hxxp://uae-peptide-tracker[.]perplexityuser79[.]workers[.]dev

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 07:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://uae-peptide-tracker.perplexityuser79.workers.dev
Sample260429-jsahfahs6v

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1354021442\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1354021442\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1354021442\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1354021442\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1685404921\_metadata\verified_contents.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3384	msedge.exe
5916	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219229489834331"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{7E7D7E40-A2C9-4536-8C2F-4D47BFBC23C6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{8DC0CC08-40C5-458E-8F51-BEB5A9012CBE}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5256	vlc.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5256	vlc.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of FindShellTrayWindow 50 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe

Suspicious use of SendNotifyMessage 31 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe
5256	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5256	vlc.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 3220	4896	msedge.exe	78
PID 4896 wrote to memory of 5916	4896	msedge.exe	80
PID 4896 wrote to memory of 3572	4896	msedge.exe	79
PID 4896 wrote to memory of 3572	4896	msedge.exe	79
PID 4896 wrote to memory of 3036	4896	msedge.exe	81
PID 4896 wrote to memory of 3572	4896	msedge.exe	79
PID 4896 wrote to memory of 3036	4896	msedge.exe	81
PID 4896 wrote to memory of 2928	4896	msedge.exe	83
PID 4896 wrote to memory of 2928	4896	msedge.exe	83
PID 4896 wrote to memory of 2928	4896	msedge.exe	83
PID 4896 wrote to memory of 3384	4896	msedge.exe	84
PID 4896 wrote to memory of 3384	4896	msedge.exe	84
PID 4896 wrote to memory of 3384	4896	msedge.exe	84
PID 4896 wrote to memory of 1672	4896	msedge.exe	86
PID 4896 wrote to memory of 1672	4896	msedge.exe	86
PID 4896 wrote to memory of 1672	4896	msedge.exe	86
PID 4896 wrote to memory of 4632	4896	msedge.exe	87
PID 4896 wrote to memory of 5944	4896	msedge.exe	88
PID 4896 wrote to memory of 4632	4896	msedge.exe	87
PID 4896 wrote to memory of 5944	4896	msedge.exe	88
PID 4896 wrote to memory of 5492	4896	msedge.exe	89
PID 4896 wrote to memory of 5180	4896	msedge.exe	91
PID 5492 wrote to memory of 5548	5492	msedge.exe	92
PID 4896 wrote to memory of 4600	4896	msedge.exe	95
PID 4896 wrote to memory of 1112	4896	msedge.exe	96
PID 4896 wrote to memory of 3820	4896	msedge.exe	97
PID 4896 wrote to memory of 2268	4896	msedge.exe	98
PID 2268 wrote to memory of 5360	2268	msedge.exe	99
PID 2268 wrote to memory of 3384	2268	msedge.exe	100
PID 2268 wrote to memory of 956	2268	msedge.exe	101
PID 2268 wrote to memory of 956	2268	msedge.exe	101
PID 2268 wrote to memory of 956	2268	msedge.exe	101
PID 2268 wrote to memory of 1536	2268	msedge.exe	102
PID 2268 wrote to memory of 1536	2268	msedge.exe	102
PID 2268 wrote to memory of 4124	2268	msedge.exe	105
PID 2268 wrote to memory of 4088	2268	msedge.exe	107
PID 2268 wrote to memory of 5872	2268	msedge.exe	108
PID 2268 wrote to memory of 4548	2268	msedge.exe	109
PID 2268 wrote to memory of 756	2268	msedge.exe	110
PID 2268 wrote to memory of 756	2268	msedge.exe	110
PID 2268 wrote to memory of 2432	2268	msedge.exe	111
PID 2268 wrote to memory of 2432	2268	msedge.exe	111
PID 2268 wrote to memory of 5356	2268	msedge.exe	113
PID 2268 wrote to memory of 5356	2268	msedge.exe	113
PID 2268 wrote to memory of 496	2268	msedge.exe	114
PID 2268 wrote to memory of 496	2268	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://uae-peptide-tracker.perplexityuser79.workers.dev
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ffaed95c188,0x7ffaed95c194,0x7ffaed95c1a0
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,11466580177309032220,17990542764038045923,262144 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:2
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,18409145744355566661,7487029537022784400,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2028,i,6632396401681952156,1459772657384061760,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:13
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,8264440437675160312,16740059003543185477,2097152 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,5276393607748641546,629289574111184619,2097152 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4876,i,12992731519569701667,5477197442518803932,2097152 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,5920878587269509962,7217006618516647853,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,10239966099943124749,11400812176099126972,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,12425876295619127888,11664403739887318899,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5492
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,2557155946763083868,9043887897113419870,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,2557155946763083868,9043887897113419870,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,17773952496369028017,8778304329505011004,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,7825404837009667367,2728305273692388358,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,4966888341979192555,15852744147818373870,524288 --field-trial-handle=2804,i,12604437830368961634,8114674137886078433,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ffaed95c188,0x7ffaed95c194,0x7ffaed95c1a0
    3⤵
    PID:5360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,16169285768231916079,9495156938434440625,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,3355175848423962940,13664667324857391786,262144 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:2
    3⤵
    PID:956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,14454931905022981496,15602702969649031340,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13
    3⤵
    PID:1536
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,3364471512315779427,2078806257026947495,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
    3⤵
    PID:4024
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,3364471512315779427,2078806257026947495,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:14
    3⤵
    PID:4124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,11186706441546336811,4818754071317130979,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:14
    3⤵
    PID:4088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,5691713077438520659,16435482742776409005,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:14
    3⤵
    PID:5872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,11941569234710821905,13598556295149976776,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,7041303036601748800,11380128151050943817,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
    3⤵
    PID:756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,17297917257825571620,17090646871289204542,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
    3⤵
    PID:2432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,15893817483697433755,16282305112726037066,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
    3⤵
    PID:5356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,5506515065422292797,18104347965176057106,524288 --field-trial-handle=2084,i,10040956653121506657,10383708470772077155,262144 --variations-seed-version --mojo-platform-channel-handle=4028 /prefetch:14
    3⤵
    PID:496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6124

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\ResolvePush.ADTS"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 1c02e2feba3b2af3c045d1ed01f8a67e0923f7e357b32c434e567eef6aac4138
MD5 f05b0294ae4949feed0706bc80fa6418
SHA1 346bb7d2d99251c193652ad4ae7ef2964565b98d
SHA512 348366e162f3a037e74d0e9ff422ba7ca3e14c2b170f50bab2a4b88b29a572028e56965c332bc63cbe89de1a3467c215893ecf3cac514d786ec7ea30c08bcc05
SSDEEP 12:bHiUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:blRqxosfxWMk8xVZ4YWI30otWn
TLSH
T139257D85B34494FFC8C35A7189BD17903774F6DE5F42835B6A377A0E2E671D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 727b9c64de42b97b0c07edefd85353a32601f1f961d1e5f8df8766c0155d8d51
MD5 9b4e125867b60d02602f440395c98fac
SHA1 4eb2176db96d718ebc158d7c48224a615b75c178
SHA512 7726a6bbf9c459145bb3c953e571aaa388cd984d8db9a1bd56af3534abb19967036198f399d4110fec3a50b87549eafff6460f4a9a05564787a7ea48e14e0cb1
TLSH
T17BD0A7367756F822D17844B580115651256A948A288B9186E225404E44B99A8A3D62A6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9cf5acc3a4797f1d8e969ab1970c2330530e33f7dac25d2b42a810961a67ea68
MD5 6bbadb85852ef58796e988ee6bd3abc6
SHA1 f87a8c99cc4052067a5b532f97bd1ccc92f6a0b9
SHA512 a3813b64d663d976b681f2ced98d428dc47f49c99219d4a147277e7c8375b07692a5a14501eee0df77c86f9da6e3205c49e89510005d4f3b21e3afff243fb088
TLSH
T13CD080155FF27C70D014E8F694187B41392DACA68D43A6115471EA7E4C224D48BD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7724f42fc3f35869204f7cd743ce961b2d49c4bf3d562575a0f99427f3de2011
MD5 2dc0b052bc4f739f1336e67fd4b66f1f
SHA1 c060670146fe46ef41c6802483429779013e7286
SHA512 3d618ff0a2c7ccd6c385a94654b47a3c2d0c875adb2ceb75697df32595f23b461a08c1985ef73985a66ea06ad3fca624d92ed360c35e71309e9442ece62da29f
TLSH
T1D0D023363B16F811D67B48F3D4124740367B54D9354BA1875171440F5871C94E3DB3E6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce54bd09246ace475a94a5c1a202054c61e390ac6b347e5ce92f99896465b435
MD5 73a4455ad1e6ef523aab8d1fd8e56c4b
SHA1 bc6384c6043e781b5cbb4da0ae9d1f14522a37ce
SHA512 07c70f00916a7e80b0d9ae2040b3a5c3d7002f708bd375c31a01235d80ec6dfd21b3d5e46e1d8b95343bd5f080bcc202c18dcb264ec8f0b55ab25aefa6c0841e
TLSH
T11AD023323B16F811D66748F3D4124740367B54DA354BA1875171440F6871CA4E3DB3E6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ea750b8ccfa8d7c7a393cdf6c9c8a3be0f2f086fb814bb44905a02c83d9af71f
MD5 697a394c9a3ff43b8925489b648b073c
SHA1 5828315de0bd17378051f664204bff07d8659dea
SHA512 37519d78554ef3947030bf7fc74d2660bf2dc752f04de85daef8079fdce335d2e6ad77071de5a938f7422ad0bdd2acad3963260b61149fc0d91381c007a2514f
TLSH
T173D080115FF27C70D014E8F694187B413A3DA8A68D43A61154B1EA7E4C624D48FD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 481ab6b43bd9356e31329917a665b1f0959dd96f3ad82ed9984111058d0056b5
MD5 cb74d01e3412facdddaf2d8f420a5699
SHA1 1368d4040a0ef2dce0ff15b1ef4fb0f6fc893003
SHA512 65c752115ad187f106481933ba164516471f16dc68ff50f557cec03c48d300867d156449b0b3148a9fc2164279cd344aec6ef1249fe417795460486118838728
TLSH
T159E02BAACC20EC3748FDA718555C0786E755135B1B808C5B7A3C9109CFB57274586C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 5fa5227ac745d78b8ca6954926630815c9b027b8bf4e5bcf68a7881d075f84c0
MD5 60c722a7b31640431041de84c74cf833
SHA1 4c7dcd3e5820df99590dc4fb58e5fe824ae0895b
SHA512 20d783d5e177d8abf5f7428894db9a08aac5f6f3538091deaf8b5e6270bf0aea1241162419032b91d8b31f280908b374d310c275544038aa9501ece5db3c0541
SSDEEP 384:UBfdvbZxs/owSLL4wI9TR4TPz8cA1pKJog:6fdv1xs/XSLkwcR4TrlwpKJ
TLSH
T1FC13917D3A3C8C10EAE2A03D8DAF4A772778E920D2D1090383723E016B1F786795F45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 a60822514253e0c58447148e9f985af26a12efc258f63ff93ec1c9e0cacde3c5
MD5 6f5f4b1f0f20f39d32aa62628ef0ead0
SHA1 a1238d2fcefb167142d7ffabfb926edacdbeaa80
SHA512 6b5cc1376febd0ef6ca2038294e595600d54ffc673c48308a794edf614155760ba364e38c3cfd94e884d416524e47f8d00bb325d66216d9729060b6bde5884c4
SSDEEP 1536:KkhGx2uFKUGS/GUGyAd9posPKrEhQfexmxngcjtO8jznAv7fd1mFID:1UIUgoeprinjzniU
TLSH
T1D94472F70965A01BCFA812F5D2033A3DD177015D6CE1F8E9D67C0C95282AB21B6BEE94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 6fa62edd66bfa0c37c5a79c69428770d08a674680d6e7a3f69c23a690835c153
MD5 b5f3d3bf9448aa607341fc51f9fb6f51
SHA1 1c212858bf2360a6a43b503856d48665a8935034
SHA512 2ee707418b3285b21ffb96dc5a66e86bcb657d046107107ee63c5fc6c67b754eddc6f830029335d09a7f8cc07bbdb92d701cfe12d7553c9eff6664b5cde7d163
SSDEEP 3072:nk5mbumiHzGjTlEoLTsF32H9PWrE2YdR8NrZpK:k5Pm8GlEovsM9PoE2YdR8ZpK
TLSH
T11F256BEE9B382C86DD6B4D70B4E0EC23BCB411D3761AE1D34818C990879A3C5679B6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 4de6f0dcc0c0d7c5d70cbf6064254c5e157d2f000981f7f2f23ad90a5f8abcf9
MD5 32682e555e0d13cce6ab71e27b8be9fa
SHA1 b549fd278e798bd95f5506cc70baa19b3b7ba452
SHA512 a8f699519e2883d7ff0fec98764e1d58dbba2bccfbad4841986c8d4247e1a25390d55d89fd00c44de5949f4bb268407c5f3e31c3332807519b0bb5bd41e6bb6f
SSDEEP 24576:m9WXL2JRgUU3bjjKrThCjHCPU9Pz3FoAbOVJb5NjkioxPGaWiYELzLlp/AlS:y/gF3bYCjHCGzzOVhjkdvWozLlN8
TLSH
T131867DEEC6785C83CE678A70B4E0EC477C7412C3B555C1D38958C59802AB7C5BBEA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 719bb83b13f037be47cb2cf2708cf61b6f04650bc3e6009c18851b168e91a7bf
MD5 f89fd08e3f10a63074fa492cfd64df71
SHA1 86355f7b0be4cd2ad211eccf3793be0ebe9b8179
SHA512 df3f23450b16c659b5543622c09e3565401956caa22dc6506a472bb527a72f55157eff824d7de73e2a3b75671d4e1af16ea27873d6d54503ce5ea4f0dc05aab3
SSDEEP 3:MsEllllkEthXllkl2zEkl8:/M/xT02zn8
TLSH
T1FB44044C7FC10C45C50C10714051C3D00770FC1015335F43345144175CC55C00C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 95227b2dcd456fbf9fc66cacc3865fba53891b4ecd2c46a864c0b7d46f2b3857
MD5 c29e58f6656d7daa0eaef09d1ea14ba6
SHA1 91f88e93f7d2c60ac4ea4bbe6f64caafa13534b6
SHA512 93c91f43d81cfc3017e00c71607887a7842e4a72583979ef7be69630bfbfb570874546bfb886f2d2466e28826961a5c5c7bd52386402b116fbf2f4d831930a0e
TLSH
T1E9E0D8EA65CBC5EE6520358742285B0892803492E6D56D03370488D47E0301AF393946
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 487beea752896ac0938b9a8b4e918464e4b3d723fe0785d11c7f0b1b98d8f81e
MD5 dfb5cb33e557881cbf37ed09a660b212
SHA1 2b71d101a50d80297176bf056e70a5981f620bfa
SHA512 3f94b200507ed879225882d7362fb50ffeab0e0408644c4bdab1e237072be2fa9f6d86acd9eae92fc793a203d75ef6f54f81f921d67d022c07fa3e3caecf2f41
SSDEEP 48:Tyi+7f+UZD4jJ/B33mNWxxmhCKFOyimTpyf:GLnD4jJ/If7OyXTpyf
TLSH
T164E2008D3B11F511C8ED773DA0C2C6E15EBC683C864D7171913C59B68C53AA2F49E11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 513B
SHA256 388c5c95f0f54f32b499c03a37aabfa5e0a31030ec70d0956a239942544b0eea
MD5 c92eabb217d45c77f8d52725ad3758f0
SHA1 43b422ac002bb445e2e9b2c27d74c27cd70c9975
SHA512 dfd5d1c614f0ebff97f354dfc23266655c336b9b7112781d7579057814b4503d4b63ab1263258bda3358e5ee9457429c1a2451b22261a1f1e2d8657f31240d3c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 9042cd792e2b44734f0d6d00e442dca7565d9a68b10877e3f5e3df3ba164bb16
MD5 c66a9f559b86d593b6b1f856887ea26e
SHA1 a9bd55d601522eba6d668df0bab7b2518b8f15d1
SHA512 3ed5d3600f08d48aec34d81843c81a1ca0e5e48ea11a95b573287f5a3a7bb12cb8eed3272f9c59dc79ae9b8c2d9c9db1e065d77ee1560306c6ccc57077ad3f8f
TLSH
T19AE026ED28CAC2E9E1146C978B6C430CE3E03492BEC83902670ED8866141A4DE3C6284
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 d0068bd997ff32c1288d7e5c61527e45dd5ac786b017247998f11a3273dd4477
MD5 1b7e760fc76eca06bcf76bb5395c912f
SHA1 97e60724125f149fd00df5c5371c4b2e14da830c
SHA512 2be88a1830ffc260cac2bb399d33ad1a6fad92f9951a6537340f072971e5bb626045326d788b4734b5f834b29ab608ea65622c9a83ac65ed978b5cb1f2a01c1d
SSDEEP 96:x+n2B3HU+bGz83uxDLjGQLBK31NfR4J+MCXkFr+MFcjtk4Q9/2jg6iCIEbjBHMsW:xl30+G83uxXBBK31GkSJ7EJH7DNspUW
TLSH
T13B14444F5F713211CD7D803629E744A75DADF03F8B526A9A786114A0CEE3752A06C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 5683f70790ac71a5f1fc0abcd7f1993c072cf7fd09a25f68121c560a82ad2f24
MD5 a696b376af70e81de0cace60ed0fb900
SHA1 708474957d4efbf6f100ffdf8b426410a1153d40
SHA512 cd776bbce77d2338e0e32107b368ec5afe988e26e1fd16a1fd2186a184e4a7099403e719ca7b9f36167a953511616213844a43798ee4c70cf77cf7838ac0fdab
TLSH
T17EE0D8A654CEC1A97204204F875C6708C3A03406FAC82F013B0AACC9B54615CF3D16C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 abc1d907c48055ae0003d3decc76421d227131531d108d3fd76d476224bd5ab9
MD5 212844ae4e887a5d73165134874824cf
SHA1 10e38c395288c68718866ceedadaca7e6334eea7
SHA512 bc2273db82eb0a9ad6370a777eec735584b63f15fbd4f5791b53ff145f8d5da06cda75d017f70f112cd78f20ab23d349f85370858c08a4556f351dd73511e76b
SSDEEP 24:TL68LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T2SLopFMatSaw/auUOt8B
TLSH
T171928C4E5F346220C0F04B36EDD185672F7C211CD3A72A99DE5410F3DE9259BF1155AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a96478bf5a19d8a1484ca2e8791f7486b8973e06d31d2ed9f364a1cd159b8446
MD5 89bf4a9cceec5daaac0acc6a9372d969
SHA1 bf6bb85d17dc494485cfd221671da24859b24157
SHA512 a3e3d8714fcf14b9bcb9f46dd17d23afd55d1ee3131edd9cc607248cc25a66ec4cf2f3fd0a4c155223a48d9dde9adae1ec44f87c1da538df28e9346e6f990ca8
TLSH
T17151E3F3C2E5492DC91166F0AB147E2BCE1D0624936C3C4A89F4EF5F63E6470E142A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 6594ba52fd8c5916ecc1b55fbb01f4ee6b951b9b8d58d30d70b6dbf64df25362
MD5 ea61d9f308bd25268aba7c191486d51d
SHA1 77372760e77ec9ea90b184288a725d2a8dd15282
SHA512 33272ba77414c96c9348bf0ed67cbeecd6635a3d35f1502042f9190e91157358de8227bd775ce63297932c7a85d1794b11da9d2c788e6daa5174e43eb35f0eb5
SSDEEP 96:i/IEumQv8m1ccnvS6ZX9Jjir2eTBfBPinFWKQX14g:i/IEumQv8m1ccnvS6hqTbj3T
TLSH
T19BF20EFB0A236605D89455B0E4005FDEAF06001B83F6B6DD77C44BE3F3A20E1B5A9B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 10b6dc8b6c7703aeb5eaccf7699a595fa86ebc6cd716a868c19a34eeee99fa7e
MD5 7ce81a365338eacf10af8a456c652b69
SHA1 70a1bbbf4d4fc66d8b50fe31265ee0a283a1573c
SHA512 19c5acd1a75595677ff382425217afa9a15a8b73aa1be21e981db25d120531758a6bb1539239253537e736f9c78226eb36acd5aaa9ae68b12dc8af64fe3000ce
TLSH
T11CC0125181B9F4B350F8497D1D85A881A675D435004560E2E9A5937C61911BBBA17139
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 90b61548221f23b568cb9a4f26b0129f5905b7b5dca4e6eff2a15b5b7bde8ea8
MD5 6a7f6da104f5bd1a04c006910682c8b1
SHA1 a843ca6510097f2ee2ed069e14e84e85c1484dc3
SHA512 44da4885f32a12ba03b62013f378425c62fc0749e86019fd9b2f37a100a66fc18d792ed254c86c46e88e6d4bfe6767d616d3814205b728f3d36ee081e4e79b49
SSDEEP 192:sxZZR4yMqZ/K1Ml8MFc/fmsnP99bEwwk/ILc5zodpRu/W6+WNbkT/Y0lOayD+pgt:sxZZ9dc/fmsnPjHwk/3yY/bI/5mljJ
TLSH
T17972F9196A745977CCDBD30AFA45BB53D7F91562D2900E449AFCCB0C04EAAED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 788f811fa0fe8ad468484e0f3e0ca62f12fb92bf5655c6444010d646d4a47062
MD5 1ace7dcea4e3717ad475613cada6f07c
SHA1 7494c4f1ca9b6c82ba73c765a5effd7935d0e157
SHA512 b8db371c7ac4bd1a0636a80021654f495492acfa2477e7939bb6f590d04bc981fd10339eafee7a7837758dd1997bf615ead35a74b4abd96b63883c25c870b630
SSDEEP 192:sxZAR4yMqZ/K1Ml8MFc/fms8HP99bEwwk/ILc5zoYY7pRu/W6+WNbkT/Y0lOayDv:sxZA9dc/fms8HPjHwk/3hoY/bI/5ml3J
TLSH
T1C772E91A6A7459778CD7D31ABA45BB53D7F91162D2900E449AFCCB0C04EABED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 fce38811fc0a93aa4b46be412a209ba8a4bed91a123b6e99864706d23bd7878e
MD5 ddfa040733127281ce66b0a86fe97970
SHA1 b66ddeec5c60c1e2d5eb200677b55385a3ea303c
SHA512 67607fe3b37130335d9f6daeb347b9881e63185d9a33f31ca7e0adf319ca06d30704992fe526ff4d6c4bfdb3cf492be4909ccfc090048c8d3dac9dfafdea80a2
SSDEEP 384:sxZA9Ec/fms8VWv4P3Hwk/3hoY/bG/5UfQVs:sIuc/fyVY4P3Qkv1/bc5Ufd
TLSH
T16482E81AAA345977CCD7D21ABA55BB53D6F91562D2900E445AFCCA0C00EABED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 4b483d9ce020940be57d90bccd202e12a856380a837eac7d92a7d5c574400400
MD5 0fa87820b6659973352ff9968dfa2783
SHA1 8df797d08fa809c018cfe9fa4f8667b5a177003d
SHA512 54cce6aba05271e986fcfb5bbc023139eb9ed1d6a851fc6e3482e56a1d0b1d5e9d1cdf7924d013b9b75b6b9dd6290173ea04d648d67e942ec381bd29b2a6b717
SSDEEP 768:EZN9b8PT24f7pLuL/CuWRmCCQx68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3j7yZLlr:EZN9b8PT24ZE/CuWRmCCQx6u1jaKj7yn
TLSH
T185031C3B280CCB7F4F804E9CDD26AE8E7DE801CB9698899447FA844C03D66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 4d8cee39a19502868e7b37027f8658024778f1d4721018b967393f975a4313f4
MD5 dfd8086fa95426ac97a5b371b2cce686
SHA1 1c9679462fcc5a1260d46f9a9d40a781dfe5ce6b
SHA512 cd3c31a136ffee7d3d9a658fa2673c5128acecc0d58723401450163b70c032dfb891df1135dc3aabe6ff541dd1130732cf5c08e091c50f62028e1a765db6ab39
SSDEEP 768:EZN9b8PT2Rf7pLuL/CuWRmCCQx68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3o7yZLls:EZN9b8PT2RZE/CuWRmCCQx6u1jaKo7yQ
TLSH
T170031C3B280CCB7F4F804E9CDD26AE8E6DE801CB9698899447FA844C03D66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 0dd485cce52426860143a3829e6e93157e1f0d4b1cb790004b3f9ab02e5ba54d
MD5 3752b08f6ba8cf7ce36255dfbd629d19
SHA1 a4676a226138f64a78c1cdd3f8b4f13ca8217795
SHA512 209bf71dd5e9e4062f8bc0f5a546efe8e4538388f170314fcfefb2c8fe153fda6ad8e2b4ed422523e34bac60d24c24f7f2747a4cd753bd9ca5aa8219dd03c911
TLSH
T14CE0DFB925CAC1F9706560C70E2C834CE2A4F48FE3C839022F098C44654398CB292182
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 111983e51b6a5ce6e202c57b6fcc9e62d097ed557a273f123e0bcd53f4aa35b1
MD5 56f3db4eaaf476b798c26860d44653eb
SHA1 2aef9f1c45fa8301ef49d47de8cc82762e8e9450
SHA512 b0a61444c3ad2196a7888bf3f447c1152dad9a4f5e01fadfba193562b6fcc67a2610fa08885481e23a26920a0cd8637a1b1b1773d0ed2f4595ecc29a4cbd7b84
TLSH
T189B012543740B6A2CCCE0C380548FF40F3A0E44210804C0F8C0C5F204C06B952F80DDD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 8de8fc7d516042715fa1a3d276f58322f988d0818ab47712ddc5bc0b5ba02005
MD5 e46b2d228804e1f33494a8b00390072a
SHA1 8e9571a5e319585ad871aa9bbee1d25596258d20
SHA512 2bb01f6c56fa6dc616a920b4e6c7c56bb1ee426f339cc29e265a60e53a7c389704a903b2847d2dbf5f9bc4b3e248187f748731c315aa3805a9f67270fe80258b
TLSH
T15BE0D87935CEC6BA718520C75B2CD348E1A2B486E7D869153B0D944462075887383240
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 a5f87e24a6dd2514eb98fcaa8e728be85fdab18c665431ad530c9309fdd6ef3c
MD5 0feec2370e661f4421372c095bd09677
SHA1 e22461ac6b92a024f8fe157bdca077c3896a8cb2
SHA512 b0a157817c53a6e6c8bffbf5dc1fe9294a436d445f97d290722d537c150c50e1e062a2ba304f133669d23ba09f752de79347a1ef3a739f925b0c2048e3d9316e
TLSH
T17EE086B965CEC6B9654460C34F6C974CE2F0B88AA7D87A4A670C4445A50259CB3E6684
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 0470fd6cc6c9ebc221c76005008b3ae8af651e688388638596ee7cb3169e0be3
MD5 05d859bfe6c95201bbd3690baaf8a082
SHA1 50628d37091559cfaac3b42902ff7f35638f1e4a
SHA512 3b1b61d88ee1e08181d4715081d43578fc060198ad96ad7839edab57d0a1c24fe0899386aade5306c3a3a763c4b831957099b0dca417fa471ebdf87516f03aec
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZN7TLC+:cdOlNXJjSSjroduZN7TLC+
TLSH
T17CC28D55717B13C039BD258A8594B4AF42C231A33018E83B7BB950AA0F67E58DDFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 6c25d5a320d8c164ef99e744c429a759acda46e9b6e2579a3b69ba2ebace780a
MD5 a28fb55675d669f3fb1389cb907b72f4
SHA1 42eb5aa746ab3392ee1a46a21759cb7b0d5e536a
SHA512 6f8865b61ebe654516dae295a7f17c61a88d7cac07ef8662beac8d567cafee0dc72b85a04007bdd1227100f9636639e605feffbeae8c2ead0fa0e86f3a8740fc
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZN7T4:cdOlNXJjSSjroduZN7T4
TLSH
T10DB29F55713B13903ABD258A8594B4AF52C231633018E83B7BB954AE0F67E58DCFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 930e84ce02bdfc5d9e0ecffd9e43b4b7e354f4da860e5215e1015c90d8156f8b
MD5 352c5810624b40c8a3121543abda511b
SHA1 caca869b32041567a9db7f1f1e48716a5c7c44a9
SHA512 c804c94c9acc61af95f5a696b969d7821868a477683d8379c0e8a3e815e6558e52296115cf4c5bc016d86876159217655c9d2b9b3e4f22ec4b2bd202a2a79222
SSDEEP 192:FvoW7XfT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:a4fQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T15324630A7B747001EDE7D9725CB080771A3CB16ECF22A6915DA254698DB2853A33D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 a25784feccd54ecbd3c5a970e3983de3c24908974106f635ae8b030ec82e59c8
MD5 da396b9e584ec26cc781d0fc60c5020d
SHA1 a17c81fb9a5a08d5e7e0fbd9a4db5c70bbcc0198
SHA512 10c91376b3228c1535a37b147c25a144dc0a5c69f5dd33f47d200f9ce88607e855aba19de71db8ed2cae28e5ca0acfb2595e0c9c360cd088661747c8bb9fa73b
TLSH
T1335179C0A3B569C46F89A9C2C71D744375E13E66260E58B2736F85F84F44C188F6FE25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 df1f92b18c17e734322d9cb94fa2cc35b2738e8895f23d0f1c4d2f086d735de7
MD5 4b51bf2726377bd58f237f1668070bb5
SHA1 0ceeb2806b0645ea2a5389a108751fbd3aa9077a
SHA512 cd5d8b53c83c28b4d57f3f56ec0fb83f2b533e5bc6471335a7949de88e9510cf8836962f7d303f1bd6a50f93f3e832bdc658db0309596075587f608cf57277a4
SSDEEP 192:LtOBKAsuliqMrsn5/7zB9QoIIIPbfMIM9sYcY6:wBjssus5zQoIIIPbfMIMyBF
TLSH
T1545270292F8A1BB3C15E5FBA136A8B601BC588814976376D30201C1F9DF2B9787C51F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 469503ff30db3f0140d71e11338c53086c246360fa5dc41353c31a9f4f4b9a97
MD5 004fb624db95647be9288b61141b3fd8
SHA1 0bbbe7152d597beb338709395587b3517748ab9e
SHA512 81c18fa4d2978b711ee88c5e5b21f9797d775889831e326e23eac7fc775e53e4012007b34e2dc1d6e19c71e342f26de606c9e714c56092d65c8d661e3e6c25e6
TLSH
T173E07DBFB8CAC3EFB115249B0B284388E3A0384BFED829067F0DC4C9A44150CB3C6189
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 7d9a93db6b298f7bea6a31ccc4a9ed8b320225f462ab7d6673cddc42117d764a
MD5 fd9c2df44f605f92b021c9082dc31f31
SHA1 1b1d2bd6c7147c739e6cb86c5fcad5148ddc0811
SHA512 6635e19f3f50769179ac4645826c87b7221d58008b0dbd52d27357f6a608189fa4df5364685c5d3dd60680eab250d781f97376142529c7b87c0c673bc87c0de0
TLSH
T1A221BF16F324C149E18E8A3EA06B97350378E9129FBCDC0F44B920356DA2E001E8F6E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 ff39b90536990243597a8c2931d6674331eef80213ccaca646c484027219a4b6
MD5 12dbe4f9fc768d42e049b0d16fb046b2
SHA1 7efe8d3fbb039a40f4169b4c8c85d1de8ea03fc9
SHA512 56c767e6c239c131fb8d6fe917d54979d209fdf44bd1519a71950c459210b2107b6298592f0be1ee7335b696d56f5b1c4b9660472f0d3eb55914979c3bf4a3c0
TLSH
T11BE0206A74C5C2DF6111249707688388D3A13847FED42E016F0DCDC9554154D73C6145
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 8416261ff7f979b891e76dd2b3a9ebcb22c68b15cb9681de263e426ac2b60f78
MD5 1e0ecd34de1a43bd69af06e6d7b6e3ba
SHA1 8ab90580c32054a4cf08f60ade24995529e4802f
SHA512 3e4d869e393467d3ee75e6118d511e5fd0b179a6331874d9e5ab38f4290a159c801ad0c451fef58d0041e6c2f505a39aae1ac4eb7ff66220c21d8b472975fe52
SSDEEP 3:MsEllllkEthXllkl2zEel+al:/M/xT02zN+u
TLSH
T12D44040C7FC41C45C534143040D1C3500770DC540511574734D505175DC77400C40041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 db7e3b13a62a38b452901ff5f313b8e2aaf6bc2213fb1b6d01aa246858717672
MD5 a5a841db8c3b974f1ad314d3af63bffb
SHA1 982a17308f035b59fd951cd7ed7068175eba0956
SHA512 b7943edf072e32539f395e25105cbdf630984b806948a71dfeffb452b1986be34018d697e776e39f135f1ce006c7db018fa688444a6efbc610014ae0db06a1d3
SSDEEP 384:nXiFJcXqnW8NR8TUNTUlIR44d36Lu14fDK7q/JVQpjfxQzY2UjSgx95j6s9kYm9Z:SF9WqwggbKuRVs5QpUGgx95j6s9kYqZ
TLSH
T1B6D22A39EC95CD7F98EE1B89A30A76539DE001B3C59C4AD8DBD85E4C00A74DDA70BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1246588775a257cf08c4a01a3157feb3a42360962db7f32487f976ff325d3b2c
MD5 ff372de2fedd769caf643b697c664210
SHA1 13cb08d3c93f1db0e8c1a1803dd8d04973da4f66
SHA512 27e74a59f12404503f16e3a6ac87a7e4400639a84af4c5af11f760c799488e62ac6a120c531efc4084e4d319abaf47447289dca56c0b238caad6bb2d32f38139
SSDEEP 768:IF9WQwgybKuRVs5QpgXM8SSWbK/ezmAs9kYqYo:gWJRm5ggXXDWbKmzmAsOhr
TLSH
T118F2383DECA58D7F98EE6B89A70E362299E00173C5AC4998D7D41F4C80B748DF70B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 41664812a91293c500177ade54e064b54f6a15c3e194eb0789e3f1a017b9c2a0
MD5 857e27670aac31bd18c4c0e80e6ad7be
SHA1 1999aabd8b1192ebc6a0d271444ee9293a5f774b
SHA512 b9f8c7f9ad0752877915fa17829eb3b0e2dc43071ed97ec9cbac2bb5fbb2b2991ed31ebf211c09e5cf09d44a9d456231ca59ebc1754009cfc107b54a7358d2d7
SSDEEP 384:n4iFavqMg38Nf8TUNTUlIxB4daRz14fDK7q/JVQpjfxQzY2g2Af+j8Fq3Ra4uzr9:DFayv3gwgb0KuRVs5QpgXM8Fq3RaF9
TLSH
T19BC25C35E8A8DDA7EDE64FD9E70A7603EEE04193958C4AE4DAD41D4D00D71DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 e20ee476738321ae6d3113295f191a8d713f047a590f7d5b45f4c5ce955ef113
MD5 eef7c888e899b6eafb5a9f4a40783b1b
SHA1 a3c5da2b214bab158f97d491dd39f7fa9fd47718
SHA512 8244b9e5c723cba8676655426b657fff7ae2c977daf7352238f3a9f192adafba3c3a63cfdbc692b07426639e1bc391c29469e3e0fbdb6824ad57da9e5804db2b
SSDEEP 768:IF9WQwgxbKuRVs5QpgXM8SSWbK/ezmAs9kYqYo:gWMRm5ggXXDWbKmzmAsOhr
TLSH
T104F2383DECA58D7F98EE6B89A70E362299E00173C5AC4998D7D41F4C80B748DF70B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 47f20bdcf60d3bef4c714dc7805cf2b2fc19407d5d44b2f93014e319789622c0
MD5 bfa5fc3fbe1b6bcfb406d30dceb9f184
SHA1 5165245cf4573075bf4b14c666f5d34cd2809836
SHA512 882ea6d0aabffbc72b022281803e0ab351d59b3eee90b4d22381247b59ea5a64903b555f7f065b16a9f97cb3931baf5db719ebc3deb4c0bffcc03ee754e67ad3
SSDEEP 384:nMiFavqMg38N98TUNTUlIxB4d45brK14fDK7q/JVQpjfxQzY23b3Ra4uzrN1k+5F:3Fayv3ywgLZrzKuRVs5Qp3b3RaF9
TLSH
T1ABC24B35E898DEABEDEA4FD9E7097613EEE041A3958C4AD4DAD82D0D00971DD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e04a59713f86f291ca7f36c5e6fef8efacec81ecc2aeb4f84bacb82948dd08c4
MD5 6346167a63da3f6e622ae3cb51e95429
SHA1 b0e8748a2d0e895ae625363e0df44a0382d16237
SHA512 fdee903525863d5a6fd5405254a3ac3ccccb8fb273f60647537de94742c850cc43f7fffdcad635629cd8e694acb72604743b4456b418673282c9af2c3ed68734
SSDEEP 384:nwiFrcXqns38NT8TUNTUlIR44dVCLu14fDK7q/JVQpjfxQzY2g2Af+j8SqAs9kY+:LFzs3QwgmbKuRVs5QpgXM8SqAs9kYqYo
TLSH
T1DAC24B35E8A8DDABEDE64FCAE30A7653EEE051A3858C4AD4DAD85D4C00C75DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9df1711a0b2116af8de9a1e40b942ea0801ab380595b73c79ed935aa35876f27
MD5 ca4bfbe64c55ba67b873b86acd58bc63
SHA1 14a43c4b8ff898e4b2022f79b96109bd6d184aad
SHA512 39bce31bb18e2f7a64090559561f18654cd620ff2503635d4d509cbd10fce4cea8b660c5d271354c9ea4e95414183004efe8ceae0d9dbf953219b514a8586ec1
SSDEEP 384:nhiFrcXqnV38NT8TUNTUlIR44d3HLu14fDK7q/JVQpjfxQzY2g2Af+j8SqAs9kY+:IFzV3QwgNbKuRVs5QpgXM8SqAs9kYqYo
TLSH
T1DAC24B35E8A8DDABEDE64FCAE30A7653EEE051A3858C4AD4DAD85D4C00C75DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 a4882c18005a4384614f6c12c7f36494b0be15af812f58cde67f36809cb16095
MD5 ea587e6aa085d21c8dae602f0cfb767e
SHA1 5c2f3ccb475a9f2350861e094effb3966cb3be9b
SHA512 e223b9aee006b1c71b5756dabbd6091fcb351bdf62626648b6d7d55bafd84bb74f7a8476adbd70273280f4de586dbc382715f4736b5d6772b4fae54389dc52ac
SSDEEP 3:MsEllllkEthXllkl2zEelq:/M/xT02zNq
TLSH
T12E44040C7FC75C55CD1410344051C3500770DC1045115743355704175CC75410D00070
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 8b6afa81de2a946c9d457a9a9b2ee4f77b37e26e849c30606108c24d1b9e0e7e
MD5 3f0afa3da8cf2e8a55acbdcedbc0ee7a
SHA1 b0bf48c15076dcca51c6e14d2c4aa6053563b912
SHA512 07b2b7fb6a3134e7be78b0bade823e50adaac364635418bffc942a53ff65e769eec50a6d3612eff688add18118200bce39546946d2ff6bd7de8152a8dd41e10e
TLSH
T1384162D14C3D26D1D4FC1E2E708B78FC96D8D72AF4A4357D5824EAC4063A61D644443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 516B
SHA256 7697ef987412bad9ce8234980d69fa3256e23527d3091271c887f30fd9268783
MD5 693a0e4f75ccbcf26bef0db5b60a07e7
SHA1 f795f53eaa6b07702673f9c2f02accd9ccd1886a
SHA512 0487fc58589356c970993a8d7e264f85912ed4f64ed6a2664314571e000891f65937fa7e432ab70eb088a83de238917b0a6e29a4e3cd4beab9e5f539a9da30a5
MD5 SHA1 SHA512

Submit Download

338eb8ba-a550-4eff-894d-4d32968ed95d.tmp

Path C:\Users\Admin\AppData\Local\Temp\338eb8ba-a550-4eff-894d-4d32968ed95d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 9f987e7d43c72527b0dc6d4caa95ebbc97e809dff26660b2e47e00fb1387eb73
MD5 667c36845039e0978de529c64fb80677
SHA1 70932904acc470097fd2e11ab465d1232cfc537c
SHA512 82cfe20b60ede05a74702a43202c8c1c7d3ba170c6f029fefeeaf321eef8c335ef6ab8e43aaf9b516cc0af3720ff526b5b6034807a273557f0407fbdc6de11b8
TLSH
T1885149D13931B23F8BC78BC870760C942C61E180036E5A5CEE4A4475BD5CD92A31EBC6
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1354021442\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2268_1836266984\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2888-31-0x000001E8A7060000-0x000001E8A710F000-memory.dmp

Download

memory/4124-519-0x0000017103AF0000-0x0000017103B9F000-memory.dmp

Download

memory/5180-194-0x000001F716AF0000-0x000001F716B9F000-memory.dmp

Download

memory/5256-549-0x00007FFAFBFF0000-0x00007FFAFC00A000-memory.dmp

Download

memory/5256-557-0x00000211341D0000-0x000002113427F000-memory.dmp

Download

memory/5256-556-0x00007FFAE3410000-0x00007FFAE3655000-memory.dmp

Download

memory/5256-554-0x00007FFAEDC60000-0x00007FFAEDCAF000-memory.dmp

Download

memory/5256-553-0x00007FFAEA580000-0x00007FFAEA618000-memory.dmp

Download

memory/5256-552-0x00007FFAEA620000-0x00007FFAEA82B000-memory.dmp

Download

memory/5256-555-0x00007FFAF2EF0000-0x00007FFAF2F15000-memory.dmp

Download

memory/5256-548-0x00007FFAF4FC0000-0x00007FFAF4FED000-memory.dmp

Download

memory/5256-547-0x00007FFAF4FF0000-0x00007FFAF5016000-memory.dmp

Download

memory/5256-546-0x00007FFAFC080000-0x00007FFAFC098000-memory.dmp

Download

memory/5256-545-0x00007FFAFBB20000-0x00007FFAFBB4F000-memory.dmp

Download

memory/5256-543-0x00007FFAEA830000-0x00007FFAEA913000-memory.dmp

Download

memory/5256-541-0x00007FFAEA920000-0x00007FFAEABB6000-memory.dmp

Download

memory/5256-542-0x00007FFAEBC40000-0x00007FFAEBD28000-memory.dmp

Download

memory/5256-537-0x00007FFAEABC0000-0x00007FFAEAF50000-memory.dmp

Download

memory/5256-539-0x00007FFAFC4A0000-0x00007FFAFC4B1000-memory.dmp

Download

memory/5256-538-0x00007FFAFC510000-0x00007FFAFC524000-memory.dmp

Download

memory/5256-534-0x00007FFAFD2C0000-0x00007FFAFD2D9000-memory.dmp

Download

memory/5256-533-0x00007FFAFD4D0000-0x00007FFAFD4E1000-memory.dmp

Download

memory/5256-532-0x0000021132310000-0x000002113231C000-memory.dmp

Download

memory/5256-531-0x00007FFAEB710000-0x00007FFAEB9C6000-memory.dmp

Download

memory/5256-525-0x00007FF632580000-0x00007FF632678000-memory.dmp

Download

memory/5256-535-0x00007FFAFBFA0000-0x00007FFAFBFC2000-memory.dmp

Download

memory/5256-569-0x0000021132310000-0x000002113231C000-memory.dmp

Download

memory/5256-568-0x00007FFAEB710000-0x00007FFAEB9C6000-memory.dmp

Download

memory/5256-566-0x00007FF632580000-0x00007FF632678000-memory.dmp

Download

memory/5256-567-0x00007FFB00500000-0x00007FFB00534000-memory.dmp

Download

memory/5256-570-0x00000211341D0000-0x000002113427F000-memory.dmp

Download

memory/5256-550-0x00007FFAFBE80000-0x00007FFAFBE91000-memory.dmp

Download

memory/5256-551-0x00007FFAF3D40000-0x00007FFAF3D51000-memory.dmp

Download

memory/5256-544-0x00007FFAFBD40000-0x00007FFAFBD81000-memory.dmp

Download

memory/5256-540-0x00007FFAF3D60000-0x00007FFAF3E32000-memory.dmp

Download

memory/5256-536-0x00007FFAFBD90000-0x00007FFAFBDBB000-memory.dmp

Download

memory/5256-527-0x00007FFB00500000-0x00007FFB00534000-memory.dmp

Download

memory/5548-56-0x000002053CD30000-0x000002053CDDF000-memory.dmp

Download

memory/6124-393-0x000001D7F3F70000-0x000001D7F401F000-memory.dmp

Download