadfee198fd0b
TLSH
T1C9218F56F320C159E14E863EA06A9B351378E8529FBCED0F94B934356E72F001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 f8899ece6d43982bed8ba5f65050e24431b96486410d441acb6871bbc6b05c2d
MD5 f4a644d582d857ed27b25b442c0a14a6
SHA1 0b1df2b5026c1b52be3e65fc59c34e66582bdad2
SHA512 864c33ac617df1315fc26ba88bd93e0ef5ae5a927f339bd69b5aacc534a5d6a6027227e2945ce83ad2c969b13a060d7a2ea04e5648e2a06ce85f6c1f3908b56e
TLSH
T17DE0DF12B9C8C1EF9114B49302BCA748C293388AFB983E2A2F008D95B949145B2CB193
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 431237909b4dd16e163be05d29cd0c9e5b339c3f9e8ac38dfa1abf8ae24cf8a2
MD5 0b904a601cc599f470990ba7ba38dc7f
SHA1 88e68cdf05a95b48dbe675a4a08d6645dcbcddfb
SHA512 4cd351b6dba02cf97dba35c0bb6e063c09339e9636a432dba90dfd637820688c82764c17142faacb7f2db51d8d44c1af1b62d4988176ccb188479ab3fb6bee49
SSDEEP 3:MsEllllkEthXllkl2zEeldoP/:/M/xT02zNo
TLSH
T10944040CFFCC1405CF1C10344073D3500370DC10C51177533D7104135CC75400C00044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 57d31c2720dbed047735256b6b6645430726f4c098fea1a5cb81e6a762f3d014
MD5 e460b86d41d3faf5a59d01a0bd1dc544
SHA1 38f92aecbfbddfca6bdb5cc43cd2abab929bebf2
SHA512 b6a0c425c3e714e3779eda13a098a671f3f55051e4b6dcfd9a0c8cdc60a43d752dd317fd0e7eef98fcdb1b4cebdcaf7d800b2c9b68b6a35eed61972d47c889e3
SSDEEP 384:n1iF9SxmoWgsNk8TUNTUlI4aZTPmSSOwfjY6oCyz7qGilJDtAb4hKAWH7mNvUAyV:8FUx0gpwgNzWY7CyztilpKbIKAWH2O
TLSH
T1A1D25B71D8A4DEA7EDEA8FC9B74AB503AEE40177C58C5998DAEC2D1D108B1EC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d64644a3423f5637a02add8abb3f3448ef01e652eb6de21e1928bdd365df6272
MD5 1d2e47e8e3ca865cc774399ce2e644fd
SHA1 331c92e152c8e8a49ba138361f1656082991b7a1
SHA512 b9dd8a65d22d5b36e94b218376ad686b4d9e4389a930d430b995bb15c7e9a2350740f6df31c07772864359f1814a11cedae58c8e372bf549e0ca48f99eb76bc2
SSDEEP 384:nSiFavqMg3sNn8TUNTUlIm2ZTPEN16OwfjY6oCyz7qGih9VRYV/Vw1mRICe0GrNE:ZFayv3OwgHyuY7CyztihTRYk1mC/0Ka
TLSH
T10DC24A36E894DEABEDEA8FC9E7097A07DEE01167C58C4AD4DAD80E1D00970DD230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 552ee15fca3aef2d9b77de3fee06f25bb6facd0ff642a95715d3636505792ec5
MD5 8ac676d2dfee74f519595c8746e19c98
SHA1 ebd12c64183de88693bc58528b664663ca58cfd9
SHA512 bc5593d988eb7ea766faeaf86b4eac3a2a7c98d9d074bdd7ccba1cca9befe36d00cfc07ee0797824ad0a2a6788564b3b0aed5d4475bc2beeed72c32b6d728e15
SSDEEP 384:nOiF9SxmoWgsNI8TUNTUlI4aZTPmGSOwfjY6oCyz7qGiwa6worWPsq+KqvWLgQNg:lFUx0ghwgNvWY7CyztiDUr3FKqv6gs69
TLSH
T142F228B1D894CEE7A8E6DAC9A746F1126DE40137858C898CD6F87D3E309F4FD2706812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9381a6b13f310d29283b9a3ac20b9f93253c7209c2b4fc60ad8302c6a3307f73
MD5 aac622d5bea893ac76f8666250c5236a
SHA1 7343f78aa2797ee6f1ebf015b9aa3c7d1f9a4445
SHA512 c34ebba62b1de0638cde7ba0f76c87869cd1075fe6eff044155d3692b81c049534c6551a65f2f951e25d6ad93da9085e19d02d00a27d374a382472f7cf11875e
SSDEEP 384:n1iFavqMg3sNc8TUNTUlIm2ZTP+GjOwfjY6oCyz7qGiww/RYV/Vw1mRICe0GrN1a:8Fayv3xwgHFpY7CyztiF/RYk1mC/0Ka
TLSH
T1F9C24A76E894EAABEDEA8FD9E70A7603DEE40167C58C49E4DAD80D1D00971DD230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 511a212fa41ac65d45545c4cfb88dd0ab99cdac7267e9b0117ecc3e184709f2b
MD5 87add148534609b9e194b3c283d39a4f
SHA1 d104bd5a421eacd1df3b1ca865367950bdbddf8c
SHA512 f9b0d1f623a031e2c2b76ceb3c8fe0bd5c077d0f6efa33b535920323183641bc9adb95ccb6efe2fa1f45188062917a91e710a604a01d0f51bfdaf41d3d648f75
SSDEEP 384:nxiF4SxmoWM3sNI8TUNTUlI4aZTPXLSOwfjY6oCyz7qGiwB/QNvUArN1k+5vI+e9:YF9x0M3hwgN/WY7CyztiS/s69
TLSH
T149C25B36E8A4DE67EEEA8FC5F74A76039EE00167C58C59D4DAD81D0E00971DD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 db657b03067a411b9e36e10f96191922c0f73f9a0c47d06b6d649e2595882067
MD5 fbc02cf2723923d4ee68e35d8480b3fc
SHA1 a8f76f7d47ff388d080df7083231b1c0de5bdd10
SHA512 e1a254ace6d066d5bd7bb973129871e524de4363bb6ff59772d624ed043d7b7f882de5f5744c3258aafd119e76029ce1fe7e25b7a200925cb2a6fe0619b1f5e1
SSDEEP 384:nOiF4SxmoWM3sNI8TUNTUlI4aZTPmLSOwfjY6oCyz7qGiwa/QNvUArN1k+5vI+e9:lF9x0M3hwgNwWY7CyztiD/s69
TLSH
T156C25B36E8A4DA67EEEA8FC5F74A76039EE00167C58C59D4DAC81D0E00971DD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 af8c0146d87a9f9bcad921a6a5342249e4cdc64dc36d89c0c2bffee136898bd1
MD5 2ea1385439a2ef2a159c0ddcdcc233b6
SHA1 a47e20f9c609d4b7159ecd844b0d4a61098a745f
SHA512 6f55e6d4dcd7a3a39f3ed3dbd0b4d1b47e2895297e192fd1d609e65e21a06839009bed4980277a2ad5403b35a5cbefaecd0237f9b8ffe90af96a831586077b5d
SSDEEP 384:nOiF9SxmoWgsNI8TUNTUlI4aZTPmpSOwfjY6oCyz7qGiwa6worWPsq+KqvWLgQNg:lFUx0ghwgNwWY7CyztiDUr3FKqv6gs69
TLSH
T148F228B1D894CEE7A8E6DAC9A746F1126DE40137858C898CD6F87D3E309F4FD2706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 952babf1399c87fb88919384d3b522de229162e5c138cb8c666d0b4f72dd3844
MD5 ef033d4106ff26b7cc21b9b01a93268f
SHA1 805d26f947a3d19c198932c899f3ce3b27981561
SHA512 6bb7110d0455372e198c4ba8459deaec0d286a0b2ed60fbbf87c08097be24198662763dd0d8ba76315c1553438e2c85c30e6f8c8bc0b7925803c823ad8b0484b
SSDEEP 12:TLH8PFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3is+zABrdNVmQQtAdNKUY:TLc5UOl0afDdWec9sJ+BnNJq7QB5fc
TLSH
T12A92AC27AD352033E8DB4B36FD8385910EBC135EC9A7B945DE9049611EB2BC1A2592FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 ff3de443bda73b116344a2a3d384cc0b722673b83169d6d388c603546e2c5770
MD5 9fadd6ac69a0fbc13b40b32545468583
SHA1 f1487dda91bf4fbfd85cfc1a4b4605afceadfaf1
SHA512 e582e2c3d0dd5de37bf1afc2e29dc46e2cee3d503bd4d59a8dff9d4d97673fe6c9f55231c067c4f20dad5a1d8e34bab309f646bffa3afe86d92081aca4a9991f
SSDEEP 3:MsEllllkEthXllkl2zEelpal:/M/xT02zNEl
TLSH
T1C544040C7FC41405CD5410304051C3704F70DC30451177473DD104135CC77401D04040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 551b5d45674e685ce42bfad9fff59c2b88013f6b55f022edbc16b0f3c5331515
MD5 dfadd3bbcae128d4205fcb6c178f3aaf
SHA1 005be079c2cf9d7cc57b17192391298786f0cd6e
SHA512 ccca0bb1a5dda3e846892598fcdd5961f95b6b76e8677699fb846d206cef5b8a3a9e3dad59b6d18bcf83adc115474e843a457865545a24a5e42003b77e227ce1
TLSH
T15F4120E1983D2AE1D4BD0E6EA04B78FC84D8D326F178747D6868EE98463A95E640143F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 263591ff438c492bfe22e1496f2fc466dbdd50c1ae1325847e23d92a20ddaeb9
MD5 70d2e4ef9409f8b089520036f0235d87
SHA1 f6e702fcd80c3492ade778d1d30244e2ded53dce
SHA512 729ca9b1fc9d13221acc18668868378a0cb3cf88ef3c4b1390b551d74f3a093ff955d92a4528d3a4b3a059d148beb9d5447d6ced8ab78f3eddbf291d77465474
TLSH
T187413759BAFE1148B3B76F5A9BF6686D447FB9372E06D45E00110E4F0663A40CCA2B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3692-838-0x00000234E3630000-0x00000234E369B000-memory.dmp

Download

memory/6056-219-0x0000028E837D0000-0x0000028E8383B000-memory.dmp

Download