873fd333cd8e687b874af8dca2f043c50ea1f4bc64d496015ca038da383b91f0

Resubmissions

04/06/2026, 18:46

260604-xerrfsct9z4

04/06/2026, 18:41

260604-xb7cqsct6v4

Analysis

user interaction
yes
max time kernel
52s
max time network
28s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 18:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Velocity/Velocity.exe
Size 32.9MB
Sample260604-xb7cqsct6v
SHA256 873fd333cd8e687b874af8dca2f043c50ea1f4bc64d496015ca038da383b91f0
MD5 83da367e14fe39262fcf57c39dc3180b
SHA1 a0d2655ceff2d35b7eceb55e2be1058b966970e2
SHA512 8ce8b77b95640a111d43b75ff76bdfdacfd8680a39c5d5c6a97fdef7aef18bd7470a4df4716fd3c67a51cfed69a710d6c33086c864a0b91ea0c03966b8a97df5
SSDEEP 196608:ktQ56WdpH6emXAro0JTToUgmwh8qZYOCu51ZTAFLzbjblIjvT7CThIPPBrYjPWDx:kt6pHxmXf0J9A8qCFqAFLKnCTMGPWl
TLSH
T1A9779E22A3A44E3DC99F5773E4B603254335CA06AF43939E581CA69C1F933860B59BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Velocity.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
8	msedge.exe
2016	msedge.exe
2984	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134250722049607849"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{D88E6DE6-551D-456F-862A-B26E91B8AC29}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{A9DC4CAD-57AA-464E-9811-FCD1E338B632}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
8	msedge.exe
8	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 8	2728	Velocity.exe	80
PID 8 wrote to memory of 1192	8	msedge.exe	81
PID 8 wrote to memory of 2016	8	msedge.exe	82
PID 8 wrote to memory of 4764	8	msedge.exe	83
PID 8 wrote to memory of 4764	8	msedge.exe	83
PID 8 wrote to memory of 4764	8	msedge.exe	83
PID 8 wrote to memory of 1052	8	msedge.exe	85
PID 8 wrote to memory of 1052	8	msedge.exe	85
PID 8 wrote to memory of 5608	8	msedge.exe	86
PID 8 wrote to memory of 5608	8	msedge.exe	86
PID 8 wrote to memory of 5608	8	msedge.exe	86
PID 8 wrote to memory of 2068	8	msedge.exe	87
PID 8 wrote to memory of 2068	8	msedge.exe	87
PID 8 wrote to memory of 2068	8	msedge.exe	87
PID 8 wrote to memory of 3764	8	msedge.exe	89
PID 8 wrote to memory of 3764	8	msedge.exe	89
PID 8 wrote to memory of 3764	8	msedge.exe	89
PID 8 wrote to memory of 5124	8	msedge.exe	90
PID 8 wrote to memory of 5124	8	msedge.exe	90
PID 8 wrote to memory of 2332	8	msedge.exe	91
PID 8 wrote to memory of 2332	8	msedge.exe	91
PID 8 wrote to memory of 4904	8	msedge.exe	92
PID 8 wrote to memory of 5164	8	msedge.exe	94
PID 4904 wrote to memory of 4388	4904	msedge.exe	95
PID 8 wrote to memory of 5000	8	msedge.exe	98
PID 5000 wrote to memory of 4960	5000	msedge.exe	99
PID 5000 wrote to memory of 2984	5000	msedge.exe	100
PID 5000 wrote to memory of 5072	5000	msedge.exe	101
PID 5000 wrote to memory of 3992	5000	msedge.exe	102
PID 5000 wrote to memory of 5072	5000	msedge.exe	101
PID 5000 wrote to memory of 5072	5000	msedge.exe	101
PID 5000 wrote to memory of 3992	5000	msedge.exe	102
PID 5000 wrote to memory of 1732	5000	msedge.exe	105

C:\Users\Admin\AppData\Local\Temp\Velocity\Velocity.exe
"C:\Users\Admin\AppData\Local\Temp\Velocity\Velocity.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x86&rid=win-x86&os=win10&apphost_version=10.0.0&gui=true
  2⤵
  - Drops file in Windows directory
  - System Time Discovery
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:8
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ff96674c188,0x7ff96674c194,0x7ff96674c1a0
    3⤵
    PID:1192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,16533881237529317160,14175221940932560357,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,7710547749210519437,16641028235097704572,262144 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
    3⤵
    PID:4764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,13217791666564197713,11733181726421186697,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:13
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,3582766463234203554,3918406883004130127,2097152 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
    3⤵
    PID:5608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,765977696128044954,9622366751758317011,2097152 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
    3⤵
    PID:2068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4904,i,7273889148769239741,7672875270445618815,2097152 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
    3⤵
    PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,8483805880432004004,5894256720499057245,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,7694521619081535540,8342271056250598952,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:14
    3⤵
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,3300478939291168858,2997568034021564171,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1144
      4⤵
      PID:4388
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,10694636700797152206,2961980788863081570,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
    3⤵
    PID:2796
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,10694636700797152206,2961980788863081570,524288 --field-trial-handle=2140,i,910842143366955756,16279586000789643446,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
    3⤵
    PID:5164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:5000
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff96674c188,0x7ff96674c194,0x7ff96674c1a0
      4⤵
      PID:4960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,13549129806257420769,13078569030490155138,524288 --field-trial-handle=2584,i,18049391060584124660,6017130900564711868,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:11
      4⤵
      System Time Discovery
      PID:2984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,12912673250085394481,13002618622255489609,262144 --field-trial-handle=2584,i,18049391060584124660,6017130900564711868,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
      4⤵
      PID:5072
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,13967283797919182453,3443238756747061593,524288 --field-trial-handle=2584,i,18049391060584124660,6017130900564711868,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:13
      4⤵
      PID:3992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,8917341513628714654,5625405145629642871,524288 --field-trial-handle=2584,i,18049391060584124660,6017130900564711868,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:14
      4⤵
      PID:4720
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,8917341513628714654,5625405145629642871,524288 --field-trial-handle=2584,i,18049391060584124660,6017130900564711868,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:14
      4⤵
      PID:1732

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 1c02e2feba3b2af3c045d1ed01f8a67e0923f7e357b32c434e567eef6aac4138
MD5 f05b0294ae4949feed0706bc80fa6418
SHA1 346bb7d2d99251c193652ad4ae7ef2964565b98d
SHA512 348366e162f3a037e74d0e9ff422ba7ca3e14c2b170f50bab2a4b88b29a572028e56965c332bc63cbe89de1a3467c215893ecf3cac514d786ec7ea30c08bcc05
SSDEEP 12:bHiUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:blRqxosfxWMk8xVZ4YWI30otWn
TLSH
T139257D85B34494FFC8C35A7189BD17903774F6DE5F42835B6A377A0E2E671D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 79054d3106248f0ce580d1442e78fcc5cc48ea2a5eb3b58c6aad98c7106da4b2
MD5 89a1e1173735f4835befe22b5e8bb285
SHA1 d6f781e38a6443407276a07888372638a8f2106f
SHA512 1f5c9b3554cf3bce4cd1214982a8df00dcc74324e66dbddb67a94598fbc762dc44d06c78c7a30a27a408611eba6e2715e40527ce854f203815d9515ab7dc00ce
TLSH
T129D0C0363A2D3003D3195331E042C703332704701C43E201E110C00C9D784D1D3C50C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 128cfcabab8235b8ad97ac15691b9198fef11a5fa1ca80f7868824a2eaffa721
MD5 869c0e67b5e89d8d1bd6b9df3fc7917f
SHA1 e13a2db3531e30d632d0cd77e45db5899c1e6b48
SHA512 0b8c43cbb195c3931af847bfb6a758fdcb00b0315119328430f6ec6c43d13e542d86aeed6daf854b5c6b0b8d63b9827012bdc279dce55e1d6163fed2a010bb91
TLSH
T10AD0A7A8626774D7E628797F75969207338E88205942A112C1458C094E9A56784C44C0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 470f7556bb584174a207423a9d97ccd255875f033b01f15f2b679c04fc1c12cd
MD5 aca35f8c5a95cd1400948ed31fcd1e50
SHA1 90f80edf2c2a42bf086e823138bb5fe4ecb8c04a
SHA512 bc816a5f51b3cf516e4a33fc53e4c924f556531456c5406d09225123d343c8ae7f527f9e475e3978540c65850aa914e6f23557c6d95435ab222e570df0e9e7e4
TLSH
T1E4D0A7E46A1768D3C514B97B65DAD103734F85A05442611341495C08DD89E9784C84D0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7735415545935a928bb8cef2b1207ed420b47eefd7e6ea0ca317bade986dfdf
MD5 86ebb830b8acd24544ed9cac4a0f809d
SHA1 6e867c081c5d7bc91c5f0585c1261c008ba33891
SHA512 0f9a675382df31a5658011c508fcf1705f2db85ff3ad46e66b4e917a226b33db14b65e57289ed5b5518d300734546e8384fb7612234ddfca0bf2a1469dcb4306
TLSH
T1B8D0A7E46A1368D3C510B97B65DAD103734F81A05442611741495C08ED88EA784C84D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 8949b1b51dc110ed51dc4a81bf56d8ee073febe44b707bb417269b956de3d224
MD5 16dfafae037dfa006bd414717af49675
SHA1 aa37d3a6b8dda62ce8ed5019100cff475a93cbfe
SHA512 b23c02993be6ec263329412896f7fb29968c9f3f30aeca8478ebb7eced52395e064ce497e03e6acb0eda95c6fc07e802c082041b41c7f606df150a6b908694ee
TLSH
T14CF0F9AAC920AC3718FD1B2970A5174AE75113672780885F3B3D520C4FB163B468981C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 c4c38d6a0975099c30defc45deaa708c3d2ee6160689310dd45d873b466e7ecd
MD5 ed1c15924fa22c30b73db9b3446f4780
SHA1 9ddcc00deb12905ce48cff5f8f07093fbbdf8bb0
SHA512 d0d1ed25e74837f561e6fce095998d9c5201d1924a1493b4ec0f141a0695389e31e06952b492a0cf664450e0277b23e96fa0fb29b0bfab231635339b8a2ac993
SSDEEP 384:3fXtw2wxIqaTtmjapSW8CKZKRRLoI4CLUhCQg:3flwxIq0T8CKZK7EI4Cz
TLSH
T14A13B47E31493E4BCADA207D952B3AB7673CE4A8F2D853177376784807ADF06A84E441
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f44b4708cce93eb62e573b5c9661275ffdb18c3762867352f44bf80d373213ce
MD5 ecb95d7d15478280cc0e93d35aecd351
SHA1 a16c9cbac6ba8e2c09e2ab531b6ab0ea57c3c871
SHA512 51aba5e9e7b0ef6ab7ad9dad150cf8ccbe427d6924d6a2234c6ff96c69a28bdac755a45a8674dc8fcc4d6005e10be0bef16d37217396416ae6fe657c99d493fd
SSDEEP 1536:IOL/0LZL/qhfRkjyQ4zHvgstv4bYrhL/XPL/ekTOM1MGescH7nKJ7GFsZ2:nL/UL/6RkjyQ43tv4bYVL/XPL/BcIl2
TLSH
T1D44450F71951A01BCBA812F5E2133A3EC17B455D7CE1F9E9E6780C812829F21B6BDE44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 88c8e8020a8236d956f12e5552c1ab27fca918427c3dc594ea10d9cfa6d25dd0
MD5 a9113dc86816e56e2699ec3ece60de50
SHA1 50f63e7936545d622d97eb3a619cdec812e91609
SHA512 36982b5908f468da45ccc579966638fbb3b343db6970feb6fd7cfcebc7d7f3f6e235712a22fabb917ed93e234d57db46a8e117810544139f0a9f830bb681e149
SSDEEP 24576:HolmYZn9ST7vfXGOmNFgIXWhEAVuF44J5PiCV9y0dIbo+z0nGEnH9:3Yd4T72jvXqVuF44XiW0xzsGEnH
TLSH
T19D866DEDCA6898C3CD639970B0F0ED477C7413C3F995C1D68898C584026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 e2b9b07ab0c7306eac8e8371d9813a2df935f4041f75b241d72e7d1b13fff20d
MD5 0e3922519b435c5d8bd89b287c4926d0
SHA1 df9aef054743ab3d07dc802f7bd4d98e2ab87aa9
SHA512 9802294c4c20c4c426c31ad8735d1902ec8fd33d8dda896e1c87758dd36ebf51f92035bc4cf0f5b8033800a9e887eef59aa668541dee375aaffe4189b80d684f
TLSH
T163E0D895A4C7D2BDA55075C68368771885C0B45BD687EE471B00CCC0BA03005B642596
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 d33ca423546140f04dcca62f17819e643eebe17df64aa6c407bf4f1fdc2e0844
MD5 23de333f35dd075cbcd053c64c925432
SHA1 1726940d382297a44fe5b03b13dab5685da5dc7b
SHA512 b3f2fdcc4d306caa53273bedf24f679fb52549e4150d202a4473fbbd4599580d0a349e2ee9c2bf294a5f8cb13e9c95b42e8270479fa0d960721a2dd5dd158297
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+ji814W5LI81+K5fKFtIBoqYpI:Tyi+7f+UZD4jJ/BUWx0CKFOBoTpI
TLSH
T174E2CE8D3B12F512C8FD773DB0C2C6E05EBC692C864DB17096385CB68C62A62F49E14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e46b1720dee3d0c06838915af9c9b8075f4e9fc5724212c7daf3f44128ada2d4
MD5 32fc7e4899bee6f9f9668471ebbe1d63
SHA1 197e1b4a4f191240025ac78b0cb4ab92e00440dc
SHA512 9cf0e78c87e82512eb9fc37c952d77cc1c46823ab473404b1c8ecd6d50185a69e06dae01fce3439d5b33ad64e60d3c505eed592b707853577a79177842219873
TLSH
T153E0869414DAD5B9A22478D783A87318C7D2B44FE68BBB462B0FD8807503685E7DE2D1
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 b459ff9346d735a8273f0302399e0cbf861772f9c3ece03154860cecc0bc9652
MD5 3ac45a8efa919d32fdb4edf6f08a6451
SHA1 c31eb7962d279594d22d13337511c0db9546ef89
SHA512 ab6d87c15ed671487a169494290dc4e1579d142306c8bc555a82f10de32012cfbd2c94bf1a7545678f4ad52a846de34bbce52bdfb3dfcac68dfc5125572f5d6c
SSDEEP 192:L5XUgC0+G83uxXBBK31GkSJZvKlEJH7DNspUe:LpCa83uFBBQ1GkS7KM7DNspUe
TLSH
T15714544F6F303312CE7C803629EA94A75DBDF43F8B526AD978601461CEE3652905C8FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 8c038be41125d8681fe6ed11091a319a71051dc76a67f12889c20bab99d795f6
MD5 4176f036d5938b511a29aef75ef03a15
SHA1 4e9702a598a36231fc435a75bf27f8e6753a3b81
SHA512 77ca1ae292f41acb9665bfcb84900003ffdaa235eea8d813f5584be6dac5a49585a842618814f08e063ab4a0706b03fc16b132393d52d76f2f8f2beac6e94730
TLSH
T124E0D86155CED6AA620420578368770CC7E0340FD789EB472F18D840B84A008A6832D1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 550c23f0b6ce7741bf82aa6a71c4e037feb4badd1631bd1565e5d1f3030b2c44
MD5 f5f6dba7fbc2cf4e9b9661ae46db88de
SHA1 1439bb4784497cfd52f83387411a2ee28c6ffdca
SHA512 224cdd6f05f6462dc7bf2ff0d823024442907337ef5a89c5959a03796c92c266180768d265ab86343cface2ba89db91385515f5069930956c9e48b00b8ba01a4
SSDEEP 48:T2SLopFMatSaw/auUOt8BMo6JwxcgmyGAwH:iSeMatUaAKYdyGAA
TLSH
T104920E4E5F306225D0B04FB7DDD1C8662E7C211DC3A32699AA1920F38E9259FB5060AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 6abce609da4970d02702c30ad172e7f6a18dedcc48a1e3374f58f2a192b7a3f3
MD5 e696bdd89def27ddb1f0ba5c8c909953
SHA1 f881f08a837df1b854992b800e606a42b5fb7c60
SHA512 18f7dacd1a0c56201184ea6b384cb3b46b9128b4dca135cbb46865a893c5eff93d8a230893df986acbc76b66ac53aba1a0b41323262fbd0830afd7e066e2eff7
SSDEEP 96:uIEumQv8m1ccnvS6GIouMkGf5nFXSvi4g:uIEumQv8m1ccnvS6GIc5
TLSH
T19CF2EDFA07236206D98444B0E4006F8FAF16014B47B6B6DC76D447E3F7A21E2F2B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 fdc36016caa40078fc8d01bf7b335e1df96300d0d0873d0dd0f10e158c9160d8
MD5 dc180f96045b737921cc67f836b51582
SHA1 9d36e0853a96f2a2f085c955ef8fbf132082ac9d
SHA512 23e5b2f3aa5e166b5f1e6908d85fd5160c3529b6ca94447b33e61923f5f9362bffcadf7f7e26df23a3a6c075ec2e71f0fa59a4ffc24f24630f7f7e61a5f41390
TLSH
T1D0E0209AC0BDB47B20385D7E1D48BC476E7AE430010378E4C995437CB0518F75B0503E
MD5 SHA1 SHA512 TLSH

Submit Download

d81e1abb-7d28-4b98-b9e1-777e0f0396ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d81e1abb-7d28-4b98-b9e1-777e0f0396ed.tmp
Size 2KB
SHA256 2be87da1cf772479cdbbba1f763ca8379d8dbaeabf5b1ab7cdf5b9a33c493437
MD5 96fd691b91fcfd169296a4341c0eda12
SHA1 7797971cc203a642ad3169ff78e687712c36f455
SHA512 ad92bbb757ca443ba9af4612b9d4318a0a9c153a510a3bc97dfbca62027dd8c3d927454a4bd2471a47d1edda14cbf370c8501e4aaac2054ffd45c3902e1ec245
TLSH
T1F6417DF7C3E4856ECA0156F0BA18AE2FCE1D0515432C3D5A85E4EF1B93E3471E14165B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3f10315f6848aaa7d73e6c358a7cf8e8e401835d0e7b11420b4d1f7e42b5785d
MD5 681afde7bdb43b24c98f5eec63e9239e
SHA1 8bfd182e6664c39d5b7bb0c73df239598270d5d4
SHA512 4896acd0b1ff67d01efd5016ec5e883ab28e26dd1dde6b706e3b13b7cbad134865394d34ec11b9517d605998742b6463aac42f58e74f04fdb6535c8d8af996bf
SSDEEP 192:sxZzR6yMqZjK1Ml8Mcs/fWs8lGcxE0CXUyynDKzodp5k/W6+WNr7j/Y0ddeQbSiy:sxZzv0s/fWs8lv60Ly8xa/br/52Qu0jY
TLSH
T16162F816AA34597B8CDBD309FA457F53D3F9156392405E48AAFCCA0C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 942da6677da02df757d886a1f14992147492ad1c85d706ab90e449d82aea7408
MD5 17cf2795b4e5b4bdc2aea9ec31659834
SHA1 138648c5e6904aace7b36dc439f82bd6472e17ae
SHA512 8a48614a2547687544c1403aff93e05fe7e6533a9f0faee64012508d7cf783e481a4a2580cf74287eb9cd6e3494d78320a96afabefacd6d58499c7d0a2c8ee71
SSDEEP 384:sxZzvQs/fWs5WvXv60Ly8xt/by/5JQO0YY:sLos/fPYXC05/bI5I
TLSH
T12A72F806AA34597B8CDBD309FA457F53D3F9156392405E48AAFC8A0C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 aa9dd2921b6abbccfba9ff3fb16a9e37486319486e064054310ab237e21c56ba
MD5 bf3edea4b8ef31efc9b69dd32a052826
SHA1 1fe0693c41cae8c0976af928c0faa914c03cac1a
SHA512 2fa1ca9d219b0ed076476771b14adb3e499d9ff92c9cb4242a5ce85bafadb807179a13de83bdc290477d80743c211c498b92b8a99bc0904b0aa915e6dd99d4af
SSDEEP 768:ciWKy8Eq2A17pLuLn5dWRm5rQW78F1+UoAYDCx9Tuqh0VfUC9xbog/OV3v3pQLlr:ciWKy8Eq2ADEn5dWRm5rQW7u1jaKv3pA
TLSH
T14C030A3B6C0CCB7E4F805E9CEC266F9A6EE8018B6698895447FA844C03C76EF55174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 b435122a54d98ea36949aa7812877c7846c823eef4ee4c78b625ab2082216028
MD5 2fd85da96fddd7a003e1b83dd0d4de20
SHA1 a6577de5533915a8a7d28c2d5c93cf9f16c09163
SHA512 d89bc4b1e2167269af7df93268f70cfa7eac4cc1ac97774828f3608a45b7b12edd6a9501222ccb2af799786bbcad42ef51a52f2849f3a9b181c72623b7835917
TLSH
T1C8E086582ACAD5FDB11521C303E8A318D6E4B41FD6CAFE467F54C9407543644F7D2592
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 1a001789304ba34722c07dce097178ef622528cea6a38f2d53e896a0cf1793cf
MD5 3ccb5f91f9ebe18cc620e44b6f236ffc
SHA1 5465192834e245804e809dc8e939e55bc068692c
SHA512 6922cb42064f09768e1c1e02d345f1d4a6c7ed90e28c62e6e1fac5730bff59e46fb6af4a524f4d9389fc723c45fcd2c70ddad941cfe734a2347b59f7dc50fe56
TLSH
T1F2B0128AFF40552BC4CA4C730DC04B416720F09351049A038854CF108C16FB4AE41CC8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 6a43df6a061e74d1dbaf34a0804577bc1e124c3d4411b7470d5e85576a8f3491
MD5 5934cfe1f0d5dd962f1c8410b6793793
SHA1 c5dfe4a759d28159f5288c84b6ac4f6123121990
SHA512 c59399a7dd0bfce0773f0f5630da23c3f8943a6a43268504b8b36c5ec91469cadae84c61daf18fe648079a486f5b1ad56403462f7982442ae832740f0bcab5d4
TLSH
T1CAE0D86039CAC6BA7155308743B4F30892E2B40BD6CAEA167F18E484B707144F753151
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 ad58923572b27f79cf73c3f81c36c9751756a55ef9b095f40f098481f85577b5
MD5 66b4ab597ca8749eb636ef7678bccec6
SHA1 42775b815711ac800c7707288cb5beaf2f5e50fa
SHA512 8a4b64034e2b9f09d7330c0388030e7fe97021e7df113175c0a15b99b7c4bc9655d5e3633be5c0970238cd424c2e1df289ec5cf68ab7ecff827945e74af917f1
TLSH
T1CCE0867459CAD6B9A005608747E5BB1C86F1B80F97D9FBEBAF088C40B702244FAE65D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 b47005794a61e8f2860243ec95c24d8028d62aec3611da054e4ddf1c50138566
MD5 133eae575811f742c3b3b8ecbd31d295
SHA1 f73ed2597afb56755a8275622466fd5fced1d663
SHA512 1bc23ed53be16e1040c8286893ac45c6b1ecdb9472f14416542c1e7fe5738626430e86665328ca322206e302eb27e69a79743a220a65976d91919a7eb349bc1c
SSDEEP 768:AFBHhTofhno2mB21q3Llbfe3sLDdeEpYt1UHv7cEmH9e:AFBHhTofhno2mBeacEmH9e
TLSH
T11DC27B56717B12423C7E390CA6A19B370F8272A33059A56F7BB900BA4E67E115DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 2c7c13041290cea1e780d8525961221228b27514ab082fc4290f85aead4e60fd
MD5 2fd150295f5c6325698326b1c53db3f7
SHA1 ce8b28305f9a455824f56a4b87a5497ab167458a
SHA512 86d3a1c12eec7885af66eabd78386d286558e91fe1feb820d4ea14b3a53281e3d26c9d7b968a8e3241766bc12725541fcbdc41750ba4d981fd29330398cc3f34
SSDEEP 384:AFBHhTofhno2mB21q3Llbfe3sLDdeEpYt1UHv7cED:AFBHhTofhno2mB21q3Llbfe3sLDdeEp1
TLSH
T1C7B27F57717B12023C3D290CA6A69B370E8272A33458A57F7BB900BA4E67E515DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 407391690eb0735ea38c513a1d6c4e882d3a883876f63760b8cf99f8421f2e0a
MD5 b11da0c8885e550b8826055f1c056d2e
SHA1 a1f6571d20853b0869796b1f1fa91e26cf61910c
SHA512 96521e615fab658b556f759f23d993985f307e2bd95181d79822fbffc9c568dcf7f7984ca47bfec4d14282d49ce1b699c0abd3b11a7563c978e608428c6885f6
SSDEEP 192:FvoWg0yChLEfT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:aHi6fQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T14824640A7B747001DDA7DD725CB080771A3CB16DCF22A6916DB264698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 0c9a4b35010e573d9c485a0f0c824390b900f2738d34910227512737a94f4b39
MD5 4b977329b5eefde35f2ac616d1915f56
SHA1 37f49f16e9c8e03257c3913358cefe46aeca33ef
SHA512 b5fc7436c530e595845f983c126fcc71cb545cfbbb6ed79ed913ec8bb36d2f021ffc450a19e485a58898dc4e9fa82da1ad18a3be81a2754d998089700181c12a
TLSH
T13B5166C193A565C5BF89B941C319A5136DE23E57260F5872332D84F45F84C294F3FE25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 f772bb947ae37fbd71f0b9772a61b8f6c6bf3f99be0e4a6b10dede02d80b7826
MD5 0d791bfe20393a9ff5c7d2ea993d2fed
SHA1 7981d5bea141fb901ce7693fb2c7d090f5f8094c
SHA512 3c6bc64196779b4827db93dc62919755e133455b1e48464d07a6b35e2506d26c2bb65014ec65a39981c10f99c0d3e667e095cc2d05324ed7c81497a73a0339b2
SSDEEP 192:E+OWeAsSl9HNus20XL1BKhQHIIImbWMIMQRYcYN:GWHsoCsLCQHIIImbWMIMyBq
TLSH
T19E5272292B155F3BC47E6FB713AACB9417D8A8414177226D30A2188F8CF3B5786C52F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 ebe3ef4112f9e098f1b44d8a9ca85ef21265ef7952e5b071cd4d351d23d1163d
MD5 051f743dd25fc97b3b18463f5d80c761
SHA1 5f759af7d78d8f2409608b289a16e37ea732e666
SHA512 0b54dbea9e3880bbcaa690b79ec2e367a50b9849934465912980fb4278126a17148fb770a8cd87364c2ac4bebbe47a38591229c139ad34b6903f3f086181fb64
TLSH
T178E0805175C5D5FEB22434C703546358D7D1750FEA866B492F06C4447503144F7DD192
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 1263f94b8f28fba2074e4667a0e439748504fa455c4b96717a1b6588af8cc99b
MD5 86f04f4adde61561fef67cbaa5860abe
SHA1 95429ff2d75b58d1d2a4f1b0b11d049bd45a2af6
SHA512 ee6b6637e4b906b2cd1cfbea8a7f622dca3e0e93902dfd9feaa4c80db3a13d56149d6c803f9615cf6f95c142ea1711e71dbc7c16cce50850dc32301b16ae7679
TLSH
T10E216D56F320C159E14A963DA02A9B291778E8169FBCEC0F55B920252D61F001E8B7F5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 d320a8b32a7859ffe1e696501d3b400ddee739494e40197f433491ecee16aeeb
MD5 5946c5097a498a39f3e145ac8784f95c
SHA1 d8d7e7d8bff4ca17644465b65b74deccf23a87f8
SHA512 eaf388cd2d1757e0efe8c8a97c22ab23935e231392f2c7f61a8d5b6ddf98692d0dbe8f0d0707c87ebd3aac646d17c34a20e8500710521b1d7f143579a1daa192
TLSH
T1D8E020107CC5C5FFE021208B02B4B74882D2380FEA84EF8F2F00CD447682141F6C61E1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 fe59bbc211ab787c7cca8016b4e3ea04558958bacc7cd43b7d79d464132c0189
MD5 5aa5d0f2d651e476ee2506a5492ed45e
SHA1 9d346443ca479be2ab16b54a52dfa9e866a60065
SHA512 623b93361b5808ec36e1afda4214c61b88140206c53ec1cf44f1310a753fe695cf10068465dd718a6a8b7118a1dcd56517ed255ca8c39892cf93664de196ffba
SSDEEP 3:MsEllllkEthXllkl2zEflP/ll:/M/xT02zG/
TLSH
T1AB4404057FC004C7C500103041D1C3D13370D41005115FC334D104337CC7544CC00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 9068d49be464de53f6272f90a8238dd3e975073f5920c8ac410f9ad596a9556b
MD5 86ab140c2fd834158dcdc785016f760b
SHA1 82b0129f855ca157cfd316806c237d2465c1bec4
SHA512 a100b699e2dc7fc916e82c0dee9d089a1dc9981f1d00ba644c68fe655ea75d40f4ca9c13af2b6203f52b3d3cca3b8ed29b280a90c2500d806df71efd6bf87132
SSDEEP 768:1FSjZbjpwgIbo/JQCNUduYG1KGck3/u8BanMJBu:+X9WQYG1KTk3/u8BaMLu
TLSH
T1AAF23A3ADC51CA7F98EE7B88A70E39169DE40237C5A899D8D7D81F4D80BA09DF307815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 c4e00203e9df6abf9adf732266fa9799592221037fcb73420d18ba5e2cb946a1
MD5 a015403621504d23ed2b25ace6441298
SHA1 28cbde917b2edb7b64eea9514c25de5d1059fefe
SHA512 c9242bfbecd72c5639f9627ad2c27edd83d5c1ed14764c26c2cf5139015ecd9a7e7f5319ad03d9d78b5af46b4a324d4cdf09675022ca1308a94f027f3df1ed2f
SSDEEP 384:n5qiF9CcmyWCs38N18TUNTUlIxBydv7oradjf+8o/64QmOvchkP+lFYS/vkHy/7t:HFccps3Owg62Oo/JQdchkoFYS/F
TLSH
T118B25C36ECA4DAB7ECE64F8AEB4E3A07EEE01163858889D4DAD81D5C00D71DD1747C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0fd23662e81ec971ab085be45ce26fe07a2678929ada72c7a7ccdccf50dca34c
MD5 c95955a2f1e883c6cbb0030814e2453e
SHA1 ffd26cb9291b18ec7c7c51b9280d62c752d8f142
SHA512 5806da0fac884117a2dc2af9cc455257aba7dcfb25535687be9c12dd3fbf1ce271263d9853baee8e2ee876f6647753f71fa532973a0b2a9c6a6f27af03d7dc63
SSDEEP 384:n5IiF1tNnNnb9a38NS8TUNTUlIRpyIUrdjf+8o/64QmOW7NBBagoMgIE7Hy/7Ig4:1F1jZbk3pwgcbo/JQCNBBanMJBu
TLSH
T194D25B36E855CEB7ACF78A89F71A3647EEE011A3C58C9AD8D9D85E4D00C719D130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c05bfb4a9c79364806935e77378e93a19209998dc270c3f803d52d6505d9b348
MD5 d9f4b43266df743506adf2749322baa6
SHA1 b3ffd10cc98b871eed1a3bcb4ef992bee60b8f7b
SHA512 cf4aebee64af6204578c85ea6014409e0a16986f4e635cea323b0e7340c755e1a35a0cbee40a873596fc527fafae25cef4d355f8a3575f99b66abfaad8fb9e04
SSDEEP 768:1FSjZbjpwgZbo/JQCNUduYG1KGck3/u8BanMJBu:+XiWQYG1KTk3/u8BaMLu
TLSH
T163F23A3ADC51CA7F98EE7B88A70E39169DE40237C5A899D8D7D81F4D80BA09DF307815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 ef761fdc2c733d8dbc2d3e016ca436845a946c42c3080d6bc81ec9b656e696b3
MD5 9a7e57cae4b8fc350ffeddffdf7297c2
SHA1 64a6c478f3cf21d1644d60eced5cdb4b84a4ba79
SHA512 8e0f56f707758f56afd51a0d50edf16d1529911d4565667cffe436509c6d71144b4f7e62465d8ea7e013ac37e74ca837580843bfe3b6083fcf17db44255b390f
SSDEEP 12:TLyeSjPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3iscQQtydp5zcQAJmdL:TLyT5UOl0afDdWec9sJxa2DB5fc
TLSH
T16392AF23B9351073ECDA473ABD5345D10EBC175EC9A7B848DED049620DB1BC6A1591FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 90ce1710e2d6395b4ef0a8fb39ef576d3766cd5cc527995367e093b1029d96c9
MD5 40345e64628bad0b0587002c0ec37b2b
SHA1 9f0977fe12756ed9b40b088d9e2d4db60ef97d14
SHA512 a1ccae26206ffc0cc6cf1ab3ebd207c56b8f48f4d6f9c5565355ce5f663fd7d00984fb964d3e1260cc3a93011dd1b7f7cbdb9a5cb9b4c89d35c9251a3cde6f2a
SSDEEP 3:MsEllllkEthXllkl2zEflB3g/ll:/M/xT02zOg/
TLSH
T1EC440404FFC00407C54010314555C3703771D410051377433DD304335CD7550CC01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 512B
SHA256 027b90bd34fa42f67faaa5796cd1acf711c838f2c8eeb20c7f7bf6fec96344ab
MD5 5367d28c2282ae42ed3e4c909d8e8832
SHA1 6f63f0588cc997f0bada963e441f34a06d5197f7
SHA512 381ca0e0f55a15e78b7836bb33ce80aceb77347b3a321d169308665ffdb4dd740d85e28a4e7d90ef410595d231c5f86ae2ebcbb50757e6ee5b94f805924f6261
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 b1e6e7f8cfbe9b107fbd5caad93098ecb48b8f7294d4ec0a2488a6ee3e1d46d3
MD5 f621db4071b1851c499bf07606d6dba2
SHA1 a44c51fc2c20a86b5040733228b45db5c55b0136
SHA512 4b957a19b3e8dddc5690a4297f964547ea0a21e414ffbcd111c801cba4b48883c59071887cb3d5c4a32ed9724c307fdcb89647616242d708182cb295087c8d31
TLSH
T1BA410BE13525622F6BC787C5607A0C8495B1F181132E564CEE4AC434BD6CEB2A72E7C6
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads