hxxps://drive[.]google[.]com/drive/u/1/folders/11FheuV2escD1A6kgIEvDrdLwmhEtCaHa

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/05/2026, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/drive/u/1/folders/11FheuV2escD1A6kgIEvDrdLwmhEtCaHa
Sample260508-bdke4acv2t

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
560	msedge.exe

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
7	drive.google.com
8	drive.google.com
16	drive.google.com
17	drive.google.com
20	drive.google.com

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1002130650\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1938128893\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_529557113\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1002130650\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1932202992\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1002130650\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1938128893\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_1932202992\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping560_2102208570\_locales\el\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2640	msedge.exe
1772	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134226757140759909"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{DBC2998C-116E-4886-9857-AC0855E33A60}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{F3D27616-B632-426E-A50A-EB678EE803A1}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{A8BD5C7A-4ED1-41BC-9C08-9F497E224F4B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe
5196	msedge.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 5196 wrote to memory of 2060	5196	msedge.exe	84
PID 5196 wrote to memory of 2640	5196	msedge.exe	85
PID 5196 wrote to memory of 2012	5196	msedge.exe	86
PID 5196 wrote to memory of 2012	5196	msedge.exe	86
PID 5196 wrote to memory of 2012	5196	msedge.exe	86
PID 5196 wrote to memory of 2004	5196	msedge.exe	87
PID 5196 wrote to memory of 2004	5196	msedge.exe	87
PID 5196 wrote to memory of 2740	5196	msedge.exe	89
PID 5196 wrote to memory of 5916	5196	msedge.exe	90
PID 5196 wrote to memory of 2740	5196	msedge.exe	89
PID 5196 wrote to memory of 2740	5196	msedge.exe	89
PID 5196 wrote to memory of 5916	5196	msedge.exe	90
PID 5196 wrote to memory of 5916	5196	msedge.exe	90
PID 5196 wrote to memory of 1040	5196	msedge.exe	92
PID 5196 wrote to memory of 1040	5196	msedge.exe	92
PID 5196 wrote to memory of 1040	5196	msedge.exe	92
PID 5196 wrote to memory of 3964	5196	msedge.exe	93
PID 5196 wrote to memory of 3964	5196	msedge.exe	93
PID 5196 wrote to memory of 3964	5196	msedge.exe	93
PID 5196 wrote to memory of 4148	5196	msedge.exe	94
PID 5196 wrote to memory of 5956	5196	msedge.exe	95
PID 5196 wrote to memory of 4148	5196	msedge.exe	94
PID 5196 wrote to memory of 3556	5196	msedge.exe	101
PID 5196 wrote to memory of 3556	5196	msedge.exe	101
PID 5196 wrote to memory of 2772	5196	msedge.exe	102
PID 5196 wrote to memory of 2772	5196	msedge.exe	102
PID 5196 wrote to memory of 1828	5196	msedge.exe	104
PID 5196 wrote to memory of 560	5196	msedge.exe	107
PID 560 wrote to memory of 2980	560	msedge.exe	108
PID 560 wrote to memory of 1772	560	msedge.exe	109
PID 560 wrote to memory of 5360	560	msedge.exe	110
PID 560 wrote to memory of 5360	560	msedge.exe	110
PID 560 wrote to memory of 5360	560	msedge.exe	110
PID 560 wrote to memory of 1488	560	msedge.exe	112
PID 560 wrote to memory of 1488	560	msedge.exe	112
PID 560 wrote to memory of 2788	560	msedge.exe	114
PID 560 wrote to memory of 2940	560	msedge.exe	120
PID 560 wrote to memory of 5148	560	msedge.exe	121
PID 560 wrote to memory of 3556	560	msedge.exe	122
PID 560 wrote to memory of 5308	560	msedge.exe	123
PID 560 wrote to memory of 5308	560	msedge.exe	123
PID 560 wrote to memory of 5368	560	msedge.exe	124
PID 560 wrote to memory of 5368	560	msedge.exe	124
PID 560 wrote to memory of 5600	560	msedge.exe	126
PID 560 wrote to memory of 5600	560	msedge.exe	126
PID 560 wrote to memory of 4760	560	msedge.exe	127
PID 560 wrote to memory of 4760	560	msedge.exe	127
PID 560 wrote to memory of 4672	560	msedge.exe	128
PID 560 wrote to memory of 4672	560	msedge.exe	128
PID 560 wrote to memory of 4148	560	msedge.exe	129
PID 560 wrote to memory of 5496	560	msedge.exe	130
PID 560 wrote to memory of 5496	560	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/drive/u/1/folders/11FheuV2escD1A6kgIEvDrdLwmhEtCaHa
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd339fc188,0x7ffd339fc194,0x7ffd339fc1a0
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,15996009462904732692,5128441925191651167,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,4138711652597768297,15991552393254141249,262144 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,1250500644592226308,4067201615814141624,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,1393753492162274170,12266621248964546980,2097152 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,10067712158798713897,7024539895347642433,2097152 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4868,i,16201428416651395429,8029343889175291745,2097152 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3688,i,3496983220681249869,10836127598578073871,2097152 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,13833863328546016905,15089961667244026150,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,418534987463944754,4531667152068577785,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,16837796321375723101,13804670087073548937,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,860413040305595064,8292118405173653164,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,4517537841441636623,18339424789118816270,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,4517537841441636623,18339424789118816270,524288 --field-trial-handle=2276,i,1923282618973236951,14504840854784330673,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd339fc188,0x7ffd339fc194,0x7ffd339fc1a0
    3⤵
    PID:2980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,908478596903258496,16405224089291548764,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,11746344100578137555,10651569352772700887,262144 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
    3⤵
    PID:5360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,3211897467780349654,17820606465721869510,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
    3⤵
    PID:1488
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,3826087564966324171,7275840461221626836,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
    3⤵
    PID:1040
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,3826087564966324171,7275840461221626836,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
    3⤵
    PID:2788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,5881728307848702538,4755056608004858888,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
    3⤵
    PID:2940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,4301659524630525286,10476517745563032852,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
    3⤵
    PID:5148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,7933046271283901296,1692587636505675995,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
    3⤵
    PID:3556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3080,i,5033585097214122788,18336507909246351313,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:8
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2960,i,17849992602069567019,17608865967519625001,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:8
    3⤵
    PID:5368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,6454679911032682104,12146403363538029402,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:8
    3⤵
    PID:5600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,11716728845799776174,15032911825831828919,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
    3⤵
    PID:4760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,7828865613998236342,4635088367024303591,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
    3⤵
    PID:4672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4872,i,3402321708355669535,14205864253820290747,262144 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,9777272111936833636,11772533948366516088,524288 --field-trial-handle=2248,i,14392191817061330852,329921396775959989,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
    3⤵
    PID:5496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping560_1002130650\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping560_1002130650\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping560_1932202992\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping560_1938128893\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping560_529557113\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 09b2ccab80e9693369ad57866d01203db5e1b075ae5fb95a8aeb8f833a1e9eb1
MD5 23cbdfaf1eb53a5b0b82bb26100c4e50
SHA1 353a5f1f100a1ab39f60ae5dd18a6e4a5de94db0
SHA512 39f78eaba49e932f15b631b7bae0dc88bbb7c5721372889b660d2c2eb1074cc904bafdb6246e062706d42969d112367d8772846838a9a6e471c9b394e1060027
TLSH
T1ADD0A7763B49700AD72D51715113C749261B845024878715F218859C98F80DD67D15C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
MD5 1fd2da899cebd4d5aac2a3d85c0bfd18
SHA1 3f4e6dbc96df63582e9ba17acceda5012e453d7a
SHA512 840622178b39a880be2d80a1349d1dc0f7bfb63bf38c38c71fd96b89033d54de3e6a88f15ad237f3b66a8ebbff2bcfb19f5b6a6e94882c94044f73046f231584
TLSH
T1D5D0C0CC33B13C26C58C807004457F4D340BC4A20D42C3263433297C0CC30C428514C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 10f0f01b3aa93ff5cfc118d5d00d38c9f43f51bb2d3a7ec6362607fb07bdc28f
MD5 b6f1222550ed4374c468d0986fc42534
SHA1 54783af999c4d1c0b70ee8d9ed4efb259b981203
SHA512 30e083a626fdd033f427d16b4ca67f13a1a41cdf960cfe1b06b490eaf0589924904ef2a325397b99e9b7f5de32788c554a5e54ca090a6d2a6fea3a1735ceb698
TLSH
T156D023B73B4DB457F71D52319413CB4916678091284AD745F324855CDCB51CC67855C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 90b41d16afbe5e33216003a19202cf15c61bce40ff0973bc43a46963d27607a5
MD5 edc45b2ebff2e907427acbe33f0cb940
SHA1 9895d003339727b0332d267b3eb40fecedaba574
SHA512 fea2335d267b19e0111d7a6aa3515ee5ac4f7a678ff8aa1c46fc086d7c6dfd334253c27518ffcf377c2da8ec9ca130356a81f643b7de4614c81cc018fa638f40
TLSH
T195D023B73B4DB457F70952319453CB4916678091284AD745F324855CECB51DC67855C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd04dec9a65c9ebbd9698b7d59631c916e6b6a0a7afdb22ef48d8a4a82d902d0
MD5 5491f296a003c3ba16025eb18fdfb799
SHA1 8104d473f5d8f681400a64b5d0ac5523a5d56b8e
SHA512 118ab6dad3343099380a953888db90a14fe8c7dcb62f906e55a163cdde9b95460d37b865178c48bfd20c166ef6b725e5b61ca55fc83a0221383e062a36b68b84
TLSH
T1CAD080D837B16C26C589947104857F4D351BC4A24D46D7267477297C5CC30C46D555D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 016b210be66b51ae51243da74270940d1b341ec8b668bb02a2a16f27e992eb73
MD5 533a9ec4339d76fad1e1188a0b7395c2
SHA1 05005d3b17004383a086c4f905edc3127c9a7241
SHA512 04ae153be54cdf8fffbcd4ebd8c9b26d4904482b722c5ca9dba7a6952a098b946e63cfeb28f1e176633d5b918664ed2c8baf2ebaebba1d75b6694d4f8034e222
TLSH
T1F3E02BEAC8319C7B05FD072960528646FB55135B7B50885F3B3D81089FB0737455DC6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 65de9073dea2ec41c7ac7964bb8959c3af0eac0da1ab333b73879f4142cebb59
MD5 a0ee1a9b6e3db80b397670d5b1f70467
SHA1 be309c90140b5c4af491d51d12b4b7beda5f73ff
SHA512 4a15ed464b5191d9d02ae3dcacc0fc19b021b78dbabd06e487db367573762cdd3cfcd2a5ee464003cc6d37be669e928c9c1607c7c6a091a74a0da608b66208b5
SSDEEP 384:+UECCqSynlQl1lxkyJbNzZVb7tUfCiBeaDdUzlol3edoi:PEfqSynlQl1lxkyJNzZRTzlolOKi
TLSH
T1AA13B23E750E1C02D6E621BEBC9B4F316B78D561F4DE1A13037AB5266386B4B382E711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 04cd01611162faf730054d5d318f88d632ad4da5b1aca29e43af96e607a7aaeb
MD5 fa293da0f1ef5b0db7a21c8ce8cbe90c
SHA1 003a5415f2716c5e5ecc6bf4bd0eb3bad0056493
SHA512 c171bb711428c892552c437e38dcc9f52136a04f7498ab485451001dc1cc719187ea78576abda00887daf7a3af19f1e80561d8b4818eff1990448cf8f0c0d90a
SSDEEP 1536:Rrak94I/38oIfpkzCDf/cR6M1N81COr07AA9Mm/zrT8Zxcux:RQ2zi3Mrhlkxhx
TLSH
T1B5444EF74945A01BCFA812F5E2033E3DE57B051D6CD1E8E9E6380C912865B22B6BDF94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 c7b830adf59971c5830233584e755a0fbe0634b6a8b5a96483c75946af3986d5
MD5 8d5badb965f0351fb8b21ab5ef3f2bb4
SHA1 fa782d8c95c517e16fe958f7a33056513cd32fa5
SHA512 b714889f4d34b6bf31527d8db830e6c613e6c2155c95663882ef9d953604a49b9f0cb671dd3706aabe218f435b112606e3025db6974cb4bcf983423dd22477d9
SSDEEP 3072:Lb5mjmiHAUGbEjl88FGwcGnHA+3xyEOLKv6:35SmWGby884fGHA+30EOI6
TLSH
T1FE256CEE8B342C86DD6B4D70B4E0EC22BCB41293B61AE1D34C58C59087963C667DB6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 31f48519e9cef82ad957bfaee07fd6650d5613eec268548747a03aa0d06af4d6
MD5 7c4e3be8950ab58b9a9eb127ffc1d74c
SHA1 260fe3a6cb0352895b1697d82e64d8dd0f8e3481
SHA512 484928ab04b6de75c7b12fa6994f674f5ce7fc1d0fcdd510be38a889338db003a202d350a0593130150c71093fbc59ca327cbaef3ca23ca082aec28c144b637e
SSDEEP 24576:4ZW3LECJRdJUvFtc95lj58yC8GvW2ai19tBA+WBN8zU2oPe0p/AbUO+7/Pefmt9:glCVyvEljQv2i7A+WBn2onNu+nefk
TLSH
T102868EEEC6785C83CE678A70B4E0EC077C7412C3B995D1D38958C59412AB7C1BBE92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 31d76e53512733fb70a9c2b6c461c1051e03ec0338571cce646ff2f03790e5d6
MD5 12dbb792ccbf077d0281e7cc54e7e308
SHA1 cd5afe550d2b466630bd90af50ce58cdf6868e6d
SHA512 0abf99b1e950c3c644edbcf268fd784276b8434e8658b2859ec9220f6837610852a53b16333d708542cdb49163c5898fd0a5e85b88aa4733527b3d2c44fb44f5
TLSH
T1FB7129771394806CE3F951F63AE19F6637B4CD59358FEE0B11E12E7C0662F210052B28
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585ba8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585ba8.TMP
Size 3KB
SHA256 a37db0ceeded7176387d04417f5633ee94b79e94af0e21cc543ca223ce20a399
MD5 6d1e16135330acee11e5992e5bdbae44
SHA1 12d9768a1a60e327d8d6613da93b0dc6d3c0eb1a
SHA512 c0eb793ab8ccf0bda5bd6ed879f7ac343f504d6f8c8c9b92e596bd0a5402e1533149273b795de361cb704967a378104b322f2e1909e9414a8d6a02423a532751
TLSH
T1DF71D4731394846DE3F951B476E2AF623374CE58354EEE0B11E12E7C0A62F210096B28
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 7c0f882ba87f4d23d9743a873e78f09f8fdab7767a8f77f5583adc17e824ec03
MD5 fc69c235ec0fd27536ef9d8cfb27efaa
SHA1 0e29140b3c1c1f7dfdc04dcc7e66849a69dde167
SHA512 fff63b7eba422ab53911aa90a6d984aa6dfe34aa06794e86d681aa2460174cdf258f201e02f1f24491145b22661201ddc7e1821119fdb693da0f1e7da7cfe080
TLSH
T14DE0D8AC68C7C69D561034CB436D671DC1C13447D7856E835714CCD47606011B245D96
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 2b7b349578da244aca3c31a28dd71dc2af9844113e98ed434c20026c65799702
MD5 ede91cd6e1d178e1d25222cd7053eecf
SHA1 1b4d2f9ff98f0bea643eb970c2f124ffdcfe8ae6
SHA512 337b2be158215a7fba3e6908a6dde27bdb5bdd5b18417d538681a92feaa240559128e973cd62164b7fb3e5e9c0bf3cdd20bea77ea3ac369c137386797f2255f5
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jFVW5LL6K5fKFtIOqYpF:Tyi+7f+UZD4jJ/BjWx2CKFOOTpF
TLSH
T17FE2D38D3B11F512C4ED733EA0C2C5E55EFC682C464EB571953C9C768C536A5F49E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 0be4d76a4731df547d402efeb028889b72ba2f3e150e794125264beb07fba4b8
MD5 68d9ce954ccb906a1499a76d926a0d00
SHA1 f60dd31c2d3133ed0c5e2b4082e55b4dd547664a
SHA512 b38fa36bb7004a4cd07ecf3c1c9861e040b82899543aac27ef170d1429fc0dc88de98eeb4e2af7e92dc8d35660b08b44df1c083ce5b2ea0270e058b09c25362a
TLSH
T190E0866425CBC12A901B7CD7C3BC631ECADA344BBBE83A425B0DCC447141645B7BBA90
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 6c10e395a18b02d9b1a258bd3d012fd0732183a4af5575a363ac01f6728e87b3
MD5 aabb265b9c56db741130a4f85fe30123
SHA1 000349c141a2b9e043ab3b1a652698c194518255
SHA512 f4c610b8c793ef8f340bb57f16ef6aa7d3daca33fdf79d653c5ecb18bd49a1c9f63d4e6960f5b6a3ec254552f2485a25a98163ae26ff31f726e6996afa998f96
SSDEEP 48:uzBmw6QU1Pzx4qo2Ra87Jl1n2uNrku4JyVsCeUHzsLxfHZvrST6J0w+at5qgSH7Z:6BCx1a87Nxqu4Jy9emzknvr/5kd+a870
TLSH
T1F992B5B73C683802DF6585F7540B3D2AED369B2C5FEADC5CA8B0403146EDA9A11680DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 f3b1685a3ee5aac0f23359fa5cf110551a799ec2cc4ad278fd1059a64ce3a28e
MD5 92bdcca80db20522ea0398d4f7da1582
SHA1 aa3977f383fdc32df3be15a2574e772a665b7aa7
SHA512 d4733cedf9527225419a29f3b830ebf8b6e9d61f544cc455cc5196cdb42bd31bd612cb23a4a4221d2569ba87f80f8585ab9e38fdea5f62e3ba4a1d5ab4cc1359
SSDEEP 192:Bj3Blj147f+G83uy3Ct7XBBKoB3lxH7DXspU3iZ:B5U/83uICtTBBZ7DXspU3iZ
TLSH
T15914541F6F242711CDBD81B668AB19A35C6CF03F8B93A5D96C710070CEE7B56606C4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 ec10b2c2090da019084a0badeaaf3ae7b1b12d74fe01b887c442530a6889525c
MD5 cb5583de4cc7088b2229d8d7a70ae4ed
SHA1 08f02e39cc4d18a77356bc19d3d5aed03b8af513
SHA512 08b70e88ee7d8bde5b58b4d73b5465b785b6ef0586efd4d3a06bcbcde483cdd34f8a09d47c50475bbc0e419123781ced7374bcf80523db786a8e47c38bdf29bc
TLSH
T18BE0D8B056CEC11B510434CF4369771ECBE4340BD6992B415B08D844B981008F7A59D5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 417f78444dbf53256a52ffeb35d915f526e474db7e6a68016976804b8f9a4ff1
MD5 810d78b6025ae4ef567d8ccd4b301323
SHA1 367e5c0d01966983d57ad0655394c8132aa4f4a1
SHA512 3546e21953f62fb387bb18c6ec1d80528785d0fe00ddb16cc9c75bc63620bf519bf593f22b881a943de8eed89d8eaf78b94d5d94bee1331dfd9ac2b8d26139b9
SSDEEP 48:T2SLopFMatSaw/auUOt8adtEwICxooMAdrNC/TQGR:iSeMatUaAbdtU/
TLSH
T16792658F2F201121D1A58B32ECD1462B2E7C222D9767B7DD9D4420F38D9198FF5090AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c3ebd6fd1b51bc501a8490db0ca73ca0544cba4dcc248870db6b42b672228ccb
MD5 5973f69c09b34b1d877a29a98b9806dc
SHA1 bb25e7cbea637a40c28dfb933c5009bc796c5ffc
SHA512 526b6b431f191d8d5b979db51b910b2e38657e975f4b8e43fd80329656160be90a538cb5f30b8457d5b070c77dc99ce0c1b4e17d2ebadf278954fa730274703c
TLSH
T14581AAF7C3E8856DC91256F4AB156F1FCE1D0614432C7D6A88E4AF1B93E2871E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 894d0028329bcd56aa0d6430c890f82eff3653c45faa28d009af4efb9102cce6
MD5 fae01dcbb407678cf363705e5ffa9f72
SHA1 acc00fbbe7bf3c18c0888e7cde7b261a605687d1
SHA512 d34cd3aa23659cb2033eda61c4dcfc46bcb4ca07f1b30d5c5863b4b1e3f4da730c1898ba1d90773c71370e0d0ecdc11b8a2e592320a7b82b22df4b6dc63ae1f0
SSDEEP 48:YALlNROhCh7hnC8wagmzsgzEsb9s3uCIse2O0EsncsE4s+XYj6AsdFsnC7wEsbQE:DrOQ7Oa3zf4u12O0bw+Ij6l4GwfA/vW
TLSH
T104918AF7C3E8856DC91256F4AB156F1FCE1D0A14432C7D6A88E4AF1B93E2871E101A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 0c450544869895eb8d496fec8debd8f44b20ca6d3c6827b85ca087c81f430562
MD5 03e4eaae2c2a194345f010ae6c0ee3dc
SHA1 f594440de4a028e30a9d077012bc1969fcb50663
SHA512 ef0b8926894f53fa5a41689529bdfc93c1c8523085664c69b3f716f398455a6744c5dcc37fd7cf92f8da5fca25354edeae13ed76a3ed505bb5889a7086e9db29
SSDEEP 96:OIEumQv8m1ccnvS6Y1oLH8idR2NQlf3F2MQRnFiZ4j9hzXTvK4ZE4g:OIEumQv8m1ccnvS6JD2CF2wZYBKgW
TLSH
T197F213FB02279105D99445B0E2019B8EEF13011747FAB2ECA6C45AF3E3934E2B17D75A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 689B
SHA256 6657f6273253329f223c292a27b0441fc76e82bf6e0b3fac0a7f449687b38e73
MD5 b536b59162be6cc2304ad43881abca8a
SHA1 13f9d21bdd661ef2f91299a638bc463231bce4a1
SHA512 ca96bd78b6db486be79b8da9adb5239bc36a42df7e1d2f6c57c2c522f1700b77b584606e94bb16998e8964b3f954ee2c6879db4fac85d8ebb06fecb36e499462
TLSH
T16A01FC97CBBEB827506949AA5949784868BAB475039289B8FB66C36CB1805A31603017
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a9856e68d5946d7015b766251d51af6ca230df1c854d0faba06ad2e6d3a5e17c
MD5 729e7c45f26c86edefbe7da1b3e53175
SHA1 c83a592311b7325899d7310151274617059e2767
SHA512 e2b00dd0680151dfb2940c472ff75268827ff129e52f65b1a780d70707e32788c00674e0c4332beb83ebfd4cb0a9c4da4af8c69fa844c5d9f550e95eec13e9ec
SSDEEP 384:sxZmXVG+2/fVs+Wvu8G3hvViHbx/WN0bZH:sYET/fnYu7SHbFWN05
TLSH
T16F72F8166A38597BCCD6D219FA557F53D7F9152392905E48AAFCCA0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 3b338f32dfe6d858f76a1e51e27cb3befb320ff7c3c5a5b9282ad4863f7c4825
MD5 670be2bd09d1ecbb577ea6b25f4bfc27
SHA1 0473e938bb4b58fe8b3ae3860bb2373ff865d736
SHA512 0f18dd368c8a937b51a0e5f81337a5c07f41a7a054bb2f52702f5e8718dfa81be9c01ecbbd85e8bb3b43fd9fcfb8874c0b0430a5f7946dfb763966e0bcef5fd8
SSDEEP 768:A9sqZl+7pLuL/BlWvBDeT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHEx4Llhf51YroK:A9sqZl+E/BlWvBDeTu1ja+Ex4LXB1jyd
TLSH
T127F20A3B6C0CCB7E4F804E9CDC2A7E8E6EE8018B96D8895447F9841C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 a354dd0ce66a0c08d3b5a3094e0bfca590eed9c54d909fafff59400babb1a4d6
MD5 d74a664e9abf21f43157c08bdf58c677
SHA1 4472519dc42f502c676c2661362603346ab41e22
SHA512 7edd2a21091bab9f8585fdfbdc81897d1b9b303929c2b0ec049f6534329c71339dd0af006302dab3b9bd02e47607dec24f642bf66db60bd4ea193178494eba31
TLSH
T169E0487026C6C17A701E30C70268D31ED6D9B55FE6D93B411F48CA8451425487267D91
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 1bd97d89f08da6db60098c960d996c6f067ccd48201001a289d34233adaad7e3
MD5 92c5c54f15f5b000daa47aad5528e295
SHA1 1b6c908fee493af073e22c2da08ff687f274d584
SHA512 a0b4c670e6127b8cd9568e88a0d77ab38bc185dc4990129f5a5503601046719826addc986ef57d4dfe5bb648249194212885e5668cb5822b3c89e3bd928d3ecf
TLSH
T1F1B012003B51C111D8EA493A05586F41A310E4530205071B8C3B8F7C4E663F8FF49CC8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 19010dd608149458a4afe524bb72394ef1578e4ec897b98730cbafdfbe13c43c
MD5 d49abc685dbb08e2dc23e62834522081
SHA1 3ed22cfa1f2168062ed8629008ef8103be7d1376
SHA512 bd3843de2a54b62625bf84ea8dec01c5cc10991f9e36bfec568f6d8512d0274cb87c7ee5351fadffac8e63935fb9883e4d09f0693bf850772106113a6d194ad6
TLSH
T1CAE0D83026CFC27B714A30CB4368F30EC9E3B457D6D82AA12F0CD54462071447757D90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 2477ef65dfec216425afbf3d898cfc0f292906d6a129e774a795b7d74032c752
MD5 cdb3b723578bb1396f57ed31266106cb
SHA1 f5f3013bef343c8df40517cebb60b567ac46f166
SHA512 ea7639ad0bcfb9931b54c21cfaa877c871dcba23e8881adfdd81dfa3860f2c83a9cbec6c37ec1d431f9f395794607a69f06d4c504abf52cc46ae5a2257e150d8
TLSH
T1CAE04F7066CAC23A900970C643F8E71ECAE5B95FA7993B86570CC584A101144B3BAE91
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 425e67b04cb6781bf47f1ceaf576f60a028ef33a65ab6d2e71aff7cbb4fe4965
MD5 e37524ee6018c26a65ae9adf014c8b2e
SHA1 f671715d741cf5fb5daffc8dc38dca7613450b70
SHA512 b3bb5562d55214efd81e0f7d17c331d847e57af65230c5abd55668165b6b8e0947063a9809a95f54435c9bbc49d2ae3aba73571ebb39372e068e1ef5cc20b513
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qn5:+BOVglYXrbtZqRvJLTI6qY
TLSH
T1FAC25911363B0381393E254D9194B56F66C270A37098B82B7BBD04A64F6BE20DDFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 b7da8fd6e738f9c2fa8447a5f034bd98acca2709b45f79a8a1b39f2c4a4b07cd
MD5 3b8fa297829268dabc4711f25613b3a3
SHA1 6a09be334c6145ea3286e38817d2610112a05028
SHA512 42be5879a711cf487655afba586ddd7b69004677edb4e7e9e0397c7118e735b80a359b5e0596936d7405e3ee7b232f12875a1fdefa3b3b911ddc633ce99a1450
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qnc:+BOVglYXrbtZqRvJLT8
TLSH
T1E7B22F11763B03803A7E254E9194B56F62C170A37098B82B7BB944664F6BF20CDFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 6168f10d9b7968d4257482a9a7bda4f78b868db589f62f5f0ae3614a5ce556e9
MD5 3e588fdf94729c2db3ea2c775a13ac5a
SHA1 646a7d17bad6904a086cf05902f19c1d8a83f49d
SHA512 0c47c6254023be75615b84ddf56b676ce068c2de7db542e54eb9934ae903b7d6a84dd891b22aebc8f7894b8cf3e1182a68dfc8f5990b1955df18caf112b4c15b
SSDEEP 192:P+xWbNfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxyfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1AD24730A7B747001EDE6D9721CB080771E3CB16DCF22A6915DB664698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 4100161bb37daa46e9de7ddd5f65963a1281a5ffd533211bd9b0ab9b1deed901
MD5 fc567e5ae769b7f37da02f135c8f34c0
SHA1 a1f8e4721ed0a174fe84f82c6d2feab2a828edd5
SHA512 836fad7459e44b15367abf5443ec992584d5fdca93449c81993b02b17a092ea3bccc15bc1eb2c606ddcf296b595cb8e0cc81e53d6a31e1b90a0f0a77e4ee17b1
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBgpy2Ra87JF64b392Ra87JfjW:DEtSyGhp22iSSa87p3Ya87ly
TLSH
T1CE52A567F8982505DCFBC276AC831A957E6C863E8FCAE6118CF4002007EDE28435A8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 0d055f6193393c7b8e7aad8a6c123d090dcc652232dc2aeb6d17e12512f1fce4
MD5 aa8f16dbccd12670a3aacae68842ba07
SHA1 f0735d16f79a414a80be5b1f81f2000ded52c3d9
SHA512 ed2877fb2a5109521b0249ae89545304bf37ddf5831492f398e9e033fc9cc2f3bf902a7f65c9c98945e6c946c523073b60e35929e0301c1293394e7a72cb8a41
TLSH
T1585189C0A3AA54856F8AB9C2C21D7503B9E53D5B260E5871772E44F58F888289F3FF35
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 80529c2a98cce01ae6d0b7ef99f62a219c547f3722b74677ea06d1118c3c890d
MD5 007982b48cf440da7a4c51dc68121718
SHA1 c58a9ab2e887a4a8689b692d64a9634fe8272bfd
SHA512 82136f2c85bf9ab7274dc34b8c8a4c334a6d11f683f1f149634319dd03af72ba4deaf6473af4d5928dc41c1704c23395e0f0dc75a0ce24966ca1e70434c88a22
SSDEEP 192:v8OHKmAs2tlrHMrs2GFf+vlzQRIIIsb0MIMuDYcYSzrQ:jHwsSsshaQRIIIsb0MIMmBE
TLSH
T1C05282192A051B33E26E5F765399CB925BCAC881057222AE34211C1F9DF3F678BCD1F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 96b55275e248f8e24badee1c5619e9f1213e476675ba6939e69abaeb4d32edd5
MD5 ec3cdfc77a8da2656ba695933275eb7e
SHA1 2f137a74b97a0a40a3d131eb8b057780b3432fb2
SHA512 dbe822cd47d37923792026c6b7f268419799c636d53d890c8a5a04152ca056d621f435f2f68a88346c2ddc8a395a99fd93ec398f0a62ad2e2062bc64623ccc93
TLSH
T175E08060F5C5C15F611B34CB026C535ED7D93507EBD43A457F04D45871451447359952
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 4de4336382a39e542cb8c1b826c0e1eecf4c025cb98305aeb32ea48c52be627c
MD5 fe9b1e8b06f6baa48124ed5fce799251
SHA1 8abc2bbe72e920ee3dcc85d6dd58adc44495617c
SHA512 153b82204cf211449cdb6a4f9f4c4a10c9c040a4f3329e2c787135e700c1d74c03322a69e33f34d4d501f9b339506e5f164538a1cad7fc293df1b02554d30482
TLSH
T1A1219055F324C148D14A9A7D902A97351738E8029FBCDD0F807924652E71F041E8BAE5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 69ef721a3da7e30c9075ecf4a9510f38d8fa497164b1e95a7ef474a9d69ba361
MD5 53947386ad411c9cbfc7ddbbcd0a6634
SHA1 c2530da1c39ee4dc8dc3b0114ad7c0c16e1a5978
SHA512 90f4571ebbb0e519e9bd6795d7d26e4aae30747f7f198ff2bc7dd9981b826f3a02b89db2058c77b1700df94c84167ebbe6083e7f6031dc7b0f9d3d0956b8b753
TLSH
T172E026A0B9CAC1BF925334C702A8A34DCBD5380BEBD83F825F08CC88B141141B3BE991
MD5 SHA1 SHA512 TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 ec7f7e548d1fc43e5ab36937d8b3e7366aad9f7dabba4a3d8f34e5c9f29eeed3
MD5 009c322fda825acc4890005e0f3f6ddb
SHA1 af2ca51e92cfd7ad2dec11fcd7e558166ccb708d
SHA512 a9da9dcd31cddabfd46ee684f2d687530dcd25f2f779bf9ba576809bfae1407448079b6c995e15df25890d7768f4e5b2c878948536ee320e15440bb301a44da4
SSDEEP 3:MsEllllkEthXllkl2zEflHY:/M/xT02z
TLSH
T1E64404047FC4141DC5C4103050D1D3703370D4511D11574734D104375CC75403C04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 0a80ead7997c524e8f1528e29f8947cce6ceccce74dded0b46ee2f18d53ca123
MD5 3e634e5facca7bf6383d51922003c6ec
SHA1 b20d70acc338bfb8d9dd32b715508af783e4dd7e
SHA512 69113308f5ceff99dab6bc221df4cad14a295b84986998d6ad4edfb674bb1151d1b10ce581b8189434439f2cbc5e0b187475afc459652e6e28081544086e5d5c
SSDEEP 768:gFacpvMwgbs7iHE0YmcsKOo9IlXLaArXit:Ev2s7+i3On9LJ4
TLSH
T1EED24C72DC94CEFBACE68AC5F24A7507ADE4017786889ADCD5ED6D1C209F1ED030B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5ac2a3641b12624c01340b41dbf2e73bf2b9253c51a7aa947dafd1ea71d34edf
MD5 b5f3ab7a34656b2190b8533c1a852b58
SHA1 0aac144d7a6daa1f0f5a7263db8983b5918aeb88
SHA512 93adb27c7114b20fe49454fa8887575828d9d49548be996d2160429d9b5f60511507c15ddb79d9ee02aab22ef4fcb8a7405def9eecd5cd8ca71188a76aa66545
SSDEEP 384:nuKiFavqMg3sN38TUNTUlIm2RihYlJmr84fDYq8Q/hS7o1dKuiNb5rN1k+rvI+2:uBFayv38wgTisA1Yo/hmo1tix9g
TLSH
T112C22B31EC98DABBEDE68F89E7497A07EEE00257C58C4AD8D5E81D0D10D759D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 4e18ed9c6bd96626e98dfd32c226c760132b0366c970748d476d0d112118aab5
MD5 b1280bd38b45049484e62a7e1a673e6c
SHA1 842590a1d18a42ffcd57fe4e07598847a37ebc03
SHA512 aab0d8778a4b296c139b87a98b02a8db85a94219ceff7774dc87e8e44381d1bc4ccedc54310b26dd1deec333ca811b88144bd1040295c2c92e6901ca2c723036
SSDEEP 768:NFacpv6wgbs7iHv0YVuSEoaE9dCwLaArXiwH:3vgs7+4oaGCwLJ/
TLSH
T144F23B71D8948DEB98E2CEC5A34AF5066EE40237C58C899CE6F86D6D309F4FD4707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ed6d2e0a4b94619a15bd7e9fdc0b82557c8fa4a73aee5efbb01d261418646572
MD5 a6379b29510145a78285f447441bc3af
SHA1 ba46283811ddd906b39011b351a2fd55a9a70bca
SHA512 fc397137cd93bab80e47613c678d0de11bf2197703a085be5fe272ef35c13f5b8a3068ea8cc81ac2f72aff9e5e4b93819873b017961998b1025f3208e9104437
SSDEEP 384:nmiF9CcmyWC13sNh8TUNTUlI46sFRih1lqYy84fDYqpK5n/vwLaJCra5eFsErN1H:NFccp136wgbs7iN70YV/vwLaArXiwH
TLSH
T19DC25C31EC98DEB7EDE68F95F30A3607EEE4016785888AD8D9D95E1D00C71DD130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5a3cd1f764cb72a85d096ccd8b05955013cf4b93a961a192225532b6163fbbab
MD5 9fc8edbe6be68127e0ff0326ece472cd
SHA1 d8effe63153c478103f359615d2426eb2c198049
SHA512 9e0c073301d18dbb6fd73acae475cb4ca0c7a4b5ec6b401caa43f9960b259fa78c8876a65da7c0e5f4eb4f96453094470b2ba7b6060233c7bcc31df114ac07b5
SSDEEP 384:nbiFfCcmyWCvsNL8TUNTUlI46sFRihssPcy84fDYqpK5Rcr0wLaJCra5eFsEHy/x:2FacpvMwgbs7iHE0Yvcr0wLaArXit
TLSH
T16EC25C32DC98DEB7EDE78A95F34A3647DEE4116389888ED8E6D94E0D00C61DD070B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 78cc566b6d9423003dbb40f06bd6627cf1563367b6d4478eb75caf855757d772
MD5 dc52e329ed2f666226cc68844fd50aa6
SHA1 b9e995f5b4426230f25fb317efb1afee642f1008
SHA512 e656028ed0763521f93053a10e2eba344e25573eefcd8d17615e6d0c199cd4ec6ec39d7390e2024f46670e0d9c8a37b3c75e9d3d02e30b2a95f083948b8af9cc
SSDEEP 384:nxiFavqMg3sNF8TUNTUlIm2Rih5l5jD84fDYqpKTn/vS7o1dKuiNb5rN1k+rvI+2:YFayv3KwgTiZtdYj/vmo1tix9g
TLSH
T1F6C24B31EC98DEABEDE68F86E74A7607EEE00297C58C4AD4D9E81D0D10C759D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5137ab7c86472693ff199b7df638081dee047c994c1d158d1b07228c654ed5c9
MD5 8621cc39e9d9282332767743154fe836
SHA1 4742f0905002ad121c41538b5c26523b09059d9e
SHA512 634ece92c9ba54da27543eaa3b7c8ce289198669fad5bc48457389ff4f3e2d31ade2d3d37277b3564d9cdb582d4cbf06c9cc863744864a62f42bce06fc9f3ff8
SSDEEP 768:NFacpv6wgbs7iHo0YVuSEoaE9dCwLaArXiwH:3vgs7+noaGCwLJ/
TLSH
T1D2F23B71D8948DEB98E2CEC5A34AF5066EE40237C58C899CE6F86D6D309F4FD4707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 faf4bd9312d5ba90d873557271bfb90c566885bc175c95a8e2e1de074cca8a8d
MD5 3b2c04d72eb80dae48f50f55df1edc7a
SHA1 57233cce92c25b095303495662c8a6ba8332698d
SHA512 4492e14fc636ece16fd8e553cd69d8ba4cd13fe6bf8f80aa7b8dbdf14e740f0b59f23b356a218b4021cc84395053c1bc936ac608380a9b6947e31a22b972d46f
SSDEEP 3:MsEllllkEthXllkl2zEflmI:/M/xT02z9I
TLSH
T1254404047FC41C07C54010304051D3543370DC100511574734D1053FDCC75C03C14115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a0af7fc96298c2b27953e0ba133c85ce4379735b2a5790f07056594f3c4dc034
MD5 e8672eff1f82b139097f49ce19edb6b9
SHA1 a3d8b87ed6d8137b5d58a0fad58e8ba850bfb207
SHA512 1fa036787f5f182f2382149529d47ade302a0773ec457fa7202fd9b9cc2c9852aef2ae4bcbc77c0c1c9bc6c360f9cc62b7430e8da4e09f855b6718a801b31432
TLSH
T1D4411DE14C3E2AD1D4FD0A2EB4AB38FC95D8C72AF5A4347D6824DA88063A61E644443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 590a2364e07bc1d8a49f0dd9d81a8fdcaae16238644ee1d8c157a8c69f9047f8
MD5 faf6cbbb34f5895b745befc755ea501f
SHA1 8f7a0d461b011f56222a06a53c748ebc972a126f
SHA512 9754651e2975b22931fb3c0704bf7709cf1da0711c4288b2e3cef14f3d2a69a5377c8e975aba5168569275243e38a7a3b51d3f6a23f43e89e6ace64aae214d64
TLSH
T1764150E14C3D2AD1D0BD0A7EB49B38FC95DCC72AF9A4307D2824DA88073A60E648443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a0daabccd35466fb06b6dbcf4b3256ac1590f5e99976b44dd4c9ea21ecd236bc
MD5 267473f12e6491330dbe9a50aa4be196
SHA1 ba47536da080a14faff53c112acf95a43f1c9748
SHA512 f226a86b0d59235ca02348f40b2f3118da47f4b1f52ddcf23db1f9154f8638cdb425bb3d706a75c74c92cd92135096d95bbe390b9f868746a9a3d76380eaffda
TLSH
T142411DE14C3D2AD1D4FD0E2EB49B78FC95D8C72AF4B4747D6864DA88063AA1E644043F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7670a28830d7969f453f35ef857efd1f3d8f161d3052e7644c9ef93dd7a4b33a
MD5 236778dd8646441f7165af38ce5b6825
SHA1 e7986448aa9b9bb9d42cb095aa4cb12cd5cf38de
SHA512 cdc8e6bde842e15af27d72ce7e0d43c6e0b57d3974d90782a20330b5afeaad483f45f9c586c87e61b062b46df9834c2469fd39a9e926df16d1ae1f5e93ba41cb
TLSH
T18641E768B6FE1144B3B76E5AABF3A96E457F79332E46C49D00110D4F0A63B40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 7ed1a7ee956651a98355ec8abe0e3471ca8624fc4738da020ae98a16242869ca
MD5 83c0393ee3036fbca84ffd779bcf8dbf
SHA1 3c735199fd33b649ad4808f6873a787731bb5b76
SHA512 3f73d98552ba11f5676b3b77c8387152994da09ad88c7361eb056dd45f9c8bf934fd9306fb747d879d49c2c0d7a165c53fed8f8e72f80cd55a8e2f0b713a4a7b
TLSH
T178514799A6EA1148B3B37F599FF6A96D497F7D772E07945E10100E4F0632B00C8A2B37
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 364524d98265966d2e5544bacddd6aba8bd692e20737b6cb5ba2376d2cfc6c05
MD5 dde622999658b0f3d615e5356c5adff8
SHA1 e6ad270bf5cdd8f80a3f888d8d5bcdc3c781ac14
SHA512 14130993f3e8a06538f845662450d57bd6830e35b6a262740916c9bd246ae9e78f9e16821542a240d78a0387781c425ba182b459675f37c3ca7e8789725ca95e
TLSH
T1625109E13536612F87C38BC570764C845861F18103AE5A5CEE6A4475BE5CEA0A31EBCA
MD5 SHA1 SHA512 TLSH

Submit Download

d62509ed-1da2-4f06-9f4a-aca40446f313.tmp

Path C:\Users\Admin\AppData\Local\Temp\d62509ed-1da2-4f06-9f4a-aca40446f313.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download