d5a95198ebc933b07565051e11b70869be8d2e989500e84c516156e5b32b8096

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 10:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.60.html
Size 11KB
Sample260808-l3xrtsvbng
SHA256 d5a95198ebc933b07565051e11b70869be8d2e989500e84c516156e5b32b8096
MD5 8b5e81621bc0d604edda0b959b0a7490
SHA1 3f3d1c799667d84ab404fd514fbf8c30658943ff
SHA512 f850059f069969fc916fb28023a04ac71d6b039d12ae3ab022a8ffcf7c1cd42ab58958230470bcd51d81626bb417b91157dc12603837c548eb35f81cb5dca1dc
SSDEEP 192:xUhr5EUUR4i9igiNi0iKxKT0bSioSi0Mi04gpp:ahuUfi9igiNi0inifi0Mi0fpp
TLSH
T13C424056B305153193A5D79AEE375D88FEF280830905C1B0B82C99593FB2F0E6B1BA5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_1235058381\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_1387506304\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_737982039\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_737982039\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_1387506304\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_917105273\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_917105273\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_737982039\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3544_737982039\smart_switch_list.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5056	msedge.exe
4168	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306570541646662"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{6F2DAD2E-8C7C-4AF8-ABA9-0A3785816133}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{BAB13631-A279-4CEA-9BEA-88073A658B6E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3708	msedge.exe
3708	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 3008 wrote to memory of 3552	3008	msedge.exe	88
PID 3008 wrote to memory of 1992	3008	msedge.exe	90
PID 3008 wrote to memory of 5056	3008	msedge.exe	92
PID 3008 wrote to memory of 1992	3008	msedge.exe	90
PID 3008 wrote to memory of 1992	3008	msedge.exe	90
PID 3008 wrote to memory of 2000	3008	msedge.exe	93
PID 3008 wrote to memory of 2000	3008	msedge.exe	93
PID 3008 wrote to memory of 4596	3008	msedge.exe	95
PID 3008 wrote to memory of 4596	3008	msedge.exe	95
PID 3008 wrote to memory of 4596	3008	msedge.exe	95
PID 3008 wrote to memory of 824	3008	msedge.exe	94
PID 3008 wrote to memory of 824	3008	msedge.exe	94
PID 3008 wrote to memory of 824	3008	msedge.exe	94
PID 3008 wrote to memory of 4496	3008	msedge.exe	96
PID 3008 wrote to memory of 4496	3008	msedge.exe	96
PID 3008 wrote to memory of 4496	3008	msedge.exe	96
PID 3008 wrote to memory of 936	3008	msedge.exe	97
PID 3008 wrote to memory of 936	3008	msedge.exe	97
PID 3008 wrote to memory of 936	3008	msedge.exe	97
PID 3008 wrote to memory of 4232	3008	msedge.exe	99
PID 3008 wrote to memory of 1948	3008	msedge.exe	100
PID 3008 wrote to memory of 4232	3008	msedge.exe	99
PID 3008 wrote to memory of 1948	3008	msedge.exe	100
PID 3008 wrote to memory of 4812	3008	msedge.exe	102
PID 3008 wrote to memory of 3544	3008	msedge.exe	105
PID 3544 wrote to memory of 3960	3544	msedge.exe	106
PID 3544 wrote to memory of 5912	3544	msedge.exe	108
PID 3544 wrote to memory of 4168	3544	msedge.exe	109
PID 3544 wrote to memory of 5912	3544	msedge.exe	108
PID 3544 wrote to memory of 5912	3544	msedge.exe	108
PID 3544 wrote to memory of 3684	3544	msedge.exe	110
PID 3544 wrote to memory of 3684	3544	msedge.exe	110
PID 3544 wrote to memory of 5072	3544	msedge.exe	112
PID 3544 wrote to memory of 4472	3544	msedge.exe	113
PID 3544 wrote to memory of 4472	3544	msedge.exe	113
PID 3544 wrote to memory of 3332	3544	msedge.exe	114
PID 3544 wrote to memory of 3332	3544	msedge.exe	114
PID 3544 wrote to memory of 3956	3544	msedge.exe	115
PID 3544 wrote to memory of 3956	3544	msedge.exe	115
PID 3544 wrote to memory of 2916	3544	msedge.exe	116
PID 3544 wrote to memory of 2916	3544	msedge.exe	116
PID 3544 wrote to memory of 3452	3544	msedge.exe	117
PID 3544 wrote to memory of 3452	3544	msedge.exe	117
PID 3544 wrote to memory of 3376	3544	msedge.exe	118
PID 3544 wrote to memory of 3376	3544	msedge.exe	118
PID 3544 wrote to memory of 5020	3544	msedge.exe	119
PID 3544 wrote to memory of 5020	3544	msedge.exe	119
PID 3544 wrote to memory of 1568	3544	msedge.exe	121
PID 3544 wrote to memory of 5972	3544	msedge.exe	122
PID 3544 wrote to memory of 1628	3544	msedge.exe	123
PID 3544 wrote to memory of 3676	3544	msedge.exe	126
PID 3544 wrote to memory of 3676	3544	msedge.exe	126
PID 3544 wrote to memory of 5068	3544	msedge.exe	127
PID 3544 wrote to memory of 5068	3544	msedge.exe	127
PID 3544 wrote to memory of 108	3544	msedge.exe	128
PID 3544 wrote to memory of 108	3544	msedge.exe	128
PID 3544 wrote to memory of 3708	3544	msedge.exe	129
PID 3544 wrote to memory of 4724	3544	msedge.exe	130
PID 3544 wrote to memory of 4724	3544	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffab527c188,0x7ffab527c194,0x7ffab527c1a0
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,4270998441906359537,2280335156589063882,262144 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,13679455705394283773,3392644026350072193,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,6223394970680925691,8125292066213462749,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:13
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11089694582429945469,13004598942902680849,2097152 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,15658734145495146962,13974012365273810573,2097152 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,5339547497683862891,11201409798039476237,2097152 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,10482622634351467177,13560560008034758125,2097152 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:9
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,6275288322423742964,10805680907006657780,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,3598924756645450261,3924416608889926495,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,14231497744849725565,18443585635240558581,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,14231497744849725565,18443585635240558581,524288 --field-trial-handle=2344,i,10322361023976885396,7928022687041027465,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:3544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x2c4,0x7ffab527c188,0x7ffab527c194,0x7ffab527c1a0
    3⤵
    PID:3960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,9532160913712580241,11250245906508078020,262144 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
    3⤵
    PID:5912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,10597000694755309546,10316763852015932585,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,16857423095914939457,2687273811292423668,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:13
    3⤵
    PID:3684
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,17449900014851537955,15085432229304451899,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
    3⤵
    PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,17449900014851537955,15085432229304451899,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
    3⤵
    PID:5072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,2959990432165298276,4619667784191123253,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,7837171558269886356,8179382629105002868,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,9565530320861282613,12625377265789273588,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
    3⤵
    PID:3956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,14130886834411877692,4362604548044770423,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
    3⤵
    PID:2916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,8155937360881857044,6497229157623379555,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,18386062789296264484,15254356636786703744,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,15968425458959225124,16100316804745316140,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,14499426668986670144,16034882372334902880,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
    3⤵
    PID:1568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,10540844528367389078,15348607837569963135,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,6503474312604488841,5510364218769610811,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:1628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,7512650797057706237,12174116393566082199,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
    3⤵
    PID:3676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,13714342604526876399,15493509234467973738,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
    3⤵
    PID:5068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,15922492248001393397,6296354829406487654,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
    3⤵
    PID:108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4740,i,15544137635502534777,4363993445278739098,262144 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3204,i,18136579618566086828,9799906583176219482,524288 --field-trial-handle=2448,i,13835872340278252345,6053821571928090530,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
    3⤵
    PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e2cc1d4d00526f020d431721155aff61c9c0b3d16520a4d3506620b049d65f12
MD5 4e04397b6cd0f5d67cfbaa74499ad812
SHA1 bf738da478e23015d9913782534dcbcf1d15116b
SHA512 22126420acccee027ad3de158d48d2014ec8a0030397cce61a6d454814ece747959fd4c4bb50cf521eaf8a33eb2842795f8c9df0b9962f8505af2b63f3f4df53
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T130B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 55a7d885fadddbff4768ba6c4d1831cf3c97e5cee2c6278de82c828bbd98df7a
MD5 b27d7e363563245c4556040952fdbf95
SHA1 dfc224d76f71496470da48460fe6bc98bd6b630b
SHA512 53bb58d5ad6a6e99815ef4adad0abf35d7e22ee9cb08396210cbf4d6d7c933cfd85b85d6129c7d2584767453a8628b8d168f33fd574d277fc5d3c3ab08469a5d
TLSH
T1AAD023F079B2E3B0C60C00388110021011224A723AAB23176240480CEF3C0C2C1CF8FA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1ec854c28a4dde8f950dd736eff851c97e2de74a6ee334a0c4f8ce987efef0a7
MD5 8f11697845b4fbadab0fde43aec86cde
SHA1 af37a7dc93f0db8fd6749a5664b19f0a2f4325d3
SHA512 8eb6fd72d82337a73aaaa5092a72a5fca4509a46c8d7233beb5861a8bd49cd0330b7e154c478a8e1ab7121086e1c741d7c2dfa38c63584207867333e415582e4
TLSH
T194D023F0B791D730C60D05359950732056B35A7034AFDB739151540D7E7D095D2DF069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 34552cb09099825bc5b75b1f4c5bdbc75dbbb05489cfbb6d9ea19c68fc055067
MD5 89f49e79eb8dc335002fd273b1a7825c
SHA1 07e97cded16698b8c7f65a449930f6be9a040e1d
SHA512 dd786449f8e67816cb109f2ac54bc9730d3da312fdae40c51ad8107e53eeb9453d71b4dba7be289ce6dc19df4f7eea2f91f8104b847c374eb4e71696bb475634
TLSH
T143E02BA9CC10EC2B19FD472871404786FA90236B2750450F3A3C9108CFB2B7742C68AC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 1460b172ddf6c7270862342d82fc062beaff88881d9c4586fcbf303c7370d471
MD5 e46613bfbe72a96700969d0df5f2e50e
SHA1 7673c77a41726a10c84346f82928b3820a9fe964
SHA512 f5527c8966ba0fcf2c89526023db96bffb3ad0d2c403f6a65932e161adac4e8366e9b76b994a003508d84de4ef57d2def4beb081666d8f248bf282682388d2be
SSDEEP 384:H1DGPLZzQPEsPEKGtaE4PEEOBpgmQnGrPSaoTo5o8hh:VShQsssKgaRsEOMYHoTo5o4
TLSH
T13D13D53D76A20D43D7DB6A7C028B1B701B71D559E4F0AE27237538049652F6ADACE323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 09f61d70246f72da80db5bc5f3e49aa8f2f501cc05941da315062c2064f68f2d
MD5 ec25606a3367041eaac9ffbe2d931f55
SHA1 a51ad0fdc4e9589eb43859e121e3a78e0a8d1484
SHA512 37fbeefbde06f6d7c9da58a36c74306e44bd804690db4d2bda85390e26129d69fd9ede9ae7a416c9118ab3233b304c5d8c9a2c2a00d84bb601ab4308f58adf77
SSDEEP 1536:Y9L/7oL/o+SQW3YLtJJxf1ZnIMTT6xjL/:4L/sL/JSCtNVqL/
TLSH
T10E442CF70951A01BCBA852F5E2133E3DD177455E2CE1F8E9E2784C852825F32B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7739271a6578abb3344d5c256f87017c433c921afaf7e3ffa496dc6ddd475ac8
MD5 870da8a99506bbc08591bfc5c3561069
SHA1 b58c1e274674258c20a3d999ab5e43b8e710a9d3
SHA512 0810c00c193128e7aada965f334ae4da69b43560081a7da98333058f659dd6777e95f4f92bd4103b65dfb394a6d4cd621c5b8a77adc188012cbff05fda74c3b7
SSDEEP 24576:hHNIZYfNbAojX3W7lB6KXxQeZ8sTsTxyMSRxFJoCz:htIyFb1jWD3XxRI9yvF3z
TLSH
T160167DEDCA7858C3CD639A30B5F0E9477C7413C3F5A4C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 38881ec950792b9018f845271075bacff06cbcfd7ec3a6c1d55212f5029eecfe
MD5 364b0c411f32ce51e85b25c69889837a
SHA1 81cd73279053d6284495cbaf7cc5d578fc506f6a
SHA512 d8e9dcc7983d5a40502eec7a0a9f8c56f343b3be2f406333daca1415863c243a79d910b8365e0a5846d200a7e976db19573509a04b0a76e174eb4436d633d0a0
TLSH
T17451738003662AD1EBA395FA13EB125877F78451813F6E411EE09E309486F1BE5DA36F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592d40.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592d40.TMP
Size 3KB
SHA256 cd95348663811d195aed3cc12a9d5febba17c5763083c08e182ea38cb168810a
MD5 e1a23010614bfea107baee132fce843d
SHA1 866ccbc102329771ac731438660fafd4628c204c
SHA512 04a7d9108fca347f5a7ac87757708de659709f1ebca17a49d49e58a97d85abb9dff56de8fb6e4eb76781e59deff814ab55de5b5c3284ceb49f28a5a80af9f185
TLSH
T1FC51928003662AD1EBA395FA13EB125877F78411813F6E410EE09E309486F0BE5DA36F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 1a05fbfec5c698cb6ced0b6cf6c6f4f0d3dee97dd3dd9a719794a307f400d16f
MD5 6fae4ba27cdf7c18e59955622052ff2a
SHA1 1f54de0560f74bc14e0f70a5da567b025e65c07d
SHA512 257f86ccb91454ba284878ccf67e3a6c48e1b82abe726058a140b0c6c6197edc291efb97ab6c3c06f7fb676a7e1955d733dd2e2a069899190e9395dda2c98368
TLSH
T144E068D0E1C6C52EBE303487D1787B0AC2C43186EA8BEE531B4498C0374A905B647A62
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 2d63f62730cd2e70f7979b36fb4a9e4c319af2d36089038fbaf34fe20c28c709
MD5 3be52a48563cba1a272f5a53af44ca84
SHA1 643d72fb8da8b7aa6f10a69af84d596c62e1413a
SHA512 03a71a173a8519e8ffdeee2e70c2fc46aaa48b733102cb155ff4ea043faca7145cfe9d9462c63a4ac0a78fa35ffd86a77e664f003923ceb87d72b19aed6d628e
TLSH
T15DE0264455C8C169D864689FC67C670A83D33582AA883E271B1CD948B102A41B28F7E4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 d059ed831b1ba585123755e871c0b6ce2b97be201083006e355e96ae2fb708f2
MD5 4dfcdd1b85073e2de4faebcecc775bd4
SHA1 d7d3b084c9f08d16426ae3d827614e0b758cae41
SHA512 1cb1b32efeaad1981c71c7ca626ac9c0a1097545b83ecc95c7a5e235d882eb52a88e77defc692edca137312a5ea4e91932e422718983f43c16fca3414434c99f
SSDEEP 96:raEwGtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/cnibbEOVpZf24JkMfXSFR+Cw:rXwZH+bF+UI3iWGVoWN3qL/c8VVV63
TLSH
T1FF24010E5F243722CDBD913669EB44A35C7DF03F875326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 9fca2ac6eee82544ea1791e439ff6062a760a042a4c10e75d72ce475e2b80b2b
MD5 a11a024fcdb8b01f72ab6976dc6bfbfa
SHA1 de168aa0b41bd6cb9a28a2fa53e7ea661b798e1c
SHA512 869450f4dda35e313778b7940b5ea76aea3d6def6ce0d873b4c68b94b8e25550d34e66821a1336bb5ca337cced4ebe4e9d315b3036fd4b3100c6384ee87fe3ea
TLSH
T12DE0D86495CDC12DA994205B9A3C770EC3E27447DA896B121F14A881B045444A28F6E2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 e31e70a4709ac0d74099ae39de47bf73e0629e30cf5a942a6068f911cf7acbfc
MD5 ea6313e3515ae78b7a9043d0a2989a7c
SHA1 2540ac8dba9935cecafb47c670f79adee1750179
SHA512 b6ed20889d32972e3424e52713cbc12e21f3ab5cae3152213235e12efed81f2de42daf2a8444511367d96a3878c352617e8242b6655d98d404e6ebef72370f61
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7ovw8JTsFVA5bHLr:qDeMatha9RAzjWTANHn
TLSH
T191B2EC8D6F307211D0F84B769ED184632E7C111DC363325A9E2420B3CDA365BFA065AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 43c01b6baea9b0f765623fdd90fd8d1422b9357ba6c6d91388f515001d9cb1be
MD5 fde5438cc4d79d84c31727f55c63f180
SHA1 6ceb468e9e4e2f0d88b503c2f05d31aa4ea2bf93
SHA512 2cbafe322bdc7d0869053b1c824d816fa8a3b1bf4417c6c81afe422ed4ded03f6b8580afbb9ae74dafc6407580a4d4645157df3606b798a7b807fe72d34fc9b5
TLSH
T163317BF7C3E4957E8A0196F4AB186F1BCE2C0915832C3D6AC5E4AE1B93F2471E14095F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5ea001ebb338b3782e172ad8760d57b4de12e1e561f52c68d85782378f60e565
MD5 3ea1ac4c7becba4523647bcf80c85079
SHA1 32a054afe058bb3940b6812fc2ba107f89f925c5
SHA512 b9bb108626cf55f796dd7c04148672447a75e7263d7f02a69d0bc90dd5e450ea1468ed78682df8d3695190ab721fbbe4ee6e153637f3a317dc25dc5ed37fb4b5
TLSH
T12341CEF7C2E8867D890146F0AB146E2BCE2D0954832C3D9AC9E4AE1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 b1cf8dfb406b9a3325750afe706f52771a70d8b7c928ddc2b370d11a1fe320ea
MD5 005043a14ff430730870c3fa2afc8094
SHA1 cee53ec3eb308ae37c9bb0f4a268b0ebc5f30e1a
SHA512 e38f9b1ce3758323c293edb91cb22322dde7e53b0a1c48bf8200ae2bc42311918d34d9cba8d7fd3d93107dae7b08da46d28c19c4aa857c3693a73e4a92cb47ad
SSDEEP 48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBj2r:eIEumQv8m1ccnvS6IIkacf6CnFfJjN4g
TLSH
T18AF2DCFE07276205D99484B0E4009FCEAF1A010B47B6B7DC66D44BE3F7A21E2B17975A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 740b47c88b5e2b27d1bfa77236953895f3dbb06329229ddd8f1b22d83dcf9c76
MD5 5ba5fa750d30aed78084784d92259edf
SHA1 eca62273c367b65eda31262b6eab1ebd7d9e0a78
SHA512 14d1fd42ea3c886c41ec600576f91033b8570b9fb56d4e3d749a4a04eea0020d7700a5094a66902ff0ddc3741172b698e84eba142a0fe31666e20c1fb1ac3897
TLSH
T1F2C02212C0F8E832302444BD0A80A884A675EC38008084E0EFD5A33CA0820F75A1222A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 31e1e67bbd13bca6f192b178dbcfa43555105d6232d487653b0768e42d27b2bf
MD5 7653b3a20cb639dfebb67126318cbece
SHA1 d53a901b4995ce8ad83aec81c67c286d0bddba0e
SHA512 8cda5d0c5ead38666d686b9a2c1945112b87b4d5ab16d074147640b3bea6971c42cadbd1ef0f7d1aa7eab458cbb9a1bc783e042258697cd338f8c5a3b556e3be
SSDEEP 192:sxRuRu6c/fjs5wWpVY8wG7zoA8p4h/g6+WNIYgfCY2g4IgIJ:sxRuzc/fjs5wWvY8pa0/5IKps
TLSH
T1A442C6166928A93B8CC7D21DFB65BF63D6F9103261D42E58A7FC960C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 70eb4a4d6c23ad95b88e1e1bb16c9d5cde79b72ae6792253a89e24b97e42cf8d
MD5 ba84479f520be57e18429bf1b38122a8
SHA1 39c06871b23b78043998dccfc161cf1deacffa98
SHA512 606ae75821691660f0e5f7ab685852e89fce5cd426e2b009b9f21ab62cd527d1d7a277191ccb9f8dc77432915be88c95a8003c3c7f10ff3183626de970fe76dd
SSDEEP 192:sxRuRu6c/fjsiWpVe8wG7zoA8p4h/g6+WNIYgfCYkG4IgtJ:sxRuzc/fjsiWve8pa0/5IKt3
TLSH
T13042B5556D28A93B9CC6D21DFB65BF63D6F91033A1D02E18A6FC961C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1c3bf39d7d8170ee077f97d9234fb8c868d095b235d666c53a157210c00bca13
MD5 320c2e547929f55825c1434b5125d6be
SHA1 b4d93e950136ad95924bd425b01bfc2c024e90fc
SHA512 30d3f2ba5147f956345180636bcf0492ef2b14295cdd9b8470e1dccdc8fce8126caadc464c23fbd5624363a894811956ff93af86d148fc943ccdd290038c0db5
SSDEEP 192:sxRhRu6c/fjssWpVeSLZ6neIzoA8p4h/g6+WNIYgHCYkG4IgPJ:sxRhzc/fjssWveSlx0/5ICtR
TLSH
T1AE42B605AD28A93B9CC7D21DFB657F63E6F91033A1912E18A6FC961C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8c964556f11804195e28c94f5a12e459c8ec6e73bb2c06b0380ecb310def325f
MD5 65d544ec1955a5537990be4e974b34e1
SHA1 32f4de57fc77bdde0238bbd3e10fe5dc0993699b
SHA512 374eb8a3be2fabae4f0391c77e7e115e86ddb4e02fbc783e8256abd666e4aac3e7db5f08f874c6a9229027378bc85ef4918a0e823f0eb8cb6168ffa9835330aa
SSDEEP 192:sxRhRu6c/fjssWpVe8wG7zoA8p4h/g6+WNIYgfCYkG4IgtJ:sxRhzc/fjssWve8pa0/5IKt3
TLSH
T1CF42B655AD28A93B9CC6D21DFB65BF63D6F9103361D02E18A7FC961C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 0302d3a6c7d42b8ae1259879acc8bbfe0afa259fa19a9a172227804bacf58d96
MD5 afdc3156e62bde7f638034f73be8951e
SHA1 5512696db726a50c02f7b25740ace12d1d2f8184
SHA512 df04f05080e36a32cb86d077adc91f1f84ff3f2d19d24c621a6432edfe5dbc1f1ac0e27e7d8d93640da9a87cbdbe6564b8bc40f52f03a3e11f05be9d071abfee
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXFro98j:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vo
TLSH
T15FB2EB2B640DCBBE5F800A9DEC196FDB6D9802C79B588D4047FE994C03C77FA911A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 dea015637e070643d34cd38aa99e3f78a3956cf9b2da75edfc335155166529ec
MD5 3e1ed348c6cf2826690fb6b15d7f634d
SHA1 7abfe9c1dbc3f22fadf4fef40b60b0f5eb060794
SHA512 a1a1c67ee4b4071564d4a8b6f9d613ced74a90b0bea368a24c719f78c0e222ac91969c226d538480e912918cae5cf485c98f02cf6b4e10f7ce915099035bf215
TLSH
T112E0265099C8C17D782A208BC638A74B82E5B40BDACC3E272F08DE487242905F59B6B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 f0b8a65b1db85c4b3a5409e3516da8dc2c2ad982199b7aa042d0807c57f4e5ef
MD5 30be861b194b5ed650894c7c695dea76
SHA1 131f8b9897f86f6fd0d660319d95c2c2a054b09d
SHA512 4e7ceaec7570d4ec9ebe534971c3da241ca470214a1d7f977071bd43933b27223468db16dbba6221e9464958145423adf12f8913c4b7a6d3dbf7763136d11e5b
TLSH
T10DE0D82075CDC62A6556209FE239E74A81E3B412EAC97A332F18AD447206544B247760
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 02964754bebb31ab9a931ce546495d766fef78aad46560b7f016f1951d868b99
MD5 d9ff28a4c4fe721f7e87980caedc418e
SHA1 e09856c2e25be6b484921a9716aa400ce564bcfd
SHA512 33d11259e4c72e77ae68e2781180d64a80d24b089205a755582e0d7c437069da801b845cbd52ade7566b40bf2f35db5b3ec89f8c2d57191a1ea112dd4fa29e1b
TLSH
T1E0E0267496CAC63959146087827CA75F92F2BA069BC93F239B0C9588F509500B2ABAA1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7ddc15de4a86d5b9db16adf31f4096cb6e16db44a03a93324212f0a7abfd7376
MD5 ed53cbe25f149200b20568f871c56239
SHA1 59a7a78d17f387c41fd1d87fba0d555b71c127b8
SHA512 73c5f81e1a2f1e84a316eb0eac8085f9e39a74b6f2570be89727dee7aab055f3cec791666de8c9bfdaf274fd47c1902532b7d864ee784bdbf0028cf0d1776d9e
SSDEEP 96:KRDMpdLBB9WV6wgF9K48gr9cTrC1BGuz+KIUiF+Fy+sM8CKUbxguCKIng4CkOmzd:CDMpdLBB4V6BFX8grSTrC1BGh9F+Fy+m
TLSH
T1F8A19850367E46803C7F6A0C85B498276686B0B27008A53BFBF815B55F6EE068DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 d5ae3bf60eb34a413f9acc875c89de9002b45e8b1216c359cf3265195447f031
MD5 b68c66c0389f25b240c6cf244da54642
SHA1 1f5b0832eca9e937bc0cb88ea181f2b81658e89e
SHA512 c00bf447b1691e84aa7d72735ffb5775ff5fb773d76a0432ae7ba859a079de89c1ad8ac50eb1260a518727f74bb965ee6354eb6927270855ecafcd7e1783ee0d
SSDEEP 384:DNrRZyCSDnxTIC6LLicVMEhIKyll7svbFKfk7:xFZJSDnijqyI1l7svbF9
TLSH
T14B44850A7B747001EDE6D9725CB080771E3CB16DCF22A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 399B
SHA256 8806a555c67510105b6971e4931d54e8c4d6a9b756bd70501753c3641c1a0744
MD5 3ff5d92815d2295479d7b97eddb5959e
SHA1 f22d94148a8c6b4665801b3c9655e6fc65f2c662
SHA512 2c868cdaef877a11ab12061e69f3ff3d2f0b7fc33370e8b391a63a6bcc5ab0e026c37182893ca7fc7704f9d484e59ee2a4bffe8aafa419e1536111e3d360ad67
TLSH
T165E065C0675DB0D07E9D9944C224280374897E95260E4572735959784F888098E2FDB3
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 e4f8d3245eff5581f6ab6dc78d4179396ec8684dc26f005e3260c87f1fa23fea
MD5 c137fb438daf90d139bc3ebdae9ba058
SHA1 5941a712ced2128c51a3cf31e6b7b5c9f9feb873
SHA512 405c035d3c8e94c464dedba439961e459ad32e646a1519b07792d9e4cf3bd98305f1284fa8a58a762f30926fa191175c9da9a661879a24489ee50156dadbe7db
SSDEEP 192:6QGIIIVbFMIMnuYcYIhOjWAsYlrNNCs8h+gkp:6QGIIIVbFMIMuBYjfsaes
TLSH
T12842946A66011B77C15E5F7617F287845BD888824032252D73662C1F8EF3FEB82C52FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 e324262c872d643c4ef29d708c3bb1a9aa19c884355ab1d5ffd8455e7b54837f
MD5 86f486fd95a1902df75f16d54cd5dc92
SHA1 feca30df5d7a062139cb4e8be2743752b337790c
SHA512 3ea15a3c4e70f71d0fb06ef46db8eb13f5e21d235a4c6b197613ec9bcf7492f5b4614839b83f32210766e1c76d05a102eb2728108cf778c0fba9c8b500b389a6
TLSH
T1E2E02610F8C8C16EA924208B513C538AA2C2385BEF88BA2B1F00C448B041500FAAFBA1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 bc4cb086fc3bd194d2574b494fac7d8fe6505e63e04a840634f9bb4ebb740692
MD5 e9a0ec42a9178d241bf38f3ed03109d5
SHA1 e5b933d7b841fab38713e6785ce960e80e9fa175
SHA512 84214aa0912895349b3b106563bf5d2bf238fe00c2843848a73cde580416a4876b08e49fced2c78d0e117977f680dfdfd0da2dcca6643c40315e9e71a9d8f547
TLSH
T13D212255F330D109E15A827A607F9B391738E8128FBCEC0F847A20346EB2A440E4B7E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 a9f485b9a22ffcb5789a3c0782762fd3aa77c60568ea53c4b3ddc36d23c3eecb
MD5 aca5c9e662823c4b3f41dd8d3e6d7b5b
SHA1 3a1387d6108102a6059a65cade4b328ab954f568
SHA512 a350cf2eaefe41c26ec0cd29809c3934d4cfa3e033f92b1b892cecfdbd9df8e28ffadde0dcc4020717a61a52c3112958cdc3229337de3317f7566743917be54f
TLSH
T12CE0D810FAC5C15F55372087817C938B82D33A02EE842F526F14884CB101545764B661
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a1c92.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a1c92.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 46f74cee5d2e47a0869c05ed5227543987aea04fa2cb0278557c79aa6762eb66
MD5 c69cda79885a1ee5c315e1e5b2ca78e3
SHA1 cc13a426325eb0d353e6b1892206df0a1b9bc857
SHA512 4494b67ea9deb837446d559ec2082956589f0fed7045a001e07cca1d2dddfda7daeefa901f469e8d40e4da389f9e31cd996362b5633e89b4bbe209a8b3b8ff81
SSDEEP 3:MsEllllkEthXllkl2zEfls/t:/M/xT02zN
TLSH
T1524404047FC0040DC500113054D1C3743370D51005155F4374F10D33FCC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 c0152b38b7f07179ca3e2ef852ba0dc646dfa78b9e3662d8d55124095d3023aa
MD5 893cdc0a0bd227277181fc1265f13ec0
SHA1 8cfc77921cae620e91fa0cad48f979b398739b61
SHA512 2497fe3a6e28fe538bbe9f0c56ffe1924db1f764f3bc082f84b336a3d7fae467a85a11466b589c07fcbd73b80c409ae02cd764bce2d0458535a8998017d48118
SSDEEP 3:MsEllllkEthXllkl2zEflmZRq:/M/xT02zXv
TLSH
T1B44404047FC41F0DC5011131C051C3703370D4101FD1775334D14433DCC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0059511f1f08e5163aa07617dc651c7b3fb062bf7b2df848990834e54e94c5a1
MD5 64c66ecf7aacf7ca7716c82f93f01d5c
SHA1 b38e99411b5efc1f9ff1997d8d14a4141c4667bf
SHA512 b7b5162b6287086fd0d77ead3658bc13cb955a71a0a2c3b8277616146f8387c0de0c9d00b062292eecae274dc0f90775107a95bb19b555795400462bf51a3643
SSDEEP 768:TO3Wvm/TBOWdYNtAYDtzONXyer1IRCzni95yK7xjhG2ewBKZO22:TO3bnPmSIqn8yK7xNG2evZt2
TLSH
T12E039C7C9C559D3F4CDDB389710E6362ADB81077E0F44A64EBEA6B0D8072A1DB30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 82d4b6c06ce0c93e76c4e7a721779d3e9e4b38eb10c20ffcb1c399a4dfee90e9
MD5 6912b561dc1a2d5456e52565deee1d8f
SHA1 90dddab687a6ce3fb3c233e59b298f85e57b9c88
SHA512 fdb969371fed83f0426ba3882ad8731f049d47feb2413d53db7126aacdc57c36119c3bd3532be57427723b077cf91be98052f7cb18aadad648c62520be7c72fd
SSDEEP 768:nO3xmm/TBOWdYNtAYDt0ONXyer1IRCznieV2ewBKZO+Y:nO3pnPFSIqn32evZpY
TLSH
T1AAF2CE71E9559E334CE5F386B5076393BEF820A7D4C44A60EAEEAB1E0483A5D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7f6a9eb0bf0bde00a84fa216c98095e22a9a3b6d1ef781bc8c05a2792eeb3d96
MD5 9c2b25879e260fa5d17bbf3f32070cce
SHA1 abfdbe1975f0388ee267deb6924f467ad5b29502
SHA512 f47f444fb48fa93847083a2e2bc65938159c516e8d0fb90104ffe93fe6a4d81f40e8480dbec55ce9e8ae5b7cc5fd2eafbbe3dc713cd3790d0be402ce12e3f152
SSDEEP 768:rO3Ymm/TBOWdYNtAYDt0ONXyer1IRCznieV2ewBKZO+Y:rO3knPFSIqn32evZpY
TLSH
T167F2BE71E9559E334CE5F396B5067393BEF820A7D4C44A60EAEEAB1E0483A5D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4461394349557812733f6ac56afd5cbf9afa8011cdf8b167dbea7acad6c04634
MD5 4cf89f4ee357c71d6399f2df80011663
SHA1 b6eea40b0e295a3a9179dfcb1fa4fcfb65721df5
SHA512 5962633a453d0f033f057fc43372794f83b5bd8b50ae73e8c624bba4cae202a11fc2d1d32e34f56ebe7ccffe1e792aca90214417f48ea2b94cbfaf09307b9abe
SSDEEP 768:803Wqm/TBOWdYNtAYDtzONXyer1IRCzni9S2ewBKZO22:8030nPmSIqnl2evZt2
TLSH
T13DF2CE72E954AD334CE1E3D6B5077343AEF89063E1C45A60AAEE6B1E05D7A5D030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cfdebe0c114e0c9ca62c66f2312e32cdd2eac12d2aa0373e3f880f8c39778030
MD5 e5b0f901080b361a59cf4c6e02fec68a
SHA1 5bb563dba394f878e99149a1a0d3e9dd68b8006a
SHA512 0d2ceff9d07938a7e99e5dd2de760e04cee4eb4fef66a74c236cdf03ba253b988eb4c7c93285c04ac562fcdc6526d6ec3bfaec78814672bd6cc2f2fcac090339
SSDEEP 768:DO3Ymm/TBOWdYNtIe6ONXyer1IRCzniewMbsjhAjewBKZO+Y:DO3knVe6SIqnuesNAjevZpY
TLSH
T19F03CF39EC549D3B4CE9F385B20A63136DF89177E1D80A64EBEE2B0D05A395C630BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 56KB
SHA256 f6e072c4b9ec19b75a02b1be3c10d16b3e48f500ce473579353cb852b33a960b
MD5 6bed96f1131c38a333f5f690e3c30152
SHA1 ccfb0a98adca4ea2cc74823df3625fbfceb1f489
SHA512 a627734234f798cf27429479f47665b468333e82268501a29e30b95dcea09f422461165beb68c0fc8bf45678356d75671cddc375a3ae7e5a8549df2bfe6f17f5
SSDEEP 768:IFnO3TwgUmV0OONXyer1IRCznisE0fFHfNgB3OLWqw5+7qOADfKguLwMbsjhA2eI:+O3tHSIqnltHlOAlwDSgucesNA2evZpY
TLSH
T14543CF3AD9588E7B8DE6A7C5B64A36079EF44167C2E898E4FBD91F0D00E359C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 913ad2a0abba44e84903f8dc529951b15ae0857b2e05ea40d09ce3b3a9f42c6e
MD5 95214b967a8c0a1136ceb48fd3340a9d
SHA1 0f50b0a7ba90a14d5a248ed09470afe18f0597bb
SHA512 009073fcb54c90a0f1a22bcadcb3f257510246d1a563b1a39f07f786ff9791b1a8ec7bf68ca5b45a9462f69d4bcae1fea829926ab6a857301840d577e64f643b
SSDEEP 768:hrv+4UNbdz3GP/TBOWdYNtI6ONXyer1IRCzniBUeVH1SK7:hbsbV3+nV6SIqnnEH1l
TLSH
T1EC03CF32E4989E338DE2A3D6B14772037FB86057C6840790EDEE2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
MD5 e045e65cd8ef3d083617318874fb79ea
SHA1 c2fa643f68ddf8df9e99d41cecc7525e5a2c08c3
SHA512 23c380211a66716c26bb85d47c8d82531cd1ed92636bb91e281a4abb9e2e2123967e8b4761d830c99c8fabdd7d6e7526165d78111e0ffae97194ce7a1195dcb6
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfL:TY/IHRH34kWqB1kQnjhHmr6ITmU9L
TLSH
T1C223886EDA2CB9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7782ed93-7918-4a0c-a7dd-3796644e04a3.tmp

Path C:\Users\Admin\AppData\Local\Temp\7782ed93-7918-4a0c-a7dd-3796644e04a3.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 2fef151d640ab4a663959fb95cba666c63de5556abe62247d4d44c51f7750354
MD5 fae8104a4e78a06ca4641dfc4eb7ee06
SHA1 0a980ebbb89be58b721640b5dd19f455d40424a4
SHA512 1ce09d678b62786c41519fbb39207da5e50965b7a0c167c12b33d4348dc0202367b197df90051d9265517d0db4d07c8ed7a8f3fbebbdc7ca271a70e4005c6bdb
TLSH
T18121F8953422636B56C347E9D0764CC599A0F455432FAB9CD90B5430FEACEE0A71D3CA
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3544_659976973\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download