cd6ba78ea24a28b76160d343d46cfb16df91b123afd9bde2ad234cccd8d82083

Analysis

user interaction
yes
max time kernel
149s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 21:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AutoClicker-3.1.1.exe
Size 857KB
Sample260702-1cwt6sb17q
SHA256 cd6ba78ea24a28b76160d343d46cfb16df91b123afd9bde2ad234cccd8d82083
MD5 9b2946bb3d8ae8d01f3d64fc6dee2c9e
SHA1 a62be821aeb5667d445fc6710018b3cdce66e417
SHA512 6902a54b75729625b6b7f079e1d40311e051e644607ab5eb6137f1bb4249f13ee68055b172bef200ed600d7c0988d1a747df3d271848fb7b66e1d83ac57dc55e
SSDEEP 12288:vaWzgMg7v3qnCiMErQohh0F4HCJ8lny8QWMZorOBC3AbDYP:yaHMv6CYrjzny8QWxiiAfYP
TLSH
T11B15AE12B6D640B1DF9639F01937E316AB356D196222CE8797F03E628E31183DE2635F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6980_1275441364\typosquatting_list.pb	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6980_1460848671\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6980_1460848671\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6980_1275441364\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AutoClicker-3.1.1.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2688	msedge.exe
916	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 21 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1935666426-3801330415-1166019131-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275014967447602"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1935666426-3801330415-1166019131-1000\{1EA9AA2B-3C94-4BEF-9C2A-88D48D834A10}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1935666426-3801330415-1166019131-1000\{BD326CEE-8349-4E87-AC02-FFC5CF58FF98}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6980	msedge.exe
6980	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2356	AutoClicker-3.1.1.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
6980	msedge.exe
6980	msedge.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 7156 wrote to memory of 4760	7156	iexplore.exe	93
PID 5464 wrote to memory of 4748	5464	iexplore.exe	94
PID 6996 wrote to memory of 5612	6996	iexplore.exe	95
PID 2116 wrote to memory of 1556	2116	iexplore.exe	96
PID 4748 wrote to memory of 6356	4748	msedge.exe	98
PID 432 wrote to memory of 5992	432	iexplore.exe	99
PID 4748 wrote to memory of 1528	4748	msedge.exe	102
PID 4748 wrote to memory of 2688	4748	msedge.exe	103
PID 4748 wrote to memory of 1528	4748	msedge.exe	102
PID 4748 wrote to memory of 1528	4748	msedge.exe	102
PID 4748 wrote to memory of 4800	4748	msedge.exe	104
PID 4748 wrote to memory of 4800	4748	msedge.exe	104
PID 4748 wrote to memory of 4796	4748	msedge.exe	105
PID 4748 wrote to memory of 4764	4748	msedge.exe	106
PID 4748 wrote to memory of 4796	4748	msedge.exe	105
PID 4748 wrote to memory of 4796	4748	msedge.exe	105
PID 4748 wrote to memory of 4764	4748	msedge.exe	106
PID 4748 wrote to memory of 4764	4748	msedge.exe	106
PID 6608 wrote to memory of 6552	6608	iexplore.exe	108
PID 3648 wrote to memory of 5180	3648	iexplore.exe	110
PID 4748 wrote to memory of 4236	4748	msedge.exe	112
PID 4748 wrote to memory of 4236	4748	msedge.exe	112
PID 4748 wrote to memory of 1916	4748	msedge.exe	113
PID 4748 wrote to memory of 1916	4748	msedge.exe	113
PID 4748 wrote to memory of 6220	4748	msedge.exe	115
PID 4748 wrote to memory of 6980	4748	msedge.exe	116
PID 6980 wrote to memory of 5936	6980	msedge.exe	117
PID 6980 wrote to memory of 916	6980	msedge.exe	120
PID 6980 wrote to memory of 4108	6980	msedge.exe	121
PID 6980 wrote to memory of 4108	6980	msedge.exe	121
PID 6980 wrote to memory of 4108	6980	msedge.exe	121
PID 6980 wrote to memory of 2764	6980	msedge.exe	122
PID 6980 wrote to memory of 2764	6980	msedge.exe	122
PID 6980 wrote to memory of 2208	6980	msedge.exe	125
PID 6980 wrote to memory of 2536	6980	msedge.exe	126
PID 6980 wrote to memory of 2536	6980	msedge.exe	126
PID 6980 wrote to memory of 2536	6980	msedge.exe	126
PID 6980 wrote to memory of 3152	6980	msedge.exe	127
PID 6980 wrote to memory of 3152	6980	msedge.exe	127
PID 6980 wrote to memory of 7000	6980	msedge.exe	128
PID 6980 wrote to memory of 7000	6980	msedge.exe	128
PID 6980 wrote to memory of 4244	6980	msedge.exe	129
PID 6980 wrote to memory of 4244	6980	msedge.exe	129
PID 6980 wrote to memory of 4244	6980	msedge.exe	129
PID 6980 wrote to memory of 1884	6980	msedge.exe	130
PID 6980 wrote to memory of 4248	6980	msedge.exe	131
PID 6980 wrote to memory of 1296	6980	msedge.exe	132
PID 6980 wrote to memory of 2512	6980	msedge.exe	134
PID 6980 wrote to memory of 2512	6980	msedge.exe	134
PID 6980 wrote to memory of 3232	6980	msedge.exe	135
PID 6980 wrote to memory of 3232	6980	msedge.exe	135

C:\Users\Admin\AppData\Local\Temp\AutoClicker-3.1.1.exe
"C:\Users\Admin\AppData\Local\Temp\AutoClicker-3.1.1.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
PID:2356

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x394,0x7ffcdf63c188,0x7ffcdf63c194,0x7ffcdf63c1a0
    3⤵
    PID:6356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,14460135623402645753,14768916163481169281,262144 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
    3⤵
    PID:1528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,13322465608900390172,11318974344183820153,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,13478023656316679651,15537082045668299015,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,16055230454013373094,3969671239828147829,2097152 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,3375695754643062703,5339878838648490941,2097152 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
    3⤵
    PID:4764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,9201520330338559451,2423798763890757079,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:14
    3⤵
    PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,14940997064412754948,11661940719496748671,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:14
    3⤵
    PID:1916
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,8590313555120855736,17887322903677159148,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
    3⤵
    PID:5664
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,8590313555120855736,17887322903677159148,524288 --field-trial-handle=2820,i,4709822394756451496,10868315525529545486,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
    3⤵
    PID:6220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:6980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffcdf63c188,0x7ffcdf63c194,0x7ffcdf63c1a0
      4⤵
      PID:5936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,12211064824819817589,8844148549779640888,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
      4⤵
      System Time Discovery
      PID:916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,15298783013350026072,8939049670148663262,262144 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
      4⤵
      PID:4108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,6006657156981792802,10226793375196174398,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
      4⤵
      PID:2764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,4364197511363631917,1082420642096386402,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
      4⤵
      PID:3424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,4364197511363631917,1082420642096386402,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
      4⤵
      PID:2208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4952,i,17035658744745996374,14927229144927616224,2097152 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
      4⤵
      PID:2536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,8269951781622873465,4785979066888599402,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
      4⤵
      PID:3152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,14637767047366649432,54890318876970267,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
      4⤵
      PID:7000
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5720,i,2363069524314678970,17573032456049375530,2097152 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:1
      4⤵
      PID:4244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,9294395000205378170,14553147627712882134,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
      4⤵
      PID:1884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,11193967233821098349,7321078869256598201,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
      4⤵
      PID:4248
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,3719636725732094864,809416016268245816,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
      4⤵
      PID:1296
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,16521563318429452702,2472039551121546500,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:14
      4⤵
      PID:2512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,1260860684836416201,5456053045701985771,524288 --field-trial-handle=2416,i,4812996283400252717,18184782969110263764,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
      4⤵
      PID:3232

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:5612

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:7156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:4760

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:1556

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:5992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6528

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:6552

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  PID:5180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9ac04be28534ffc90f065c5357ca3a80ca723726cde5efb88f8a7e1a6b44baca
MD5 b73ee45352458e50358c0ccfe08f6cf9
SHA1 c9670f21ef5a19258323e88f363ca274d9b861a3
SHA512 a0988cd4a43f2f8fe9ab537054ce760518819b4a5b241855d7dd15687bd71afc74fa5b853542182d12a3a9aebcf68ff8590341f7237f1283b2b611b7b5610238
TLSH
T11DD012143718648BCD1A2571D8318381A666846125598F4560A1924D9D69493539A396
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 63e8834329d7a2c5e81f0ad4eb09e7a1e4dc065ffc2047a07cd54cf0877218b3
MD5 1e538ff2093fba87af2e2daab718f0ad
SHA1 a802353ac1ab1af10a42a76c1ca847c8005af81c
SHA512 15100f0f11eda9ad7e6f2dd1027ffb437f4e098c66e5e3d7fa315f259456f72e129d2c50a67c4ad1516fcba548dfcc68cf5e66e4d11a60c91dd46ac87b4710ea
TLSH
T1E2D0A7143B2869DAC92E3176C4308240A666456223568B457590D50D8D79093A7D67D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7207f4c246d3ac882ff42358926e52b8316dd22bb03c5644ebc6f2dbc1168a28
MD5 b7329a74f1fa351c02d17b8e2692e575
SHA1 ef3d4b0eaaee583b5233cc6fc44fd331077feaf2
SHA512 650d63f3a2e065e3c2e4933483e10d79ab609f116a4e0bf7e107adff2025a85d1c77c68f86e7604724ab7da540f31911cd91f5e49bbae26354b6446fe249827e
TLSH
T146D012143718648BC91A2571D4318381A6668421215A8F4564A1D24D9D69493A39A392
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9790e88972eefaebf474f263ec8525edc3f161c7957c89b1afa4d7e5037f5b99
MD5 a8a73ec6e064acbcf1c92f3d431232cd
SHA1 d9c3ba7e7245cd1e8f3a5df3aa0cce0f7d983099
SHA512 3728beb079e91b03ef099a72463603fd2f125cb4a643404febb22940ce489c858d6a6a28ca99f859a07be3df2e982bcdcf3e19202acae3d92c6436ee264026ef
TLSH
T12DD0A72437286846CB0B35719420C281B7A296616609CE516060911D9D790A3578E2D2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c4b769c1e7c5f26039ea4be106634cc912eb02aad1b0f2d75b356b0294a628c
MD5 a4f289a957aab40ba7039a912912fcf2
SHA1 02b7edea627ec0efa57ad2abab0f9ed649a6bddf
SHA512 39e208ce589363d4f9856d117971515078d4be279b9351733bcec0cf950bbf8957b0b1edd9ec10a79ba7b87f727a797cfa30d996106a7f581850433668c94f1c
TLSH
T1A5E022A6C861EC2F08F91B192170569FEB54131A2B40594BBB3C820C8FB163F098692C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 dfea181e499135d3a7da273d1c5ec25e18519e0b73634ad597dcd62ff419fad3
MD5 17392d6ac8ff199acbff5d78bf1bbbf6
SHA1 bc92498a35c403d8fda91f13c932240ed2dc341d
SHA512 c9be9e7ab3cf6791975bdee895b09aa20b85b1abf22f20ef97aae9f930797ddd9cea14c9e7fb668bc3e3ccefe3ecee83abb86205173b09112ef2c1d8e397fdcb
SSDEEP 384:Iqk6q/41ypa42w9IhhJ6aX57uqYZp4hACWsUKj6XD39gJ5SaH:IqktTpa421hJQ3ZSACWslj6LqT
TLSH
T1C513B23EEA182EC2E6C6987D0C7B4B77DF70C278CBC642471B757626423A36E181E194
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 13b23dd2587a4c8f56f0ea6a4df91171be9adc63351692324ba662ddd7217259
MD5 9186e69a4fe706a34b231de47d5b72fc
SHA1 38e84368d0c4ec551beb5d8fcc0fb544bb33d524
SHA512 f2e9e9a00498fde55161dd20fd859eaed342c61380e51014a32fb2cef824e9fb904e57a9a24887b6e642b401122fa47f501a352f56586c643570ccf015c21557
SSDEEP 6144:xoL/BL/Z4L/IL/AL/KaPL/dL/mmL/WL/Xrc:uL/BL/+L/IL/AL/KYL/dL/mmL/WL/Xr
TLSH
T108B480F31951A01BCBA802F9D6133E3ED577415D2CE1F8E9E6380C952935B32B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 6c6890fba139aaa430d6e583eb3192d24a254d223d9f493dad0eac612ec5816b
MD5 bc0ba1e504bb23f2f10cf5414ee20c00
SHA1 0da85416a216e4335a94952b11096d2b938e3d50
SHA512 4ab138340897b2dd507d61606fa7b641d66e2d80385b444059e6c66c191287868fa844fe71c060a8ca598ee93b02fb1a28486c7e8f7e05d476221abd767c9823
SSDEEP 3072:uv9G+z1ZaHkv4WnzbEWQdDk9e3O0jWT7nRL28Y08yrZiL2rf3siL1:uQM3vvBxo/3OwWT7nFoQZikf35
TLSH
T1BF2519EECB281C82CE6B8774B4E0D9077E712183B65CD0D39944C9D897D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 53ef21573e2dab0004df2198df737f0e651fe574fb8e8b0a76051dba68a04e79
MD5 cca8ee68ff21159928ddf0dc32079c00
SHA1 933b286445f97a40de0980a81fff596f8bf35b66
SHA512 f12bb935f6e238e7d9b70f791592b4690b869ac0a54edcae254a02b5ede4f5172e0d18193fd8596361ddb2fc6d3294c3997834305594731217cd5ef98fc2f5fc
SSDEEP 49152:0K+O/VMwgV8mQ3Y9+p7zokJ1OuyXnBchnTRT2T3c:0Kt/V0HD9ivJ1ByXYnTRT2T
TLSH
T19F866CEDCA7858C3CD639A30B5F0E9577C7413C3F994C1D68C98C584026BBC5BBAA269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 67KB
SHA256 d84445f5d86c83324c664e3ed381bfbdcef13841403f5a6474fef4f137821df1
MD5 15e427364ac3b62d3d1ff5d82f5eb088
SHA1 dbb68b34bc8d958046e74d46c8c03d94f846ee7c
SHA512 61e3191b2fc6355a0e5effadfd5be437dfdcfb66ee68d6cba0158967cd505ae69373bd71e0dfd240941020f3d5aa914ca0d1dc836fa076057c844bf8ee4d3516
SSDEEP 1536:EbTc7dvpi1pQkI8ZIPbAVfYZGhNBt6ghmfgUKZcT4KQEz5:BpurH481Y4tnh2gUXz
TLSH
T1D4631264FAA86276DBDCBC7BAF29CC56E24A8614268CCC43027FB78C3744D7A45C4875
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 401KB
SHA256 b411114c2c82087b6bc8d2ea8523449d1b91579ecf6690881f8b1a7201a61bf0
MD5 053522f4fd5e65728ef5230d253043b4
SHA1 e3a610fb174d82039b27e10d4e09646efa09d1be
SHA512 f8200c42d1b8071c789d0d0eab9a86c4b322eb507efba3ecf62e8fbc2e8cdaf105bf22a5a17f298e188838b42714fae25f31af34272b5015c2ed134fa89fb117
SSDEEP 6144:lC2VuvZLYocij+CxTvnJ9V17tiiLi9I83vsrmrj66WBdGAHP924xBPFS5ENl2zx5:lCsuvlYov97V1vYJ30GIHV2iBPFyEXGD
TLSH
T1379423854D979D5F1496A82230D8973AF1639E0ADDEFC746A1C306A342FE8C33BDA019
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 162KB
SHA256 799b605ef91421c36f909ce9e8055204d9412968b70d1418fec8f2accdf59c07
MD5 26714202d04bd52933fa2d2b929c5d59
SHA1 e13c9db0ddfa590f21ea4efeb3bdbb339bf8c16d
SHA512 d92501c855f4321e2481a2aa1f709fddd29b674093b8824870ef12cd5fb95e991964d7d5213d51a5f24c703fea267c1dd3c3c4efefb2db7562e1ac1b2d4ff32b
SSDEEP 3072:0Q4u1wUMQEe0xoU5eAi9oAlTyLhRqNgEJs10ugqSycZTyHuWMrFG3:0h8wUMQEe0qU8ABAMgs1rSycwtMK
TLSH
T139F3129DEB7C0F6B69190147B3A190353BB0BFF71847049AF14E35102B63EA5DB2A51E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 77KB
SHA256 a45a777a0f82b517510ff234571bad345a092c799622c3c10bf7f1c20cad03f5
MD5 b119e9517893ddc7dd629b9da33df5db
SHA1 460d4cf8e8c7d5cae8173049c62fc4198ff9103f
SHA512 000a1c2e06f4663f08da56cec2bc9cb4bec14c6f6b419174e55c6f8668c2b8b9ef30a165c0da8d88288371658c1532720119bbe783440308ef763cf766c6b5b7
SSDEEP 1536:vIjUEBEzyN+OU4d+ReFNsVUecM16UPpBsviBROlLrQ:wjUEBxPUYJNZMYgBsvirOZE
TLSH
T1517312498316E1860954D86405790EF4D0CA767DBDE65E7EFC313629F3C24A6F70BA90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 17KB
SHA256 fe672d5c4e9570c5c4c30f7ffa25027237ec3a8766ec89d377a0f8964ee75937
MD5 7b25ade41ba17550d716530d18040b36
SHA1 d4d120778bc8ec1848baad09c6cfda312e02b155
SHA512 0785d61dc17879db03511c9977ebfed986072398665166edcda0ece0ffd0bdae44592d4a91064be3da462c571e13fab722aa5d9516c41d215b9a381faaef0e5f
SSDEEP 384:/nmVvU04jy2mdP6WxXByiQy1lm3W0KlGou/W2B9wv5iMOtLbnO2b:fAvX4jy2SP6WxxjhmuGoeW2B9wv6bnOG
TLSH
T1E882D1539CB2628EEFD09404FCB02B6E6B45CDAB700177ABB7D1426811C6187F2796B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 40KB
SHA256 2cf3f2204a13e68b7d3f4b84878fc143aad42a9a8898c3017a9a5b90f643d6f6
MD5 4f7d0f77ce8833f1f734245b335c74e9
SHA1 111ac0fba5de023a60a05f8f63d05beb733bb6f8
SHA512 015cf09fb99c595d105f78316a831e11b8d2bce8cce080c22e8426cd039b6b255583d33a57ee8f775fb501ef6f55e5e7c8fc5f32efda5b0ec0ed7c2909461d2a
SSDEEP 768:m9Jnwn6zq6oaBzAe9PnxUvE3GNsKjSkIaRxs60Ikpkfwu/nCvTVTok8e:mLU6xJ3Vnxl3JIkpk4NKo
TLSH
T1E40302EC2D275722DFBBBD3353BEC4E9CBF9A491D2182DA48108E576409884A1DEC435
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 34KB
SHA256 4d05233f19c2290f3c34ef0b6c24db37bd0790855c0f1c268081a27fff634a05
MD5 73bbb4a18ecce5d6de514358fcafa875
SHA1 3eaafb39ed25036796a059853fa7a30754517cb9
SHA512 2bbdd3425ee5bab38c79c9cc2591aa89c79a746054b70666d4102574b5374fbe6ababb51b58e3a9245423cc7ab6346983f75ef2eca929270c5ead3878e3d7b35
SSDEEP 768:ZYFChA4cXpAxZ+8lw7HWCVZW2wJuJcBG2Q/wZ4NlBSjAfNWvm45HGT6:ZICEen+8lQHKJugQ/HYRGu
TLSH
T1C5F2E11B8583E5F5882E1DEF5D8B03956060129ECB82B534AFE3E28D236399CDF445B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 19KB
SHA256 c86318e57f9ed5747a6d0cb1f229529024981d74d82c87139ff37237bd8aaa8e
MD5 411617bcc3f8ef8b7b2204cbafeb8e38
SHA1 a0ccc481b31130532f41cab163e25c4927d03e24
SHA512 f59cb41e0521a82e1196a4ac037bb6f676f0ac52e67dae13610301c8b34280737b576e7db392d81de57619a7a03d66e1958b10a0527c7650f9432bc716996a89
SSDEEP 384:4hWa/F/QxW4t40ujV2TqtDWrhwCXoe825SOxwfmR4q4i8gl7mMhRFM7+/93KCK:cWKQx3tejV2Tqc9/F7Jl8vmR8+/q
TLSH
T1C592D16AD19B731CD29EE0204DDCCF5DEFC267C39D84EF8A0384DAB22D97019674A14A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 36KB
SHA256 98c0747479e474f64351bafb1e7086bbef3a9acd355e09e68efcd0ae57766af0
MD5 5b62a5563fb3fde2dc157f67bb9a7883
SHA1 8dc78f4f397ee18c028a4ac725b8b58cb3183d9b
SHA512 7c9012623cddddd7cff43653edbcaf5560a9fb694e9f0e67db340aeaf9c7b49c223b449ef8c55880170b8976b884acb724bb54ca2a04efe01ac41992daa5b3cc
SSDEEP 768:1yU82DkA0Iw05ln89gy6gIe+yYuSGBAQvHWN/eX/NoUxVHVLs8EpS0:1yl2Q505ln8+y7IeDSGmK2x4NoUxVHV4
TLSH
T1ABF2F1822D848BAB487E5FDE43AA23599E84C0EA6E559050DCFF851051041B69FFE9E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 89a3432a757edc6b8e7dc74dc19e6ef1e0729304d5c950466c3c14613fa2e5db
MD5 3c30f68764c3f780ad7de11cb174bb2e
SHA1 02455227d6c8b425c414fdb2ac5179f183d6a5c3
SHA512 b8e90c6f1f49e09d7ccd4321397ce5f7dea30e0f9f76c0565800fad2b77a7658e46a2d786cbe81f98351a9b067a39fbddabd8ec342be1e322af6998bc12d7cda
SSDEEP 96:aecaDlKukRpfPryqNh104tDH6TZhQRYc8vsn1d+C2XTJRHA:Q2Kumpfjyql04tD6TZhop8Un1d+C2XTg
TLSH
T1D291C64316DF09C9CBA6F9FD2CB38C8FFF9481618C6617D3364898B5523B6F52816682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 61f691b6940c780cdbf13eb10dfbeb000600efb65c4f6a56c06c617f454f4796
MD5 5413b1a4fd24f65315c19df93d3e4549
SHA1 2f8bea77bd94d934a7c170daa2bdc95dc76fd8e2
SHA512 07776a8e2c85eed0c24d07a9c232560058fdd10958692150739edf62ba17b19e7bc8130387fa9cf6061333584ad49458484a70446590c16e85bcee8a793f685a
TLSH
T14371EE4316DF29CECFB6E9B62CF35846FFE481218C473AD37644E8644A2B7F2A425584
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5917a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5917a5.TMP
Size 3KB
SHA256 00e062b4e97de559282f4d02a613b7dc2d9c18135940cce1ecc6ad89e53eecdb
MD5 1df620d4517c83728742b07597497108
SHA1 812a8e49ac315590029574569520227744194bbf
SHA512 3a02d79e64bb16ac21241972260ccad9c22f88f7f34dba7b474416e34d367e6bab59a2d8680f44b0af4f11b73b01219a70d92916df29239e37ef7c192524f0a1
TLSH
T18E61F993165F1EDDD7A6D4B659E3E09AFFF481A1CC872DD23BA5A034940E7B010590C1
MD5 SHA1 SHA512 TLSH

Submit Download

DIPS-wal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DIPS-wal
Size 197KB
SHA256 d6bc5bcad040d88194bd7a0d6ab00babed7f2f16c86002e56cef86afef215226
MD5 0ab6e740c5281403ace7378c10c1a86b
SHA1 7cedc84f5fc258787cf22b762d98750795e03aa7
SHA512 e0825802d2e51efc074bee3b3b768eec73e43e9c3f266b3f5f53ad8f6261b26a4e5494c59eb39785863610383bcbd5817e3ce86f2facbfb29b1f399d5e7fdb39
SSDEEP 96:uEmJPG4K3tLuaLNW9WhmDzbipox+1zXy+RQrtZVg0uYl9:+CW9Whmripox+1zXyQQBZVg0jl9
TLSH
T19B14C1E79F68BAD6D18BC2BFCB9389F545280E455F65DC70A03D0092AC9F65027B60DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 996a680c481c2a67534266dd9a1c8f872804ea9f2979849f952d311e4e444bb6
MD5 e1ce75e6b046261ad5c959b9860fde22
SHA1 45faac5f70ee4efaa2be038f0b26f1bdd985af01
SHA512 2a7a298da66336eb33835a61aceec83afa981ff6c92807e34ace44cdf35e8e0a6d793e0f6c50a00292b2db5b4da16bf5f85cb5c8e2e1ea9683a39552b581e07f
TLSH
T1CFE0D894D6E6C25D9B303583812C6708E1C2345BE7C6AD4357008CC47703801B7C19E7
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 80f268fa6f770d4330fe0eb19981e5e7de41f32bc3a2171c42729eaf53716326
MD5 7a3d5e3165ac49743bddfb19e31fe7ef
SHA1 c262103d445a8c759be4d713c48b27953b7e8aeb
SHA512 905087e72bc8a1afe48c877e0b04a4a0079f111175b7cce24c2c1c85f3300486bf2c0a568a71fe72b6b6f185442c05174519b4b0033dbeb5b05c29dca9c11739
SSDEEP 48:T9D4jJ/0UC+lf5djXWxn3WxnWxMaym+dH+zSK/t+dr+Jpy:xD4jJ/JTo8Hm+B+zP+Z+Jpy
TLSH
T1F7E213892B02F961C6FD733EA0D181E497FC692C599C7130912C9E798C735B6B48E20E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 2b6c6fc8c03ee836d511ae1f9b6507800aff62f89eea8d7c1eb8647c6137729f
MD5 1b97f203e8ae7976993e7e0205a344fa
SHA1 148e978e14a0e6239a27b866072ac0ec63708b9b
SHA512 21c569c84b6cec671ea9c98fe8581622aa165c0f32ab44a1ce217ed4863ee073228d7c4ab6bee991ba264a17291f60dfd29c19606afd50935a9e3634aba83df7
TLSH
T174E0869416D9C669D21478D7C37C530CC6E2349AB6C8B942174D88707711A49BBF76E0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 25KB
SHA256 2833fcd5096800db32ae4cd1365c4ddf21896e0720d0fbf6631c32452270338e
MD5 807b460c30bde2711ab707233de96654
SHA1 35f7a052227831b84bb4bfb7350451402f753cb7
SHA512 a8dd95da9751dae2db77a52145760e75bc4981289737aac7c56650795c04ca1f6e15e7f39e68a4e1b8a8c1ec275d566755e7d365506ee136e48d8175215b008e
SSDEEP 384:BJwRI1BiGSCF9y7QAVDdAVD01BiGSCF9yD:L14iU7QUDdUD014iUD
TLSH
T103B293F7140CE477CB816CEAC1BBEE4CD2834C2BDD95F989D1A8D26E13E80357666242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 54966bca52b90b4ffd95bb3708912a6a6e9e71cbd116c258cdbef8debd861f50
MD5 cc0cf084d9b0b641df93b4993fe3cd48
SHA1 28491809287fa92ee54b2a507f20172637e1e4d5
SHA512 cecf599e99ea64688ec8cd65fed5ed390fe1d2a487157b3b2932b335847567265571ce99076e93562840dd219c373a5084d9e8fcfb95cf07da3345bfe98b616f
TLSH
T12FE0D8604ADEC69DD304304BC31CBB0CD7F1345AE6C86A065B489850B211004FBF21E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 9c86381a1dda57ec9d6615d871ae9b46559f0c80f1fb5a14caca27cab12feb14
MD5 bdc7df15b232ba4513ac21255fc96ee8
SHA1 aa599ddc7d928bcadb65eb8998b34baaf57616a1
SHA512 b09b00e7992cc7010bfa532fcaa3d9358ff47f715818a704969e8cc5d778f71933f707e443066068170d2e25e88d6298b5339aad53ff7aae01f61f6d333a1397
SSDEEP 192:dDLaTapO9khpGMauUjJghy1UDIvE/6SZcBwVGk8PdOroDaCD:xiEbhCj7kTAPdOMD
TLSH
T111D21ABF9F8014C1C5DB263264974C5A2C71034AA753E49B15BE84711E34B8ABE3F9A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 26620acf097738bfa6b1004344e9a3c5da2129d5d9caf1a178cf4aaaec030ff1
MD5 02916adc817279986b4a3f58eb413de9
SHA1 2cb72a9088fea245242ec1788a825a6f3ffee07d
SHA512 a91dddc38e10a730ad20fb59f64d70e1e93ac51fde2afe3a2fa5c080b0ea56b785c24d4da881761eab546befb09fd3643355b320c6e735ff950c7f4a54a6cb3d
SSDEEP 96:D/O15dJUorNIjhnZij6JzRcZRBGO5HzfTYYGdGwBO:DW15dJUMNIjhnZij6J1cZH75TfTYYGdk
TLSH
T1BEA1A9F7C3A5826DDA1195F0AA18AF1FCE1C0452436C3D5A89E4AF4BA3F2471E151B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 7be68d518083aa8a6d7a0e5a94d75553f182c1e1af232e0725bd94f5177e27b4
MD5 710bce78a49f9d5882cc795efd70b99e
SHA1 469887a8032a3bcc8b5f4bc0f350577c39ba383e
SHA512 42de4ce378c80ce26d96a748ed524f03c93e4476ef95cd4380b775a3d49905e8414f09327752d899e9c365d384be52c58d1fdd5dc60189bc19d80fa1d9c58eb3
SSDEEP 96:D/O15dJUorNIjhnZij6JzRcZfHGP0B5GOHzRWtts/twQ:DW15dJUMNIjhnZij6J1cZfHGI57TAtt+
TLSH
T1D3B1ABF7C3A5826DDA1195F0AA14AF1FCE1C0452436C3D5A89E4AF0BA3F2471E152B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 211353b4881b30c0b45841b0b43f20eb835edfc17f736570a13793b819127475
MD5 4d6fc8acaf418fe0b3154fc447853df9
SHA1 404a5aa4aa05352cab948fa13fd54b0abd883564
SHA512 fd42caf73580557adb5dcd8595ca6fac75046b45143c0aac153178a5f89f975dc8feff4cb1f91ecfec30df97acbb7a0094633d10084428cfc2ab1abfe5f2778a
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB7lC:OIEumQv8m1ccnvS6CU2lf5nFXOP64g
TLSH
T169F2D1FA07276245D98444B0A4009FCFAF06014B47B6B2EC76D447E3F7A21E2B6B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 857B
SHA256 c4aaaf9abf59f8a3c43277c75fd4901bb0f0457182489e92c8bb9c7b640f6779
MD5 865dc3cf9616ebf0b6b2f09a5f56270d
SHA1 c79327c2697fb965c19aab2421b8c5b3a81bad6a
SHA512 63c92d2204707f725f6c209e53c258f005030e418097b3f95629f302a7f34aab4c6b486a96f9989d3c1584fb95ea67da0e5910141a8c6a208810712b731d163c
TLSH
T1CA1140B382BFB86B102C95FE1E04BD051DBDA932414028F0DBEA827DB1554FB4A1102B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 6a24eadd412329b0cbf42370351d94d174fb12b3f142ac3c59359b27af004f54
MD5 ceba846c2623c11883635cd7e8aeb0bb
SHA1 612df731cd62d5c75be4826a045a60508a9106b5
SHA512 0fcf6dd017ef27cc5d7110f73b03e5a782b23830012167b5bac5eb591c9c0c548a4a7ec5c41b0227cd3c89acd6390119f2fa63706a5365b23ad0f469eebb89bd
SSDEEP 384:sxRfnXDk+/f5sJWvZSeUBxpef/5/JBLj9:s7Xo+/faYZSjW/5xB9
TLSH
T13C92FA06A524493FCCD7D619FA45BBA3D6FC1163A6904E44AAFC8E0C15E77ED221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 5219ab1f840e987d08ad7efed59c3b0cb90155189d06d39df7d5ba3e192c5a48
MD5 b6605f08022d4167a33db5e99a1df1a5
SHA1 c727cb04ac2516dbd559e5ecc5c756ba68449679
SHA512 23d34dcf65349cf08965b9a13b236523ec3ebee7349a2623de4fce51a00410dcf21531f43e449719a0de37a0943110a9bdcd5faa99becc07229d8692ead399ae
SSDEEP 384:sxRfnfDk+/f5s7WvBSeUBX142/5/JBrj9:s7fo+/fwYBSpx/5xBd
TLSH
T1C592FA16A924493BCCD7D619FA46BBA3D6FC1163A6904E04A9FC8A0C15F77DD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 9377f0cde7abc79f7c5bf5426cdf62dd4d74b855601c93b0b24da2511bfe4bd3
MD5 b4e67f38b224f6c5a83ff316e4a741e8
SHA1 2f20a71b05a64d2367a070c8cbbd1121604a081d
SHA512 da6c5d7ab6d921027a20c01d4306cf5598b1f791877a0ef3cc7dd7d4c9fd4a669ed186a6d31c03b1d15fc1a0407ada43591fa0da0e78cb87bc3963e02578f44a
SSDEEP 192:sxRLQUnwRCyMqZjK1Ml8+j+/f5sb8bAZUBMsrb9G52oA8pXG/g6+WN5s1qJYfQpw:sxRfnwD9+/f5sbSeUBX142/5HJ9sj9
TLSH
T11182FA16A924493BCCD7D219FA46BBA3D6FC1163A6904E44A9FC8B0C15E77DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 6be3a12091caaf9cdb61fc1bcfe9c78dcdbf9063f011959cff142857f4b0ea96
MD5 77c4be1c73d142a00bcc25cbbba8daff
SHA1 98426f24edd9d6ba7b699a401bdc2fcc139a283e
SHA512 7ca8ffc7b0d5821f9c03317d3e840e42b0ea63df6fe8e297f45796144eeecc180a1ed9b768b8539ac05a4f94ba6818d4940e56d71471abfe38e522b429c11c3f
SSDEEP 768:4eOlrA7pLuL7P6WgSYf9S8F1+UoAYDCx9Tuqh0VfUC9xbog/OVdFpuOGirocq:4eOlrME7P6WgSYf9Su1ja+FpTG5d
TLSH
T150E2FD3B680CCB7E4F80499CED29BD9A6DE802CF5AD8CD5447EA440C03C66EF561A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\892b9a56-88d3-4307-8832-03de005ecb6f\index-dir\the-real-index
Size 72B
SHA256 608bd5dac05fd7aea97cd5fa5ff0da12f9d47b690b1cd2679baa793ddea85226
MD5 0452e8a3c8fcece02ec8ca800212abd6
SHA1 9b331653a2dd407fe208ca884768c99142e32a74
SHA512 7aa72a2d4f7e75bbc771d563d76ce6594771c256bf35fc48913951dcb0f2ef2e4b8496c7439eb352a16f1b42d63a30a98ed1316d902481cffa5f22d38e2bf8dd
TLSH
T1CAA0023045681041D4119FB05653625033586D151513634581F444599A95159471E6E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\90cf5dd2-5a2d-40ad-b6c8-fc2ebdf5e667\index-dir\the-real-index
Size 72B
SHA256 7f4492f6add5158c7b113840c2b29ed5d89327dc575b75acdaa35619d1a9a632
MD5 760d2ee1f690f9d0486cf0ef1498ead8
SHA1 f6b3c827dd627e9aaf055419a2dfe54c7565d5c8
SHA512 98427a972cf4c068b5ecc54df87f49c7fb1d29cd1a9d15a893edd7586013262e3758e02afaa892c1689cbd9c1dc6435b08ef765e57f5222eba05d2503a658162
TLSH
T151A0025097D56447F40197B416975A606355ACB42511220246F3F8E49CAA2604955640
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599447.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\90cf5dd2-5a2d-40ad-b6c8-fc2ebdf5e667\index-dir\the-real-index~RFe599447.TMP
Size 48B
SHA256 f6d8a7b26277efd6f42c31a87fb001250dd372aa9de65327a7dcfc51676dfad0
MD5 b63d4d10d410c81be7b181e4bc466231
SHA1 1ffc745a32ec36d88de9de83ee29587be8329bbb
SHA512 01174d90a53774db9646fc27ad8c09013cc837c6c546c72ce833245b1d4c689a997c4c5090ba39779fd3d6212a64244df652f35c39075a7a9b5f9898d513e659
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index
Size 3KB
SHA256 19e5392aba20c621070fa50dca2c7a6b5134a2232f038f2e874c470af4314e18
MD5 6b49b3c1c17169c4d7d0db0d23e92550
SHA1 dffdef07926cf8d3db621fbfc5fe43a7713d6b18
SHA512 11aa1ce2624618dda4adcc375952bf7eea58c176d0ecb41241eb6bb30dcaa9a53eff1f594eb89b7ae6b5bc5cfd601240e8381478d7954903a6df2eeed0f45127
TLSH
T1A551C75E4C473B5BCD7C267325B504CC2739A8CD6B845F13A8EC9239BC8BA282875759
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index
Size 1KB
SHA256 9ce05d9d15a2754daf72e8ed9903959ffe1c9a1372bee33bcfd4d87ac65042c4
MD5 c4596adf2db605d24f58aa3e7890d236
SHA1 815fadd923448e651d946d8cd00ab1dba73f3b95
SHA512 c060c3800706ba185732a05e5d997537293faeb475957086ca3cc0c6f01b4d192fe266548ddfac2c9f09fa6f24cc3663c7884e338729cd1ed5bba9dc84311edc
TLSH
T1CC313D78EC822D0BDD2489B32539B09C2376A5EC2A48EB07253C713D2C97B5519A2548
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58edf5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index~RFe58edf5.TMP
Size 1KB
SHA256 9587aff2ff16763aa46aafa40c8d8fdcb656d336b579003ad482b8912ff7cb77
MD5 62ca8a0188b9cc8781061a2c4b365fb1
SHA1 2836484eb9cfd72dc8a2f9ea7ac18ec3d9f944ec
SHA512 29fb76b0e26669236a3ee5671c0cc8da20b28ad0ef2e83a421d392fdcfc124916ff9db93b54b0a55cdade17380ae4e4fcbe86dec4c5ca9f05213cfd221062834
TLSH
T18B3165259592AE07ED1080F66A0B549C333BF5706304E30720BDF17C1CE3B2879B909D
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c8a4b5a7-3465-4b85-a330-bf6bc8fed920\623cd082b6202da0_0
Size 61KB
SHA256 24b2d194f743d9d56fc7df68541fa545dff383508c27506593cbaa54d2e30f95
MD5 6b53e1bf245e5947df433a25cef57716
SHA1 6ace1c60b5ee55c37ec71b1f01a6ec9ab3741a05
SHA512 7ef4497f7b573c2158d3e64602ad056700fecc81259b5ceeac350eb5622ac36ee272d3621d6552bbea2ab5c139f1022097b45370d058db2e5175ad10a12c95b0
SSDEEP 1536:aSPbrR+BHKut3JHjvGEs7RONVIqtNfT3JJb2HHPwqpzGO/f:ZB+0ghGEEROfFAL/f
TLSH
T1975318A3B2626035C7AD21D5949A7F00F11B174A1544C9ECF0BD76913F18ECB66B3BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c8a4b5a7-3465-4b85-a330-bf6bc8fed920\index-dir\the-real-index
Size 72B
SHA256 d97e654a525a1c92a247b9e3fa4ea5f4c2a6ee78aad5e09a7f93fcc68b3ef201
MD5 2bddf6b3e99366bb3e1c4ea38cc2e9c2
SHA1 6bffd4b9556c819209b6987a69c682108344d17d
SHA512 cca95e705a11c297315f30ae3d8c36fae1493bc1b71b49a7d2a8223313ed9d3bd01be53898c0deb553cef09353cad1fe6e5dc0113c7aa7461e7b4d2fe2a589b2
TLSH
T1E0A0021897D00007D41211F41DF701A323514D20A114170542A14644CCF04A54D4300D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c8a4b5a7-3465-4b85-a330-bf6bc8fed920\index-dir\the-real-index
Size 72B
SHA256 4bbed1cb0e6b05bd79d5eb2c8c1006277add34365452ea5b67f874e036423203
MD5 147b693fc5eaa2de987fb3e02bf28ae7
SHA1 1ebcf5791f5195e00cc930b2e74e592f77451b3c
SHA512 4af7b9b7d2dd63de829fe07c408d0900dd75f7693da559feb5c829be7b717b40ad9b9dcdf0119edfc0ee3304b3b45eb8df7c517ca68be959071829399aaf7b0c
TLSH
T1C0A002104BD0150FC06351B119E206A266008D30F114120640D58244CCA49A8478344C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 7dc31335af888220d5c7c029e16844992d900271bf47c95a8192aac94182aa2f
MD5 c5ef85e832a21892a27a8359aad5129a
SHA1 99efdd0bb0be2c00520a80d9b59ae05e81f307ef
SHA512 0ddd63ebf34663c95d8c09323b2fe1e95367fd1af66a02d35391bfa9435cb3db3ddf8221ea9ffa8efe58a8c766927421a66a1086936e022a97117f96f05a36a7
TLSH
T1D4E0C6BB2DF31840ACAF97D758F090B200063464C699EC6E11AEE38360B33353943CA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 6e22392371cf641eda360ed00d3de8337e2840cc3c084cb7c9c3c3649c9f5a3f
MD5 5e1d108cfa879d6622137a8d338b51ad
SHA1 727214dbbbef6e597ba40e1557b73e1b13238f7a
SHA512 a5857a93c8fb931c0d0751b157de057b3984728988f50e63733e55b3abb0a5fb36a540208eaeaf0f2c4f9e66357af9395c7a143564791bacd158e60ef6f2d2e9
TLSH
T1E9F097772EF31C00FCDF83C664B190B200093C54C195DC2E006AB26390B2234251EC92
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 241af95d4682fec1b03ec505f822b97e81432f26c23950c573e726c2ec242c34
MD5 7e9ad384056c6ea4793454467ed2ad22
SHA1 b45240564e8eb0b0d3c825e03c6ed2de02b6f139
SHA512 4a0296dc6d5ec92bffd768177eaecf1afac0c1d9993175b34eb7b7b8cd78e6ce05caafefe8b84fd947bc63c166861a28b98bd98de3ce1b9c61cd38bf8ccaaaff
TLSH
T1B6F027771EF71804FCDFD3D624B19472004A3854C1A4DC6E116AA25794B3238255AD63
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 fc0f433ce4cf264455c189a25338a3ed517080f0d576cc27cbc626bc32e2f7ba
MD5 b68a91580c7b40cfb9188fb997ac1de0
SHA1 fd974c35a30906a8c11e856cd86a850d4b6dd538
SHA512 6185e2979d228464d63a67aaee6bf08a95ac49288b278c6178ac542d627d44e547e4b64e6159230ddc5cc7b33877dca93a3525d70a12cd942f9f6b9401d79f41
SSDEEP 48:F2em5HdYlvSVJp6Pf5COHoXpzaqwp6q5CORpg5COV:F1m5He+Jp6PcXpzQp6cpg
TLSH
T1B991BCE3CA145043C9C966FB203AF6D9591DCA066BFF87A610BD8F6E51442D63329B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 45a14323f6400eed13e177009eb69bd5169a9ac67dca37a939a04a71fc74efb5
MD5 f251072e45b65f4194fdd7dee1032081
SHA1 f277dacd6b6d66cf80f6027d8513f9b7dcd0ba11
SHA512 cbe0513a52a7a3db119b1889c2ec71c2bbb822914e2f26fb24eee1c35da246b2b3bebe0a0af179bf99e4ffc9be53693df4ddf0eebe6c565dc4ee89e477f6a282
TLSH
T109E0269046C8C2FDA3253247433CC34882F7B56BEAC83D0A2F8CC8487242605B2F21E0
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 117KB
SHA256 b483aaf8fc5cc30813658f0516b1454618004d04cfcd295141e765499d98f993
MD5 7dea47e62aafd0ac72ac5116644ca037
SHA1 016e4464dc312bb366cbc4ed401da5b3ff5ad5f6
SHA512 8f8dc5f742b071730f827c0ec418afff1e68b94d5a865944416431d91219887007c5c438802fa102a5147746e4e2b4cd3b1c1ca9230d2cc0d110cdbdda50c8f0
SSDEEP 3072:d/J9B4xPCL1uOsetdmL/UFp0nux0gL/GL/SL/fL/aL/Piqn:d/zBmL/UD4ux0gL/GL/SL/fL/aL/a4
TLSH
T1EEC39933769D509B0E8ABAA45056B50392BC7467B8449038F254A7FC25DBFB013FBEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
Size 201KB
SHA256 d186bdb414407dfcf3ee3456065c7dd235ab9688a4960f33f89848a89cfd4d24
MD5 9956e46fab8fe63a0bd529fe1d19e07a
SHA1 9cf95cd0a2499f6dd1900f11154e158f8df8d980
SHA512 6df973f00de3f01a136ea09c2b4290ecb34e375a5f3932640b071df18f22341c47fa58ac58144a9d0a66262e7410aaf6c1f862624cb4f2a13ad72245a7448a25
SSDEEP 6144:u0k9cuMAuGUThBG5Str8fPRzxwAyL/iZdp8zy4hERIWwN56AJc/L/eL/uL/nL/5q:R1L/sXpAJc/L/eL/uL/nL/5L/QApR0N
TLSH
T13C141A22236521AFCD5953B913239A17B7B44006BEC3D3699581A334186FBF32FDF962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 d35312f802d153898e83d4d803f00a2449510e7dcad849c1656a577dad49ec12
MD5 7fe280216601d16c7568f8c62ccafc6c
SHA1 2b37ec59de5ad4f7662671d37477b9fcd400a1c2
SHA512 3b8c4083498d42217ab6476fdb4e108513e51a3be9e4593dac3298ee4fc07416a660ff130185a8d54140108d9127f20a5d5d3874de886fa79e7fe2cb97098f55
TLSH
T12FA002D189AA0880E10045B4FC1202552300D92516092213C2AC0068B8621519113C34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591786.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591786.TMP
Size 48B
SHA256 bf098dcf303f940201a4da868dcbd06941549dc2e42f7cc3e49dd69d81e104db
MD5 93ec930931143a0fae98117a74eb698f
SHA1 8fd490739919ad83e4ea7fad55bf12722f70adb4
SHA512 1e4a4a6726cae3ff45e7a5e5435dcef4354b3bc8fe78036119ae106e13c05c760eb0114c7cbec04552f961d50b0bfab7dd897da4669c0406fbb9132352da4dfd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 62dcf89fdab2dc689ee4f15d6834b6941f5ac00d69c17668e3208981b28e544d
MD5 24c8b85fcac00af5a3c059d6214cccc1
SHA1 4f54da74adfbf63bce366d59c16e039e16171e33
SHA512 4b3f4f58522228f0e72749fc544e3d3a8cbfeb3cd29dcd53191042b097432eba30880dc6c654f336bb5f2c7b74c8ed128d79ca70dd147b66cf38dcaffce4f942
TLSH
T10BB09228A7104643CC86157405654B49D624BA59000188078D48AF62090AAA82E468E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 76eac214de55f33b67f40e0bb58c6ccd64708750446e6ad27e2aa936c897c18d
MD5 b687dacb40271e2362f1b7786ff163d8
SHA1 d810bdcee25bde93a2aae94e737bfd058ad0b410
SHA512 562a26a29a428b8df28dbbf26120cb5c735b0a8dd1058108f981f805372eb70c32000baf445858f0fe17b2f8375ea2abb5f8fd2610166bab4c1edbb6d0e35cba
TLSH
T136E0D86457C9C77EA357309F8319E70891F3B456EAC869116F08A4487306240B7F71A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 fbe81042b2ea0abf9c523cc9c97d01561015cedcfc453e1a8739f36f100e0412
MD5 737226f1456f8ae81835a441379641f5
SHA1 30588f37c3b32ece8c61d5fe43cfc71e917c9a25
SHA512 9b3d86e489e753519f6ae5f5c9f1dc4f1039f268ac08104360579aa2c1e1de56c982c033f5654c961866f8beb57ec3c658f12147d45ae6738c654d54a388a0b8
TLSH
T167E086B08AD9C7BAD3147087836C970CC7F3B86AABC87A4797088458B201244B7FE5E0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 9768e07d43353fc3ff98f956730619bf7f9df88aef1af93ed926a3e3bc52a6f2
MD5 e11ddad8f691bb7b4f0fa39e644729db
SHA1 d8b02372c13d2ef4a9466de3a622166887a65530
SHA512 49d9ddc29c71ccaa35fd41273a5c7681fc6f9f037de22a47fb4f754da3d5c8f3ab31385aeec2e3a9e226b588271ba1be7de599a2a0a7b9395c4a969976fc71b1
SSDEEP 384:9WhIEeUI94LU82K3iXGuTQIVlgBFTzTyLuFVdv3n+FNmP13ObHd59wh8r/j931IG:UVI1zrZi+JK9ALXEUd+hE
TLSH
T1FCC29E5171BA1B10383D280E93B9842F564630E230DEE96B7B6932E56F67E004FFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 b2cb95ed45e5835131936a95abeb8cf71f8934713fbf86f256e0bd1287965a13
MD5 108295547a9799ed3a4bce5d3bc366b0
SHA1 0c1da82a056361c64863ea3e3a125e79aaa17ce0
SHA512 684deaec9707d8a935deadf72b9efb63191a96ed868b55b056c556fa076d0bf3ce9a502542e42c113f4bcff0532e20b9c3113495ee0ac56a76b365cdacfc2317
SSDEEP 384:9WhIEeUI94LU82K3iXGuTQIVlgBFTzTyLuFVdv3n+FNmP13ObHd59wh8r/j931Ij:UVI1zrZi+JK9ALXEUdU
TLSH
T1E6B2715171B61B01383D290E93B9841F154630E230DEE96B7B6931E56F67E004FFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 f1335b166f229c88edff77015499ea090ecc3852e18f5d52f9e2e6d7055d51bb
MD5 0892844f1d4288ea625ac71232915371
SHA1 6a596efed8bb6c9b180f288bd159ac5a01cc7193
SHA512 a9236aa45ade4ba36d500cdb6fda9bdfe394def053d172b14760466cfc0f0208fae6cc623efab27a3d6ae51b2bbdea5780f4aa3a5ca1caa9fa299099f1871e8a
SSDEEP 384:DNrRZyCSDnxTICPKMEhIKyll7svbFKfk7:xFZJSDniI7yI1l7svbF9
TLSH
T13244740A7B747001EDE6D9721CB080771E3CB16D8F62E6915DA254698EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 70722724931ef86a6960585ddae9182c030d07dff236e963cf8ef4f49a41967b
MD5 ac0be744fa17d3051650c09c823f6b46
SHA1 3e78bab174dddd8bd9782712471084d30637b84c
SHA512 7476cd0aa7624f092e4ebc156b1eb6e450c6fcb6f801f0026333952a639ed4bb0ad902e537bcbd12e35ceacce36ec6384dce3ed41535d60ea747170532c2e560
SSDEEP 48:T3j7dojKsKmjKZKAsjZNOjAhts3N8g1j3UzB0+I:f7doKsKuKZKlZNmu46yjU0p
TLSH
T16E03DBCF5BB891F3D0F2C53AF98246E5FC78620CC31A7DD101A907B69E88536A169469
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 2f47b1514538725a1a0a529af35502b86018eeaad89d800029cb7937075de219
MD5 15c122eeadebee2cd564d479e7889b26
SHA1 2d7a22935ce2840d0a7361fde77dfc14c527605f
SHA512 87f7ecc0dd04af8fff697784aea3b89560d251b06bed6a8b76bfac51d00af02dbb9b2a14ab1c4126e6ac91df3c533b51f5c7f1aad5a0ea46d535f1c935b804bc
SSDEEP 3:TEHNllv/etXlk7L/34//l/h4jRfZ0td7jdtQfdl0R3eG:Dlk7Lv4puj0tdndYlC
TLSH
T126022BEBBEC8C8C0C84242B8C3434FA829320A088C4C7E91001815AEB221C31FC3D981
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 80c06bb589058ba6bb053b4e04aa38eb8c4af344bcac46beb42e42d08538c4e8
MD5 a32b80ff58ec328be8471e776cb34c5a
SHA1 3691455f22d2f08f7c17c2e53e6ca40fcec11dc2
SHA512 128ff2dfcaae5c910f815e4a274362ff0f6b94244801b0bdbb02ba6ef94dd013c96e4ffc0b3ff7eaa16ad15cf02519bdaa61c93778f9d4de91c0424092ead341
TLSH
T1924197C063B939947ECDA942D32D6403A4D53D9A238F98B1331E66F49F448094FBEE72
MD5 SHA1 SHA512 TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 136KB
SHA256 0f53aa75ea20c11bc7669b33a8f764c6a4287f9b442e3d51502e281adc97e2e8
MD5 40c385f0430470c743f11404fde769f6
SHA1 e555948ec963fa7de49d950b14cdecd86e5caf36
SHA512 65bfa7b7e1a974e26c88afafc49cd72f385048f996fe5e97e949d1a2964be42f0a0fc42a6008fb4e02e6afa8dc12c95f7f05470406d2a7fbedabee55de736e60
SSDEEP 768:UiDap3FvqWwAA2QET+wMQRnHzlwzcyxlqSN0mM68WcylVAMz9otUbzJF43kXj78K:UTyxlDz9obM9X2hd9bk0WD/
TLSH
T152D32FF76C09D1EACDCD95B4A90BEF48807347218620E8E5B93D08C77B79A423E795C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 ef5906f98e8efd067df36108b650afe4b115cc1cb4f1b9519c2a2f9cbda28176
MD5 c30b4add18a4269f12ffb028b0a72025
SHA1 214f7c2fef0970f8b69cf1e17b675410e8d679fb
SHA512 d9d188ea66aa86c758a2f4c123f551ddd31c0c999ff6861a6ec61b35159417ca43bb8fc917658d5611cbe17a7afa97b98cebc9c0a6cb498bbd1f58daaaa19ff4
SSDEEP 192:VHQOIIINbNMIM/mYcYNsOoOAs5l8+NusZ3s6ubSb:VHQOIIINbNMIM+Bko3sbwsZ3sFm
TLSH
T1C552615E26051F33D65E5FB613668B516FD9C8C10132222E3162294FCDF3AA786C9AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 69fa2bf52cbf8f348a261f5bd9dec31d95ebb8d7a8399167e3e29d5eb9431a80
MD5 5cf5cf122a42dfd69ebaa5e5252eee15
SHA1 c0a42b8b55a1212eff5e742da849098805e8ec40
SHA512 56c504913ae198ba1ba6788efde81fe522d9f4f51ffc29314e582f86372fbe2cf479874ffac2cbc658fe53e91d942895befc24c6d354a7eced6b290d1351f360
TLSH
T18AE04850A5D5C6EEA3683187827C835896E13557FEC47E456B0484547101644B7E53A2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 ad814d9dbae6c9e3eb95798f5e6a9f28e7474d896779bd83708f025749fed51e
MD5 f3872810a8bad3b51d73288e0a011ddd
SHA1 d7b94f8675fbcda4d8b5149d0543674d8ebb077f
SHA512 d1c86cb3bbe6aaf81c47a646625542b6616dc82d5bbe69d3030ba29e801b3345daaca5412bfdfaeeedf636eb7b3ca7ca155520de9c1e4a63f42b467531567788
TLSH
T1D631A956F320C148E04AC27D946A9B350738E812DFBCEC0F84792036AEA1B440E8BAE4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 bc54e479e0d61f7620c2587dd2891b6a74800d88a98e194cf978b58ab153146d
MD5 95c624689c3c873e9990dfd75f9c0a46
SHA1 a656f7579d52a0e8bca037d9ea5834f8fa85f2b9
SHA512 b20aa35c4cb31ab0d3ee423df21f5977b10f94e97d752cf65e953b04e283d8769d24bf11b297aad5930a9121c4e14ac9a59acd4aade84b90a377410a26c81cda
TLSH
T173E0D850F5D4C2EF93103183827C974886E23856FEC43E015F0488547201241B7E63A2
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b0dea99506f7f9c708aa6ef3ba92e25980455153224c84cf6d4ba112c01922b9
MD5 53deecff08fc9fe4b5cb2574c4564ded
SHA1 4e038aaf4fbbb6062e96b7a1597dd8e24073d59e
SHA512 329afbf48db5fb19dd360b4173a50d1cdb5908aa01e3ede69310c85c72dd0bf2eec1627d30468df897c1b3e360b3c54bffeb8f9328aa709741357c0dccb61719
SSDEEP 3:MsEllllkEthXllkl2zEZlbQ:/M/xT02zF
TLSH
T1A84404047FC00405C5407131C017C37553F4D530071757473CD504135CC75C00C71107
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 df00192e5bb268ba140d7dee439eb82b8dfe22f07982fe1f980bb36657ca4a0e
MD5 44126d4d81258960dddf3e4ea44df3e8
SHA1 8c45e95624fbf25b8334b5c386fc56db25317769
SHA512 2ccad638334acf9ee500d30c4e692fc08e99251663cf9dcf1d42441211a5686d7bee2f2e232b28e861a4c23ccd4a2583527719cbee336b2888ee3280baf50550
SSDEEP 3:MsEllllkEthXllkl2zEZlI:/M/xT02z
TLSH
T1844404147FD00415C5003173C051C35453F4DD301F51574334D104335CC75440C01305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 00b93632f88ef949fb54e4b79fc7ce951c21c1869e2a889474eefa74f4319f40
MD5 74b98a7b2ae82a29181f7408bd64e41b
SHA1 4e667c7f21d5eccfbbea9ca6b450f3bcb774e756
SHA512 ed0e66cbc23c81c0a99ab9ee18adc267c6dbb92bd0ae55b3804dabdd9c0fbfe8d109f5ba564716d71990b8a568658317944113ca0de77d8e23efd23969ed2724
SSDEEP 384:nqiFetNn/s3n9Sp8Nx8TUNTUlIRa2TDlcSlPkW2n9cfcGyAKDQyfbFrpckBlOObA:hFej+9AswgzDMvn9FGyEyfb1Kkn29M8
TLSH
T19FD25C36E894CE77ACD78FD5B70A768AEEE01267C58C4AC4E9D85E4C01D319D170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 d6de7f0331a8f0faac9bbe86edc7a8ace01e90eb04da073043ff7e299b487fff
MD5 8f432ce5d9be238d284fc0e26160c9be
SHA1 dd0c0074ddf065365218293b5ee0f8c3a679342b
SHA512 a303216c2eb29010b6e8f7f2d1215f4daebe9bf4037aac1233bffd2ad8f6351a733a9a67ee609e6745097526bea35e391043f50244acbb5eefc0d3a4f476bb88
SSDEEP 384:ntiFetNn/s3n9Sp8Nx8TUNTUlIRa2TDlcSlPkW2n9cfcGyAKDQavIf69ix7ObjI/:kFej+9AswgzDMvn9FGyEavg69ij9M8
TLSH
T1B8E24B39DC54CA7FDDEAAF85A30D3A5A9EE4027BC1A849D8D7D84F0C41B319DA307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 41e626f98b98c5625b336ec83e3da60683821ab36019d30d546622c57101723c
MD5 785f553e6027187f23a9e847a1b918a1
SHA1 16efb3f5ed6d28ee7c4d425a40fc173926b124cc
SHA512 60696f2a9432c8c32d7fcd645b751c3afb32227f0c4c7b57bbcf25e7f95d513067281da8d504747ad75686db0903f09c6d663822446ffa6e8c4af1429c8bb6c7
SSDEEP 768:IF1j+9KZwghs2evn9FGyESxumn12bfJIg:l9KJ4ES40yJIg
TLSH
T126C24A36D8A4CA77EDE38FC9B709764AEEE4126785CC5AD4DAD84E4C01D329D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f5848594ec71741ab872832fed6ab03576fecf6abf296018cf91b43f386451c2
MD5 792f71a1eb809f3729ab88a8c77dd65e
SHA1 c248ce002cecbe249fc94122089c9d28390d7c29
SHA512 8d9b3578783bcc14bf972860765e5c8e1dcda6aec63ae1b66fbb4171691922a1f7039131e6b4287512e0098c45cdc04e1fb3733ee1c967b2c7282673c3be9c26
SSDEEP 768:YF1j+9KVwghgsvn9FGyEyfb1MGemn12bfJIg:V9KVPEyfaR0yJIg
TLSH
T1DCC25C36D8A4CE77ACE38BC5B749768AEDE012A7C5CC5AD4DAD84D4C01D729D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 206606b831057f5382164be00fd329176d5b265cbaf573c2695a9a19d206671c
MD5 4de17f10bb5897cd1e8fb3a69da2f92c
SHA1 d8af6deb3f928c4d0624345e947cce05bb02d284
SHA512 2bbfc05ddb07f776832f60c0671f43bc8f889bc337baf0520c584a88d39444d9a30b49669fa6e493525e4b7e0a944b48ff0aea4bb4b447a60cab85b0d73fe5b6
SSDEEP 768:YFej+9AVwgzRMvn9FGyEyfb1TG2VFMfb4uig29Me:C9A3qEyfVHv+MZg2+e
TLSH
T174F2283DDC94CD7F98DEBB89624E296A99E01277C5BC4988E7C80F0C81B359CF746825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 68a9b03eacf8dad6005227a5be41d7b119b4b7b17cf4bd2ce94c1a9dfac13ed6
MD5 a5fc88c35f86423ee1fdc7069be84798
SHA1 0da8b49a2eb5a4749c03a7b025d7d830c6497e28
SHA512 1bf1df5e4298570e78732ee61d9b3837839b2e8c23addb8fe83da531e4531fe0832e71b53308fb062db7c55cc31946f5746dd4ee41f72a20956494a9edb5222e
SSDEEP 3:MsEllllkEthXllkl2zEZlKS:/M/xT02zZS
TLSH
T11A4402046BC10405D60031358025875113E4D5100A11A74329A118125C856900C01001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 72bf30e44e0cdee81c17a631d8f1ea03507a4b837ad1bb2bc0b4e9abb4491a69
MD5 1379134ac9e25a9917e8d4e89a682f5b
SHA1 a0db7a53137352150488c91e76974407427607e1
SHA512 1d646def482f547d9720e13dd1eb46eada8c0cf5d570065235b5995fb78f2e2d135074e2ca8fdf968f095e8c06164c185b8eeb657b1ef7d7b9f56ee10bd14d66
TLSH
T12E3163E1993C29C1C4BE0DBFB45B39FC98E9C216F8A531396444ED58913E28E328083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 bf68e938527b44f24ff29cbc568b0725f9c70c6968eff7123bd820a1ebb5695e
MD5 68a9a58a4c0cb41c7a5b811bcd56cb55
SHA1 09caddf9420d4379551224d0112002fcdba0e281
SHA512 83f53b4f65a5d0db35d96c7bcf8ef23b81fb69ac0c67d0cf369545159d10b93ca9f04fb5dc22e71b2725dd81d3f8ceda10e5003822ddc4bf2f00063c18f5f9db
TLSH
T12E3166E059383DC1C4BE09BFB45739FC98E9C216F954357D6444EC95913E14E618083F
MD5 SHA1 SHA512 TLSH

Submit Download