d220e547fdca500b55569871d85f558fcc32de07fbe1d8f3d4e3aff00fca37d3

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/05/2026, 14:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
666sysEmx.exe
Size 34KB
Sample260522-scyprsg18x
SHA256 d220e547fdca500b55569871d85f558fcc32de07fbe1d8f3d4e3aff00fca37d3
MD5 78d49e1dfe21c04fba6ebd1bde9d14d9
SHA1 a043f9947ee1cdb9837e3bfa2b87a9424aaf61f6
SHA512 f99ede7a77889da270f91e81bd944d4b01d024adcf141e930dc2ad80c13dfb2555b8d91871bd8d372fac3e2b8d8eefc680df119cb61518d9cad956e329b06dbc
SSDEEP 384:rf7co3F7Qe1ge2LFbG+55TbUIFOy8he1VVflutQK3Len0aStl:j7bdQq9K/Tjcyg2lyQ2Loal
TLSH
T1F4F22B453FF54CEEE9EF4ABA5C70D1841635E8526E70EB1EB061928C09637C0E992F86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
83	discord.com
84	discord.com
86	discord.com

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5644_96533473\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5644_1227472547\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5644_1227472547\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5644_703763450\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5644_703763450\nav_config.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2104	msedge.exe
5824	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134239355771510051"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{B4323486-F679-4731-A96D-D34C748B6B41}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A2B997F0-7526-44AB-B90D-D2EEA8D32606}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{C27648A8-3060-40C3-B532-3437D11F23C6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5644	msedge.exe
5644	msedge.exe
5860	msedge.exe
5860	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
4188	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 4188	1500	666sysEmx.exe	88
PID 4188 wrote to memory of 2324	4188	msedge.exe	89
PID 4188 wrote to memory of 2104	4188	msedge.exe	92
PID 4188 wrote to memory of 868	4188	msedge.exe	94
PID 4188 wrote to memory of 868	4188	msedge.exe	94
PID 4188 wrote to memory of 3436	4188	msedge.exe	93
PID 4188 wrote to memory of 3436	4188	msedge.exe	93
PID 4188 wrote to memory of 3436	4188	msedge.exe	93
PID 4188 wrote to memory of 1740	4188	msedge.exe	95
PID 4188 wrote to memory of 1740	4188	msedge.exe	95
PID 4188 wrote to memory of 1740	4188	msedge.exe	95
PID 4188 wrote to memory of 3724	4188	msedge.exe	96
PID 4188 wrote to memory of 3724	4188	msedge.exe	96
PID 4188 wrote to memory of 3724	4188	msedge.exe	96
PID 4188 wrote to memory of 2484	4188	msedge.exe	98
PID 4188 wrote to memory of 2484	4188	msedge.exe	98
PID 4188 wrote to memory of 2484	4188	msedge.exe	98
PID 4188 wrote to memory of 3576	4188	msedge.exe	99
PID 4188 wrote to memory of 3576	4188	msedge.exe	99
PID 4188 wrote to memory of 3576	4188	msedge.exe	99
PID 4188 wrote to memory of 3908	4188	msedge.exe	101
PID 4188 wrote to memory of 3908	4188	msedge.exe	101
PID 4188 wrote to memory of 4272	4188	msedge.exe	102
PID 4188 wrote to memory of 4272	4188	msedge.exe	102
PID 4188 wrote to memory of 4272	4188	msedge.exe	102
PID 4188 wrote to memory of 3040	4188	msedge.exe	103
PID 4188 wrote to memory of 3040	4188	msedge.exe	103
PID 4188 wrote to memory of 4340	4188	msedge.exe	104
PID 4188 wrote to memory of 4340	4188	msedge.exe	104
PID 4188 wrote to memory of 4340	4188	msedge.exe	104
PID 4188 wrote to memory of 2708	4188	msedge.exe	107
PID 4188 wrote to memory of 2708	4188	msedge.exe	107
PID 4188 wrote to memory of 2708	4188	msedge.exe	107
PID 4188 wrote to memory of 4004	4188	msedge.exe	108
PID 4188 wrote to memory of 448	4188	msedge.exe	109
PID 4188 wrote to memory of 4004	4188	msedge.exe	108
PID 4188 wrote to memory of 448	4188	msedge.exe	109
PID 4188 wrote to memory of 3364	4188	msedge.exe	111
PID 4188 wrote to memory of 2036	4188	msedge.exe	112
PID 4188 wrote to memory of 2036	4188	msedge.exe	112
PID 4188 wrote to memory of 2340	4188	msedge.exe	113
PID 4188 wrote to memory of 2340	4188	msedge.exe	113
PID 4188 wrote to memory of 5052	4188	msedge.exe	116
PID 4188 wrote to memory of 5052	4188	msedge.exe	116
PID 4188 wrote to memory of 2400	4188	msedge.exe	117
PID 4188 wrote to memory of 2400	4188	msedge.exe	117
PID 1500 wrote to memory of 1536	1500	666sysEmx.exe	118
PID 4188 wrote to memory of 4864	4188	msedge.exe	119
PID 4188 wrote to memory of 4864	4188	msedge.exe	119
PID 4188 wrote to memory of 4864	4188	msedge.exe	119
PID 4188 wrote to memory of 3920	4188	msedge.exe	120
PID 4188 wrote to memory of 3920	4188	msedge.exe	120
PID 4188 wrote to memory of 1976	4188	msedge.exe	121
PID 4188 wrote to memory of 1976	4188	msedge.exe	121
PID 4188 wrote to memory of 1976	4188	msedge.exe	121
PID 4188 wrote to memory of 3408	4188	msedge.exe	123
PID 4188 wrote to memory of 744	4188	msedge.exe	122
PID 4188 wrote to memory of 744	4188	msedge.exe	122
PID 1500 wrote to memory of 5836	1500	666sysEmx.exe	125
PID 4188 wrote to memory of 5860	4188	msedge.exe	126
PID 4188 wrote to memory of 5860	4188	msedge.exe	126
PID 4188 wrote to memory of 5860	4188	msedge.exe	126
PID 4188 wrote to memory of 5952	4188	msedge.exe	127
PID 4188 wrote to memory of 5952	4188	msedge.exe	127

C:\Users\Admin\AppData\Local\Temp\666sysEmx.exe
"C:\Users\Admin\AppData\Local\Temp\666sysEmx.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://666sys.org/
  2⤵
  - Checks SCSI registry key(s)
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2d8,0x7ffa3345c188,0x7ffa3345c194,0x7ffa3345c1a0
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13353128599923645520,7160490832264482592,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,10330666252999733875,3438835260018807513,262144 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,1776204466288917030,10587952586362138134,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:8
    3⤵
    PID:868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,17263480950830632166,4617465180532445416,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
    3⤵
    PID:1740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,17424975388466244633,10728571690332860831,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    PID:3724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,8147254820452146906,8367716017450607322,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
    3⤵
    PID:2484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,16120641028383834684,7691661103152070372,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
    3⤵
    PID:3576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,11913156974662720399,17992767768965223982,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
    3⤵
    PID:3908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5248,i,3980251721817031571,18234423566698134338,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
    3⤵
    PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,4889198556569377873,2827741534642025112,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
    3⤵
    PID:3040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5596,i,8267398697696106212,13407142606716357031,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:1
    3⤵
    PID:4340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4416,i,11535945384532550150,3368915785068892869,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
    3⤵
    PID:2708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,12726949160543281771,11160064342248950662,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
    3⤵
    PID:4004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,11949720273230659313,11221253151721495558,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
    3⤵
    PID:448
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,6446182859023158052,3280537924204053902,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
    3⤵
    PID:2224
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,6446182859023158052,3280537924204053902,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
    3⤵
    PID:3364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,17888380190382465977,13658776728636396755,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
    3⤵
    PID:2036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,11720962964463358694,16478384874316906589,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
    3⤵
    PID:2340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,10865508647463437331,12250718000737476046,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:8
    3⤵
    PID:5052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,14479941738637833574,15417381991560128981,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:8
    3⤵
    PID:2400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7044,i,12384010361655196414,18100088779639977182,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
    3⤵
    PID:4864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7208,i,10744099430352761494,11585688684948707032,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:8
    3⤵
    PID:3920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6724,i,15666559933509463858,14637461506193240939,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
    3⤵
    PID:1976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6912,i,8713644068218845892,938925683672496613,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:8
    3⤵
    PID:744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,110936960620404943,14947689916035394492,524288 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
    3⤵
    - Modifies registry class
    PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6960,i,13500623950813727154,17215392333500487119,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7512,i,878527332647156811,6366130133030644930,2097152 --field-trial-handle=2352,i,16167163160054732611,11193307579322103544,262144 --variations-seed-version --mojo-platform-channel-handle=7556 /prefetch:1
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Program Files directory
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    PID:5644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffa3345c188,0x7ffa3345c194,0x7ffa3345c1a0
      4⤵
      PID:5620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,4475353612818563707,16912772816264072422,262144 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
      4⤵
      PID:3884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,5050991754977730037,1594492513634607580,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
      4⤵
      System Time Discovery
      PID:5824
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,10571066719552791713,10047972424398209732,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
      4⤵
      PID:6112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,274355690995430564,7881790109876607535,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
      4⤵
      PID:5552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,274355690995430564,7881790109876607535,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
      4⤵
      PID:5756
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,3408955788165823470,6122669869623668178,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
      4⤵
      PID:5860
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,14531900761534539876,13870359748443646987,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
      4⤵
      PID:5952
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,15211137779305018982,9279072599280109829,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
      4⤵
      PID:432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,1722594621186238182,8573165730107453455,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
      4⤵
      PID:3112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,12002225846843162676,12531400451048615627,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
      4⤵
      PID:2892
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,17852711476900332990,11456281052004201864,524288 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
      4⤵
      PID:5876
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5092,i,16675579457467459764,17449364440723796715,262144 --field-trial-handle=2224,i,10441219707429644088,8877946580092737705,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/UFuXahYH
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/0x0
  2⤵
  PID:5836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5644_1227472547\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5644_703763450\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b9b2e787bff8ef07aaf8dc41b35307c7c27a735e7d7ceb08a7a415a3e0bf278d
MD5 6b1b71135b132fc9820aba7909379913
SHA1 203a3bbcdcbfad5b9fcc3b862338d849bc46335c
SHA512 ee8ea33ab55fc59728e89ee58318e93e1e10697a037488e782e474fdd2fcdbd8c32e1d9bb596e518f23ae71ef00bc569552d7a2f5359f8d6ad520cdac9122bde
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Q:fwUQC5VwBIiElEd2K57P7Q
TLSH
T170B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25a2030cb40f73c5a4f4d311f63f9a9cee76fa5a95253c4d7ec97e3cec353afa
MD5 b6084074c4d0f3e8f7310d1d5e2cd918
SHA1 8df06735189c0e7c70563a010c482c12b5573011
SHA512 b6be2e5bfb6f7bafa23e380955d70cf87dd4f0bc5c3812f144df81bebbff6e3c43281c814f03c487eb5ee42e366086a8c8e244ef9b2e95c491736dad22cdceda
TLSH
T16FD023B4752778E1D13F303F1931D20167DC44339212225D37155C155DF498948E0DD5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5a8265f92c78dac82246d2a0dd657da6cc96392dbd524b97fe96d18026e3346
MD5 58e36480596cb06918e8680968ace834
SHA1 6e897a7db61ddcb1804139b3d44cec0dc63e5bf3
SHA512 73cbbf4ce6c3fb3b788444d57b0b2e90441c195938c7ce3a38ddca8077703349f4f9ed5ad17fa9922d6d4f29ad25c00546639db3cd81d2cbdc9bce62515cb16c
TLSH
T126D0239875D7AC51C13F703B1C17E3553BDD8421D0235158161628186DF594CC4D5665
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 40d80c10a69eabb14b96084f7369542a303cad3817c61fd1c76c7487d161e698
MD5 2c313ffec22567a13d35cd5cec61ed43
SHA1 d6d61fe2c637a530843faaf116607bca41dec79d
SHA512 3b65f62c9e08b1e1ee3ca4a0b40c6bc69d801f4dd739f218ba54c688eb5f55a70c3d7216fcbdd5f00ba89bbb65372f279c6a39ac972001660c43f6a207dfd703
TLSH
T181D0239879D7EC51C13F703B1C16E3553BDD8461D0235158161A28185DF594CC4D5665
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

95801b33-c44d-49c6-80e7-3e2e08fb706c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95801b33-c44d-49c6-80e7-3e2e08fb706c.tmp
Size 414B
SHA256 4e6ae38d48c82e6e489c09f103f7f3acde6598845428a680196a82eb5399266d
MD5 e99e72004e54d70d89939307f9c6941e
SHA1 d01519591acaf254313561113d1ea946a636d72e
SHA512 03023179864f22c9286244c404f06a189b7d58fb71ba10420f0875f9bf66bceb5e5ef6056aaa7b5dad27448fb4c3a6c842d24743ef509c7da142b0b05682aa7a
TLSH
T1C4E02BAAC922DC271CFC1B3961150B56EB5013576F404D4F363C860D4FB1137455686C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 bbac9d6f0195587d6e56d05dd27f78ac757c2c5972ba834c97bb55e61df8e6df
MD5 41d49d1e1e6af9e3da44a1096a504aaf
SHA1 e89b7805c34128765420d30fd3346c2b9eed49e6
SHA512 500435e1456f569940c80f52c3cbb317e0dd38743e5169be7f899ea9f3408d4d77039b309e873d6011ebbbfec01b4925a07bae6590befb05fc579db8a7fd2180
SSDEEP 768:5CKUNzKGHNHzC5fz0iK28DpGsoD6ecRn2YwP:IKUNWGNToz38DpG3+ecRn
TLSH
T17A132CBEB9805C5DC8D3247E2C1B1AB1AFECD4A0C79242376A39F12D426231E5FDD568
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 3946e761040487c855c2a7144c46accc6ea8e85ab504df438ce9d5d3e8495c99
MD5 6aff5c6b3e86cb5a58a390774f24946d
SHA1 57c5e60ddde186067c163aff129bc34b6d1ecc2b
SHA512 469214b293d39c391344d5d91e4f5da133a726ab9e756edf7452108d270a9a6bfdddddb2ef24f9694ac5b3a370cc60fd9689f7c13dee08cdef15801e82d816d9
SSDEEP 6144:lL/uL/8FAhL/IL/K07HjcA098xIpM2Oc/x32IMzV3JcQc2Uu:lL/uL//hL/IL//Hoy4HRZS3BUu
TLSH
T139B4D6F34400582ACB7D02F593033A3CD277418D7DD6E9EAF53A1C996829B32B6A9DD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 3.0MB
SHA256 2d5ef5a827bccba9f754a29dcba109fa9ee5721924d6650329a675d0663a6a16
MD5 f0eedbedc8602ad8e1ba9449c3307dbf
SHA1 08f721f87bb768560607f1927c18b5a4d59582b5
SHA512 fba100ff21e5fed7e100dfdd1b404455d0f8c23f887760be8a2097c2eb0a7fe82dbd80ee17e4b0090b3b75ebb95b808c11120d5ea6e84a9863147c841232f840
SSDEEP 12288:EX5YEYl4txDZUIrChvqnxq6SIOyKWn1K8KSCQmaSgqmV7mt3vIuxaaqUeFRg6fF6:EphYGtFKiIfDnBWW8bFetPoe
TLSH
T1F6E53DDB4B745A51DBB7DAB0FDC4DC1E7EB410C2AADAE0836402C6B904C37C16B9529E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 8f265df6493568bc203b67a480e7656b045db53724d5b7b3d96da9fbfa3a0318
MD5 9db11a56741fd06f23d0013c8f2fbc20
SHA1 a2b5a12b6cb9aef049cafcdcce4d05c18de5b8c1
SHA512 3e1cdf5a2d4ba8218bfba8fccf78547326fd5f7944e9ee23c2347baedd110dc3e3d235cd1b296d988ba1229127b662d47cf56662b38fbe166ca09d7352fb59a3
SSDEEP 24576:QL9ollYIupAgkwLYO6Os9zgMnnR5SlTbR4hnzsOoOKbXp0+K+MOT/tDw6TELqDo:QKYhKgkwLckMnUTN4Jz1oOKeKMatKqk
TLSH
T152869EEDCA6898C3CD639970B0F0ED477C7413C3F995C1D68898C584026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 38359c3eb35facbfcd275193ce8c9fcd400643cb69c059e41a359ac614373587
MD5 71c761fbc86744085ebfc2376be0567f
SHA1 368ac37dc8e89bcd7f88169ed159639c578affb6
SHA512 83d5fb8f086d61f685814423e1ad6080935bde3f2fbae4ac30c37f9977e98c5447433dc9e0c1f0f8f8234b7d9cdd58db38925d044815a72c970dbfb8b12dec85
SSDEEP 192:0pplA/lMHEXClFQDlvbl76XlMElQlCSal7DslRbWcm0kg:aAtMkXmFQ5Z7IpwvuXEYcd
TLSH
T1A312D6842D81464CFFE3C730C9D71769B9F8B68A8A9B2E27720CD4FD1536B250DB4249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe584a33.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584a33.TMP
Size 3KB
SHA256 5f76333196c1e71679c87be37d87e2db4ac60da6c78b4d200d86e45745c3df32
MD5 b022ed4bc4f7fdbd6cd8f11dc7187b65
SHA1 f3402a57bdd5f1b7dcf96ce3c952a4867baf8ff7
SHA512 9af4f8143f7b546f423f01cc09b0f5ed4e2abba5f791655f37bef545c842c23d43a4bacdb0f89ac33133f854a11e31daa59e3b59bf56a599348b89d368e50e61
TLSH
T1DB61F9190E05549DEFD31631E5D123B83AB4B3978A8FBE56421CC8BE6A35F3246C600C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 684B
SHA256 ebf65d839a9c2a53ab503763d44c3a0363d3387faf4f947b5959463833c3b75a
MD5 f93b6a29284b7e38dfd05af480d25ab7
SHA1 cde3c88c5dd5d4e617e8f8157c03d66d730953f1
SHA512 e2148554c1b5c2b97175e5ade1fe82b5a08311ce9d736907ac299f99c3580a99458d7fefc894f4badba5921dfda84f61117e1ae3e57b0063f127aaca6563e099
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 a935e4c006d5b7017fe9054558e456963f32a1cdd3b81b1e03e1f1ac4bb827eb
MD5 861dd78e9d8608003f2df1be864a4c5e
SHA1 e322a24a2846dd8ee8679015b242eae40faccf58
SHA512 366f10b4ab9abc8acc030ff25696a922113e50441dc52bd5a58364326388da436120e282ce3ae7717e43cde16a31142ee676d36912e121f235935d1692c2282f
TLSH
T12BE0260847CBC12AA15678DFC36E6708C2E0351BA3CC39861F4CC8407103A83E2EE381
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.106.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 460e515a617c59e334cb1f3340227d563f39b62d1bb740490c9b0637c8f5d835
MD5 a02fca4772c0edc9495f4d4f91001913
SHA1 191b7452484268596fab98e897cd803396e2f44f
SHA512 cec21457ca82c086e11650ad2cb3dfde656b654ae1b31c6592cce27e572198a6a4da0c5126d712c4c4a4b88535ccad70d6022ffc7f4b2641bfcc9ef991fd6277
SSDEEP 48:uzBmw6QU1Pz8tkwJOrZjrte3FJu4yeRvX9EGg12AxyUJu+J:6BCx8ywAr5M3FJu4yYvXGz1Xx1J
TLSH
T1C592B7870D783C52E7452A7E272B543DCA37E1ACEF95CC89312D40A81DB8667A0358EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 ee4a8dba5a5635cd2afbc66fbf6ce386e78ffd4e2a846bc94cfa53dad819f9dc
MD5 160faa841beed1e5c6545e22236f712b
SHA1 92ac5aa5e50bb134997282c6cd04df79bed14863
SHA512 1ef1427fe8c4b55e4da9d51fd1e009974b6e1e42941e1acc787803068c1780fbe40123e40419f9f94f61ed55fc322e4c4af94aa657738bb4007db7f70e134055
SSDEEP 96:mgkfzS0IU+bGz83uy3+u4tgp4DLjGQLBze9z3hfoYy6SoDee8DbeujBHMsDEuspn:mRS0f+G83uy3Ct7XBBKNnmH7DXspU3ip
TLSH
T19E14645F5F702721CE7C817569EB14A35D6DF03F8B5269D9686100B4CEE2653A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 48f5a9d1dead864e784604fff9fc6809c5bc71b1b9853d19e9f4f0dfda2451b4
MD5 d9721e1c22f00ded3c39f36864efdcf4
SHA1 af7ea032a13d3fc0696ecb0916174941cf6bab56
SHA512 5223f492ac772e4d031325444b67d24652f454488cf89cbcc6cbdfd23d7e661b4f52bfa748cb4a5705900a4f8dc20e457fd0a6b9baea83e1ef7005e854f36dcc
SSDEEP 96:59nYx2an2nwePI1avwGADZXYAyKU3Q2mIAMOZv3t/PPxqKXl+CJF9o1uqNXTZzgo:k2anGP+GfuU3ROhd/RMChWjv2Oy2
TLSH
T15F12107FE418887E473B8767928B351DCBB7297E185CF46AD1C21D0C066E26E1205E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 76832c3cef44497f7207ded815d3319043766847265ed3434a70041057f726bb
MD5 82f19bcd46100f2ba9dc0a5cbcfe2121
SHA1 85c15048b282f475f30b958deadbd91dc9896a4d
SHA512 c6d7c2410fbefa59f541d8bd5fe0d95c5f236527ba7b96c8205d0844c39e7de3d6d06cbb28b922d46110413e4f788a77d3f23677bcbd56bd1932c8c2ff013312
TLSH
T16DE0D86687CEC21A620470CB832A770CD3F0351FD6CC2E455B08D841B043504A2D92C2
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 df26dc26b3302b8645efff6e598db6b0049bf8437dd3da8ed2ab6ce1b85e45af
MD5 70dbc9d6e92e7c0886e792d1c20d8ba7
SHA1 fbf716eca2b2c1b24c33ccb425f0ee763dc237e0
SHA512 a053e0084b7d154e038990e6aded42c5990b6c9d71730d230949125c2dd3e6e9490948f6aaf71ef4af8f3c648dc0232aa46b10fc08bf959f1b3abe973adfe8eb
SSDEEP 96:DDORvvubgLukszJlrj/2zwA6RBiuueuu65uM:DaRvvK47sllr7kxCBiuruHx
TLSH
T1AE9191F3C3E8866DD91256F0AB146E2ECE1D0968431C3C2AC9E59F4F97E2571E24164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff6676aa72c9e5c32f4baebe8d42c0764b06f93aadc220738efa0464cfb728bb
MD5 6abed6dc98a287660f70506f35c080cf
SHA1 78214b822e96f18e8f90395ce83b4efe4ffd84f6
SHA512 e1d6c0f778f41658313dd3a39b714e3a89cb8cfa715bf7fde7da18865c53f50cf775323e80ac11b5ec87060ef7d45b67767b9c13d0a6b16a1e53008ea27c8eb4
SSDEEP 192:sxZdRHyM/jK1Ml8MjL/fisq+MnxDK/LrtIdpyhOHHW6+WNra3IMD/zSHrCbIg4J:sxZdx7L/fisq+2dK/WVHbcr/Xc
TLSH
T11952F852AA3459778CDBD20AF955BB53D6F45572A2900E44AEFCCA0C04E6BED3203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 97fdd833536fe69565db602b3fa3b7f0af49b1eb8d7e243b9c8cd186d3af904c
MD5 325cef4f96e2a9f666a0221373c60923
SHA1 3bb73d6f2d306cf3f580918d5c5a1e8323eaf064
SHA512 0e221a241f3e8ef552731c2a337cd189b1dd4e9f80c8c9414cf6a62d1a4abeff493d0ce3268262e5fb75f9706b7f50538892a9002e4a67a87d9f19169da51215
SSDEEP 192:sxZdRHyM/jK1Ml8GjL/fiszWpVR+MnxDK/LrwIdpyhOgHW6+WNUfl4ya3IvsfeBF:sxZdxHL/fiszWvR+2dK/pWHb0WTLfeu0
TLSH
T16F62D852AA3459778CDBD21AF951BB57D7F45572A2901E44AAFCCA0C00E6BEE3203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 52d36465ddd0c334b2941bdaa398a569cab82f3b404bff63a738484f1c221944
MD5 6e5948264dddbd62bbf9d2688687c51f
SHA1 f17a1c3aa406e0be40281fbd721acf0e5deba34c
SHA512 84b32930710b980a2c2f2559476245bef734cb4e8cee693dd1eb1ff933b4ed49cedbeec42a8e48c39a53f78c786f68a033f671b15d5d88b186696b10ceee2fd9
SSDEEP 768:hsUZY4P7pLuLXgMWvg09o8F1+UoAYDCx9Tuqh0VfUC9xbog/OV+ZCeLlPZ4ROroK:hsUZY4JEXgMWvg09ou1ja3ZCeLZmRFNc
TLSH
T1F6F2EB3B7C0CCB7E4F844E9DED2A7E8A6DE801CB5A98895447EA844C02C76EF11175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 dfc60cb5fb3d58140bf5d3e6d4a6c0044636ba17021ddc6cd265cb6bfbf0572e
MD5 a1ace49d1d1afcce0c80993bb1513e93
SHA1 76e31a2ee844beafe9a234431ebb9749f99f0b56
SHA512 275eefa4d12f820cc3bd66ec348eb54e3d585051c808cdbcd8bdee03912318c24d3a102d647e6be896d573f02a25c68b639d2c24dd39d045d263eac2a07dfe16
TLSH
T13ED0A767E0A51A91FBAB0BC23EA1215A42203CCC5491D148E553256CA87D647A726F66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 649bdcefd4a5dd1dfe967ae1adb1f1e8a99af680a4ab6eb842a39dfc923225c9
MD5 053faf2e136fe659d0e895b374112e7b
SHA1 dc5c8683d29fde4616df68dfa734f4126e447dbb
SHA512 43390ce4c81c1b992def4f04067f271075d7cf6f95688b2fc74b229efa06978a8ded71bf09f9fc801891ed37a4c22bcfeca66196ceebf48d59e874bb8a1c80c9
TLSH
T1AFD09727E0A41A81FAEF0B823EA1201E02203CCC40A19048B5120468A84D647A723F66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe581b15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe581b15.TMP
Size 138B
SHA256 edd1d7155932a60c4b2ba62d267ce76a392930b5d348856db0f0a22a8bf37eb3
MD5 1561bda06aa6719b33b605753d66c186
SHA1 d3f335f261cb0fb27273212798023bcbbd8ddd20
SHA512 32439c84502a0e0e5b9587d106e8a78c81e0c9331a7d6589b0495405351886ed4a8e61fc74afeab989f01dbdc313f1b12d3a9d92528f33560d63f833d361b7e1
TLSH
T199C02B73E0900850D71E03800732218C43152CCC8C83C08CF1A338A82074F1B3305FF5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 3204d705a72055bb39fcdb30b8483fd19f5fe11ef2d5862e63cf46c5d4939953
MD5 465ff48e735a9df6f4deaa68ddf965c3
SHA1 5850fa083b48ac68d5566b32add5627df26cf11f
SHA512 3642171294dfc9069e5f5c864b13bc21b9341d0d1c80384f57a00984f759db03b770dbc81343280fdf04866018c614a2a8fa433d1b7aeb601522c88c0b711150
TLSH
T196E0269647CAC1BE715760C743399708C2F4B83BD2C83D462F89C8407EC3606F2EA282
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 066078d712eac1a5ee653f6cf8ed29fc72b1b67ed24e977421b9715183d980e5
MD5 4d5cd7fea0bd8f3af10861548daefafc
SHA1 0c06124938dc6b8d43a733ca185c52b201121486
SHA512 ffae1b19c202a480e6a6d5b35f97966a91e47ab4913ac9fc82e9abd9bb3b72e2bd22b71e46a15f8d60c4d4dfed73dec51f06f38167c15b71935dfbfaccc0d579
TLSH
T18AB012D47311D46AC40545B21FF487841B0CE01105C19103D818CFA39F026A83C460D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 b04618e517f0828039e3d7bb8aa654610abb7f0e2e426251d7103631f3efc2c7
MD5 d7dbb714d9a5c6471b744ad79e735b74
SHA1 d18df4ccfffb95597e0c9959107c6a61a01ba98e
SHA512 e46681f15ca262b38358266773beb1df9597fc8f87489548294bbb49005ac7ca9998810d873412a877e5d8acf4e9d01c844f1e646468261da9883efd5660abad
TLSH
T1ACE0D8E566CAC23B724630C79319F308C2F2B853D6C829152F09D4807A87240B29B241
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 4bdefec6ba3a8d5bf1e39c8c260648ee56a855d0850e6618b9073573bd727aeb
MD5 231e965ba25505ce0ae7943aae3846d6
SHA1 be0a3bb2ada19592152081571430e776badb78a8
SHA512 ac6fae4f7e854a4886db25934df000fe59ce0385786dd10af04a569c304f5cfff1c09d31c8336583d29e19cb8cd29aaf0f352e953813fe5d8db7aa8a22f6d204
TLSH
T148E0867547CAC23A661860C3836DA71CC2F0BC1B97C83F8A5B0C8440B583655F6FF682
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 36eccf37af0eec819d714bf64153f5ed24a6b2ff6dce220f45fc6644d3ba85b2
MD5 c14a243db036360f82956e542834411b
SHA1 2c363729c87edaa44267c6adf573bca70a3e4f58
SHA512 c458e6afeb93abfbd0a8eb09c6c63555cdb5cdc97c2b940a78782eb64c774bc82a3d30937b0a511d5489f41d177a974b0c219db33b8ae85f06083bbf4664a6f8
SSDEEP 96:KA1eK2AUqIKLSqKAIKheqWkKzC2W7KKU0o:ES3D2rZZ
TLSH
T17AD1120272BB02033C3D6918A2AA97774F45F1E33454E82B7BA854B64E66E741CFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 f9c417309be06fa83f4b9515ca065753b0aadb816891b8e7215716a7c7001fe3
MD5 2cd4d7aa6ef55d382a974f4931d48f49
SHA1 67dac9f653d161217bb83245bdf5e7ba597c19a1
SHA512 2ca34127e0b2e2bdcab56054f12048cdd3bc74f9e1569508c7896f6ecfe6cb71dd813ec6fbf3e9593df6ff9798f0a13d189aaaf0425ba594d2d6f3b83367ea99
SSDEEP 192:8QXIIImbGMIMslYcYMmOM3Aswli0HssRs:8QXIIImbGMIMuBdMQsyss
TLSH
T14442932E5A172F7BC19E5F7A1352C1841AD888824575252D32A22C4F8DF3F9783C5AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 15153ed5f88c39889fdb119f0abdb18bcbfbda8356bb86907e48c1a565300c61
MD5 63c82856fa1795df49d9adc16832c8aa
SHA1 cfa14dd02e9cb8b1a68599a5db00722834b6a900
SHA512 5eddf1bc0d5dacaf7703b12b964010489b927b64c68c3ca022705b19e0d06616073b1484334ee0b3a523ccbfcf6a19acfa59cff9f34e1b49ebe41d7af3bcd048
TLSH
T183E04F95EACAC16FB21430CB436E5348D2E53A17EEC829AA1B04C455B903555B6AE683
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 623d5471b2bb5bb27062f81c9ded323e287097a6b5ae122046871a48e2c9ae12
MD5 c975970488ade44b0fd72c9f12ae0b6b
SHA1 713a54d5a2c4ffc491bfd86756c6cf5be3219110
SHA512 77d9df7b465dad5d4c3d54306324948720a0ee16d5ed05bf31bfa9434f34b395e83a4618b1eae920ceda0e1f0b34ed7ca9ae6852458a87b11c6ad3d40415c7e6
TLSH
T19C212256F338C159C18A463E907FAB160334D8229FF8EC1F15B924742FBAE040E4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 d824bf342d1b6bde508544d29271d54ef51204b9cfefb5fa5874f0fa23925c33
MD5 bc51475ee365f87f627317f07ebe2824
SHA1 6abc98590348cf268434abba75d77b0574502323
SHA512 156afae854ac81dbdab37b3f72970fb9e2a24853f0a343770fdeacc776c886a48eaca735fa82f1ced7474e458c081be9a1c96c81dfc4df196c9e3f7215e39747
TLSH
T1EDE04894F6D5C16FA11630D742AA9348D2E73957EEC82E551F44C8547503546B29E242
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d55b0d65d6d16d53fbaceba05d17896c85776060919dba0daf7ab14b5309ed3c
MD5 23a92dd84ed5bc48ae524ae3aea97661
SHA1 9cfac7b77a8dfbc191de9d67c86cb7b7d858dd48
SHA512 32eb798baa3b33b5f116a0e9cdebfa3e7bb51b7a94f0dac7ddbc8f35b29e3e34860c82a8cc4f29dff2e611e625f61fe4dc079718e45b0fe8b051faffa32a5171
SSDEEP 384:nitNnNnb9hsNAIbyqnzX5od+2OU965V06B2LnOYPpcXVGS51/7Izg8:ijZbPybOTOUo5V068yogp8
TLSH
T135A27C727929AC7399E2B045F66733633FB861FBC9C42E80D5DC5F1D108629D234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 48KB
SHA256 e52de499b0ec7737995cd9b12a19586e15ebf68458426387329a8bf4826cec52
MD5 56ce17a4fefba826fb9a88b8db1029b2
SHA1 db8710f8243ca9cdc1c1af1bcebe093af7c333b4
SHA512 5c18b9320185dba23351ce6e87f5790db4952ecfc00f9ab9231c63a4622b92173c2da8226573e601aa5eef0866a2b9a9cd51b1465bf0cfca3c01b241b97be1ec
SSDEEP 768:aFKjZbPowgn1SPOesj0w88NiKbb3H+kAkdlWGKK/ouz/8yogp8:JDWesj0yiqr+kAk2GKKwur8ydp8
TLSH
T1B92326F584D79973D8AE9783673EAE151EBCD1A3B1885884B7D82D1CDC8A1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 935dc0028b35be02381350426eff3754bb9977cc2600f8190aae209f01f0c32f
MD5 e75e6bb26de5633fd82a324d0c384e77
SHA1 e51f4fda9c43e10c5f5c92d0b3c803cfbf53df9c
SHA512 8b80941ccfc4dcd9c173f62ed1b114d1a92d126eebcac1d30a8709a37151aff5ad0cacd298baf2f475f79084826d9cfa3f3e10889c1dd86ea32393b14b69548e
SSDEEP 192:yON061VWQmiUy9wgGX5Obd+jKOImm/as3GFU6:yON06WDgGX5od+2OTRFU6
TLSH
T1C602E93569286C678EF2BE49F58737135FA8207BEA546F84D6E81B1C00D769C2307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7853657463483f2605b80efe7abcbaedcbbed9cfc8955f964dde527156a775b1
MD5 7ab2ff67587ffcded4556be878dee2e7
SHA1 dcb040a208be3dd39df615a6144ca393f159e51e
SHA512 f55c2ae4c5ccc6e8fb6a1397a3e839f691d89cb8280d543a23aa5e7055040a0922c6b438766681f7d91e167bb2b4f2f6a3df92fc6c03f2ee1856dd52089cb106
SSDEEP 192:yON061EWQmiUy7wJGX5Obd+jKOImy96TjJw/NRU6:yON06JXJGX5od+2OU96h2U6
TLSH
T14712F8717569AC675EE2B549F48732935FA820B7EE84AF80D2D81B2C00C779C370BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 196876d5a42945ff0ee589d02fbfd81e6ad51458a240673022a5200301e53011
MD5 729eb7afef8af153acc544e48b8573d9
SHA1 fcc3b291ad07c964f50d177d81cc65fd56279b94
SHA512 08028e2e5c9dabb0b7bc1a763fc848c1b2ff32d6524818dd33f95689e9cc568f3fa821a10f9afd4aba721b5566c60d42c37d0291a2e30f169a453059b53ef888
SSDEEP 384:netNnNnb9hsNplbySnzX5od+2OU96fkhASN8LOnTR41akF76B2LnOYPpcXVWM:ejZbPebOTOUofTS5nTR41ao768yogWM
TLSH
T1AEC26CB2E4652CF78591F8C9A543F2132EA461B785981D8CD6FC7B38308F5FC2316925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1a126dc109de25ec8f649cc8f079b863bc5b740b663276d8042073bfb1e3a2b4
MD5 95f4fd815bc3e4ecbf250bbe51508745
SHA1 10dffa626ca39ee9bc3a6f51f9ab0f34ad8a82c3
SHA512 56d8452b026e8a8f618cad5df0380a05e3da46b3170d98d128c9e425d64313aa37c70aa959b5978a97947ed76fcffdff8f80b2e1d5ba9bd358904b60079c4332
SSDEEP 384:netNnNnb9hsNplby5nzX5od+2OU96fkhASN8LOnTR41akF76B2LnOYPpcXVWM:ejZbP1bOTOUofTS5nTR41ao768yogWM
TLSH
T156C25CB1E4A52CF74591F8C9A543F2132EA461B785981D8CD6FC7B39308F5FC2316925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 099da4578fa32319bf3cbcd915ceae5bb50afa2c2ebca782ca5b06bc92ae0227
MD5 575edee9b444be1b72800e9e94720779
SHA1 484d27d318c26535f0402c310fa0938f6b86973f
SHA512 5b98edcbf981e6818f93506657b0c61c20637ae231df7e32a42d6c9c25809d04dff6068438dbd9dba60e49176f099ed0639c55f8623b63a6d13ba3591e42f275
SSDEEP 384:nJtNnNnb9hsNplb9yLzX5od+2OU96f26B2LnOYPpcXVWM:JjZbPLPOTOUof268yogWM
TLSH
T17B926C32653AAC339AE6B015F45772671FA8A1FBD9C02F80D5DC5F1D01DA29C270B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 fc451a3c55f7fe3ed9963b9ed2aee7d9e459f9c82fec8825c403183caaa6a776
MD5 694d9decca8155039dbfc8e99e7dff25
SHA1 9d4f065c66a53c967e71c81f3f10020e63e8f87f
SHA512 2caf8323dbc3e88b5b77095ffa980a091120b45f4d96b2ca7e9247079cd07b5a1d9c2a4689daeec9efbea7bf578c0edaa789e87e5088f016fa1d67f2db6fbd86
SSDEEP 384:n5tNnNnb9hsNZIbyqnzX5od+2OFV3xAzKE/K/ouWwzB2LnOYPpcXVGS51/7Izg8:5jZbPNbOTOFlWGKK/ouzz8yogp8
TLSH
T134B26C71A4656CE389E2F8C9B617B7132FA951FBC5C42D88D5FC3A29208F2BD1347422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 f05875e1f7f607bc5ac77fbfb0d859156bc6a798e8d587b3d159fe69349bc1e0
MD5 373c0946ff907413ac476e186d26fbdd
SHA1 b8bb32b61289c5dc50072c1449d95eaac9af7d23
SHA512 060a1c85c8f3200f62365457b4285d965baee4893f6c4f1f502d8118bbe25d7388f77e29f5b383aee9c1c7b0e00ca84cc5110668932ddd20bb0fb2e1dbf3f55c
SSDEEP 12:TLH8PFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isnqQmQQtAdZzA7da//a:TLc5UOl0afDdWec9sJ/V00KuejB5fc
TLSH
T16292DF23AD352023D89E4B76FC4349900DF8129E89A7B444C9A04DA21962BC2A7855FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 71c0dce40991cef5e5c8fe2fc4e1c09d08d859977d5126daab5dcb718aec6c93
MD5 3315b4adff7241725860263b9271ed3f
SHA1 b517307f3f71b8089ab9582661990aa6d81369e6
SHA512 1216c99e95399537b0a0fbd507055c1c9bc8a0b1e13cc33d14a9a399fc368d74fa6ea21e3648ca61dcd1a6fb83ff5a1264184fd82e8bacaba27dc6a8d81f2886
TLSH
T14AE00417D30041DCC0741330015775301DD3D5310071071D1710055C1C173103F307C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe584040.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe584040.TMP
Size 392B
SHA256 586dfad303432e4995133714bf1dbdaca52564ac2f1883b1f8a2c996016848f3
MD5 fa76f3b889931648ee00aa8dd547f298
SHA1 72afb424e4b36bf5837a4bf2f2a7effd060d1e13
SHA512 2cb2e90d364f2b944fe8c3e89dd9440f5d49a98883133e8bcd8f26049cd8dcff05c356475c0bf9aae2b46c1358c7359bec697e32f09f42a7fd3c29e100d7cfc6
MD5 SHA1 SHA512

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

55a4b96e-e785-4f8b-940a-6f3736b109cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\55a4b96e-e785-4f8b-940a-6f3736b109cd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dfdfcd374b6cfb7db11f6a211adc9860fae9fcf33ac958803c2de9f8db8db68c
MD5 2ee2f5192799e4620ad98eb427abe15b
SHA1 f33dddf8ad555b245808bd3c4158d166144aee8b
SHA512 28b8b7c41bba1eed4f20e98a3b612591fb2c10b5b42c236245cd015ab56c16db1690700fe34d228755e2a021e54efd54e2f1bd765c9985ff61a5228af0c63cef
TLSH
T177415998ABFA1118B3B66F5A5BF3A86E447BBA772F06C55E00110D4F0622B00D871B37
MD5 SHA1 SHA512 TLSH

Submit Download

392c2749-555a-48c2-a033-ebef7ba50c5d.tmp

Path C:\Users\Admin\AppData\Local\Temp\392c2749-555a-48c2-a033-ebef7ba50c5d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

f0d0a26b-0ca3-4829-a514-8b5bea1a5cb6.tmp

Path C:\Users\Admin\AppData\Local\Temp\f0d0a26b-0ca3-4829-a514-8b5bea1a5cb6.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63c18739-c676-4e98-a7d8-25a7aa65f74d.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4188_1671237637\63c18739-c676-4e98-a7d8-25a7aa65f74d.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4188_352530187\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1500-0-0x00007FF6CA8D0000-0x00007FF6CA8DE000-memory.dmp

Download