3f8377d23a30f0ab6d8d8c4cf7ac1ff0b715e075c3c40f9d786dd6cd09346338

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7654310898881842464.html
Size 382KB
Sample260623-hdqqfaay5l
SHA256 3f8377d23a30f0ab6d8d8c4cf7ac1ff0b715e075c3c40f9d786dd6cd09346338
MD5 8b6fcdceed70f2b6e1ce40eab47ac8ed
SHA1 fc88ad5acdec81a75ea3893e5809af5d53d716a5
SHA512 58741b83c8bbf09302898177ca4a4065f31f923f145b38a40d655c72b749a87e5d11e9f0317f44b97171d6d5cdbcef0dbbc889d2332726970cc4ef74991dd911
SSDEEP 6144:EDQ0cG2Yf+7+DTm8K3zP/Q44g5XxlqCOj6Qrako1TvCQHhMTn:W2Yf+7+DTm8K3zP/Q44g5XxlqCkr61TY
TLSH
T10084091E8814EEB74DF1BDC63E5E6B31A6E4D0A69CA1C49BFAEE4D380194705332F191
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 29 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_209603483\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Entities	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_209603483\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\CompatExceptions	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\LICENSE	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_209603483\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_209603483\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Sigma\Fingerprinting	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5624	msedge.exe
3952	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266702868488921"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3246620872-1649211507-2285877732-1000\{4752D6B1-01F5-4997-9202-691FB8CBF7FF}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3246620872-1649211507-2285877732-1000\{97DC5464-6394-4876-9DBE-95905E2D3835}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1616	msedge.exe
1616	msedge.exe
6316	msedge.exe
6316	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
6504	msedge.exe
6504	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe
6504	msedge.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 6504 wrote to memory of 1460	6504	msedge.exe	89
PID 6504 wrote to memory of 5656	6504	msedge.exe	90
PID 6504 wrote to memory of 5624	6504	msedge.exe	91
PID 6504 wrote to memory of 5656	6504	msedge.exe	90
PID 6504 wrote to memory of 5656	6504	msedge.exe	90
PID 6504 wrote to memory of 1724	6504	msedge.exe	92
PID 6504 wrote to memory of 1724	6504	msedge.exe	92
PID 6504 wrote to memory of 6548	6504	msedge.exe	94
PID 6504 wrote to memory of 6548	6504	msedge.exe	94
PID 6504 wrote to memory of 6548	6504	msedge.exe	94
PID 6504 wrote to memory of 6660	6504	msedge.exe	95
PID 6504 wrote to memory of 6660	6504	msedge.exe	95
PID 6504 wrote to memory of 6660	6504	msedge.exe	95
PID 6504 wrote to memory of 1248	6504	msedge.exe	96
PID 6504 wrote to memory of 6296	6504	msedge.exe	97
PID 6504 wrote to memory of 1248	6504	msedge.exe	96
PID 6504 wrote to memory of 6296	6504	msedge.exe	97
PID 6504 wrote to memory of 6244	6504	msedge.exe	99
PID 6504 wrote to memory of 1616	6504	msedge.exe	102
PID 1616 wrote to memory of 1144	1616	msedge.exe	103
PID 1616 wrote to memory of 2520	1616	msedge.exe	106
PID 1616 wrote to memory of 3952	1616	msedge.exe	107
PID 1616 wrote to memory of 2520	1616	msedge.exe	106
PID 1616 wrote to memory of 2520	1616	msedge.exe	106
PID 1616 wrote to memory of 3284	1616	msedge.exe	108
PID 1616 wrote to memory of 3284	1616	msedge.exe	108
PID 1616 wrote to memory of 6096	1616	msedge.exe	110
PID 1616 wrote to memory of 3988	1616	msedge.exe	111
PID 1616 wrote to memory of 3988	1616	msedge.exe	111
PID 1616 wrote to memory of 6220	1616	msedge.exe	112
PID 1616 wrote to memory of 6220	1616	msedge.exe	112
PID 1616 wrote to memory of 3436	1616	msedge.exe	113
PID 1616 wrote to memory of 3436	1616	msedge.exe	113
PID 1616 wrote to memory of 3316	1616	msedge.exe	114
PID 1616 wrote to memory of 3316	1616	msedge.exe	114
PID 1616 wrote to memory of 3956	1616	msedge.exe	115
PID 1616 wrote to memory of 3956	1616	msedge.exe	115
PID 1616 wrote to memory of 3984	1616	msedge.exe	116
PID 1616 wrote to memory of 3984	1616	msedge.exe	116
PID 1616 wrote to memory of 5104	1616	msedge.exe	117
PID 1616 wrote to memory of 5104	1616	msedge.exe	117
PID 1616 wrote to memory of 7080	1616	msedge.exe	118
PID 1616 wrote to memory of 1364	1616	msedge.exe	119
PID 1616 wrote to memory of 5716	1616	msedge.exe	120
PID 1616 wrote to memory of 7112	1616	msedge.exe	122
PID 1616 wrote to memory of 7112	1616	msedge.exe	122
PID 1616 wrote to memory of 3068	1616	msedge.exe	123
PID 1616 wrote to memory of 3068	1616	msedge.exe	123
PID 1616 wrote to memory of 6316	1616	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\7654310898881842464.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdd62dc188,0x7ffdd62dc194,0x7ffdd62dc1a0
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,9892182460511653092,14906133658171943853,262144 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,5036699826301804627,10467579931149659470,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,406744616351402371,14419341852223389505,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,17773256603376281914,7131238535841934551,2097152 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:6548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,17659346589583701094,8798608147427303838,2097152 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,11134113970070369275,1724950509155081189,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,11592879102411126692,13478987894394891758,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:6296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,8453773362045822076,17221789734493380418,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,8453773362045822076,17221789734493380418,524288 --field-trial-handle=2296,i,11796489144688497664,18283074362531771195,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:6244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffdd62dc188,0x7ffdd62dc194,0x7ffdd62dc1a0
    3⤵
    PID:1144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1972,i,17706359459385090324,15824235841314873027,262144 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
    3⤵
    PID:2520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,12547434791944277512,1940302688690819848,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,11567319216554410679,16081541226213653636,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:13
    3⤵
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,17809809255984146763,16068928920125886264,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
    3⤵
    PID:2660
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,17809809255984146763,16068928920125886264,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
    3⤵
    PID:6096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,8928248151842520505,5936579102242523544,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
    3⤵
    PID:3988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,12126767560378500532,7986038552399209678,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
    3⤵
    PID:6220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,2421015368719464457,16097603181444506415,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,15659731463431925135,16017900137036621592,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
    3⤵
    PID:3316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,9000546651397044066,6724097754586704921,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
    3⤵
    PID:3956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,7913091893199996752,11036855521017351342,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
    3⤵
    PID:3984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,4286142801505965764,11945398151128732055,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
    3⤵
    PID:5104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,3407581172573937388,9219427431500330519,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=1188 /prefetch:14
    3⤵
    PID:7080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,14881961801101858395,3796255263840188889,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:14
    3⤵
    PID:1364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,9519746655549988065,16223226308154349302,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:14
    3⤵
    PID:5716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,1617373951960468516,1703751045408711498,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:7112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=816,i,2665772691253616246,8159541184718603086,524288 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
    3⤵
    PID:3068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5160,i,15214967771651822991,2977017332007721809,262144 --field-trial-handle=2476,i,14188913110809778737,5377845813802906459,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:7048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 31e9311cb27cd29b4e1203473a720c8277035ddc73b273251bb5cce16d9409a3
MD5 0af783526520691c549f3276cba963da
SHA1 d5b95998fad5f707c9b08076d04a8ff1a8fdb49c
SHA512 13435a3506ad3fb4ae07e81dc2519b595c14cd5dbf92e379d791613792cf47c7e43f513e2dc82208933299b0114ca1d19b7d545fe05478725d0c9852addd9f10
TLSH
T195D0A7213639F5D1E23E10B74A30421052594A5776A3560E7D90D449DDB60C0B6D3D87
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 01fc33638563dc8ab1a7b28573704bed2449b99eedc9bd38a25b21316506e8a0
MD5 11027c4e8a2219c9ce2e898ab0ee23b7
SHA1 035426b9d83735103c3507c9017885546a4bc3f1
SHA512 a538fa52093c0e8ae9c8760749e2905603b5390edd667d6d7eed03fc52795e15b07573b9fb01fe984851203afcec62a80bbc50d6e99f5fbb2fc0771ec7bb014b
TLSH
T1B2D022213628F001E22A10B34D20831012198A0629A39A0A3C90D04AE8A6080B2D2447
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4c00f0b8b1d77119e0b12e9fdd0db28268bb3d896d67f44c86f32dfa8c705052
MD5 85e1f6554caf1776b478bd16ae21dd37
SHA1 7601c0e322a907dd7e5cd61ac23bdd5c313d7d6b
SHA512 97bb91b07c5e7d782adafac7f04b2e27a741eb0d99559ceec38d3713ac89af6c9bf827c62d5cc2e3f9caa5b4529eec0817c08e4b0e11b63177385d028ec62809
TLSH
T14CD0A7223628FC01DB1AA1B25E2046105255CA4F65A3994E7ED0D04AE95B0D0F6E6447
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f841d79a070f24f1280723eb8e2b02207ae3df4fa862a213440d357f8fa840ba
MD5 d84ed843d854fe63bd1a8558a7bb842e
SHA1 e49502b64427e8dec838d3428583be434096453f
SHA512 6fdcc46870b922fa32dbaf62be498086470de8d73e84cffac998e7f86212234e00e2c0767b1abab160f310da91e0d33dda40b270fa077cdd0fd8ecd476187743
TLSH
T1A8D0A7613628FC01DB1AA1B25E2046105255CA4F65A2994E7ED0C04AE95B0D0E6E6447
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e4519ee111087f538c263265602f50ded4fd0a8d30a1eb29782923b7ecf6f706
MD5 d977ed51ddea169ff3aaacb58cc9fc88
SHA1 1161e22350839b669f3e2b6cb5cee6ee9c25e467
SHA512 3be5b17585bc96cf349403e8b57f50691da3e8f841f657a12d21c7bac323eb584bb56037d190cf5f25e30923fa75219cfff261e56df71e06f9d9981a3fd990d4
TLSH
T187D022213628F001E62A10B34D30832012198A4A29A39A0A3C90804AE8A6080A2D244B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 032dda1487d7a4e04000744afa72472e25cabd40425855a8757c7169f41dfc34
MD5 7da6c730f27c553640924da7dd3cead0
SHA1 de08b3bfdfa5262d963e9a879e0bb5a89a398d70
SHA512 e072cbea66c5183f6ac74d90b8dee2c7a81cfe31b400a31d1a5e0c5b201d6ed31dd4e56962dffed087afa10f08578eb3b55a4fd79bd3e2e420fcfcc43a2b6908
TLSH
T194E02BABC8249C7B04FD1F59645046C6EB1013576B40455B3A3DC20D8FB47FF5681C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 db39bd1947c37f5983f305bdc64a472df8858e4270d34afc0d303b1d463c086b
MD5 4642f7daa634c181033b8bfb18a5eb59
SHA1 0a085a4869615d5838eb636c0dcb428045fa44ec
SHA512 c8e5aae7bb8c932886275d88f3378e69d6c9570c22dbbaa328ae56da646f12eec0db5e6c4a55a4c4fb6b6d5138ede293db62bdeeb8948129ccbd7465fc22c7c6
SSDEEP 384:KVc884/94HBCSFFE/FslRXiVypwe4otGduBvSDu44O:KW8BmBa/FG8e4ogs0n
TLSH
T15B13197E7AD09E56E3CA5B7D926B9BBA0373D372E8D5514F827138303361B42188E216
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 bf5f6a82f8dfa0bcc3bb325ab6771c04e30275f150106986d27ff20fb1fc505e
MD5 ad412d50d1cce830ae9e20ddcb540d9e
SHA1 4a1f114d0947c732342bca16d15907054bae39b0
SHA512 4910df1882a9198c1ed5db4c96aed948cf2b06af8a6370b54bc36e4424bec0fd1d560f734793e426f33f196f3301fe701cf90a2f591a47d045827de7ae26248e
SSDEEP 1536:d/gL/zLL/f+AdM3x+WvA+DpwXn814XL/PL/HL/VelyOvvw36k5:9gL/vL/WG9K4L/PL/HL/3x5
TLSH
T126446FF71951A00BCBE846F5E2133A7ED177025D6CE1F8E9D6784C812929F31B6BCA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 1b082caf89dca397a85ff478b4da7b147554c474a648b3734491e6df9bb8fd99
MD5 4b270be3019ad1ef221c75f3491e3b67
SHA1 44f3cf1a53a5fb6beb2a2baa75b7d9cea7c1e264
SHA512 36f2cb1b596375009fffeb8f499421d363efd155d911028582c8bf996e477bdc8a2af1193949c5f5df6eaccf0795f578f8401e6f9eab5e1e75505cf34f2905f7
SSDEEP 3072:Uv9G+6hNwG+f+Hrl49fSkWho5CUDkwQsR8:UQlOG+fQy6hho5dYsR
TLSH
T1532528EECB682C82CE6B8B7070E0D9077E712183B64DD0D39944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 fcb4187f4f82ab674b8004299c36e0e254f13b1b84d5df4bcdc1ef9f2077f2b6
MD5 b277f6707cfc1016f949bc3f76344f2e
SHA1 04751b410c9ac6eb5b2d3cc87eee80912380f922
SHA512 697854fbc378f8cdffc152476575721eed00472faa2b5455530802d196e8b9d31feec5932b16cf62b9016a81563d1157926ed72b9c08222d1edb0c242b26eff9
SSDEEP 24576:dNXbn7mf0kWGbBZQL9Gi1EhxApnanzoMhwvg:ddb7mf9lEEi1Jpabav
TLSH
T199166DEDCA6858C3CD639A30B5F0E8577C7413C3F994C1D6CC98C584026BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f138e00d4786b0db3adee92763bb23c4e30dd3bfccc515a48f39b643309bc40
MD5 0367367696884b4126e10de7da792aab
SHA1 eb32928341dc1ae87abe69303bd923050b499860
SHA512 12bacbb371c2657951a88d9cfac7f4f726620dfcce4627dfccea04a55d011df31af5525012f23d4ca2394b63def2fcf13640eeb490808cfd8609d93db1eefc1c
TLSH
T12761D57C4FD329BCEBA7CF7950F014B63B73A651020B2E0A05A75C74B826F00A88EB51
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 ffc3fd3487105e65445ef70a38282c49234305488ba628d9d8eff555e4760c0d
MD5 02bf704c047c295f20b1428c6dbbb6f0
SHA1 782680c28d98172702cf607e256211bda4c34a25
SHA512 a6c9c5b4b15bd641d6801e73c72eac64030e79774a023e36c809cfcde5a1188fcc1eaaab1f76b9b2dd425572f11da47c7504e2b4d5694e5e602af5eb83a75a62
TLSH
T163E0D8D495C7C32D565438D2C5386B48D1C03557E797FE072B008CC47707191B642956
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 def56a09f65264cc93b04dba8c1134df416876ef0593d1ef5750dff22da75b70
MD5 9be26b3037813c761b5e1ec7fa17af0b
SHA1 f06043500b1562ba64661ee58bbb81ebbf6aa0ac
SHA512 d3ec8eb39e338fdd95aa5e681a6ac2763fb5fba45e2331abd04f35ddb426a9045160892d9604c7f3ee49c870697eabc4bf58c22180a81e4ec30b02fd980101dd
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjOc7+W5LuFtIwXNVqYpR:TtD4jJ/0UC+lf56c7+WxuFO8VTpR
TLSH
T18AE2CE8C3F11F511C8ED733EB0C2C5E05EBC683C464DB570923898768C62961F59F25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 319B
SHA256 77327672bf40c692aa0fe063947b7579055ca88f31dfea1281ab5c4bb03f3515
MD5 37b8232340a73db3efa277920fa53892
SHA1 5e78105abcb2b598d2f7d7245a4a5e975c9613e5
SHA512 15cb34ca8e5a102159109f20e0e3d86fe3f4004def4e23c08f79c68f5918357100804fcd0e15e0eda0ea897b42c3e5ed518710d495534a421a56a48bc090b364
TLSH
T14BE086996AC9E33965697497CBE4970CE2A5360FE78B7D16170C98487101384F7EA6C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 2a29555f3a9780ba67caac7cb8f8abc58724939d5ee832c9442bfa03f601c129
MD5 aff1daa123d0a94d5742c83c67c33546
SHA1 b6acf5e48e57c8c0a52d63d0303797f9297e4e65
SHA512 fd7347f843d0e85b3ef28959a2742f7ac2d8584bdbdca02f015d468e77c99c6338a8c7f1d8fb72ee6ab3afcb72adf2859d41106fd7e596d81236f553b92a19e6
TLSH
T1EFE026885AC8E379A16868978BA86708E2E0350BA2CB3906170C984CA141389E3EA684
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 ac9e2042d2f747caec9ccba50e5fd21cc786e6da1e6338e8c80ab1f43c58c99d
MD5 019610822e31d29d181435f53352bf46
SHA1 24688081c79906cef254db5523252ad7195b34db
SHA512 390d40d064d077442fdf1f46857ed3909a4207442f3cbcf507af2839e381eba97dafcd1881343889e52505c09f5ae10b31ed145b57f86169c89ce467757e6a4a
SSDEEP 96:rGWptejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/02bbEOVpZf24JkMfXSFR+CFqD:rGWOH+bF+UI3iWGVoWN3qL/nVVV63
TLSH
T18124100E5F752722CDBD913668E744A35C7DF03F871326DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 1KB
SHA256 6daf4eb06a6789c343a1b6f3757f55cd14c2a954a910ebea173cfe117f144424
MD5 8aeb52cc506a860049b4236f749e231b
SHA1 cb8bc2a944acb81d7b03bd430ae7e67d001e3803
SHA512 230ccc98aa779f182aec13b27b9bd9e0eb6a891b360c5fead9b0ca80e7644437b31635d53d5134ac155d40c632574576ce09598db5f681013659a7ff7df6ba6e
TLSH
T12741883B7C251A32D723A633AA6B829139B7C0019C4BD5C0EBDF8A098D08978434FD56
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7733cd51e45e34752ff8f1a824629081921b06dd8e7be07543516276c51848ea
MD5 9fba1f22f8878524e94bbbbd51813522
SHA1 12a08a19a403755108a1d2048ca43223c66c2e7e
SHA512 719909dee5ce4ef8a2641031a7772c42f4a59e2ba2d772b25191513f1b968db1808035b7faf25f0ace8723cf58b1d09c32ba3cac699b67f730eaf9c5881f9e6b
TLSH
T122E0D8A496DDD32A515920974A787B08D3A0350BD68B6E051B089948B401348A7826C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 ac18dffc16dda4c11a7cdae399fcf775e652777693a5f551b22237add9555b28
MD5 1062b4a2d408adaf86912810909fffbb
SHA1 0e462f9d6aa6b04f2ece8d6997ecfd023417c20d
SHA512 a310663cdaee13e8619e6ee5967c289716fe6893ef14b14bd35fdcb0055284abb1f9c87921697d9a5e4c3b952e5e821e14c5aa16dc747ceab182e292a5148de6
SSDEEP 48:T32/LopFMaty423w/a9NUuTjAw7oNwJ2vdj0Eu8S:KDeMatha9RAJrdm8S
TLSH
T1E1B2CC4E1F307221D0F48B76EED184672F7C211DD3A33A499E6460F2CEA259BF9065B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 724ae646cbb14cf33e5e2e1a552f8841b68466aecb90e980604f3f5a0894ae07
MD5 ed25b530a1b535ae3d9028f709b1e5ea
SHA1 98ca4ac15507694837350498f79dfd559fa3ac0b
SHA512 e69137ecb424463aee497ea2c6a55c6e39bf140d74a7fe2808300406096fb3bd6d8df85ddb32a559d0d54d96f0787c338c8ee7801a00766bce907e151356197c
TLSH
T1E951CEF783F4867E9A0195F0BB146E2FCE2D0515432C3C9A89E4AF1BA3E2470E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6233c2eb5a7f13d7cffce39503ea0a719bd9c6fcafbb82fd391435ec5eb846b3
MD5 c50ff6e071682dcd27b5073d993a3b84
SHA1 eb29e7593260957577e2d70e071b010be51b794e
SHA512 71e3550ed6e5d13504c75632dd20e125147888c832204ccbbd7e562bd303442482365e3c4808f2757783ac87597eb2df9f48dfa971bdd678e398b7dd090c33d8
TLSH
T1CE51BDF7C3E4826E890195F0BB186E2BCE2D0515932C3D9A89E4AF1FA7E2471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 7d7aea6ecd0830c9caabe19f815f35578089b42be5414b7d0fe814052c613e36
MD5 28a79b8466ccd2a2609e2ed943de1dbd
SHA1 a155eb93a92b772e0851ff1ae0b71cf6ce4017fe
SHA512 99782ae126eecb89e6891cf1d156323bc6b7483d049a37ac58ce1190673d383884e065a3dd77fca141d679447af125e1f10fa81b0131faed59d0f4ce083dcbbe
SSDEEP 96:uIEumQv8m1ccnvS68hKQPXcf6CnFXqAd4g:uIEumQv8m1ccnvS6Gq
TLSH
T190F2DDFE0737A205D99444B0E4005BCEAF1A000B47B6B7DC66D447E3F7A21E2B579796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 689B
SHA256 cd9ab5a4796becc5e61a9acdd6d5b21776fc2c2ad75984752dbc8c84336f46db
MD5 7ab63c564996e2214a2a01ba62d61bb4
SHA1 48c05eae6f793f917727b3628783b671deb72fb5
SHA512 04edfac8467a2c52ad60ceb2153f88d12bf822c34840f51565d0041d564d9d8cc739ebeee7ff68901233ebb253268ff0bd806292a7aae12f38537dd0f8c9b9cd
TLSH
T126014C5BC4BFD4F6102E897A9C58B806AAB9D436118364E6DD96C23CB0854FF17090AA
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 723ac05ac58103416c84f5e66ef9fc58f5341ea4d35137c79d7e9ef1b9c70ca1
MD5 9754a585f9284ca54eca33f93ac3a0c5
SHA1 442c3e6c56b10f6f8cd0e3a4a4e4c241c0191224
SHA512 c64a5a198dae0116408669f7b6cc943d4c96f99f13a040f479f921132bc21adb2914b0f4592ced4c182b606c91447496f6dac14139b42a9ff2e1f2182fc756ce
SSDEEP 192:sxRNRyyMqZjK1Ml8xFQ/fvsOWpVIS1ZuEsAzoA8peo/g6+WNIY5nZDuxg6IgDk4J:sxRNj8Q/fvsOWvIS7Q5//5I4DuT4c
TLSH
T1DE72EB166938997B8CDBD219FA957F53D2FC0473B2945E44A6FC8A0C00E7ADC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9159c2b6fd403e35095430b5c74774cbb3dca6f9cac3ac78755d8558f1641360
MD5 5f6063a7e4cbc705fc738be0ce4851f8
SHA1 2e586d86d97d46e2435bf442c12b14d929cf6f75
SHA512 79c3eb3a0b0a56323bf99868a10619513a40246d9974db6b46916aa552f6fb3346e040a4621221aed855cab5ff9c2ee23a0d162cd65a0e0680a9e0e39acf9653
SSDEEP 192:sxRtRyyMqZjK1Ml8wFQ/fvsbxS1ZuEsMzoA8peo/g6+WNIY1FZDu+G8Igj4J:sxRtRbQ/fvsbxS7Q9//5ISDu2jc
TLSH
T18362DA156A389977CCDBD219FA957F53D2F81573B2845E44AAFC8A0C00E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b2b6579a64c70455cb6d9657e5ba62cccd8e9ad90ca814dee2f3cccfab7ef1ec
MD5 e61b10f566e744e4ded39f5cafea1480
SHA1 73fca2d3cf096c084874ad88fb0d08b5ff9d2e61
SHA512 ff84888255462c8c64fde100912e3cb6ed5d445b9e2c01765cdf4b8976ef22645caad4816b1e4e0247cb9c9f74c6a7bd4370761395a0fdb8b56e2071f009e349
SSDEEP 768:z2SIQTWgBdfLk8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhbgZvro1u2:z2SIQTWgBdfLku1jaskZ8s2
TLSH
T1EFC20D2B640CC77E4F84496CEC2AAED66DD801CB9B944D9447FA894C03C67EB521B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 ea8c4c08330b7e4272d7e2c990120da3bb36f846aec0725531be8b41cea4e607
MD5 7e12a0d2ff4163efd57f1f0a380ea349
SHA1 c0a271eaa1b907d0f2b6551aadf6c05e777af284
SHA512 5075f43d662df1323a3706e17653a6210fb3e1147b80ae29c8fa2c22f58addfd3b97dcb7ff3fb3163cd8daabe01f2686d04a91af6b78c3f44a9bd04cab8714c8
TLSH
T190E0269895C8D37D61AD20874AED830CE2E4750BD3CB3D062F22CE487146684B296980
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 d23247f7f248f11364f4fd8f516806ecc91736d652e738c1f11a11988bd4b936
MD5 74e9f5349a9460280c19e4f5f3d46dc9
SHA1 2cc6ae30e6bf094da06f2722b55535edcc3f33a1
SHA512 2e52e8d88b73beaadb6e370a9e5a3fbf60c108df33af22bda5158bd49dabaf1e010e75b823c99a334578f9dcdd6375270ce8ac473d8572fa34c6c672889e3af0
TLSH
T112E0D868A6C9C72A719A709F4754DB0CD1A2B50ED6CB79662B0A9D44724B2807347581
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 9788760fa7484a05e36bd393fcfc5834cd4afade7f6dabce818036326253bf80
MD5 a5e17e64afd19082933cb94244e979ed
SHA1 491426bff514a31887e966d280b4ae310ca1d246
SHA512 1738461b7f495792c44146e82cc35a398215cdd96188ede8e556db4fe198d838a35b77e26e11b7f7e59f2cba361ddae8d10a37407a480ba5a2124903e895aeae
TLSH
T135E086B8A5C9D73D7068A0C74BA4970CD2F4794BD7CB7E5A570A4884B109284B7AA980
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 53e4aafe0fa540ae17cdb4be000522d1ee8cc0e985aa434434cf675fc8fab18b
MD5 d8ddbbb43173166f852eab863f2eef18
SHA1 0cf08ba40b3022b57117b3f164126d7672efae4a
SHA512 e6a81bfe4e14903a05263564cfa25b6af518a67b88af743c0274c2901b6e1386bf67d0f95b6c57e6a45031ef2d68a4e9c1c08133a51191afea6f1e31c5268eed
SSDEEP 96:KcucKzSmmD+KsoPjWKQsKGpSKSsx8gKVGeGbqKEEfxGK6giOrOKs4MduK2E662wy:ijdt9ZpfpRBNwVnqxpJFBTPLOfFf
TLSH
T109B246117A7E220138BE250CD194866F674230B3701BA63B7BBD21F64EA6E015FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 7cdf930d78d53a31e417e557d81627f20b746c80e309d37699548e3dc3b88a8a
MD5 a6b47c0d84e3536078f1b22133fe0e3d
SHA1 a1968e7625776e7a0fc5ad68af05dab2bb7abbbd
SHA512 ab997ad156bbb3d524e161c39e714ec3659506371050b096eaaa7360d71e0d62e97a2d5f0a84a24319af05b0fb1623719a9320534ed7b28a0582e972b95a8045
SSDEEP 384:iJtPphRvwFqzJ/TzO9dDszIsO225mVcMs7O6lUMtqU:iJtPphRvwFqzJ/TzO9dxz
TLSH
T1C9C258117A7E220138BE250CD1A5896F674230B3701AA63B7BBD20F24E66E015FFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 553def66c9881d3a8d9354c1d66f5217b2cc32ad9b274ed664c8572bb8ef7bb6
MD5 9b992e5cb67beac242d209f0e26f9d3b
SHA1 9b0d7a65409a3aec90b99667f1b4a2526dea2bcb
SHA512 95d0805fa083cc05f0e917f4c04813dba5b8416cd5ffcd9624e842a49db64d17616c055afe58140187c81e1f94b27c80d0a2c1756fc399f2e391bf886fb267d8
SSDEEP 384:DNrRZyCSDnxTICy7MEhIKyll7svbFKfk7:xFZJSDniEyI1l7svbF9
TLSH
T1D244950A7B747001EDE6D9721CB080771E3CB16DCF62A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 3f4965a3d625f36c0b816e7dc573b0892e87bf4c2f0e145760098cc5f50b3f41
MD5 864245947c0cab5f994c51d99f1365dd
SHA1 2bc772269a150543908bca8bd5838543d9f8ca9f
SHA512 7c4c0a1786c0a8008d024e3a51a0c52ba40d05c2427bdef89185391bbb5bdb71006057bb63aa7980b0ab8c579ae50666a1237adc8c102796dcb8575d110174b0
TLSH
T1F131B3C1B7A934857FC9A980D2192907B5D53E67220F5971332E64F44F848080F7FE32
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 d2a5db2615b9f6e77e1058cd514d799fa501a58dca5f703525af6ca61b386870
MD5 eb38ad25baefc791b8896769d412c14f
SHA1 b46d7cfceaed9a8aed8fce32ad840aa69b06d3f7
SHA512 9e4069d2b3bf62ef2eff1fffc2be84d4510c13b98b77de0a29746b9b078211fb6ece043f776eda885716634b213efaa08bbc1ccad5c86a2b7de7f0862ea34955
SSDEEP 192:I9OrIAsXliqyQ2sOV/Jt2OQ0IIIrb7MIM9cYcYfwb:7rxs1z2sGLHQ0IIIrb7MIMWBQ
TLSH
T1C052961927055F33C09F5F76136B47951BD9C8820137226E756A288F8EF3EA78AC52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 55606f0cc97564937e2125494473702aeaf0abc6f88d0ff4b3fc50847e1e87f0
MD5 43a79b317bbb41752a5fb3654c8aded9
SHA1 261e5082fb88687e95fb90e862d636c014dea8b7
SHA512 8685a81a1907f99c205f7c37ba1dafacbbe397a7aad2ad9a913c885b17a50fcd4168a6612ba4db6317a715a770fef6cb030bc68bdac73e138c4c893b5a2a6616
TLSH
T1DAE08078F5D5D29E606C20C70675934CD2913507EA876F591F14CC8861013C47755951
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a337b3779b9dc49aa9e3c373291600873ed7c1b76f8197f94ada26924998fd55
MD5 0ecd07dca231c26a349aa5c596fffb28
SHA1 65080c416144d350fbda0253ffe445716331b70d
SHA512 ff72c08cfd76d403b0bb7b53eb9de7b1b7e1536a0381fd7baa15e46cb6217816702b8746623de6048a172f855c9c5d5b504669f3f2008133ce404f8ce67aae05
TLSH
T1FA31BE55F320C149E54A86BD902BA7350738E8068FBCEC0F84B820762E71F040E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 9f350fb7bd297663db6c077ad6a5b14a9d286825be46c856325fb5deed85d0a0
MD5 4a0a6127261000894c974ea46e0587c6
SHA1 3ed46c5b06959fae6bd95667caf5ca8f730fceac
SHA512 ef2258102354642d69a89a27215fa4c800847113ce900dfb36ce9c402e27ec239cea89b7942c0dbbd932ede49d64b098e6bb7de4bfe949e8b83996646c17864a
TLSH
T138E0D864B6C4C29F5079208309B5E38CF291394BEA8B6E461F048D8875023C1B746551
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e5f945bb5efbc8a31c2418ec92992b8cab62b8b2a76a085928fa98e6fc10b871
MD5 cafcbc9f3706ecc654a5605708e4445b
SHA1 9254526cd16b457f5083c0367db30a54bdd60f16
SHA512 684b764052b354f1b5268f6d8e278107febb507888e6264f39e0816214b3af1fa5b8f79f40ddc8809b7abd589fb8f60cd74d4cc5eb98dd71f369a317abe6141d
SSDEEP 3:MsEllllkEthXllkl2zEflvudl:/M/xT02zRl
TLSH
T1FF44044C7FC0140DC50050305451C35013F1DD301511574334D10C737DC75C00C00150
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 2012c132bf9e18f52a29854c393bde9013280d4aa6e65e1d647bdc42e24db6a2
MD5 9437973973b4b69d7818173f72748a95
SHA1 714ea84cf5a9253c0d00a8f26a8c539668ec923d
SHA512 e6f875f982b240b0e3cb314aba393e7c3eab7725719c22edb79dbd4c450ce662f7ed95cc9b4d45f5998f00385e285ea33b0ceb114a4ec90774f0e137ee0d554e
SSDEEP 768:YF3j+9hdwgMACYoCiIG+BaKZr4Kz6y/AHvX:l9hQmiIbaKZccP/AHvX
TLSH
T114E2283ECC64CD3F98EE6B88A70E3A1699E44173D1F99998DBC91F0C80B758DE306855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 8c284a5856e35b3ed564c705fc7218abd0912e6d21b6877a626e22766be6f443
MD5 185c2a16aac55277cd30ebd7ff662f26
SHA1 62a16f21c1d2bea4a2d0ed5242373d91a6cca407
SHA512 1ea2739ecab4cd8ff8a749bd1434289bb919339c59c1281e05d02284e97f8598450895d21d46c319a59f28504930e8c30d80ba1cb6f214170ec5d360f8d06cd4
SSDEEP 768:lF3j+9hnwgMABYoCiIM/pGMKHD7LJA2vG:e9hC1iIMhGMKj7dA2vG
TLSH
T14ED24A3ADC54CD3B9CEA5FC9A70A3A079EE44177D0E869D8DBD81E0C40975CD9306C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 e88f797f2046b3fff8752e8d6927c4d36f4e0d3dd749177165659bc52fe6e384
MD5 7b2def35f5a1862026b66bd002beff01
SHA1 906f754c37930d33a53d007f3872436b4794a6e2
SHA512 2323292a6bbe399a43a1eaf35a73cbfb3df1806446deb42120849816054cd0171328ec9add5e8b6075d418136955f38a403477dd4e6bb855cdd4e73e10b9f859
SSDEEP 384:nUMiFWtNn/s3n9SK8NM8TUNTUlIRELqYB1RDNOcAfLpoajiIQ+oXX6GzlqdTH8LA:YFWj+9/dwgm1DNYoCiIGVzlA5vF
TLSH
T126B23A36D8A4CA77ACE68BC5B70A76479EE4419382CC6ED4D9CC5E4C00DB2DD430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 0ebb98f5806daa85697371f783b976608c936d97fa1783495889d27acb796906
MD5 89c397eed052ed026acb1477f9c7c02e
SHA1 a1ee5e1b5848e3f94609c8f6595df09e8538493e
SHA512 d690104406f3bc99108fbbcbf0cd44fcb8e43c8644551750673c4eeb23ad7870bb35e47fad3e808cd67c6b75d8651e04b8f570e69944b7861db977f1c4795f73
SSDEEP 384:nYiF1tNn/s3n9S58NM8TUNTUlIRdLqYBaDSmcAfLpoajiIQ+oXrP2ITGT0Iq8Lkz:jF1j+9slwg/QSgoCiICP2i+0lvR
TLSH
T157C24A36D8A4CA67EDFA8FCAB709764AAEE001A391D86AD4D9DC1D4C00D76DD0347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 479b227db0c1d08779f7f946b485d8fdc968468a2d6bd7d203f3cd4c829e4927
MD5 372e7a6fd872665bed0dddfa98beb5fd
SHA1 bf602a982848acb83d5c2656929bc88f1e0f2cfd
SHA512 dbf4610ea10cc824509059625629b451efb41e8458ed5366a176e516465f107c2f2e2a6af8768a014d728d39725d7f6340d735a341726eca7d0ea25d9a054101
SSDEEP 384:nWMiF3tNn/s3n9SY8Ny8TUNTUlIRuLqYBX+BOcAfLpoajiIQ+oXX6ba/Pb9oR3Wg:mF3j+9hnwgMABYoCiIGca/A2vG
TLSH
T10CD26B32D864CD37ACE78BC5A71A3B87AEE441A394C96ED8D9D85E4C00C76DD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 9984dbb3dde8c0324fc47acbfad57ba93f2f2b484996c98b087331a6e22a3059
MD5 87a84ec79a80459d062b432c55f5af8d
SHA1 d7bb1fefd49fbf48424c4ea936d69f75846612cc
SHA512 bb05adf64ea1ee2bbad2fd789bc7b0106a4d3252fb7df510bbee7da0b3562c1f42fdbda3d3460802170003c92aa5f1f770b55541c3ae6b284f0e236a190d5f25
SSDEEP 3:MsEllllkEthXllkl2zEflzxall:/M/xT02zsul
TLSH
T1634404047FC00415C50010304455C37413F4DD100D11D7C334D104737CC75400C04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 847cb56304092de2d702f3bdc6d8b3ff0979a32cd2f09faba8cd1d4d3a343c0d
MD5 cc83cbd3308c06e6baaeae68d97c8b44
SHA1 bf8c4e1a356c23cbf612583aee6d1d8add8054bd
SHA512 e9ba12bf4f3b08fe409b90ff1b30ad14352235f5ee595afb79f269e0ef196edb80b44f6385722513cc8719e60456215618c0fa448ac8a8d13976ba1d75541167
TLSH
T1F6312FE1583C1AC1D4BE0DFFE09B39FC84D8C216F5A4343A2858ED98563D91A258087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 46e0792ccf75b154f7680c6a5a14ccbdb68279abf260030c88bd2d876de4134b
MD5 5241f5af7d38d040f68036e947671100
SHA1 999607633fe9bcd42f3490c4e22116be279739ab
SHA512 5c733ebb1daff9f8f3b246048d99263a9914ed4aa84cf650783c8e8c7bd5aac1139aef0554a3d429d3fb9616989f7ed3e4777771cafb7e40f2434518b002f748
TLSH
T1D83120E15C3C1AC1C4BE0EBFE09B39FC94D8C316F594743A2858ED84522DA1A254083F
MD5 SHA1 SHA512 TLSH

Submit Download

d2c85612-325f-4c6e-88de-44810fb46607.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2c85612-325f-4c6e-88de-44810fb46607.tmp
Size 24KB
SHA256 28557abe7f348e14f7c7a62efcbd58c353976bfdbad930f379904dc8a2c0da95
MD5 e152af595d75e0b91d6c5a84fe0a6bd6
SHA1 7d4bdf6762bf2c0b05d8eb938952b1b440885ee3
SHA512 429013c26c38f9aeb6077fd99ebee3a34d4a152b42db696657f3abc011cb4394d82ee56fc762e7a284bf627fa6060300bc60f5b1b7377a175f7b4687d63e4faa
SSDEEP 384:nUMiF1tNn/s3n9SK8NM8TUNTUlIRELqYB1RDNOcAfLpoajiIQ+oXX6GzlqdTH8LA:YF1j+9/dwgm1DNYoCiIGVzlA5vF
TLSH
T1D3B23A36D8A4CE77ACE68BC5B70A76479EE4419395CC6AD4D9CC5E4C00DB2DE430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 c0fe2f04315b378538b8e74b74d20158619a6f6abb1e55974caec817c57fbba6
MD5 b8b4b6ea27ccd1f39a9750c5a53fd645
SHA1 10f5941d622cff953698cc4eacd21c4e49459705
SHA512 25226b96a8d1a8ecaccd2b6ae7ca62282effda296e7261c6172c731bc6ba47f7704949ac95f6c767f22a15c95036e056e0ab8514c81d410d2dbb675c8e6966aa
SSDEEP 768:6QCOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:9ThaqLI1WcxKgdfHJHH
TLSH
T11963D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 00270fde4f45c46a29d44b11017bda1ffffe3eb85f4352ceb018ed7ed99e846b
MD5 7333227a335d609330c6b2b61940942c
SHA1 612ab37cf29e7c3cfcdfecd4c63fecc48437101b
SHA512 16792dc76ec84a6abb9ffa24281b3f2b56b045544b4f73520e9d0bae8cdbd49726a68d8b7b30d50d4f9c90afa569a44fb7fb6f9b2b3b60af4e7543deaac82070
SSDEEP 24:k446gt8fgqLI4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uwz:WRCgqJ/IHRH34kWqB1kQnjhHmr6ITmUw
TLSH
T12642866EDA2CAAA2FEE00B3ED7D1D4127B36A60EC2E8C9F1095B905746C440405DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

636926af-d1c0-446b-9cc3-77e926fcfec4.tmp

Path C:\Users\Admin\AppData\Local\Temp\636926af-d1c0-446b-9cc3-77e926fcfec4.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 8fea6268ddbfa7776285570caa3ce3e55d9cc5b3087e38379bf060ab50a0bff0
MD5 e5d949df4e6a0f1baab5504d04194e44
SHA1 3beb137f0ad79183ee7fd469faf3fe592dce7fcb
SHA512 0896afa8dde0065e568520f0f1d560c86f95ab2ad38151a44ec0877a34591b4346988076141c5d3dbf82b1a126990439cb5847c22bf151a552aac50e92723beb
TLSH
T1F35135E03572723F57D347D860660C856A61F189032FAB5CEE4A4834BE5CEA1A72E7C9
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1616_1117851976\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1616_1051610726\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download