5b86a6e8f279d431a7a72722273771303903ce0640d7e302e465f09f63569c3a

Analysis

user interaction
yes
max time kernel
150s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 14:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
discordv2.exe
Size 16.0MB
Sample260801-sbdcfacc26
SHA256 5b86a6e8f279d431a7a72722273771303903ce0640d7e302e465f09f63569c3a
MD5 885df0691b3bd227546b97d5b66cdf39
SHA1 0f55f4dae206725b35dccf945ddf75a901a2469a
SHA512 b606a2bb2aa875230212848afec9db09288eedde3e29bf3b644db2d4dae37aa6706f1cf9a2f648ee459ed5ec080e2b24f0086864d1adaf04b3f4539098533287
SSDEEP 98304:vSiFMqxsyUXdmE6bkmEJB859/5ut6JG4GReR545U4E6i:vX9SyUXPu5tGfzUx6
TLSH
T1130739A3E89216D4C4EA8274D672417BB7617C491B3833E30690B7205F37BE4DEBAB45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
34	discord.com
35	discord.com
37	discord.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_605498825\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_414557177\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_376115644\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_1852_243709142\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_108_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_376115644\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_1811933516\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_414557177\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1852_847404702\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping712_414557177\office_endpoints_list.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5588	cmd.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2396	msedge.exe
4244	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300699243304596"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{FE493221-BADB-4996-AD77-F7A51BCB4A7C}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{20C3D752-AD17-48B8-9CE2-DB7E8EFFEC0E}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{BD41F9E7-5DCC-4189-A4C4-B37A9EA2F561}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
712	msedge.exe
712	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 5588	4348	discordv2.exe	90
PID 5588 wrote to memory of 1852	5588	cmd.exe	91
PID 1852 wrote to memory of 1376	1852	msedge.exe	92
PID 1852 wrote to memory of 1196	1852	msedge.exe	93
PID 1852 wrote to memory of 2396	1852	msedge.exe	95
PID 1852 wrote to memory of 1196	1852	msedge.exe	93
PID 1852 wrote to memory of 1196	1852	msedge.exe	93
PID 1852 wrote to memory of 4624	1852	msedge.exe	96
PID 1852 wrote to memory of 4624	1852	msedge.exe	96
PID 1852 wrote to memory of 5308	1852	msedge.exe	97
PID 1852 wrote to memory of 5308	1852	msedge.exe	97
PID 1852 wrote to memory of 5048	1852	msedge.exe	98
PID 1852 wrote to memory of 5308	1852	msedge.exe	97
PID 1852 wrote to memory of 5048	1852	msedge.exe	98
PID 1852 wrote to memory of 5048	1852	msedge.exe	98
PID 1852 wrote to memory of 236	1852	msedge.exe	99
PID 1852 wrote to memory of 236	1852	msedge.exe	99
PID 1852 wrote to memory of 236	1852	msedge.exe	99
PID 1852 wrote to memory of 2100	1852	msedge.exe	100
PID 1852 wrote to memory of 2100	1852	msedge.exe	100
PID 1852 wrote to memory of 2100	1852	msedge.exe	100
PID 1852 wrote to memory of 1272	1852	msedge.exe	102
PID 1852 wrote to memory of 1272	1852	msedge.exe	102
PID 1852 wrote to memory of 1272	1852	msedge.exe	102
PID 1852 wrote to memory of 3132	1852	msedge.exe	104
PID 1852 wrote to memory of 5372	1852	msedge.exe	107
PID 1852 wrote to memory of 5792	1852	msedge.exe	108
PID 1852 wrote to memory of 4840	1852	msedge.exe	109
PID 1852 wrote to memory of 3808	1852	msedge.exe	110
PID 1852 wrote to memory of 5372	1852	msedge.exe	107
PID 1852 wrote to memory of 5792	1852	msedge.exe	108
PID 1852 wrote to memory of 5692	1852	msedge.exe	111
PID 1852 wrote to memory of 4840	1852	msedge.exe	109
PID 1852 wrote to memory of 5692	1852	msedge.exe	111
PID 1852 wrote to memory of 5656	1852	msedge.exe	112
PID 1852 wrote to memory of 5656	1852	msedge.exe	112
PID 1852 wrote to memory of 4916	1852	msedge.exe	113
PID 1852 wrote to memory of 4916	1852	msedge.exe	113
PID 1852 wrote to memory of 4416	1852	msedge.exe	114
PID 1852 wrote to memory of 4416	1852	msedge.exe	114
PID 1852 wrote to memory of 5780	1852	msedge.exe	115
PID 1852 wrote to memory of 5780	1852	msedge.exe	115
PID 1852 wrote to memory of 712	1852	msedge.exe	116
PID 712 wrote to memory of 3844	712	msedge.exe	117
PID 712 wrote to memory of 2136	712	msedge.exe	118
PID 712 wrote to memory of 4244	712	msedge.exe	119
PID 712 wrote to memory of 2136	712	msedge.exe	118
PID 712 wrote to memory of 2136	712	msedge.exe	118
PID 712 wrote to memory of 4212	712	msedge.exe	120
PID 712 wrote to memory of 4212	712	msedge.exe	120
PID 712 wrote to memory of 4744	712	msedge.exe	123
PID 712 wrote to memory of 460	712	msedge.exe	125
PID 712 wrote to memory of 5320	712	msedge.exe	126
PID 712 wrote to memory of 2796	712	msedge.exe	127
PID 712 wrote to memory of 5812	712	msedge.exe	130
PID 712 wrote to memory of 5812	712	msedge.exe	130
PID 712 wrote to memory of 6000	712	msedge.exe	131
PID 712 wrote to memory of 6000	712	msedge.exe	131
PID 712 wrote to memory of 5000	712	msedge.exe	132
PID 712 wrote to memory of 5000	712	msedge.exe	132
PID 712 wrote to memory of 4552	712	msedge.exe	133
PID 712 wrote to memory of 5396	712	msedge.exe	134
PID 712 wrote to memory of 5396	712	msedge.exe	134

C:\Users\Admin\AppData\Local\Temp\discordv2.exe
"C:\Users\Admin\AppData\Local\Temp\discordv2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4348
- C:\Windows\system32\cmd.exe
  cmd /c start https://discord.gg/RTpEpdS6WC
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/RTpEpdS6WC
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:1852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x350,0x7ffb2926c188,0x7ffb2926c194,0x7ffb2926c1a0
      4⤵
      PID:1376
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,15735347326424049560,10229386182739695106,262144 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
      4⤵
      PID:1196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,6294563887611037643,15970108662884744190,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
      4⤵
      System Time Discovery
      PID:2396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,16623692408044574567,8539123329993036591,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:13
      4⤵
      PID:4624
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,15186211172747018710,8166587460010636511,2097152 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
      4⤵
      PID:5308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,5138805340514294896,3279609661697313196,2097152 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
      4⤵
      PID:5048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8753440921839883851,7329536473364382263,2097152 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
      4⤵
      PID:236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,2903295318997256335,600705508071824281,2097152 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:9
      4⤵
      PID:2100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5300,i,16896542397771794975,2309777574713602291,2097152 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:1
      4⤵
      PID:1272
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,16359431939803357584,87352421464892632,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
      4⤵
      PID:3400
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,16359431939803357584,87352421464892632,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
      4⤵
      PID:3132
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,9551538270821595808,12476056216469231598,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:14
      4⤵
      PID:5372
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,8942138796112882661,4624694173573497672,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:14
      4⤵
      PID:5792
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,8276985355773199087,10454688594166154500,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:12
      4⤵
      PID:4840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,13143128084803242682,13789860512624241665,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:14
      4⤵
      Modifies registry class
      PID:3808
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,1039046348469621959,10725896548429654579,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
      4⤵
      PID:5692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,14499852039935894789,6445187758119368473,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:14
      4⤵
      PID:5656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7088,i,10357007307402472329,3255963749338069305,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:14
      4⤵
      PID:4916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,1710789969486729235,1746740032544473145,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:14
      4⤵
      PID:4416
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,3045792494683341361,16230575654166823692,524288 --field-trial-handle=2292,i,15455663502782830591,13846871318851466425,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:14
      4⤵
      PID:5780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:712
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffb2926c188,0x7ffb2926c194,0x7ffb2926c1a0
        5⤵
        
        PID:3844
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,11536765490119864638,15096792055078002138,262144 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
        5⤵
        
        PID:2136
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,16720437874890925875,8489808489196886885,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:4244
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,16512162187384793725,10238773596204623654,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:13
        5⤵
        
        PID:4212
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,13560148321352301920,3056993279930463809,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
        5⤵
        
        PID:5112
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,13560148321352301920,3056993279930463809,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
        5⤵
        
        PID:4744
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,13559409653054872575,11058533487412974506,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
        5⤵
        
        PID:460
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,8098702428931891967,8203682262816121783,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
        5⤵
        
        PID:5320
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,10365636665430913331,13654658895074821092,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
        5⤵
        
        PID:2796
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,5500731071555372024,13205293726040867537,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
        5⤵
        
        PID:5812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2355483951047485074,10506683306427435997,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
        5⤵
        
        PID:6000
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,14088277669333612047,7585788635375694647,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
        5⤵
        
        PID:5000
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5168,i,257507899820318728,5392452657134018902,262144 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:10
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4552
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,17788161935885085178,5972982865778204373,524288 --field-trial-handle=2168,i,6452897630586026308,8478489293791607751,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
        5⤵
        
        PID:5396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b50b98bcaa03b9b90e2d0c335d8f75c46e3a86545a9eb814c9bd297b2766a244
MD5 6cff3fb88b933ff101e0c085842946c4
SHA1 8fe9302eb764d43cd3c531487c644e64c21f4553
SHA512 67186e6262e7c79370a020e13b2cfdce7b4028045c9fed258022a03e3c3b38aa501cafc93e081e8b74459f964f19df5ace9a7a13721a64757648b2104293a44a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7i:fwUQC5VwBIiElEd2K57P7i
TLSH
T174B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f051c8577a75d349c2c6775b09937b2610592d7fbd7cfc7b030c805a32c849c6
MD5 10e5e15d6ace61b824cec198438fcd60
SHA1 d8d2b4ebaf9d7c6457c3691eea39944c8b67774d
SHA512 1320a447279b726c3452d94ce39f4b15a95c1a0cd359362cb38ea39d1a279fb7d51111a7d1fcc9b90d5e2872e31d13d6133846056da68dde03070f1c92fab885
TLSH
T1A8D0C0A03D08B824C0C12032305163016A321030A96D87082020F25ECC39040B3BF09F
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 60f571a0a306e375577b7025e398811d14bae98af7177e8a08773ea7a62038b5
MD5 5a02ae621011c4531bed057f725636b9
SHA1 6177aba1fe1af7f8ff20542ac4b9670226b3663c
SHA512 10cc7c8b6c7a294194ab4c47d9de93e7ecd7bf3c9a0c98753f54fc6b8ae24f7a68ef89c5b6d5e7c2efbe5184bbe85069ee7499968f91427860ef3324c2cd5fbf
TLSH
T1FEE0EDE9C92AEC3719FD076850A98A49EB50035B2A41881E7A3C91088FB1266458A99C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 aa2c3f1d802967c5f85284bf900afc598afe53627260bb6e1d4aa8acd4f42fb0
MD5 955de15523aeb9f8bb3f412f04730941
SHA1 8671102a62b0b384066e04518cc7143fd67e0edc
SHA512 4c1c1beb1f691170d1fb6ac9b173d79a9389717d26bec423114561d41b0f64ecde715243a29425b5917ddea963d45905b133c502546645743c23824a29d4cbc1
SSDEEP 768:opkRyGm2Z9bIf0YHFq07xArfbR8T4vS0/3Vav9:+LQP/YHFq1g4vS0/3VA
TLSH
T12F13F93CBE671F4ACDE3867D8E0F4E395373C820D6C44023D7B9391652163AD9A8E929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 be006f64a8231584a7302f51ec1607538bfc065130d70d154c693667631dcf7d
MD5 003010c9bd40e618aaaad49ce6d06227
SHA1 3669b2c5a00ab434541dadaf085ab446f0973911
SHA512 01bd5e8f32cfb7ff3d7574a7c9594be14a4e280ae0418fb6978b242281a8250300c58858b1b668e39f988fc064ed95a3d9278804d9a28485897454031fead8ff
SSDEEP 6144:8DL/dL/pyZfkiA5qpSCXTVE/ZjDAXXDhVPp:YL/dL/oxA5qJ+BDAHlVPp
TLSH
T171B4A3F789015829CB7C12F953433A7C8337458D3CDBE9DAE57A0C996819B32B2A4DD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 3.0MB
SHA256 0e5543e28b4efae7956b5d7afe8bd9c9bc9d190ad2f14922e332847f514fb884
MD5 dec14bb354c92802afeea30be868bb0b
SHA1 930c061a4aa50f2783992e9453caea000ddbca4a
SHA512 374329e179bed65175311436e614c1f3cf446c1bc30be4ca2b980e36f251707e5d8c100d2580b175d7102b19e04737daed59e48075bbee585a80813ef86a3a52
SSDEEP 6144:VQ8uZckkMERr28M+iVl9JKJRtwhvcsrPg3uWWPfMJZ+ZylKtq4wTfKs7fviebRFV:VQtDkJs8MDfodgcsTgyOZkYbqOnrM6
TLSH
T117E53BDB8B747A92D7A6DE70FDC5EC693EB410C2AEC6E0432542C67D10837C23A9558E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 9a5ac1c8b183789bb1d5efddf3a9da26286cb751e8599dd72d6eaa66dd30b01c
MD5 41ee5881d2dee7ae37ffd0318e5485bc
SHA1 1f3868a2285bc85de7cc868ab986c2c3afaed544
SHA512 1fc774c1def38a46e625b43da1f05955d6be6690b5fe3091a257113099f1fea4b7131515eaa9eebf306ce6184c39e14b4c92c11fe71c3f323fe335f06a69f5b0
SSDEEP 24576:+HquupeVgowKllx8RFPzJk7hZ22VTOG5z8S/na9AN:+KVp6goFpsFPzyHTOG5YG
TLSH
T1C9168DEDC9785883CD63DA30B4F0E9877C7413C3F995C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 efccab7112ca8dbbff66487698d5d5130b257237dfdc2d5a5655e092eae65adc
MD5 bbe6d301e9a05b7ef84200a30137be72
SHA1 07d0d4fbbab978b3c6a5092e7830b2886b33916b
SHA512 1b591f83a7653d707e5016a61b4027fc664ca138adefdff9a3a94eeefeac11d5756aa5dbb1ab4d39f7cb620887caa4985ebc41d2c234f38a9861db2d4d2f02a6
SSDEEP 96:PYPhAnue830bRlPGPdThiq6Q7PjcFR0lX9J/a9rAM2/GQASbzfTQdu:UcrydMq6Q7PKR0w9rAM2/bzc4
TLSH
T187E13E698F2B7FCDC752967E19D1195131B3C86CE8CB9EE9C348D6389A017E320F2A15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5935db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5935db.TMP
Size 2KB
SHA256 e54d470cccb12bac0662dd7c529617620d7dfe767825d7fbf2b219fabac0be11
MD5 1a90164a210a4bd13b7a76f09db1520b
SHA1 835cb2a6d2e3f15da080993fd5bad71deb8ee4c3
SHA512 f83a8e65a48e984b0c073125431ecdede03a7b977d00b6b1d239efb9de5a9a8c54b09093be002a612b3455c5b15815f36d418c1f15d0bf5ec769749b44233f33
TLSH
T16641332AC33EBDCED7A1577255E0625632B3D0892D0B6F188288BB7C4F01B067093312
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 abceb16eac044346ba3a99e9b33fcd46704dafdd01b306b49ecd80a2bf5020b5
MD5 dac1313f1df918f69589b1a1edd372d6
SHA1 285355a26c360e9b00837af4e16f1fa2ff76513b
SHA512 f1a75c13bcef04df28456dddb745d3934e1c1408494aa498dc3550efc75bc9068686c230f2668a6591af747f1577cc14195f455ab7f6d9c729e1459a465ecd42
TLSH
T16DE0D8B499C7C55D5E1074D35134B70992D83953DAA6BD0B1B408CC0768200AF783A97
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 c1807af84f80ec7d42617ee4e3a6a18281b2454d8e4fe068c6dd89a9e51e49fa
MD5 6635a26abc679224fef9089ebc098a63
SHA1 7e163b9853c11c2b40cf0d467e440bfdd0889a36
SHA512 dc1a194733e9a3d22678d8f6cee59485b3488d27c2dc976da620f9d7cc19b5bd9b68ff37df60a97ac8fcadd3f1dfe82c764f4a6ecb9fbfb2a02a944cc3531113
TLSH
T1CBE0268405CCC17AE71468D382696308D3E03C2BBA883D0F1748C8827102241A2FB6D5
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 13924fedc2646a8f3481e10bc07df6bacd21e6514690ad0b26764c64e5e3770b
MD5 2397d771ed29d4b894a277d740b9c403
SHA1 0e3dfdb2725fade912aa6900b9a4aa50133e4334
SHA512 8aa07a44e941bc77d9d935c6e200d98b7c953c885c92a828656bc8a8ea5e0834825d57c5498d2bd8d4a0ea0f3a7d35b788e5be0d72e9ccfc039da402303773fe
SSDEEP 48:uzBmw6QU1Pz0nLwJOrZjrte3FJu4yeRvX17Gg12AxyUVu:6BCx0LwAr5M3FJu4yYvX9z1Xx0
TLSH
T10692A7474D393C53F7452B7A262B4839C937E19CEFAACCC5312550681DF8652A03A8FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 927bc69c933c75c0c3b1ce629e00dc7fda0b11f99d431a04bb33efbd8e2bf667
MD5 46a9f51f13a9a08406552aa4e1f18a62
SHA1 dbe0f1f922407f2d110f5eb2d2b110e210a2f027
SHA512 7d7cd46353a2ef10eae2e4a409d4db083307ae61d33972fb024ba4fed50afa4bff463331204b07f1d477b89213d7fd000cb33e76fa2eda52b95880fe676a7605
SSDEEP 192:NJbvSH+bF+UI3iWGVoWN3qL/xaaVVV63:NsIkUI3ijVoWN3qL/NA
TLSH
T144240E1E5F653712CDBD813669EB44A35C7DF03F8B1326DA686114B4CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 d6cf8538e1288973b2cd7fcd634aeb6e621cbe478c0f71fb4b117ec27a6ae6ac
MD5 fd0eaf8ca8780e8258d46da42117fd63
SHA1 36835e0256eca47f6037f101e2b77ca0acfe0d93
SHA512 1f7c9f9da61fd2279862e396ac6e4f9fb9043c7b9719950e64dad38217a80912c849e72fc1e29ef763e3adfe21cf3a012f94d14c03812dc3d9d6fb821b8f128b
SSDEEP 96:pb2nwejQjQ/GZtZZfEADZXYAyKU3Q2mIAMuUOv3y/KPoKXl+CJF9o1uqNXTZzgTi:xGjQKfuU3Rjyi/wMChWjv2Ol
TLSH
T128121F3FD418847E47778327918B391ACBBB297E184CF559D0C61D0C026E6AE1615AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 c5cb0433c2490b45143f8bf8d05e6634679775724df51d1d5b4caa88e51e396b
MD5 889b9fd52e963eec69160a3304861398
SHA1 5a30df305b502ed4d8ea5c63ac49c6adaa60dd20
SHA512 d0e4962c4a835aeff3338ed1ee389a19751097be7025b7fa8321abdf0a5947d664c5f4e6075b5605d986f67e7a5f35975ae8a92bcaf35fcc233d2db6d8c84e1a
TLSH
T102E0D86049DDC11D660560D75326B70DD3F03817DE8A7E095B089C61B046004E7E26D7
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 0045e3f16af811136f5484199ccaa4012966b9fbc78463d7bcaab4d327c0ba87
MD5 842c903d5360f9fb3cca0b70ce523818
SHA1 2429bc0d423887ffb8f2700740c08c128047fcd2
SHA512 19702c270bf318e8a22f6f88753124ba968f8efc7d64ddb3b1bfe52b34d6f797e76e55935a3dcff7fb79d296c29cc25615bec6e4891ce1dee87220d5e2412189
SSDEEP 48:Txk/LopFMaty423w/a9NUuT6MRZ58hjmTaINXOUsdGgHNYEQHNjbMOoVTPPsqViC:qDeMatha9rhCmRXOUKD6oJPPAn/ot
TLSH
T184B2E84E5B303111E1B96376EDC642163F6C207CC777A9D2EA0470F29CB262BB806CB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 74554e53080eafccb549724f7a724a2e4b23ef0eb7c2049ce0d98eac30d385fa
MD5 033cebd55e2ca86f9ac7a1361f8b7924
SHA1 eab97fa1e205bfc19d224ac908b76b0c193c481e
SHA512 d66a8e6718cf11bc32ae7a06cc306e2b5e179e7bf09962d1d4ba59bc932d7112bf6b482ab76ded4659908237c3d5e9fd3d19ba9e2c6fb11401ecc42de7317e2b
TLSH
T1E4719EF3C7E8862DCA0156F4AB147E1BCE2D0954432C3D2AC8D4AE6B97E2571F181A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9353a4405af257a33f5b60425f9512b41fe26c82a870247d47c7ec833a3e25d8
MD5 8a44056ed2a9fa7c30d6bbf35d11f626
SHA1 de13d0b20644e04c40d687ca21cb5ea1e31c4f80
SHA512 d79032360662640123face27bb6ea797603a9085811b6b000949e43e5838c270d17f41c4fb26714f3c2fa0030482932fd8495212c938ef2333555c1875f22715
TLSH
T113819EF3C7E8862DCA0156F4AB147E1BCE2D0914432C3C2AC8D4AE6B97E2471F181A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 351B
SHA256 7dde86b7eaac9cb35162e0249b331d27530f49b3ad28fdeef3e542e87dfb06dd
MD5 3009fc48bbc0e30b4687cd070a57c377
SHA1 a28a3d5e801e7a46cc469b26cac8dd9a9f731dc7
SHA512 b750df13d3f24960812b76250e0f2361c4f1d4ba1c6ecb3e5ab67893cb48f8ed9f2b5195effaed8083257f9dfbed38d5edd1e2ab6ce5ddc5f6a361e821fb8eef
TLSH
T116E026D384EDB833502C572B2C803D0159B9A831115F55F5CA66893CE2484F77716426
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f5d47381802d5041cb13f37670d5c68d8dde00091cb5e217a02c225c6c564d6c
MD5 e49213f47d2df0bb00cdc398ebf39bfb
SHA1 5d6de3490de90aff9e20130fcb89e9a274d3ad47
SHA512 206623b97baf3a7be23ac16c5136b84d16ec21ff10190544380aceaed2dc1a5c2b2581ea8a45a5a60410ef84e474899a270b12711972ec19a62646233282bf0c
SSDEEP 192:sxRv/yM/jK1Ml8wC+/fLspg5FZOwwzoA8plF/g6+WNpou/eBXlV8CG4IgVY4AJ:sxRv78+/fLsO5rOwpX/5D/e2WC
TLSH
T1F162F916AA346E779CDBD20DFA457F53D3F91573A1901E44AAFC9A0C00E6ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 61e8735116b9ad023bd81c2df90bce923f87d62fef02e1c0edea669844bb4f94
MD5 19c78149fef9f8034b2b8e24b8a176e4
SHA1 7a160d401437c95d6404b1ee0457697eb87f07da
SHA512 0b3f63521a7f0b7a92093eba0e0eb5185b7bd79c3133a45510c9c568bbdea26c5ba12396d8043571e6e808e1ad1e2c5c32f0c46a5a4bf18394b7afc0f527340b
SSDEEP 192:sxRA/yM/jK1Ml8DC+/fLstGWpV85FZOwwzoA8plF/g6+WN+nou/eBXJD8Vg4IgV0:sxRA7H+/fLsUWv85rOwpX/5e/eAhC
TLSH
T10D72F916AA345D7B9CDBD21DFA457F53D3F81523A1901E44AAFC9E1C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 273eb10c855e8350b83880e920289665a9b023b11e7ed2b8a13faca1cb06d3b7
MD5 8b47551267264de59c75cc2649950b21
SHA1 580b5c10e5ed74e518f311bc3203bf88416e90d7
SHA512 d45832ea78da9ab43c2d6a928eb03d5a1ff91268c8e594e227d7c53104617601c3699c0b4a2d13e781843915a2cc3944cd40c8cbd13ef3bcf00edfd79bfbe442
SSDEEP 192:sxRARFyM/jK1Ml8DC+/fLsCWpV8JFZOdWTX9wzoA8plF/g6+WN+nou/eBXJD8QG3:sxRArH+/fLsCWv8JrOdWTtpX/5e/eAQC
TLSH
T1CB72E715A6346D7B9CDBC21DFA457F53D7FD1523A1900E44AAFC9A1C00EAAED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 32a4904deb98e5ec788e16fb919b8af872e7edb322c7fcd5adb61bbdfe697761
MD5 60776f77e95ffa27afab6a3e3f0bdd8a
SHA1 2884dd02334c54d9b3586750a0621d541b55db86
SHA512 ef09f11712adc43d24f9c1d95863cfefb5c1117fda0f2886167fab23ee3d4e9d958ec2362599ce6c84db65b5ced832fe66b4dde2a21390f619a7819101f471d4
SSDEEP 768:dhRAJW7pLuLfmxWgg+feJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVLRa13f2roPlznr:dhRAJ2EfmxWgg+feJu1jasRalfNdznr
TLSH
T132E2ED7B680CCB7E4F804A9CEC29BE9E6DE802CF56D8C95447EA480C03C67EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 ec15a12609f891d996459ef57c303c55eff8f421da000c1c81d9e0bcae9f43b2
MD5 c772fae2883a9fc8dae41edffb95ab8a
SHA1 e9270935be63ac52851a76c1fe3212c1ee6d1fee
SHA512 5dd6e821bddf5b8eea9121774bbe55e7942dfb7c0d2715652750a549574d0d06a876e43dd63b16a27fae99d6b0da450061ec0e3484febf25fcf3f300e0c1aca1
TLSH
T1FDD0A757A8A50566FB774E932AA615AE46792C8824B78448A51324BC14F1B43D322F52
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 098234d07748db55107527cba7ca45c7cd7024c7e73ef35a9e4b79dcd1b183fa
MD5 f76de3d133cee408c9ad0d676ff19185
SHA1 bef36edb108042bb44c085a0ada9c80ace55eb34
SHA512 c04cc70adf417f3b702141982d4de4f08fb4e53bc67f7e22eeb88d8373f5bfda487b1cdd5b8bf9e2d3f0ece0d71e5eba6c8a376a14b49ceea393d880f00764e0
TLSH
T117D09713A8A80662F6B74F822AA6246E02703C8820B78088B00204B804C1B439222F52
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5917a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5917a5.TMP
Size 138B
SHA256 309ef832e3bb118994b9620963bba18035d3bd4a92352be2f4a0628e3529359b
MD5 3ce902970fa2bac63f8ed5c059b07bac
SHA1 5111e819fd52191b7e91520978183f5750407694
SHA512 3b06172bf5c3ddd320936e5ae8b4f45d632d3426d1cc6d86c10b31fab9041cb039ee0d09f7f8b18d3268687b77e2c0e8eafe3832fb79c856d22beab852977e00
TLSH
T13AC08CA3A0910622A7220A82232B401C47282C8818838449A023342830F4B236201EA1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 0d2c24344a460805d1aaaa17679bec7c5d3d1cacbe77e5e1deec89b83f253ad3
MD5 477cdd0c781ac609afada56b7220e980
SHA1 b0a1d981257b29de4515662c46d62b4cefe66a2b
SHA512 3aa4b3cd72c4ef425eae603c1773620dc31709ccec820c03069d2117ef74052f0bc1b78509a8f17216acb4a46461bc2a60f82350fed21d17bc422a4e6def057a
TLSH
T18FE0261406C8C97E6117208742249708A2F87977EAC83E0B3F95CCC06697588F1E7592
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 0052ab6973f63df876894a4d2bbfc21130603367fc920bde014a5b2d482586e5
MD5 b057483953a90d8025f8d5331bafb99d
SHA1 4312df998b02519608aa7041bcbfdb003d5e089d
SHA512 46e38c2c9ebb13dbbc2d59d4dbfbffdef2dc31b548235d25f44571f4a8d9607f24d07eb154c91308c012b3ebbfbb138294ecbc134ca8fbfd14f7f9fdb9dd0ce7
TLSH
T153B012A53710A61AD484063607E187D06744F0563085D503CC08DF970F456D87E418D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 9042ccb91a960484c08d41f122833078b6268642e3d5392872442c85c6ba49a5
MD5 d8db4f780ce6b9e4251315c20583b739
SHA1 3979d519a3a2600dcdbf4bed905249a732e49e47
SHA512 9f20a654ae214fc9acb123d2e4ff54a6039b1b87dcbb31c00b0a539f65976a6eb3f47a0a8ec3db51adc18ce596eff788c73cd8532dd36e334fac3b7817b12ce4
TLSH
T147E0D82826CDCA3B624620C75224F30DD1F278A3DBC97D5A2B089C80624B14476D3991
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 95dbae901ddff9ed41663f3cc4b92bdf8c1bde3c038942d928b983396d691caa
MD5 ed7e0ea5dff1d462c802e23f44a4cd4f
SHA1 70386a1b4a439f7a1f36106f88ee53e6fb2f8b57
SHA512 89187f0328d969d5506a8d959f755a81d21929884a5f4479697c9fc2fd491b0968001526b3124652dfe5b0747ae9b02acca4cf20676c2381af01dd9e217371e5
TLSH
T189E026B44AC8C63AA500A0D74374FB4E92F07DA79BC93E4F5B085880A642204B2F7992
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 f8d18462501d592c6dde0af3f9f5cfe1e1d3c0422c8aa26b72716817a02a130c
MD5 8dcd840e0ea4862dee15ae215b1a51eb
SHA1 20589ee93061e26e3fdc934dd10ec1aeece8fc46
SHA512 98093c7f62a63e813b00485dd132f96f48d0f18f317399d245e99da7fe1016346e93d24a8c032e5b6d48f4150d61bc8df00667b8642cf890442242b41bcf4485
SSDEEP 96:KRN6zn9Xr/WzoWgv/K4ugR/cVtgDbUHZ2HDxTnjWXkSgLjK46gFjcpBc/H5WnjAz:CN6zn9Xr+zoHvFugR0VtgDbUHZ2HDxTb
TLSH
T187C14749717A465138BEB60C917D8C1F82C1B8A37714E82B7BA905A20F27F039DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 ee46f38110067f67baff430c3744492a0f86a1450f59435eb4f8f501c9ab0aa1
MD5 513dee3cbfbd279b2bb85f74863ba549
SHA1 e0ed58ce75363d85f0eb53c467f6791fe08d4c19
SHA512 1d26105c25cc5e16dd601a945dee6d9de2b40acb8767872edbd32d0d2293d5a8a931f736047a49d46f0827949c89f70faf6a8560d05a123eb66753a7cff9e2e7
SSDEEP 384:DNrRZyCSDnxTIClQMEhIKyll7svbFKfk7:xFZJSDniWyI1l7svbF9
TLSH
T14044740A7B747001EDE6D9721CB080771E3C716E8F62A6D16DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 1d9ad6d3a6616c86e096a7c11d419217500c8431411089d477af849f6f3f5621
MD5 32b5793dc970981c01a37a6b2b3eb880
SHA1 8c3195bd468c1eb74ce8565f7f928163b3d8123d
SHA512 7b0412f51c1d7645131e1987eccd278d223f7444e034c0f9cbff8d9cf56066d6a36f1ec6cb67d2e36bbb18b2e60cc8efdacdfc44502a708e1415a80cb46f6a71
SSDEEP 192:t95QkIIIbbLMIMNsYcYTWO/lAstlrquusIn:9QkIIIbbLMIM2Bu/WsHEs
TLSH
T19742966B26111B7BC19E5F76137286549BF888820072A12D3362AD0F9DF3F9783C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 4e28f72a691261f150f02878fd38874a92324047474320dc63cba2ac0ea7dd8e
MD5 ebd6bf9411014fdc3c1fe592f9a6f1ad
SHA1 24d58456cf5799f1f5f15fe6968411b4ba97f564
SHA512 a9666f86d970fbedaf7d156d0e47c0b71279af348f6a52e726a0e2896f0d995c2530c7c30a2d7e263fac0cdcf4e4b0160e689afc40064d79841137e5d0d72fb6
TLSH
T18BE02610AACDC1BEF71524C711266748E3E43D17FE98390E1F04C486B007100B2FB992
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 87e893687c31bc011994eac2727e41a2c55e28d0d014888bf1db861e1adf4ad4
MD5 c87529c1da557f55516a51bfd938df31
SHA1 728245cf5f0b1bb834b9ea9cdffded28b125ceb1
SHA512 5db35500b22144830e0c9821ae90cba8db4c1cc57994f6b53ef9b02802b31066110a6d1c0e2d7737b00918195a3822f2cf4cebbad806d982a0efbe32ab7acf3d
TLSH
T18C21C456F330C549E15A867E907F5B361738D8168FBCED0F44BA20746E76B040E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 a98f951ba16aa2c9d57ce71f6004a3ab934514ca97378b1f266f808684f3be8c
MD5 bdf929dcbb880a205d390335e75fb0fd
SHA1 1b99b9c1f48f7332b4e86e43462a4ff7c1df05d1
SHA512 c4de02dbc144e15a703d2c2f420a452b631e0f46d051cb9600b7b3ffd40923586479e591425a9ba2cf35fb72f9c7dd986c5b938fca8d211f8724e0b0c2f66c42
TLSH
T13DE0DF10A9C8C1AFA31120C30166A34CE2E53C1BFE983E0A1F008886B106141B2BB592
MD5 SHA1 SHA512 TLSH

Submit Download

a7b0f479-c7b1-4e22-a3fe-887f35b29615.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a7b0f479-c7b1-4e22-a3fe-887f35b29615.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 2155e3b49638b9a9b2856c52d0234f6b32c5c6ca43d448cf17f919f6c8b0bca5
MD5 f814d9b5df5a8c0d4c11ef667d661763
SHA1 fc6e9f6d49dc7f6485d3cf692dc87a77f6a33a51
SHA512 4017674ffa5016cde03f983e98d8efb3bfd44b23f7c4f7ba5e9fd2f9b411115ad03ecd365e709d920558f57bb3b74a81f6cdad1d3bc3f22a87a192c467213c26
SSDEEP 3:MsEllllkEthXllkl2zEflUrhRa/:/M/xT02z5rH
TLSH
T152440404FFC0140DC54110304151C7D01370D4100731574374D144335CC7D400F1C000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 96bd5827da2ae4db926891387a651ba436acdcd160659b2412ea2cf6979de004
MD5 41fec80ac86f2edb51360af50079589d
SHA1 5c26344d817200625fec217a0620ceaef659a64d
SHA512 0d13b10c4e8acfadc21f8585fd82ecaf4f9c807a7627b3e82b2c56b54d5e42d6cc20ad40331ece5a6d058def59a10ba83c279c8925089c84be2ea4b5d89dcac5
SSDEEP 3:MsEllllkEthXllkl2zEfl+3M/:/M/xT02zp
TLSH
T14A4404457FC0041DCD0010304051C3501370D4140557775334D554335DCFD400D40010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 61KB
SHA256 ef505e018fa626a91d48d7e2464beb187936ed526e453dae0daafb738bedd728
MD5 b27e03c0ce36ec4f0f99ebea95988993
SHA1 6af3b9f52481060de067fb361cab760e2363da9f
SHA512 185e813882c697dc21eda6295c8318dc421adafd8fd83b86aef5086a222e5ada15a524b94ccf401b7d02b27cee66bc96cb671c513742ca4099c97f8b2f1b08e6
SSDEEP 1536:Uj3x+eWn1hD223fbxWG/i8bmdwA35evZKE:ULxwn1Zx/i0miAp2D
TLSH
T181537BF688E39A3AD9AE9787633E6D0599BDC163F4985494F7C85E0CCC521BFC306821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 89ca44e219bcf1ec2031b3dcd3e7d8d9bc2fe8384868bdb4739275ede9889dba
MD5 07ea577b99eef694325f5102e376f144
SHA1 36946d6762983efce394d18ab2ed0329c091ce75
SHA512 7d9e3cf72fd286583536b6290bf691319fbaf062123c8b24f8a89b9ad6c3a57abf3981cc0c6e0bd104b8400c80ecf53f24a0ea0e67510cf07d6bff4ecb41ec96
SSDEEP 768:cj3tC2cULiJsMQ8JNHXmTWTbc+0v2ewBKZOrE:cj3uk5d8feWn1O2evZKE
TLSH
T138F2AFB09CBADE33ADEA9688B54B7A466EF801B3D4C81958D9DDAB0D008354D174BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8e8f732cca5b4c4fd1b5d7d31a118792092632b2613bd4f3dea00e3c091aaf5e
MD5 f884eec7fb89e35bc02d8b0949b54595
SHA1 b38f8f315af279fda9f61fa2e90e655309da17b7
SHA512 489c1d0cf7518f999af06b4fc5ba2656f42fc8f3e1e207b5d7c0dc91c09080723704d3f3ca370ffbafcc9be0bc20bb0d5c5e3ffcaefa84ccd506fc9911f2e52d
SSDEEP 768:fj3tC2cULiJsMRNHXmTWTbc+0J/9lWewBKZOrE:fj3uk5yeWn1W3WevZKE
TLSH
T1F003BEB48CA68E3B9DEEB788710E6A166DF80173D4E81868DBDD670D507294C670BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 09eb0512407d58567084ea5efc2cc100b89e8a73fde67b842f6ffe51f023cfae
MD5 bbe152cebe84f5f84872cc77e56a0d9e
SHA1 f667299f48d0a410d6e5a6bce8c06be7dfaf5a0a
SHA512 c476e5949c25ca2a69585afc89d254eddc33fab221d2a6f5dae7ca4420a9e74038fd8b18077f17de6c2919f836be8e70a88b6cc35d47ee4bbeb7980a9739492c
SSDEEP 768:arv+4UNbdM32U8iJsMcNHXmTWTbc+/3eVH1SvyZ:absb+3w5feWn1PEH1dZ
TLSH
T14603CF319CBA8F37ADF69788B44BBA477EF9106385C40684C9C96B4D428B44D170BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 cbf3a269d7f2c1da17085e4bf5a20accdcf0a80df01b1480adbd1dc37144d4be
MD5 f2893f0133819ea0dbe76e5a18625220
SHA1 2ba19064eef38a3a47912602696904494e61c041
SHA512 676925c972804529eb2f7d1f864837264f561b40fd55f55735f7f95092f4c8d890c06df431469a423fa38c89f785b6beff538987bd6ee9df494e904ec499b278
SSDEEP 768:4rv+4UNbdg3/C2NLiJsMQ8INHXmTWTbc+HreVH1SvBy:4bsbG3J5d8oeWn1LEH1+y
TLSH
T1D113BF7198B99A37AEF68B88B54BBA077FF8116381D80994CDC96B4D018749D031BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 47KB
SHA256 3ee477747d978bcacb499f48de67641ee5db8d6c1105ded67878e1c1c17fe593
MD5 4c12ddf548346725aae80bca3b7c7e12
SHA1 7744290ee57f9974ce7cacb7bef062e4038bcbdc
SHA512 ed6ea43ff1402c71ec9edb961bbfded38a0f8b70c523f100dec6f9371257248b230b8a9bbbb4422b127501407e5aa07de0c08c124f9bc48532e4fecc6c8af4cc
SSDEEP 768:brv+4UNbdg3/C2qULiJsMQ8INHXmTWTbc+HBi9YceVH1SvBy:bbsbG3Gk5d8oeWn1hBcEH1+y
TLSH
T15823AE399CA59E3F9DEEBB48610F69162EA80237C0B804A8DBD91B4DC57644DF307D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 655104dafeed4b0a993ad7479d22bfa724747191a225159fed6bdd97119659f1
MD5 e65a4a2a9c86a9508a943c11ff0351b9
SHA1 1c170f299b8ec261c05e9cf824669ed7a2206a6c
SHA512 23081b35c3aa6dbcd29315c4e7b7d9c9b3db6dee9e08936af65474ff26be999eb739af122ce0aa301411b4619751f4072720a4226c85e016db6d77ab6b75e1dd
SSDEEP 768:xj3aC2cULiJsMQ8JNHXmTWTbc+0v2ewBKZOrE:xj33k5d8feWn1O2evZKE
TLSH
T167F2BFB09CBADE33ADEA9688B54B7A466EF801B3D4C81958D9DDAB0D008354D170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 889aed2dc507a07518f83eedd883c422417567a00d6ef02bf9c2a9e41a7e0bbf
MD5 c355cba6733235d8bc67278a664fd5be
SHA1 c28bdad4c20c6edf6f1fd98b9a3f229cfe58240c
SHA512 5a1f7e2aec7854636e45ad806b97cd29bee04d3c134de86ff7b2fada9f6fb51b51efe61e0662b1dc563940f2fd2b3a58c8e0995e400a878fd3ddf6e493c460a5
SSDEEP 3:MsEllllkEthXllkl2zEflPK:/M/xT02ze
TLSH
T17744041C7FC1040DC50010304051C3501374D4100511F75334D1C533DCC7D400F04040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 5cd2c4d9f13524923046198c92213691539407e04fa520cdae9eade1bad3d91d
MD5 e9e365607374115b92e4abe4b9628101
SHA1 d5054ea9b22317dca83801eb3586017bfcc0e2a8
SHA512 a84d65ed53e43883e5ecb7848fbd48f5305a63e6975e6af480cf85532879720061106be54f2a5888ebc3569f7123081a0e6eb48ccb8d7dba3e1da1c8a3c50401
TLSH
T151A012078473800AE4144051C49C024114A4804A0219D0015060932314A40CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

0d1a4cd5-f365-4001-bfb2-dbece2cbbf79.tmp

Path C:\Users\Admin\AppData\Local\Temp\0d1a4cd5-f365-4001-bfb2-dbece2cbbf79.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1852_989491193\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download