c4c0b8e1593bc5481521cecfce00b953e3ee6d7323b98e7ddf2e8c90a78ce545

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VelocityLite.exe
Size 232KB
Sample260628-e48gdsfs5l
SHA256 c4c0b8e1593bc5481521cecfce00b953e3ee6d7323b98e7ddf2e8c90a78ce545
MD5 e4df8ee6e755c3da3088701eb1c05b76
SHA1 c52dbc1190b84555e27649b9b54746b958e5f3cb
SHA512 623ae06db60f42e33c6e94b4d74a20d6e456a1edb94e2b8bc58424532f27bc5baa516465cad455bddc0351e21614d4965919a123b7cb0891b8527021928a09d5
SSDEEP 3072:IlDJk88wN1QI7sxrYL1peQ3lOY9SkHNwG7NzaAT56Q7BQz:UAIwxrI14Q3kYBTM5QNQ
TLSH
T185341903B65890BAE1A2D638CD928981E7727C594F71A6CF37507B7E0F766D09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
73	1220	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1108_953336703\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1108_953336703\smart_switch_list.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_5264_307532183\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_107_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1108_953336703\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\sr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1108_326685228\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\cs\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\gu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5264_1853353438\_locales\mn\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4260	msedge.exe
1220	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270947114585391"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{69B98036-F286-485D-A78B-B7DA85C3A926}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{D7CF8E65-2DD6-4225-91B8-0343E61A8ED6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe

Suspicious use of FindShellTrayWindow 12 IoCs

pid	Process
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe
5264	msedge.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 5824 wrote to memory of 5264	5824	VelocityLite.exe	89
PID 5264 wrote to memory of 5744	5264	msedge.exe	90
PID 5264 wrote to memory of 1220	5264	msedge.exe	91
PID 5264 wrote to memory of 4492	5264	msedge.exe	92
PID 5264 wrote to memory of 1916	5264	msedge.exe	93
PID 5264 wrote to memory of 4492	5264	msedge.exe	92
PID 5264 wrote to memory of 4492	5264	msedge.exe	92
PID 5264 wrote to memory of 1916	5264	msedge.exe	93
PID 5264 wrote to memory of 3476	5264	msedge.exe	94
PID 5264 wrote to memory of 4648	5264	msedge.exe	95
PID 5264 wrote to memory of 3476	5264	msedge.exe	94
PID 5264 wrote to memory of 3476	5264	msedge.exe	94
PID 5264 wrote to memory of 4648	5264	msedge.exe	95
PID 5264 wrote to memory of 4648	5264	msedge.exe	95
PID 5264 wrote to memory of 3852	5264	msedge.exe	103
PID 5264 wrote to memory of 3852	5264	msedge.exe	103
PID 5264 wrote to memory of 3852	5264	msedge.exe	103
PID 5264 wrote to memory of 1840	5264	msedge.exe	105
PID 5264 wrote to memory of 1840	5264	msedge.exe	105
PID 5264 wrote to memory of 1788	5264	msedge.exe	104
PID 5264 wrote to memory of 1840	5264	msedge.exe	105
PID 5264 wrote to memory of 1788	5264	msedge.exe	104
PID 5264 wrote to memory of 5848	5264	msedge.exe	106
PID 5264 wrote to memory of 3548	5264	msedge.exe	107
PID 5264 wrote to memory of 5848	5264	msedge.exe	106
PID 5264 wrote to memory of 3548	5264	msedge.exe	107
PID 5264 wrote to memory of 5088	5264	msedge.exe	109
PID 5264 wrote to memory of 5324	5264	msedge.exe	111
PID 5264 wrote to memory of 5736	5264	msedge.exe	117
PID 5264 wrote to memory of 4608	5264	msedge.exe	118
PID 5264 wrote to memory of 544	5264	msedge.exe	119
PID 5264 wrote to memory of 5932	5264	msedge.exe	120
PID 5264 wrote to memory of 5932	5264	msedge.exe	120
PID 5264 wrote to memory of 4380	5264	msedge.exe	121
PID 5264 wrote to memory of 4380	5264	msedge.exe	121
PID 5264 wrote to memory of 1108	5264	msedge.exe	124
PID 1108 wrote to memory of 4872	1108	msedge.exe	125
PID 1108 wrote to memory of 4260	1108	msedge.exe	126
PID 1108 wrote to memory of 5492	1108	msedge.exe	127
PID 1108 wrote to memory of 5492	1108	msedge.exe	127
PID 1108 wrote to memory of 5492	1108	msedge.exe	127
PID 1108 wrote to memory of 4424	1108	msedge.exe	129
PID 1108 wrote to memory of 4424	1108	msedge.exe	129
PID 1108 wrote to memory of 3344	1108	msedge.exe	132
PID 1108 wrote to memory of 2852	1108	msedge.exe	135
PID 1108 wrote to memory of 1088	1108	msedge.exe	136
PID 1108 wrote to memory of 4512	1108	msedge.exe	137
PID 1108 wrote to memory of 5456	1108	msedge.exe	140
PID 1108 wrote to memory of 5456	1108	msedge.exe	140
PID 1108 wrote to memory of 3500	1108	msedge.exe	141
PID 1108 wrote to memory of 3500	1108	msedge.exe	141

C:\Users\Admin\AppData\Local\Temp\VelocityLite.exe
"C:\Users\Admin\AppData\Local\Temp\VelocityLite.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.NETCore.App&framework_version=10.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ffcba49c188,0x7ffcba49c194,0x7ffcba49c1a0
    3⤵
    PID:5744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13464872337128045821,7445442093964735318,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:3
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:1220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,9610527982204663516,6688185494795565686,262144 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:2
    3⤵
    PID:4492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,12473751191724309497,2180333342183036478,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
    3⤵
    PID:1916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,4924734694307109686,17629535490347764406,2097152 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:3476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,8951376605038679989,15392354084881402730,2097152 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
    3⤵
    PID:4648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4860,i,16613138326972749848,218646600163836427,2097152 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
    3⤵
    PID:3852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,10803281534159924054,3562686878049729129,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
    3⤵
    PID:1788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5136,i,2945356609674260385,3968907871835606765,2097152 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:1
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,6129514916314258906,7123545525191620795,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
    3⤵
    PID:5848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,10605935736600535496,18206142414656555623,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
    3⤵
    PID:3548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,16578843134093969435,6202480071317341782,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
    3⤵
    PID:5088
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,15672783539530388896,1270416367565513027,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
    3⤵
    PID:5336
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,15672783539530388896,1270416367565513027,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
    3⤵
    PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,6354886371923428929,16904338269110037536,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
    3⤵
    PID:5736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,13875432964284262030,15029339719400727567,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
    3⤵
    PID:4608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,4360535163423809455,1506515126971625097,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
    3⤵
    PID:544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16225910573435617560,2673012040655553538,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:8
    3⤵
    PID:5932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,17052683175784339356,6308319466093812320,524288 --field-trial-handle=2964,i,2015590669692648113,5875698883744386406,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Program Files directory
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcba49c188,0x7ffcba49c194,0x7ffcba49c1a0
      4⤵
      PID:4872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,11833416171757249890,2087964487698128837,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
      4⤵
      System Time Discovery
      PID:4260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,8474138048683414378,607749435234957450,262144 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
      4⤵
      PID:5492
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,3868905946968417284,1512734013953255566,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
      4⤵
      PID:4424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,7180769700493820413,10210296693632237211,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
      4⤵
      PID:5788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,7180769700493820413,10210296693632237211,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
      4⤵
      PID:3344
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,7568977275809306472,8284112928899296503,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
      4⤵
      PID:2852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,15059437555429108287,15792894697085284334,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
      4⤵
      PID:1088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,7901095749275642773,14940724824650766221,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
      4⤵
      PID:4512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3256,i,5713945626739649730,14668569553221846809,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
      4⤵
      PID:5456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,1493239051732257599,10027303342428092413,524288 --field-trial-handle=2292,i,11148551893929147512,3116379847223513075,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
      4⤵
      PID:3500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5892

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1108_326685228\manifest.json
Size 53B
SHA256 9943e80ee867bd06da1039bb873407d16bd5d8f9701bcbd145bf6ebf8e4d7560
MD5 11d9be17529b9a6c83e5572db6d92e0e
SHA1 df0c90e32848efe07103037707139d5f00bb1ee2
SHA512 d82fd6693a7319632e0b9e55f6ccf4660ea01447ccf49f992e2111f901988b49cb7f25309188a218aa3f4ead9c75f9f6d2dba5300efce750c3da0d7de98cf663
TLSH
T1129002604514951716C10E9065B1B891A391661995850D1D04451559069546CE150298
MD5 SHA1 SHA512 TLSH

Submit Download

llm_user_input_extractor_config.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1108_953336703\llm_user_input_extractor_config.json
Size 4KB
SHA256 2056ee7ed0e7adb69344c93a024158ee4e2332ecd50d183dbad7595c4d588ed9
MD5 7736ccfaf720ef9b0db919dd01c4bf8c
SHA1 24b48ec2dee093b8e4384ad1e25ad8f12af0831e
SHA512 f044ed3b6fee483d211328df83f26b98dfe47890c05409c65c7f7333fde1fc043cd1c05d18250e8ee8731f355c13b3a0aedc0e60b82a26c42a7f209a69ad4781
SSDEEP 96:a0y3Cmyjw2w61skd7GZrlWqPZ96vOim87Ai:wyOy7k5rx0WVS1
TLSH
T11F91DF3BD8A15C2B00F3B225B87A7642F534A35B27C05C5B7A7C5A1C8FB6D312582F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1108_953336703\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fde3047f99414642a72b9d4ed89de016f2244065578b284bff36caaa54e7d46d
MD5 194705af31fce27cdb98163b9fcf81a8
SHA1 b2d09e4a6c1ad5bef281634eb3202f2d1d615b04
SHA512 05531337ac91cc7988137059be025bb6688b9f5c8b2004da114113106227596c830c353bc1c380126b0c06eb70e2953e1760596d46db5feea15d8211e8b150e5
TLSH
T14FD0A7E8662AB9D1E13D1D32A4208700F66C16932966D305E268440D9C7E09666C66C5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce329a6d66e3014e43bf78a7f70da5bbf29031199d05783dede424ecbad2864d
MD5 cbfdd1c06ff78cd494965eef9bd1f052
SHA1 523a5f9e33cbce9f5a7712ff9957cb29d4759f0f
SHA512 f854612623654f9e7dfc211e8c93539df0c0790ce6dad396415328f7744391ff3936a420a86ab394eeda575de0841925ba396ebb6a4e483692fde78d6407486b
TLSH
T160D0A7E8224A3501E169197274198711B7A855927A56E705A26C510C9CBE4AA22C6199
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 73cee49785594c5d506af09f60337744c3c520a044489e0032f687bd63e85c94
MD5 2adbd004a97cf760ab132972b936d172
SHA1 ccb41388ba8f7d3b29a57b15f3ba7589ef8bc8ca
SHA512 8e4d18a35ede28c9a93fca57b2370c8c5337b0f742b0cd76c4d008f87e9977313f19837717a6f51794ec2138b584f14c1cffa4eb4cb2c18d017885b065d4f403
TLSH
T150D023F8334A3501E1651D7274198711F7AC51937F56E709E26C510CBCBD4BA23C71D9
MD5 SHA1 SHA512 TLSH

Submit Download

03a65c7f-b2a0-4e43-8737-1f2dd36cfa85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03a65c7f-b2a0-4e43-8737-1f2dd36cfa85.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 43ee1bce0aa9bf458b7e3cde4a1b0f0f2cf45f5f13d71abbbecdeaf1e1cef68a
MD5 d9b10a23e0714cdc4f1fc8b6568b4b3c
SHA1 07ea9cb03e7198bf1cde6c23e55a573714d28470
SHA512 005249e7c0e5e321d0dddfb27960b439a2fdf1d272bfce55d4ea3ef0dc685775d8fcf68b8c8929984c204d750d4a08c88a4af07b3abd0430b032cf7ab23d2863
TLSH
T163E022AACC62FC7709FE4B28A059876AE70013673A80894F3B3C82488FB162A45C585C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 0bf08f55bd48b9b515d5828316083587ff8f5514c9fd52cf306580c9800b8821
MD5 fa0f034ce8dcaf1073a721c9de2c87ec
SHA1 d3c2178146790aa15b6f1b7b57044467c1e92534
SHA512 8ee82b30e00e207a81b9c17292bd9a22877a05ef05e46c43d45e19fb68e5d8ea3c7e6caee0d64a0030191b878fa5d88faa730840a2bbedb686f98e8cb5370950
SSDEEP 384:nI0LjeT33ciVxrJ9iOzJYIXCN7XUL3qydVUkCLzO4s:T/MvVxrJwqXXCBkrqP3O4
TLSH
T13D13F6BD7E060D91DAD6113D881F5A31673CD836FAC71B133374368A537A38A991ECA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 a8d2b8785d72655d92fce9a89df245db8665569ea55e171445b7337ca4f4fc05
MD5 1f7e743c834c28ef5b307e60725fc9c3
SHA1 d04e55b71e08957b645b79d3e74671bb488a3d9b
SHA512 90a198deaa40a03fc137bf9aafa3e605d0ee90c2771836e83f48e0655737463efaa1582c7097d5ee6c8066958fdcb6446a7df39c97b432c9a402e7fa0e317337
SSDEEP 1536:wUL/wvxL/+iBeAp5HWsnEVLML/C8L/C/zBM8TLDokUoAaNf+LIgkA+NMdmvfVW:FL/UL/AAplW/IL/PL/++If7AaN2J
TLSH
T1524460F74851A05BCFA802F5D2033A3DD17B051E7DE1E8E9E67C4C952825B22B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 454bd76649c1d69db877d5133c5c2426e92f7069df24c4d00224d5cb0e62a708
MD5 d88a27b35f4fe745aef63eafbafe2a5b
SHA1 061eca6168f158819aa03c312cd7ba3b9dcdc910
SHA512 5321a24a8988676e16cc01eab2f9028f233bc360029335fdb95165f7b164882757748fb5028b94adcac57233580d5bb4141f04d94d33dc557caadfa6e6c78f32
SSDEEP 3072:+Df9y+HI5/uCBLHx2b6aJN3QnlcZc1mjhyyrZje5mvIrm:Sf0v52gohN3IcG8fZje5nrm
TLSH
T1A72519EECB682C82CE6B877470E0D9077E712183B69CC0D39944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 623d09d68b2052fcd77bf3e1ee8906a6d3451a0ff39507c51b0e39cc3edf9d59
MD5 f76d6800a0f29441d94f66d1e29f1173
SHA1 71c6b391f9089f96a72767a6da6413323abdc1da
SHA512 3bc0708e9619e3bdc3b2761f11c6c62d1cfcddee780dea469a226df3229eba30adb042440b316ce23b77474ee2fbe85de16cbf9c0cd0e44d7db29b96c466e268
SSDEEP 49152:mYeqmkqLlPTY+Py493sIYx+T0Sc6Hq4q:mu5qBPTKRIYx2cSq4
TLSH
T176867DEDC96898C3CE639970B0F0E9477C7423C3F595C1D6889CC684026B7C5BBAB669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 4650e39adbfd0e91f3104a6847e71feaa83a4eeca063cef796a72882f2c1790d
MD5 68f11a264c3c613403196ca8f3f94433
SHA1 78e732861605323fcc1c5a0b33acb690c88711e0
SHA512 733ac4c22580fe4adfc952d2fbc75f8c72da9880f7b942b923fffb7d0268e7302376cfc7060b06ad36f64f7b35a9954d5b02eeabf42022a0bac527a1e7bf03e7
TLSH
T12851C6F995B91211EBDC05FCABA47B3473B017CAF5D31D868D846B365831B35CE21582
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d646.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d646.TMP
Size 2KB
SHA256 7fa3d713729bc6f93b923893c06d0ebcd2d06c5b20b00b189cd9077c1bcd7755
MD5 806fe06b3ae5a5a5fe09bb70620fc71c
SHA1 25b185048cea9886f0d734292a8d4563648e83b3
SHA512 651959865e5c66fbbddb1fa462337fb7f143ad2451189e7177ecb412b7a50e7d7bbb4733c6eb25b0b6d7704bcd3db66875cdb9b0145e159be24853ebdc655566
TLSH
T1F6512DF999B91261EBED02FC9BD03B34B37117D8F8D31D854E846775A830B354D61A02
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 abf2b37e5e5c1185544dce9d01069620012da5899e7681b64a9d957aad8389ff
MD5 2d632025e3405fcf78e27e956b3ccbca
SHA1 079ed5fa23949af23b3ac52def0bee1f2d24bad7
SHA512 0debc502a3fed15ac8483897ca2c9dee866a05470241acd9739fd033bc0e5175786f2fee3ec7539a8056a5b48d244b736e898a83991e0c8daaac724a05dfa679
SSDEEP 3:MsEllllkEthXllkl2zEklGlll:/M/xT02znGl
TLSH
T19144041C7FC00C05C5001031D011C750D770F5310D1157C374514D135CC55440D00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 b5dadafe37d5aa56c80bc8a7efcfd1aee28b0909d79150bc428b2348f87531b5
MD5 60da846c32dcbfe7dfe34e179a44948c
SHA1 fa2e2078f44ab03946c896f6fd829cc60ec4da15
SHA512 17f70aff5c820aa9d327d433f423107e06f64cb873aefdc08fd01fbd655fe4a72f0b6e7be12275ee52b9547fc88e6dbafc8dac23026c8ebad47a60f32ecd2e0e
TLSH
T1D2E0D89CB9CAC25E6A6074CA46255B0CC184354AEB96ED47170098C47707161F3D6586
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 89815deaf1db5a6fb3345957771a91ca778a4e5e8dcb18bfae485e9ffe5935e1
MD5 764ced78990d3d95aa6846239e786a57
SHA1 2d5962916a5948e09a9dbfe220814eb0c3ce7cf6
SHA512 6d93322e509dd9b9d1985e2e2a56f4d7666ecfa40f80d9ad4c273b0074a9df2d1d32a66e68c35f34eaddc1a62d2409ad6800a4a7f3a144b42e96417f0c89bf9b
SSDEEP 48:Tyi+7f+UZD4jJ/BuYyTWxV3yWCKFOWTpj:GLnD4jJ/8YyT8yW7OWTpj
TLSH
T1B1E2EE8D3B11F911C4EC733DA0C2C6E05EFC286C464DB571923898B68C53A65F1DE14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 d1f51dc3b7e43cec9942549c631e771e3451015f1c872a696f57681b72a90a9e
MD5 bb4114efcdad4e7ea6262b86ed75d92c
SHA1 ef5611d62e61f743aa981f248e370e0fb99eb670
SHA512 26c839b404d90138048eb0a2af31d3e157a4cd08e6210445d48c3250173d52620f9c71d9d40cef99c182d4e80011ea155fdb380131de9b0f4f475e1b2b521f69
TLSH
T111E026247CCCC22B95687897C7684708C3D2358EA38EB90A570899A46201745F3CA680
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.107.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 b4e65e43bf8c6119bc063446bc1f61c44e46d4327648970eb82cf6ae96e848b2
MD5 22d1b8038c7edc24756d57eea52acdb3
SHA1 e251b09ce65b2998543907a823d571cf854cb0c3
SHA512 ae22b08d612e988edcce89420f5954f44dd36b2d351bfe1eb6fac07deb717a086a40500a3bb35235e800116e3e93c92b756f19fdd0f29f5ec09bbacbe079c45a
SSDEEP 96:6BCx1vW1iIO1XqpIgwW1841Xq61uXl87A307BjT+QTvW1FIO1XqCIg1W1k41Xq54:waEZvj7A307BPxiWL
TLSH
T1E5925207EF70B403DF201A76336E5435DA7B921ABF8BDEC47C614450D9B3696A0623AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 f0c06b75c7c594eebe70448c926724dc33788959b27158d6a3f7ef51acf99791
MD5 224454698f3e798d88aa52f1fae39b92
SHA1 5d711d022638f7d3cbafa5a8c257c6ecb5be64d5
SHA512 2cff646a504f92caf0fb6721ca50908ca0312041c4d845e3a06377c97cdc06f69fc08da8d3ce5454fffb5dcb3b924dd03104d89cc4620d2331a3495676be2335
SSDEEP 96:MIO1XqFzW1Fd41XqFSIgLSvW1FzVy41XqMIMpmV41XqEI7IU+bGz83uy3+u4tgp/:eys7f+G83uy3Ct7XBBKYA+H7DXspU3iZ
TLSH
T10C14581F9F702212CD7851766AF744A39D6DF03B8753A6C96CA10474CEF3A52A02C5AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 732B
SHA256 fd7f102c7dc0a3eb0e915bbcabbf85469f82ac6a9d34b69802b0e5e2c5431884
MD5 7c10ac8feea64c14de281f8d7f1936c8
SHA1 c38bb61f696c1555fdc70def883bf0275d6c4a86
SHA512 b8686a6214bc40898f4379ca4e511e7113ed4c2fc062ba3513e8a9c0ddcabf7e4325c059f322b216ffaa70c7bd3fd76e74c1a2dfea47a9b8dd5e6c8d3ef1afa4
TLSH
T16101F2BAD408D427E7012AB34744EA94636FA72AAAC4E38CC187D01CCD561E862574A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 2c3b951182b8601b1723675164d9efa1c7b3693a236d34161a04939e89a680fa
MD5 d7ae3af181833b8b8746b6dec551b151
SHA1 828f94939666decdc29955b5d4a48cb13b4b2302
SHA512 c29703d77039ed0d2070a2c1ebc0bde6b3fb8a5543253afec35e428a2833f7cfaa62f86a6c6fdbd90598615601b0810fd0865c365ae6d511aa6192bf8d206e43
TLSH
T1E9E0D86498CDC23EB614604B42156B48D3A5364FD7C9AF055B08A949B20D314B7C61C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 362e47dc5ca3b731774e7ce94a8b99ee9c5582e9dc0ff5f309b03a074113e05b
MD5 015914750a91eddcbc7ec2a96969b5d6
SHA1 d77929db9599b24b1db02fa65057881ef6c90601
SHA512 d0a27731c729b35cda984b76560a7bbe82fd8d0e8b01235fbf20e0a1e76db59c233acdbedf7240367d5f392aabfe2d4495728a03a8a9417195f07a484d64f37a
SSDEEP 96:iSeMatUaAavdzRRlSJbMAYfmykkHa2in5Hl6zQkrfPlr:iSLaSazd4JMvkI
TLSH
T17C92A50E6A349127C5E11732DED3C5262A7C222E9367BB969458D0B29CB37EFF043076
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bdfe92cdb1d04451159b704772bd889ca1c37e252a8daad84b173c16765f0d0c
MD5 7b4f5f8e4ff3d8049d72a37cf95c829a
SHA1 c5947769e83073d3f3e8bb599d8e3f26283cf76b
SHA512 9be0871fd813800b3fe826e8fef6ba22a6c20d2c51d995f110ba87d87333af443b83051b428f2cfb7b07127fb1581f93fd16a00cc9adf43d6e9ddb5b34e74601
TLSH
T1A561BEF783B4856EDA1195F0AA18AE2FDF2D0615431C7C6A89E0EE27D3E3471E04265B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2ece83f73c3adae6a55632cd9d1badae648a309c022a67e79391733e99d4fb53
MD5 23138d4984e1cbe9af5050196ca77011
SHA1 8bf185a5c03f3cde5b20411e804e849562b25785
SHA512 eb2ce26ea500bd658135101806252948a5028159ac758da34a1d5b1cc322ede2714ab25985990b93d749c3dc098d22ac0d17721c9affb188f37edd2594ac4d62
TLSH
T1C961ADF787F4856EDA1195F0AA18AE2FDF2D0615431C7C6989E0EE27D3E3471E00265B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 1ee664f2ba0131fc04f1876266e8b99da34b53a74cd28f7cadad2f92e8b002a2
MD5 e663f98915a79c3c7caffa38066b6b64
SHA1 aaf2a96ab1ac3b4459b22c2b7e0d87a9e706a08f
SHA512 f3e92b1583af59fa34ba3ad9919db3f6cc6b016b15a642ea6723dcc6f3120d972bddd91964d23f13118b1a6aec3aa5acb8fcdaa38f6af4b578e878dc428672ff
TLSH
T138117B63E1BEF4EF1029186F4D59BC15AD79A432425258FCDA96426CB1531F70709057
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 915e11dd84125e30aabc41f60dcca329c8d8e26acbee6c515693d50aec1ffb46
MD5 2e47a820b92e3aed95cf13ab12f46fbf
SHA1 94b61a737374cfce18dfd715cde541b678e5213c
SHA512 3e0eca7ffc6eb737ffcaab9bea2101cb51c1764000a095d9f15804391fb4628a614c2fe4eb4e7bea9fd054ebd63ee25358b27ade85ec5b80e8d72433e41f1680
SSDEEP 192:sxZ2R1yMqZjK1Ml83cm//fvsMWpVItZdIaRuvMzodp6gHW6+WNFNHN/YP96SO22+:sxZ2Geh//fvsMWvItzIKYPHHbN/xRNs
TLSH
T10572EA06A9345D7B8DD7D219FA45BF63D6F80562A6905E449AFC8F0C01E77ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6e6ad1e307aa31d1ad94e40766a35d460bc7e9a3fde6a8f171f435fb8ae86492
MD5 b4d63dcc31041485902e86b5b341d0b3
SHA1 68c3a495b1f202a2376c628f3ebe04770577a3f8
SHA512 ace540a80b1a5d05c29b448dc5ca20d1e1744987557d25c2dc952f2bc4e0a0c1b99144d7e55a4b4fedab9b96afd5febbe062605d5b382788031cc2724d5732dd
SSDEEP 192:sxZ2R1yMqZjK1Ml8Mz//fvsCQaZdIaRuv3zodp6gHW6+WNrHN/Yvnu6kONIIg5nf:sxZ2GL//fvsCQazIKYcHHbp/Wmtf
TLSH
T12D72FB0669349D778CDBD219F645BB63D6F90163A6905E449AFCCB0C05E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c0a77f1ba91c72a77c9dcae442a15ed1e71541243c2fa8fad176c97e868fe259
MD5 49127ea529c9d27afcc230318f54edd0
SHA1 7cdeb1c905b02606ed33751d550064a62568c5c9
SHA512 5a88414afd6aa6db0e907614ceebb16a8e2a2a80f1644eae9bc06971e86f03c647df8c3a56ee1cf7b765094fcd34e33f95fe1d57a2cf8430544b69d450f179e3
SSDEEP 192:sxZGR1yMqZjK1Ml8Mz//fvssWQaZdIaRuv3zodp6gHW6+WNrHN/YvnC+NIIgj1J:sxZGGL//fvssWQazIKYcHHbp/4mjf
TLSH
T1F762FA066A349D7B8CDBD209F6457B63D6F90163A6904E449AFCCB0C05E7BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 34ed255a01f54440ebd5f7a9ea706299698cb4f95847f9672fd4ffe97020637d
MD5 6cb315a6682c85d551b03cc9c984d7f9
SHA1 5c2abae58d46a09ed72754cf58ee8bea8e345b89
SHA512 5cd32be1618a91a14e86931dacb9e3d1bb0322b87e524524d13ed411e0019d54c6d24b1e27ebffcfa9bdaffa88dfbab99642c67162d3c9d70a63f9fd0e8da70e
SSDEEP 768:ZYsv8OdesJ7pLuL7WhWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OV7ysy10LlEe7:eY8OdxfE7WhWvFvmXu1jaLt10Lm2Nu/u
TLSH
T12DF2EB3B6C0CCF7E4F844D9CEC2A6F8A6DE802CB5698895447FA844C02C76EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 aea7f395831bae51b3c7357aa921ec8d6818ec891a445026616b6b86a2edaeda
MD5 61b94009793505503736c0c4d035c89a
SHA1 8fc97839356f66425f9d90da46f511b53672163c
SHA512 58629f281e1cd179c00c6b39251675a4b2879a0d52b6723fc4db56d4fd032e04779dc6c93a572dfc870866351ff02d9529cc2c76e6a972b1cb103399c2d534c8
SSDEEP 768:ZYsv8OdF6ssi7pLuLnFhWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6ysy10LlM:eY8Od/HEnFhWvFvmXu1jait10Lm2Nujv
TLSH
T1BFF2FB3B6C0CCB7E4F844E9CEC2A7F8A6DE802CB5698895447FA844C02C76EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 d19a4cc1d4a23074b13da62223ea4184003318e28eb7dbb7ce38d7eeefd8a6f3
MD5 2dddb1bf20061e305b8ee941980f9076
SHA1 a3da2b6ba51fa3e3fb0678a18aa19e576f2edf9a
SHA512 5678319d2345612fdcdf0d09b1663fcf65af4b294c5ba3a66b2d70f2eadda19a7dd59e897226f6c6a04e8f43ff61c0d8bf969e55b7c0d4d59889a8aba84fd522
TLSH
T1CBE0262079C8D27F712A304B4624CB08C2E9B50FD3C8BD0AAF09EAC4A386A04F3D6180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 ab64eedca2dbe559a0f6557db38a7603ad08912faa56cd5fb8c9a03cb9b170d0
MD5 2b091147500d2be929be113d9d4985b1
SHA1 06449cb9a6767a4c1f75c2b0c262c7f5a86a9240
SHA512 85d4f3923ae862d9a5918fbe757bd6551dfcecf41af7ad20591a0a8f6098282ab50d7751ca1e326e6b0fdd2a25056facabe9648592c9b38c178f50c6966deb15
TLSH
T134B01286BB505616C4CA4DB30DD04B806B10E05211008803882CCF20DC1DF64BE028C8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 a63f7c8f3d44a5a043dbb6c4462e62047b92e24a43b202f000b0338427953699
MD5 3291a1fcad82a5f481500c4c5a920aa3
SHA1 521d785b4102615b48a88eb9478c5359639091ea
SHA512 3dad9fb95bc3a409bfd1eca7b5d2e0e0c901a88263944133e2d5fe2f3b6e1703c0959740c3f86a0fefa18f31a1b0fac0c1cad359e938c3903f537dc192a4a992
TLSH
T1B2E0D83079C9C32F7259308B5228D708C1E3750ED7D9B9156B0CA5C8B30E64073CB540
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 c679585fb21231c6ac8b7d180ae6b1239bd556cab994df2ed2e851a97f3b8a4a
MD5 e2799c06a9702d63a18aa202910cab6c
SHA1 be50ba6e1dedabe310833afe6c09feb81262c756
SHA512 70f6194e29aaf1d893efbacc2444dcd86c0cf879e9160d291d7b8165ce8894a5947803b4c463af5676bec066f089153a6431725081516644c96381a61dce85f9
TLSH
T186E02670EDC8C33A6B18B0874368AB1CD2F1B90E93C9BA0A972C58C4E201610B3EA181
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 bdc38ef2cedd110ae5a19fefc96cc4f092f3cf7ae2963e8de14355a5b249ba37
MD5 888a6feaa6fa4d1f4a4189fbaa75823d
SHA1 9c867fb788a90e9bcf665094bba8bc3d2b757599
SHA512 911795a010bb85f7008304e838e014fee2ed20cda38287f08c15035eda10d99e66ab1c6a1d8ce358958153938b299cd1876a085e8228de0bf1f7cf9d635871af
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGy:05ppxnY753RNBvRJJdt7p5J9fvXC
TLSH
T165B28B5A713E0212397E2948B39696364F4235A33058E4BF7FB814A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 cb4af19a1c2aa898250da73eb8983ced2d453e34bbc0bb2a3bf422e0b0e5ab55
MD5 272ebc71b152884cc429d31d205a3402
SHA1 30bd79727eea6683d2e31e3006781602245c1575
SHA512 acf0f0e6b47b61d02e6796175c731f04a705897390f95dea82ac0a73f4c5147dd8dec18bcd3be754ae0329def9ec918bc20842754655c5028e77943fc019b991
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGA:05ppxnY753RNBvRJJdt7p5J9fvX+jJn
TLSH
T1A9C28656713E0211397E2848B29696374F4235A33458E8BF7FB814A14F6BE225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 1d5950ef6360dca4a4657ddcb2fb4ac37977679cd108b33f7e9486d49ccdbd41
MD5 36e79c40d462bbfce259d490c93824f0
SHA1 6a7d747cb50b0bed11fdf37691d74c6fa52c4505
SHA512 b83e976b02153aa70ba0e356026907cd81cb040f0a719c7304347c048798754eb238cd4098e1f3792b1ac15ad650173f8554f169e2d4bcd6dae622d50046b8ef
SSDEEP 192:P+xWW+fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxcfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T10A24730A7B747001EDE6D9725CB080771E3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 0c34a2e214d6c41e416c9ded01d87b771f117bf66f3ddff2092e7d7ff7740205
MD5 4279845630f813546d7753da8bc9c35f
SHA1 825590d126d32a8bcb6824c7458f613ade60ee4b
SHA512 418a0834ce5e6da186e3d7485159f7fa534f06059c246b92be58063a1dee7d295bd94bafbdc08973c0d8b9e2c5266ed262a782fb2b8723de5fda02d473ac6cae
TLSH
T1E5510BC1A3E920956F8DA981D21A5413ACE53F2A260E9CB2332D50F45F48C261FEFE75
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 17KB
SHA256 3f786128083717fb293f2a0ae72223e123d3ab04393921940d83e21990ea1e70
MD5 8832b9267771158659162c5574bfd492
SHA1 10b5f4788fdb3ddea52e0a84d2a1ecf5c25cbad4
SHA512 2e798286b4f98b7408a46526a9f2f382cf81653ca8e2c0f51ac95baf502320ad8433033fff61cbf9f1811ce2487fac99ed6e938307a5e69bc7fb658c21a4f3b2
SSDEEP 192:mQOA4AsBDl9HNCsMFP4fldQkGIIIeb+MIMYZYcYoU:GAhsBJGscGQ/IIIeb+MIMSBg
TLSH
T1F072A55EA7502733C65E6B7313268655D7E2AC030AA2A39C7476584EDEF3A67C0C06F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 1a781b5b7f3e0b834fe48301469ff4257f662fccabfeccd05fb13d20b7cbe553
MD5 aa2351e8230bc84cf6e6487a5e640aca
SHA1 9939dd29aa01cb005606980ba7cdfe1325dbb6a9
SHA512 795bd476589b2bc3bd9fa700ce0c2f2ede03ec6af6874eca4d50d4dc75ba135f564fefdfbf0220bb2c1997c4177a9523450fece47628cbe45632e050e0bb9394
TLSH
T10CE08050FDC5D3DF6B24608B46684748D295790FEBA5694D1F24D94C6206354B3DA142
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 22007c04fbc10a0256d834a1bbb2accd838eb47b0c1492acf9e2d1d44a66fdf1
MD5 050944e95e8e0d8a7b7beba08b967c7a
SHA1 93ab6793435c7c9a9d6e6d9ed46469d69b756b11
SHA512 6c2e5a279581cfc0ca4d81db2066e538911c1a9006cc20b2f40ff3dd1b164790569a7972dc4d50b9437a6fb5f11bb83e9837054839e94f071e48b47a93a1fdf8
TLSH
T182E0DF10B8C9C2AF9121208B5168CB48C3D63D0AEBA8AF0A2F00AD4CA205751B3EA181
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.15\data.txt
Size 149KB
SHA256 6c06804841a25558d413ef4a693eb0af3dd7c73d00e13b4aa437a37bef468256
MD5 c85d9f0ea7e0bb78c6904b1cbd56febc
SHA1 637dad8c1ba9c984069ceb3cad16ed7b42fd94e1
SHA512 4f81f0c52c163d4c63b1e88bbed8479c06026d202bce3e7c479af0aca4fcaf325608e48b80be385528c084a0f94bb0a579a2df77992eba95701846b5c67b54d6
SSDEEP 3072:mPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEhrYgtryMcsPB:aX1aI5aZoKzMJ07NhrYGr3cs5
TLSH
T169E3F110C9C40F9DDFA82A2C50FE0B0DA3D0879D85677AC6DB73BD4AAFA7A0552171C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 120737f2debca9fa126f405881a763a5c49538e18926a12cd7600e88b2c4eab6
MD5 a321cf40774241665ca285760081dff8
SHA1 681bce11a982dc03ff63cf5750b035acfe2e5a15
SHA512 cbf1386ba97421495844fb431b71c6fbe0c7c9cae10010dca642cc590d08d2e74d887524635dc8551ac5f793de9eb8560ce86f9193edf1773ee2acda68c244b2
SSDEEP 3:MsEllllkEthXllkl2zEelRu:/M/xT02zN
TLSH
T1DA44040C7FC71405C5151471D413C3D04370DD110711FFC335D50C135CC75400C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 cfd324c314593f70bffc5bf42f246bd6cd57518db171b75012bf7a1834325c3c
MD5 df0e5feb76fb0045ede81979c9a6ac56
SHA1 c883554e07909ab465c13cec8a915d17b0d41b4c
SHA512 ba4ce743d15574e4257a7f81223c5908b66835d8bf05f46e43762ef6c35b49a21148aacc31507f461cbf23c30fc783f18d88f8cd90e207d0de3f9e0e509ea237
SSDEEP 768:KFnj+9PawgYkTdFGb/X2k0gxSV1AKR1Jhdtmn12bfZvb:d9Pps571AKthj0yZvb
TLSH
T1B8F24A72D894CEE76CD6CAC9AB06B516AEE44233858C198CD2F87D7D319F1FD430681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 87051566e84a83a80387a8b151265f6de8d787f0eabc7e8234131f9589c3ecea
MD5 30cc6fd815a11d0bc5eb6f93b093b9a7
SHA1 560387b9a120c32a6897403b2f680fc71da8c84e
SHA512 f801e13ae5b3e8098f608f336ffeb226744639e31ec74dd08aa2d9101aff44d24c459e4630478f8f61fcb223e4c17bd8e2375dea9d2edf442eae0a76c116206f
SSDEEP 768:KFnj+9PawgYkYdFGb/X2k0gxSV1AKR1Jhdtmn12bfZvb:d9PpR571AKthj0yZvb
TLSH
T12BF24A72D894CEE76CD6CAC9AB06B516AEE44233858C198CD2F87D7D319F1FD430681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 c2bfd93c2b35db2cd99e3be956faeb7e836fc6c2cf9bd1981515ccff5138c886
MD5 e05e4cec21ce758d2ba28c58b93c979b
SHA1 0b4a54b9d265471edc4143f695067ba84d969d4c
SHA512 332b31038fc7fe1b457708a3140ed36dd4e4d17463a0f42dd78566f5e0ea34b8d5bd73a73a3bc9f474b6539e6e6574ffe16d56ec374fa82b9925dedcf5a59275
SSDEEP 768:1Fnj+9P+wgYkWdFGb/X233tIWZjCsG4In12bfZvZ:m9P1v53OWZ+szyyZvZ
TLSH
T12FD24B36D858CEF7ACD78EC9A74A7617AEE40173868C1AD8D6E85D5C10CB2EC0347C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 208be12d2b3ac771b0f1d88d5aedb4af3061693d847a9ea1232a87cb80876c48
MD5 3a9f3cd015f1d0cd9ecf7d08fdd64fdd
SHA1 8a1a04269727a5a52aad786b4beecfd383cd870a
SHA512 bc89af7c2c7b7f8af4dcd478b4f72296a0ada3843aea76e184e8826eb08c2d718ca722621f4440c98c3a19d0ea96fcc2b9d1b4d47544fe412b31a9656cb13fae
SSDEEP 768:pPF1j+9V3awgUkqdFGb/X2k0kJmn12bfZvb:s9V3px5mJ0yZvb
TLSH
T1C9D26C36D858CEB7ADE78FC9B74A3657EEE40163898C1AD8D6D84E4C00D729D130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 8c6880cadab812cf16bd956541cefbfe94e28f1a78c8ca1995fe3ee999f4fe96
MD5 8f0c3dcf1efaabd82090aa3d574301f2
SHA1 1cc90e4e61aa7e7673474563f8a163445233a232
SHA512 ede558a78d2e09f6d12a0a517461ebff138e5d8753ff2d6dd866b28df6411950df76b5c4ab311e3f07f0de8221d9067b1435e47239dd085843c627628d71e9d0
SSDEEP 384:np0iF9CcmyWCs3sNr8TUNTUlI4lQckCr1lTphifGGb/4w9VokEL5fkJsty/7Igk:pPFccps3awgqkqdFGb/X2k0kJM
TLSH
T190B24B32EC68CEB7ECEB8B99B74A3653DEE41163C98C5AD4D6D84E0C009719D174B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 94277f2721360b2bfb02c842a017999fd2696bf440a17a8101410cb483381950
MD5 aca5bbbf23915d3ac8c7abf899a4061d
SHA1 a40834fccb559027f13093184c9ca9b11117c1d9
SHA512 41cc1abfd3e15a5e72b71d22977b82e61a6487d85e0ea1194add0c6f28f35bf5baa3aa6e62c0142123f8c2390119ba66b6ae3f379d68c5dbdef55233d9151e2e
SSDEEP 768:KF1j+9V3awgUkqdFGb/X2k0kJmn12bfZvb:J9V3px5mJ0yZvb
TLSH
T157D26C36D858CEB7ADE78FC9B74A3657EEE40163898C1AD8D6D84E4C00D729D130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 2532283d391cdeddf318b404eec9b60744a95c35c7f71c3b267d0d93f823386b
MD5 fd686a9d66ad323e26b8ab24e33e2a68
SHA1 745e4f1f16ad880e430a352a2bc506c6e676e20e
SHA512 02bbfbe0ad1d691e8ab13efd83df290d119adbbd53a48fd4f2b69b60c845b10e284077878e159906917a932fe6bffc71dc21057102f3ff48893512ca7e9a42ef
SSDEEP 384:np0iF9CcmyWCs3sNv8TUNTUlIm2QckCr9tegphifGGb/4w9VokEL5VkJe4KV8p0J:pPFccps3qwgbkUEmFGb/X2kQkJI8p0j1
TLSH
T130C26C32E858CEB7ECDB8B89B74A3647DEE01173898C5EE4D6D85E0C009729C174F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 83471153502d11b054406826c0db49a1b22dab9ba1b69a9b4c8bed216fbf8f4b
MD5 c5689a904ac4198cefe6fc9a1974ed1e
SHA1 32d298fa908106909cff181d3100624ba5e6d66f
SHA512 a3ac5fdfc1ee42a85f1acba53a0223160a2d03d7c924b6b03261ed996f78ee062f6f1fa28015be6bbc2a83c241050c998c8d4d312788fe922ff28a229b8e52f7
SSDEEP 384:npdiF9CcmyWCs3sNC8TUNTUlIm2QckCr9lXKphifGGb/4w9VobkUpdEe4KV8p0TV:pUFccps3PwgbkU9kFGb/X2bk/I8p0j1
TLSH
T1A8B26D36EC58CEBBEDE74F89B70A7607DEE01227859C59D4DAD85E0D009719C170B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 7b9f8d80f2a90e0b7f1c11d0c30333edf9eb06405f456e4ef585e281e1c9625b
MD5 d840780f9911cc22c2c7f795eb20610b
SHA1 011e03c4e8eaf74e1a251826e37576155095b526
SHA512 6c6264a0494ebb8a3b2744706a56cb70bc1590903cba302e693a97306b9c8f21feb9340e2afa4b87f3d640522d30c9eba54c9ee65762c11464c8dc96db5bf3b6
SSDEEP 12:TLyeSjPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3iscQQtydhazcQAJmdy:TLyT5UOl0afDdWec9sJMjy+2DB5fc
TLSH
T197929D23B9252073ECDA463ABD5345D10DBC175EC9A7B808DED049620DB1BD6A1591FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 9d11be8e83b5dcaca5f087978f71ae385bb486cfaa9f3d92056c580901a56efd
MD5 7aff77119ffee2337f591be2ddd5a4d5
SHA1 dab742187e8dfd49091731cd2e6e18987343a862
SHA512 ef3e0698b1270e36608888653aab0a8093e44886b9f8eead41141ce9111281d7fbe27bb5673fbbcaa2d1611e4a563b10d6be89924507fe6b5dbf648f96f45f1e
SSDEEP 3:MsEllllkEthXllkl2zEelI+o/l:/M/xT02zNI+
TLSH
T1E744040C7FD4144DC5143035C011C3704370DF110511D7C7347304135CC7D440D00140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 14f35ec7b58aed84db5865e482d1758b3ab8f73734f321dc1dfe70f8d6c41133
MD5 1e87c35fd0979dc081ee539945000f40
SHA1 7288cd61033108306bf372e20c3809496f3622fc
SHA512 b1d850e81f53efb8feabfffe937863acd33910ecf4c4c7f8bb2ad0323cd78b870a8330a459fee91325b82c0bc79a6d862d81133f717d03fb7345a671671a0a75
TLSH
T1854141D15C381AE2C4BD0EBEB49739FC85E8D725F1A0347D6898EA940B7D94E648143F
MD5 SHA1 SHA512 TLSH

Submit Download

f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 9ba64fdf12690bc24af750ffc8e144edc5fda28e40b47c6637e36760d82fc03a
MD5 b0d6f081a0ecbbc24e15755ca2fb45ea
SHA1 92ee094a6b43e98dd7623b28cbb7fcb000238278
SHA512 8252bfe20cf5e10b6bc5333ccffb4a04e1081c086c5d0829e42bfdb5244de2fdc17055e3dda4c6ab82361d61e7c8e22b872e1bdd79d193206eb97be324035628
TLSH
T1A4C02B0F187E08C48C06903AA40D0A5B06E0394020101176847F780000B421CC30096B
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2119136a7b479029cd33451a4e0668a1606b929ba97380a614116f3dad77650b
MD5 e945d003ab22af344c5818fde66ee1b7
SHA1 a2d704777c2037b5bf20f0a56fd866d1867b750a
SHA512 615536adf692c7dbfa9bd3f283bed63dea15476cec483bfb6b990535b7c8bfb22f92bd9acf556bcd666558e0314b9e6eb1c9ec1131e56ca87291916e1fde99f4
TLSH
T12141D948A6FD1148B3B76F4A9BF7A86E487B7C772E06D45D10010D4F4663A44C862B33
MD5 SHA1 SHA512 TLSH

Submit Download