hxxps://chatgpt[.]com/c/69f39a88-b9bc-83ea-b9a4-57bc500c5a59

Analysis

user interaction
yes
max time kernel
8s
max time network
11s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 16:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://chatgpt.com/c/69f39a88-b9bc-83ea-b9a4-57bc500c5a59
Sample260506-tgxtpsd14v

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5944	msedge.exe
6140	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{19809FB2-DB35-47F1-BF21-1E92EA95AE67}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe
2040	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 3116	2040	msedge.exe	79
PID 2040 wrote to memory of 5944	2040	msedge.exe	80
PID 2040 wrote to memory of 4404	2040	msedge.exe	81
PID 2040 wrote to memory of 4404	2040	msedge.exe	81
PID 2040 wrote to memory of 4404	2040	msedge.exe	81
PID 2040 wrote to memory of 4324	2040	msedge.exe	82
PID 2040 wrote to memory of 4324	2040	msedge.exe	82
PID 2040 wrote to memory of 5884	2040	msedge.exe	84
PID 2040 wrote to memory of 3252	2040	msedge.exe	85
PID 2040 wrote to memory of 5884	2040	msedge.exe	84
PID 2040 wrote to memory of 5884	2040	msedge.exe	84
PID 2040 wrote to memory of 3252	2040	msedge.exe	85
PID 2040 wrote to memory of 3252	2040	msedge.exe	85
PID 2040 wrote to memory of 356	2040	msedge.exe	87
PID 2040 wrote to memory of 356	2040	msedge.exe	87
PID 2040 wrote to memory of 356	2040	msedge.exe	87
PID 2040 wrote to memory of 5584	2040	msedge.exe	89
PID 2040 wrote to memory of 3820	2040	msedge.exe	88
PID 2040 wrote to memory of 5584	2040	msedge.exe	89
PID 2040 wrote to memory of 3820	2040	msedge.exe	88
PID 2040 wrote to memory of 4336	2040	msedge.exe	90
PID 2040 wrote to memory of 1180	2040	msedge.exe	92
PID 4336 wrote to memory of 1164	4336	msedge.exe	93
PID 2040 wrote to memory of 1692	2040	msedge.exe	96
PID 1692 wrote to memory of 1628	1692	msedge.exe	97
PID 1692 wrote to memory of 6140	1692	msedge.exe	98
PID 1692 wrote to memory of 1432	1692	msedge.exe	100
PID 1692 wrote to memory of 1432	1692	msedge.exe	100
PID 1692 wrote to memory of 2092	1692	msedge.exe	99
PID 1692 wrote to memory of 2092	1692	msedge.exe	99
PID 1692 wrote to memory of 2092	1692	msedge.exe	99

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://chatgpt.com/c/69f39a88-b9bc-83ea-b9a4-57bc500c5a59
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x334,0x7ffd6692c188,0x7ffd6692c194,0x7ffd6692c1a0
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,903884124877608996,6876647184133445731,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,14498386838593870365,16455171377732796145,262144 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,70230333304679226,6504127581105521782,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:13
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,3597814084213807868,1690745379005397851,2097152 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,11297813654944235760,17786959899146192743,2097152 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,6384211623560255456,8525913171290832941,2097152 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,8137723103869777704,16605542208561247114,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,14794641846412508390,16809300396638073807,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,9309872938492425956,14430993911784565447,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4336
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,9681211489191146642,14873967529829204281,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,9681211489191146642,14873967529829204281,524288 --field-trial-handle=2232,i,3860741972387319486,68606098040446714,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:1692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ffd6692c188,0x7ffd6692c194,0x7ffd6692c1a0
    3⤵
    PID:1628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,4441778692546253891,18323253622120180118,524288 --field-trial-handle=2112,i,13782011339587650397,18097922199632818260,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:11
    3⤵
    - System Time Discovery
    PID:6140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4257123873706955140,5161254919911427020,262144 --field-trial-handle=2112,i,13782011339587650397,18097922199632818260,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:2
    3⤵
    PID:2092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,6877693528210128151,11317121838410196649,524288 --field-trial-handle=2112,i,13782011339587650397,18097922199632818260,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:13
    3⤵
    PID:1432
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,11437180865533056845,6762261944402792398,524288 --field-trial-handle=2112,i,13782011339587650397,18097922199632818260,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
    3⤵
    PID:3008
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,11437180865533056845,6762261944402792398,524288 --field-trial-handle=2112,i,13782011339587650397,18097922199632818260,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
    3⤵
    PID:2344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
MD5 38623c06e100113cf825efa6a44b2386
SHA1 479d8e0c6d7d10c05203a37707a6249d2537a9ed
SHA512 452d7012b949688cabc6afbf4badfe9d02c090f30c06557f7f87b606cd716cda97771136964935eaa4d1668303889011f75ff599a79a6837c285ef84ebc2c8e7
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosfxWMk8xVZ4YWI30otWn
TLSH
T1CD257885B34494FFC8C35A7189BE27902774F6DE5F02836B6A377A0E2E271D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9cf5acc3a4797f1d8e969ab1970c2330530e33f7dac25d2b42a810961a67ea68
MD5 6bbadb85852ef58796e988ee6bd3abc6
SHA1 f87a8c99cc4052067a5b532f97bd1ccc92f6a0b9
SHA512 a3813b64d663d976b681f2ced98d428dc47f49c99219d4a147277e7c8375b07692a5a14501eee0df77c86f9da6e3205c49e89510005d4f3b21e3afff243fb088
TLSH
T13CD080155FF27C70D014E8F694187B41392DACA68D43A6115471EA7E4C224D48BD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7cdb1c77d5a9ede917354fe990c072624f657d50213e20d04941e26e2c844ce9
MD5 f6614bdc2465bf0557d97ea1d0728698
SHA1 86274d9ac58827800b2482b64526c9e3f29316d0
SHA512 fcbef455daad0729c11bc67455a83f4d2c2c339e964cb0c9fc6c89db12181a3ccfda718f88dd5c102d3727bfe6d7205b729f4fdc172b1ee049e441b46274ecec
TLSH
T130D0A7353B67F831D02840B0C41527153A2E88962C835216F125546D883A4A4A7D42D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ea750b8ccfa8d7c7a393cdf6c9c8a3be0f2f086fb814bb44905a02c83d9af71f
MD5 697a394c9a3ff43b8925489b648b073c
SHA1 5828315de0bd17378051f664204bff07d8659dea
SHA512 37519d78554ef3947030bf7fc74d2660bf2dc752f04de85daef8079fdce335d2e6ad77071de5a938f7422ad0bdd2acad3963260b61149fc0d91381c007a2514f
TLSH
T173D080115FF27C70D014E8F694187B413A3DA8A68D43A61154B1EA7E4C624D48FD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 60eb27fb49f1e0965a2c0f2317d846c83d44eb895dd099a7f112b9bee7611126
MD5 0a594f687b8f82dfefb7d0e7c8e9c765
SHA1 e7f0d2f13fee14f90a11628868f3884b31450b9b
SHA512 e2a39195bb1549972aa34a1155cd3c49423f901e1307f216ec6df58d61a9bc0d919ca237bf947c50a733bdc846b77b5408907dbfdfb26c731e155036fab686ba
TLSH
T10AD0A7223B5BFC71D12C94F1C4146F063B2A58AB7D436702606094BD58265A4F7C8397
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b86a50e01a6caa04101d1ba0108a1501fd85517aec599fb0a7977cb40ff6e1
MD5 7b18491daef06783524af79b9fbc7adc
SHA1 683e1a439350a4d0ef9ec9114c0437d01bc2e61d
SHA512 2d72eda4292fe8e43b34709de1fc2481540af6ef6bbea7f320b7add1cd4aa68018346aae9d9aacde34c68b5a55efdb68990248f868b81ba362bf17ac80a81d49
TLSH
T1E6D0A7223B5BFC71D11894F1C4146F063B2A54AB7D436706606094BD68265B4F7C8397
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e71b80e38d290834106400c856efb8d45b67514f1858d9878acc8cfe371baa4f
MD5 1ab8e6e5808a5cc3ed41a9eb44fcdff1
SHA1 1f9fa247c70fd7c16f6dd02fef7d16f0ad521fe3
SHA512 b2894de4159665ef9a9a17517676575bf99e5f3948cc08b5994043b69e76677aebe427478e512d1f9fee2c1b3faa3208854993d747b7f9f8fa3397764d05002b
TLSH
T126E02BAAC821EC3749FD875810680386E75013571790585B3B3C92098FB26375646C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a7941872773e244ac8ac77a44bc474c2bf329a3838992b86fc200eab8f972bf2
MD5 8551f69f552f93a3da8d723268db4340
SHA1 11fbca4548d13bf66d2525ee41d1a28eef8fdb37
SHA512 3e4814e4eb873f5415cabde97669991521cf21c95787f899fdce10455a52f4b1ad60ced4641923d546b95e1e9c7a53f8504ff0bc219de10917c4f47982d4ef9e
SSDEEP 768:uyAoKegS1prOKoT9IdixrJMyAwXwJ0hGXbzv7Ge:PA2gS1QKNdMlYXbba
TLSH
T14313C87CAA6A0D17DBC37C7D6D0F5A3053B1C9E0CBA6165312F0B22A5B6E31D28BE115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 62c5ab2425d9bbeb1f62d50b2a1274141b4aac53e9245c65193a842939edb5c7
MD5 d3d39e90942f3ccd2b09f5711465817d
SHA1 f983db9e392190f858bbf2078fc75c05033b014b
SHA512 f27ff7ad99514c862066ef1079d4b2396583ebc4b667ac5124f7fe9c156f5ce5455d4c6ab8488545e0dd967a2fc060194d21efade3343531732414d91a56b15d
SSDEEP 3072:nUWf6fPDIswmnN4MtlssI7z5MDjqQBdXBCubWRaRvNL/zy:5f6flnN4M/kP5KjqSfvvs
TLSH
T143B4A5F70850941ACF6812F9B2123A7CD2B7415C3CE5E8F9E5788CA01979F62B2ADF54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 b9e8d174c624c6d0755cd7df0e5415b1a3746354cae8ef72ab84d804e5b655bc
MD5 bc4a7312b42b3271177eb914eb3b13c4
SHA1 60b3be4cff0633b4501ce1f9f92900a9e59e8e1f
SHA512 b771319800ce50bf2240e1dcad239cde9b817859d5d1e0602b7eb63505e33933e1954137dd13a677fcfb5a485bbb773c47163d1fe8f11dfd15a0e8ea723386c3
SSDEEP 12288:X5PDv79PX2YDcGZPbiIKUI8h9w5EhE4ULS:p7TdXthuyh9i9LS
TLSH
T161A54BDB0B64A582DBD9EDB0BAD4C8697EF022C3BBDAE4832541CA7901D37C11B5364D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 a35c54dee261f05cb64814486100b470396b53be438560f8cacf7ce64417b9f7
MD5 75a06578dd2b0cf1af5762c0b78f0d5d
SHA1 15dd80f4413e3247518335f5329c956faf48aec7
SHA512 9cee3e92b7ad52caa2ac7bdb3b28a47ceb7af52b51b5f6bc98ed3daf72019497116d8af40beb1331920c3686da43c1ea82f8ed9c2f02cd10b0348651ff94813d
SSDEEP 49152:G/gr3bYCjHCGzzOVQk4zQnGU3ihN6yIzMI5FPiMBrsqjOC:M69jH5Bmr3vzjj
TLSH
T127869FEEC6785C83CE678A70B4E0EC477C7412C3B555C1D38958C59802AB7C1BBEA6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 871e9985b93923d3ecd08a76a5918e13adeb0da8bebbb839e88cbf79dd5e1757
MD5 7d38ecb31bb3066093e120ba51255263
SHA1 d045328514d89c372df0bf7b00e4b3f6a83c04a1
SHA512 fa5a93f0241544fb3ae77e2ad761a880e4e7a6091d8c78019ce7c5da115a039e5263bc0de638473a17dd6f4f9c6acbed8d27e3c5b8b91b60a7c13cad3cd74d2c
SSDEEP 192:6tGnZCpqZz+8+XuGD2+oNC87tJN4XX9Asg:RUqNl+XuGDlottJuH9xg
TLSH
T10FF1D49A91D4D427FBE4DCB452DC787A3674C5D901F32D2369F2A27DBB09BB2844B880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe584447.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584447.TMP
Size 3KB
SHA256 754cc28d8b01880cf9d64ee18c45553bf5239bd0e6ea6f6518a5e7140eefdd41
MD5 1d5a5d6c240f556a5237b3206278ca4f
SHA1 709a24c4c47db3a123e70f7786ecfb0e73de264c
SHA512 40a6f25e6439d2b1f3fb4ccea8acd14aab8b7b37f3ef684544591b286e052b729a284b0f116b0b8c7521010176412a6c4d9e4271dc23306c45b9f982e49e0b69
TLSH
T166712CCFD1958429FBE45CB466EE14183A3446C802772F736ED2263ECE1EB92908ECC4
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 879b8ab43529ab4a02cbbf19683aad03e50c72746706de8906899902b9924852
MD5 9ba3936633427161d60db27b4f9efb28
SHA1 396f64f640dd09ca8a72662eb8bf30524caafeb6
SHA512 73742d0f389aeb6c617e90a548200f1a355e72ae3395d40fca6a434fe574315d5e23801461d586357ee5d1d028b8b3c5a085fddd2114dd6ec9df8b187077b597
TLSH
T1F3E0209496C6C57D591C34C74238BF4DC1C17586D7856FC72B04CCC07742805B75755B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 d8ccb24d43123731564cbdb5de49f8f2937f41549a44f140d06072e457bd2177
MD5 ebde5a14ece32067f573f045166885cf
SHA1 03cabd52678399831187a479a042e5af747b74cf
SHA512 1f8bf91b30d3bb6f4e01ae269753bbabda5955b47c9b51c913f3fd2670b4e6a55492dff7935cc3b68600d41823fce79803491a27ed429f78699cd5d0af6ee92d
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jFW5L8K5fKFtISqYph:Tyi+7f+UZD4jJ/BZWx8CKFOSTph
TLSH
T1ECE2CE8D3B11F512C8ED733DA0C2C5E09EBC687C864D75B191389C768D62A65F49E50A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 3e60953a7dcea95920c468b31cf25628125c0a4eebebbb4d9aa936764fe9163c
MD5 e523cd1f25bae517223f0babeab85254
SHA1 7783d110d22c555efd96045cf9876d2279984f00
SHA512 689f7459b376ba5a254c50372137cef9ec287518139059d3254319f5f90d3b16081c257a8a5382522853da0634fcd612092ca7c2ee56d5c64bc0241313f83ed4
TLSH
T171E0260804CCC969A45868D3836B730DC3D03603A3883A4A2B8CCCC0A242A41AB8A6D4
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 59c45a63297f4523c73d1e6e50560abd5028c42c45059ff2fb613256772828a6
MD5 7a3d8836b97f4cd3df6bf1579c417686
SHA1 62d6985963f571d7284bcb1179af9fb5bff9c9d3
SHA512 bcebd5c45159ef0169061bd426f072e7724ddca078ccc0321aebc90ae594211dc9cf0501c8459a88c826866a4699e31b701ed112b368ea28a18468dc67839f1f
SSDEEP 96:UBCxSJhVAn9ejQF1jSSCWCci42Jt5BXGHNZx19:GayMgjgSv3X4K9GtZxH
TLSH
T14EB219535F70B502EB811C7A35364878DE3BD15C9FB4ECA2382194211CF8A92683C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 040a5fccc7f4f784f8a4724ab469f233698394ce983071961e1b78354de47ff1
MD5 e5473f447bfebe2cd6506825969d3826
SHA1 e9957aa17791af14fd9c60ae67ba7a1e5c5e26c5
SHA512 91891d89adcfba38f3ef9f680dc4718e8a86c082c1b00dc4e5c4607156d3f3529452a63bdbee2edb6abdb472ba5dd9ddb3df354fabacd7cb3114706a86369da4
SSDEEP 96:xLSjTHU+bGz83uxDLjGQLBK31NfR4J+MCXkFr+MFcjtk4Q9/2jkEhtHh4hLEbjBC:xoT0+G83uxXBBK31GkSJPEJH7DNspUm
TLSH
T1FB14215F1F343712CDBD817669E644B39D6DF03F8B1366DA686104B4CEE3652A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 2KB
SHA256 b1128dd05522617bf01899475518f51b0b6343d746649d7eeaa1bb94f91045c4
MD5 6457df9d5d5cdb5e0d21f5bd19075180
SHA1 e71318015840e756d9ead7bf63673fe2a98f97cc
SHA512 cd6e8d4dfaf2fecd2400d5cd7ad5770b98f5147aff20a3a4c45b24fdcb97ab2a5fd5a227137a6319b3fcf420b82008c41b10c92101b21f0666c11e4e32a8ce9b
TLSH
T1984123F3111C9925DB4747F8B232297CE3B7A85D88D4E2E8E155A83049F67F921A8F42
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 17a04dffd5ae41b6b5be42b13111b9f3bc87d306623097555d077b90b4cee548
MD5 8508f1f63d2554b76c39e87f6b87eb1e
SHA1 498c20418a1bc44190882b852e42a54f1d95c0c8
SHA512 d32fa555f88ebde69259c4fb8c53cfdd96273d42c22efb3079cd0da6eea939146e347019f2536def0711812fd9dde9c9ea5a823d9bea5455f89462a73314901d
TLSH
T164E0D87045CDC119551864CB8329770EC7E0360BD7882B596B48DDD0B142504AF859D6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 9b01ab712ea57d2b25601262bc8c08f3b1ef65fa33698cc748c1277e3dd9493c
MD5 f8db167e14b1e03cc0d2d5afabd67d37
SHA1 0eae33b37fa5f0816e09ddb44987dd3d15f83439
SHA512 24d6778aa598c1aa6cfcbeb7ab56b5d473b5bc6319e06e027f319f0d72885d9213ee2587195d7f2c937471a1243426a02f3f6c9a78d906c95323cc6afc83048b
SSDEEP 96:iSeMatUaAy6S7OtL8M8Ry31aHlzboGuM9FXAfBuSJ5x1Xk4ty:iSLaSaxAtD0FXb9Z
TLSH
T1AA92E88E1B342120C6E54672B9A4481BEEBC2046D73366B6BC05DCB18CB4ED77915F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a2f94bfa5c232ce2691a725783dc3609eed72204bb64e06478538bb936ddfd0a
MD5 3eaef8edad468d526a4338749f9b97e4
SHA1 1dd81f5c17013713cc0d1e5dab6a0b420fe4d4c6
SHA512 71c57df268e8bdae47caed6ca1c9de83ba26075b8498ea9f8f19983c7fd353ace71697f4ceaab018adadf971c35618113ce3702962888c687be30a5e1cdb4b8d
TLSH
T13E51BFF3C3E5826ECA2156F0EA146E2FCE2D0914435C3C6A89E4EE1BE3E2471E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 54a52214efeccfca53b2ef815943ee4bff26038cda8a9dbe8506ff3a5b2b18cb
MD5 a6479e64eb628f39117973b1ef8bba59
SHA1 353210f63bc852c6ed6855f7ee5775b0f0b2d4eb
SHA512 2ffdee42ab353f4b0f51166708e5d09ae51aebbf3f6b315066b3f382cd7497cf09410a08fb593922d5e4e68c71a3767d4973b62d666998fe5e45032df7089933
SSDEEP 96:OIEumQv8m1ccnvScUjitKB4bGiU7P2iUj4ViUtfd4VNnUUUenF4mUjnUwOYUFUsi:OIEumQv8m1ccnvSi5U
TLSH
T1CEF2EEFA07276206D98444F0E4006F8F9F17400B47B5B2ED76D04BE3F2A20E2B1A9B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 86a94357b0b48c478386760fd1bad1813b56207dc03ee6da6df97e97632b21f8
MD5 a0732f1666cd93e1344b283890817a7f
SHA1 3c04dca2fbb873fb80fb62521e356e0e01f9e66c
SHA512 eaef8fd0d84c701ccb99faea4d79d0bc87f52c77cf1bfa916062d0f1f0bb09e27a322f3cc030de0928ac9e2247866965dd317bd0fcd5866b0fcb087a0d0aa4a7
TLSH
T17FE0D862C1F9F476207D45B76D867C422A79E436009094F5E9A6D27C70900BB2B19016
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 db2b886ed8682f5070b7f739f8c8febcf5314b51378d7a0fd128e73a60d197df
MD5 b5987ced37df170195577e3f90987a34
SHA1 93f04962d4345c4c7ace8ac243c1f41af10eb9fa
SHA512 9eb094791e60d6b3af0bd7aa1675f1668ba7f36e7df3ec693d1a6ef00da298f2f346dc689d1201bf9081982d54cbe273a4ce7f6cb0b456c970359f99da81801a
SSDEEP 192:sxZWRcyMqZ/K1Ml8aFx/fssAWpVmoH/ILcczodpyy/W6+WNGuUzh/BP0JNaw72IM:sxZWVtx/fssAWvmof3/t/bGz/SaZZ
TLSH
T1C472E716A5389D7B8CDBD219FA55BF53D7F91522D2905E449AFC8A0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 ffb58f9b6bffdbdd5ec54ca3a072fb0606bbe07430a5e568915fbc33877afa44
MD5 1bcdc795312165607ca296b4f8167445
SHA1 2b5acd7ed803540db00ca01426e8b8e2324008dd
SHA512 a7d160ae002492cfb75bb06307580b8db7d2276bb9159d751cb19269c1d10d4d0fb769c632fe6e7fb5102e438e86cb4f450332d2eac87920e30e521b8a3067a6
SSDEEP 768:EmN9b8PT24f7pLuL/CuWRmCCQD68F1+UoAYDCx9Tuqh0VfUC9xbog/OV307yZLlu:EmN9b8PT24ZE/CuWRmCCQD6u1jaK07ya
TLSH
T195032C3B280CCB7E4F844E9CDD26BE8E6EE801CB96988D8447FA844C03D66DF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 cf2baec8ee06fe067b08daf7daa6fb7c27f7b6f2ca2812728c496c809e85da6c
MD5 00e44bfc7802da9704ab55674e4f48dc
SHA1 3fbe39d4f6c71cc5c352514df835473e1d5ae4a7
SHA512 423ca6eaa16507a4c4352bf78ff384352031c8f2c40d278d8c64e40cd110be1101a11ae96a3941833db09d32fd4b33c6a18b98b91e1430c68c88ab6b22fdf9e5
TLSH
T122E0DF1005C8D179B11A20C702A9A74DC2E4B647D3C83A8E2F89CA806347984B297190
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 e44cd9e2155b097b288cacbca6659e7ae9fd02be2c1f32dc485552ae7b53ba93
MD5 653653121d245ccdb9f204940df8557d
SHA1 7923c3936df55fd5d9b08c95b0874aca00d4650f
SHA512 7342b1a4d40d0eac94d8f25c43c53abd10bb247c97750d38939270da73dfef60d4cf10006c0154951b964233b392379fb43cfd7e347ea0c72ad697e945f54332
TLSH
T1CFB0121C37508516D5CA0E328B968F90A311E012104084534C668F128D481AC6E8AC82
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 e953da14b941cfdfb7b080adc9aea95c8fd67caed06bd73067e94605dee51307
MD5 7509e0904b8a48a1a5546be1bf3b8264
SHA1 20ecb261197fb2fb91504093124af8b6c0f32649
SHA512 5e94e6e2c922f86cca9719c25d13115a2de5c37a8fd8605727d20e23285ca5ce18ec65585c6f2f03bd38f4d401a3bbf198ba981688c4b84a472d1760fec0b162
TLSH
T1B6E0D83015C9C62A624920CB4375F30FC1E2F60BD7E87A693F8CD58063079407747191
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 44e0a3cf31e1ccdac09f140212c0f56b5f74337b2490b059c492c783d7f48448
MD5 7994c61478ddfe1261e72d0182d43dc5
SHA1 8f186bf878294ada23665ec517dd6374979b7144
SHA512 c2c22d89791f9601177bb0cf02f19a121918da58523d13d21bac656a2ad43f155eacb6b786513176a824f5268ef6f2b97bcb2c6ac536258e3a77d3d9d5a352e5
TLSH
T159E04F7045C9D639A51860C743F5BB0EC2E0FA0B97C83A9E7B4C85D0A202A44BBAB5D5
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8523643fbb15d92d92dbb3b8437d288c9817be32ff330b38f508deefc80687b3
MD5 317a3633e1faebdadb2bd2c40bcfdf2b
SHA1 93a9e0111d01155f24bf215d23c192306238b39b
SHA512 b2db126e2aff21865bb7aec3ce2b252bcae9a1560c991d5cd75a59c55afc5939ea222c3a3d17e9f0aba503fbff338590fd174910bb031e9a49aea943a5fbb26f
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZ7uq:cdOlNXJjSSjroduZ7uq
TLSH
T18EB25B15713B13903EBD298A8594B4AF42C231633018E43B7BB954AA0F67E64DDFE9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 397a2ae5312dc0da4c434e562147e4fb3f04a29b1542430facb485ee958f9a81
MD5 aca523cc833d3e9f86d87c910ac1c324
SHA1 6e1b427eab4712136ea83b49370b415320dc47fa
SHA512 89923c3911dd6402084e89ee6b153c2d092eef578a637e886c7961eb8da7fa5705776b6fcad1854011f022d82b63c8c9167bdb0e6aca03e70471df6d5c9353a2
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZ7uoFY+:cdOlNXJjSSjroduZ7uoFY+
TLSH
T13FC27C15713B1380397E298A8594B8AF46C231633018E93B7BB954AA1F67E14DDFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 cc606bbc1a0d2863b61a8fd03c7916b4bb71eac9953a3d0a69e843a3b18ce60a
MD5 ca454edb47083498c224c0df64d693c6
SHA1 1263d4e0d12fef14ef1b260f66f9aeaac0892a35
SHA512 6b305f1df4a2bd2ab7f51e2784435f381786c9acbb50d2d5426bac64e5fec8022a8fe0250040f445f2a6c6b7a81460fb934ee1582b345debd9fc22ba646cf634
SSDEEP 384:aOugu/yI/fQ0JQn6lLfzAivuvBN+wtP2s:OhlQ06n6lLfUPvBN+wtOs
TLSH
T16D24620A7B747001EDE7D9721CB080771A3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 94621b34e9318cf69ad4f7cd19d0928cab81a905ce3311174c9324de6eaf4ac2
MD5 ad21d578211218584bc86f154710e38c
SHA1 5952aaa5d6c9e3247d1b104d5f5d6de4a2631a95
SHA512 585ac295db18b26b125eba37bf5503c59adb61ceb2f99f7c606dc39f712caed03eb2ced807331572699f6f4fa2802bf31989b3d015c7d7aca2d3a301b74265ef
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgeDrUv1Sgr7Gt:DEK3tjkSI5IUltGhp22iSBgSCPW
TLSH
T1FC520FDFE9742353CCE54371AAD001E0BE6A913D4FC2E61206D524201EF45A17B1EB8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 b2fdee4b4db47b8075e0577d8360164a4887f81b59fb9de6bf9e193fd3445c89
MD5 eb70ff47523feea9f32f3ef33e39ab90
SHA1 b6f867ecda4f643d9a1a9ae974335ab6802e9c40
SHA512 6dd95412fb0ff19581d8a16d22edd90968c8c4a5c2061c6e8dddfdfe992275d792557aaee3439ed6fd5e66a0b4bd9310d69a18777515390cf5e65c0d8249c441
TLSH
T15951A7D0A3AA35C56FC9A9C1C21D7843A4E13F5B220E5C75336E44F95F848288F6FD65
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 10KB
SHA256 a79e6917f2127b088d418c75e4b84b4fd967259c0122dcac34e88cbd534f2d69
MD5 e1cff3b639d6c101984123ce3314a4b4
SHA1 9ef995439b5cf385fb9376a19e2720010c1ab0a3
SHA512 0b6bf508f956cd1bdcde3ef39d3b747e49558a93ba0b203a3e59d99ae650909abcdb17c4f9ff2ad43689f15d9b13c04af6bd6c09e4374c7d104a0414e39a8972
SSDEEP 96:U89+8vyxZQfQgOXNZeDWXWY1lD/seCZAWVuliqMsWWVn5dtxtlBB5N:LtOBKAsuliqMrsn5/7zB
TLSH
T1C1220E647FCA1B73C60D59B713B94F6013C1D48246AB7BAE7120085C1DE276B8BC81F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 7e68f146eef23d5c8aed81c1d2778855a78d665b0458352b874050d155d4b284
MD5 2eaf4ea0453a9f909df3cb751bcbe2e0
SHA1 9f9ed9d95d7e27d6146af92608ecc3790b96db63
SHA512 e7362d4e1c0e1afb380920cfb166156cb046ccc12e12e7dd236f6e319a4236e218eeda3c3cf7e84b7734e08c78aeebee0b8f70039cd536d27075069f6333faab
TLSH
T1A7E0202057C4C59EE56820CB0275730AC2C03707EBD43A4D3F44C4846542A00FBC91D2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 02fc1d044d66d3845ff8f09a41e49195c8ef027d3e8e376c56bf51f32930920b
MD5 180be2c76f2927ca8eaa651d02740fb2
SHA1 64e776a0d74d1078a1d1581b24757f6aae413d0a
SHA512 d8deaf09e1237f1388cc3e0c659eb086273b59ad35aa444354325a66ccca65cbcb9501e7e10afbff3f9fb629b06bebfdf1dba3b79ca760b76f9d6700487c17ea
TLSH
T1D2217912F324C508E18E863EA06B97391378E9168FBCDC0F45B920352DB6E101E9F6E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 84109f00e92106c8d7a4eed3cbc29d210a928071bd7aa043b6780c0a7f09129b
MD5 aef4d6426ac7fa69d82c2c3ae74e8d14
SHA1 31edd8241e033ff955e9a11d82d911fcce033e38
SHA512 c5a996697bb553ba0c4898da67486a4dae76e936e7cc099050ac23c296c3de3cd8549684101656218ec461b1b1a00309d650bcbdce67f4d1866aa82a1554dad8
TLSH
T12EE0D82066C4C59F916420C702B5B34AC2D13A07EBD43F493F44C9845642A41BB8A192
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 8b39431ab329efe7a88879c265244b74aab3b8f78b8f7dd39aed656e0974fbae
MD5 226914a60c56996279900c6c9fd7a95e
SHA1 49d186e9e6f1c81b8674e7add492be8af0d5fdc6
SHA512 a427480729c872b090b336ffb8800f0040d13b60c2884a31317cb1e7d7bcb52c735ec3b1e087a382331d456a869321c521daf96968fa2c4d3fb25c471c5638b4
SSDEEP 3:MsEllllkEthXllkl2zEflVHNKl:/M/xT02z+Y
TLSH
T1554404147FD41405C5C410304053D3501370D4500551D74334D1043F5FDF5443C04401
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 1b594d73d47359b0ab06059f1c744f759a28a9c3d66e18906e3edb58a8b18beb
MD5 6c2049ae2a1fe0259f9bb5c799423e71
SHA1 228635d55b03c59e874d8769aa595b7143bb7548
SHA512 051843e6386ecce6408d9a49308bbbad6d0684ad09ea8611afbb0a10de5ec869b706426cc4b86640bd3cabbc55d85cebaed631aaee495cddcf03483ea2071672
SSDEEP 3:MsEllllkEthXllkl2zEfl9Kl:/M/xT02zz
TLSH
T14B4404047FD4040DC740103040D3D3501374F4100511DF4334D144377CCF7411C05400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 35a602242cb63da4f9e41cc7d9774f0b3eef90aa4e208723c55edd5401f57eaa
MD5 b179152dddec31658fe6553a55b6d4fa
SHA1 d1b651649e4d05a61feb8dd54f376c309ba406be
SHA512 9b764ba790d4eb672f4ee78fb8e740f22c20c32595a6c9ca92ed717e2133ebb0dd81ced9949177a8064f49888402ef817ba061e1a954019e1440f2cd4a3aaa33
SSDEEP 384:nDiFzvqMc8NG8TUNTUlIRDyb4dDdE14fDK3P5W5nS7ErrpSlR/x545wRt1r55buR:uFzypFwgZyuxK/z76rYZx545wR95bHU
TLSH
T16DE217799C64DD7F98DEBF89A30E6612AEE00277C5A84998E7C80F0C907359CF707825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 0a403d39e1988fef45a2b67956e2fca76f3ef4c35316464610f52a3919c324bb
MD5 60891ea687b1b516bec5181933188355
SHA1 ea28450e19f11856af8ffc59fd79ee6f134d8f20
SHA512 c54a23ff5ffb292eca90ddee82bc3f5311e70c7e0e8609e7307ab93b732e7e84e7ae1bc5d5dd1bf36206d4ce4b340de2944ea162c7647b8f154c60dc7f76df99
SSDEEP 384:ndiFavqMg38Nv8TUNTUlIxB4d45XgK14fDK3P5W5nd8RYV/Vw1mR3rN1k+5vI+8:UFayv3UwgLpgzK/48RYk1mJA
TLSH
T101C25C36ECA4DE67EDEA8FD9E70A6603EEE001A7D58C4AD8D6D81D0D00971DE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 75aad6d1bd551dbb7c40be1b973deba21ae103fc97f9fcb8046154bac36e1798
MD5 6fb533ff99a0b7c7b323632d85810378
SHA1 83fec9cca988445977213e651e70b7b549034131
SHA512 a801e52f6101da0183949123043cbc0d4ad03f220ea2d9800e67f1cdb86c8628bc2dc2c5a011894643e983825e917e17b0eea5fd0058c8a18e2466e4037ba1ec
SSDEEP 384:nDiFavqMw38NG8TUNTUlIRDyb4dmgE14fDK3P5W5nS7Errt1/S8XprN1k+5vI+b:uFayn3FwgZyOxK/z76rz/zH
TLSH
T152C22976E864DEA7EDEB8F89F71A7643EEE00193958C4AD8DAD80D0D00971DE170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7956c96ea4e6c91951249e033aee515a5159fa764aeb7adebdae0ab4fafb584f
MD5 7bc3ac898d9800c96e7dea6a1fb27e78
SHA1 6d0b8cd8bbd2f9b4b7e107aeaca34d9966bc9e06
SHA512 42bbc4d86370003aa730afa3abe5f0a04b2128d622fad28a70569a33087bbd30d1bf190fa353d96af4706f6d87d5788b878025d565a40188ac477b47fa911518
SSDEEP 384:nDiFzvqMc8NG8TUNTUlIRDyb4dDeE14fDK3P5W5nS7ErrpSlR/x545wRt1r55buR:uFzypFwgZytxK/z76rYZx545wR95bHU
TLSH
T12FE217799C64DD7F98DEBF89A30E6612AEE00277C5A84998E7C80F0C907359CF707825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 41b4fe9949d085c35852445f8ef3739e4dd4e929281827807c402c7958fbe736
MD5 25704cb0fc641d4f8477c96c451b6898
SHA1 d8ae5e5ff4bec3996efee4b40dc57235cfbce3d0
SHA512 cde972c5707527e477bdb9c5001eb2b3380148052a64a52809004a2d65bcf4b8fd9283f5158a0bc3c5d95e180056c7ee8951e44c777cb90ea7981749a4cd230a
SSDEEP 384:nViFavqMg38N68TUNTUlIxB4d18x14fDK3P5W5nS7Er6t1RYV/Vw1mR3rN1k+5vw:cFayv3VwgvuK/z766zRYk1mJA
TLSH
T137C26C76E8A4DE67EDEA8FD9E70A7603EEE002A7C58C4AD4DAD40D0D00971DE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7ce1532fd5a7a101ef62311e7ae40f2dfb9c699c457d745dc5e5e9241c27b475
MD5 e64655aefcc02e9c86687d1d733ec57c
SHA1 691bcd8d5e5edb66280b2c4d91da03d4e709931a
SHA512 d09198a7d1e1e784715b1c64a75823bcb386f1d2da443fac650c1264cd5e57be72c713b88f1b9e14a182890f9079c3e5bfa3bdc9a745807e5444bc5c742e27a9
SSDEEP 3:MsEllllkEthXllkl2zEfl3YOI:/M/xT02zQ
TLSH
T10A44040D7FD40505C540103044D3C3503370D4300D11574734F10437DCCF5441C04114
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 14a081edba0d8303c92788cfda55802bfa1b5b4cdba77f0c48bc6cef959a49f8
MD5 94aca1c6df2c9a64253fb32cb1337e0b
SHA1 6303ecefdcd83449e586ee3974e99ba761960665
SHA512 a0e6d30437c16020867d12acd41a4083b7c99912722b1aab5d839457301f68abdc65f0b57cce08d2d6176556842e6e3a7aaa534ff1b0fb2a16c0718865363277
TLSH
T188410BE03531B23F8BC78BC970764C845C61E181036E965CEE4A4476BD5CEA1A35EBC6
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads