d5a95198ebc933b07565051e11b70869be8d2e989500e84c516156e5b32b8096

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 10:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.60.html
Size 11KB
Sample260808-l72atach84
SHA256 d5a95198ebc933b07565051e11b70869be8d2e989500e84c516156e5b32b8096
MD5 8b5e81621bc0d604edda0b959b0a7490
SHA1 3f3d1c799667d84ab404fd514fbf8c30658943ff
SHA512 f850059f069969fc916fb28023a04ac71d6b039d12ae3ab022a8ffcf7c1cd42ab58958230470bcd51d81626bb417b91157dc12603837c548eb35f81cb5dca1dc
SSDEEP 192:xUhr5EUUR4i9igiNi0iKxKT0bSioSi0Mi04gpp:ahuUfi9igiNi0inifi0Mi0fpp
TLSH
T13C424056B305153193A5D79AEE375D88FEF280830905C1B0B82C99593FB2F0E6B1BA5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_261196874\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1509064610\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1509064610\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1083665716\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1985041977\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1985041977\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1083665716\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1083665716\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4056_1083665716\smart_switch_list.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1924	msedge.exe
2716	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306574850389893"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{151B6DFA-D700-43BB-94C2-66ACA0F9F3AC}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{1F00234E-FF67-4472-8B97-D6D7039D3F2D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4056	msedge.exe
4056	msedge.exe
1448	msedge.exe
1448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe
1440	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 1440 wrote to memory of 4360	1440	msedge.exe	89
PID 1440 wrote to memory of 5784	1440	msedge.exe	90
PID 1440 wrote to memory of 1924	1440	msedge.exe	91
PID 1440 wrote to memory of 5784	1440	msedge.exe	90
PID 1440 wrote to memory of 5784	1440	msedge.exe	90
PID 1440 wrote to memory of 1056	1440	msedge.exe	92
PID 1440 wrote to memory of 1056	1440	msedge.exe	92
PID 1440 wrote to memory of 3484	1440	msedge.exe	94
PID 1440 wrote to memory of 3484	1440	msedge.exe	94
PID 1440 wrote to memory of 3040	1440	msedge.exe	93
PID 1440 wrote to memory of 3484	1440	msedge.exe	94
PID 1440 wrote to memory of 3040	1440	msedge.exe	93
PID 1440 wrote to memory of 3040	1440	msedge.exe	93
PID 1440 wrote to memory of 124	1440	msedge.exe	96
PID 1440 wrote to memory of 124	1440	msedge.exe	96
PID 1440 wrote to memory of 124	1440	msedge.exe	96
PID 1440 wrote to memory of 256	1440	msedge.exe	97
PID 1440 wrote to memory of 256	1440	msedge.exe	97
PID 1440 wrote to memory of 256	1440	msedge.exe	97
PID 1440 wrote to memory of 5404	1440	msedge.exe	99
PID 1440 wrote to memory of 4472	1440	msedge.exe	100
PID 1440 wrote to memory of 5404	1440	msedge.exe	99
PID 1440 wrote to memory of 4472	1440	msedge.exe	100
PID 1440 wrote to memory of 3172	1440	msedge.exe	102
PID 1440 wrote to memory of 4056	1440	msedge.exe	105
PID 4056 wrote to memory of 3916	4056	msedge.exe	106
PID 4056 wrote to memory of 2716	4056	msedge.exe	107
PID 4056 wrote to memory of 4160	4056	msedge.exe	108
PID 4056 wrote to memory of 4160	4056	msedge.exe	108
PID 4056 wrote to memory of 4160	4056	msedge.exe	108
PID 4056 wrote to memory of 4460	4056	msedge.exe	109
PID 4056 wrote to memory of 4460	4056	msedge.exe	109
PID 4056 wrote to memory of 2536	4056	msedge.exe	112
PID 4056 wrote to memory of 5080	4056	msedge.exe	113
PID 4056 wrote to memory of 5080	4056	msedge.exe	113
PID 4056 wrote to memory of 4872	4056	msedge.exe	114
PID 4056 wrote to memory of 4872	4056	msedge.exe	114
PID 4056 wrote to memory of 3188	4056	msedge.exe	115
PID 4056 wrote to memory of 3188	4056	msedge.exe	115
PID 4056 wrote to memory of 2160	4056	msedge.exe	116
PID 4056 wrote to memory of 2160	4056	msedge.exe	116
PID 4056 wrote to memory of 1332	4056	msedge.exe	117
PID 4056 wrote to memory of 1332	4056	msedge.exe	117
PID 4056 wrote to memory of 1924	4056	msedge.exe	118
PID 4056 wrote to memory of 1924	4056	msedge.exe	118
PID 4056 wrote to memory of 5020	4056	msedge.exe	119
PID 4056 wrote to memory of 5020	4056	msedge.exe	119
PID 4056 wrote to memory of 1064	4056	msedge.exe	121
PID 4056 wrote to memory of 1664	4056	msedge.exe	122
PID 4056 wrote to memory of 2500	4056	msedge.exe	123
PID 4056 wrote to memory of 3852	4056	msedge.exe	126
PID 4056 wrote to memory of 3852	4056	msedge.exe	126
PID 4056 wrote to memory of 916	4056	msedge.exe	127
PID 4056 wrote to memory of 916	4056	msedge.exe	127
PID 4056 wrote to memory of 2888	4056	msedge.exe	128
PID 4056 wrote to memory of 2888	4056	msedge.exe	128
PID 4056 wrote to memory of 1448	4056	msedge.exe	129
PID 4056 wrote to memory of 6092	4056	msedge.exe	130
PID 4056 wrote to memory of 6092	4056	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,7312752018871469472,14686544473759967826,262144 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,4494198177610131324,17703369944576724009,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,17681789778474465700,4875543304281710367,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:13
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,1136073964081235895,7745264271792634134,2097152 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3632,i,7036444460177492371,15384414461372662452,2097152 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4344,i,3577630590726779327,15527028819879889587,2097152 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,12609860119032204756,16135196564991027787,2097152 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:9
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,15065334128993811676,3035133165819603674,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,5937987211412013403,17358183364659259192,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,7019054377262452262,8446191260838158219,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,7019054377262452262,8446191260838158219,524288 --field-trial-handle=2500,i,7874362590427448310,10180490347179774244,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
    3⤵
    PID:3916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,2957892250464377497,9719031252072613992,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,10219082241191777801,11928269222691177603,262144 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
    3⤵
    PID:4160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1448,i,10818778123559478368,8276249365701039344,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:13
    3⤵
    PID:4460
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,10639420187660609280,5540322411813000744,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
    3⤵
    PID:1124
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,10639420187660609280,5540322411813000744,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
    3⤵
    PID:2536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,5084819966827120277,5857578917174510745,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:14
    3⤵
    PID:5080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,8878094534420330232,15890051985638505642,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,17576799246060619227,12072821361427004488,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:14
    3⤵
    PID:3188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,11822356128830135439,11768036189221832179,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
    3⤵
    PID:2160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,1718424865533077533,1130431401168957939,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
    3⤵
    PID:1332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,11089455656056315280,5956322213215929547,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
    3⤵
    PID:1924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,2650769587927003990,2701182222695457250,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,14716428826006393446,16846484381932070867,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
    3⤵
    PID:1064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,2974152432218385314,6488241923368600873,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
    3⤵
    PID:1664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,10319376353647126944,8024391598747210551,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
    3⤵
    PID:2500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,9590548203191673659,11239885848480828667,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
    3⤵
    PID:3852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,17992989280504416202,1758586783922154806,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
    3⤵
    PID:916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=800,i,16203149566912179281,3237267573642196703,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
    3⤵
    PID:2888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4992,i,15629994219407662216,4327263821714739596,262144 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,15347760899225717908,7126591600366093048,524288 --field-trial-handle=2356,i,9188637304169383016,16276730031261955022,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
    3⤵
    PID:6092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e2cc1d4d00526f020d431721155aff61c9c0b3d16520a4d3506620b049d65f12
MD5 4e04397b6cd0f5d67cfbaa74499ad812
SHA1 bf738da478e23015d9913782534dcbcf1d15116b
SHA512 22126420acccee027ad3de158d48d2014ec8a0030397cce61a6d454814ece747959fd4c4bb50cf521eaf8a33eb2842795f8c9df0b9962f8505af2b63f3f4df53
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T130B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9bb02e5c3df0fe5da83794bd9fdfc835234bd8051ebd671dc536fc72b521c60f
MD5 1518285c968ab72392c86c75a8ac2a2a
SHA1 8fc3874d30c34841870f1b306694e5b4ff0ac295
SHA512 908df4f740c1becb3f92cf0fc9a04e433e63c9c814f694281b9aec9b65eb60564d14d427617215ecd3564122c459cc98464217d15b9dd5cbf115803275a43a97
TLSH
T12DD023B07529EB80CB0D003540245A00322A82323CC7032399917C0CCD7D800D3DBBF7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5aea3a3be27954fba656215bf2636fb02a18ce447ec4de2d18afb2cd016b9554
MD5 135d495f86f4ad63c9bcb7c908f6820f
SHA1 3a56981df9aabecbdb46b501a25096cf69302264
SHA512 6b1893bddbcfde6c0b164e2d09c8b046ee16ca6048a8f609c456cd4269459be35d7cf5eaabc3fe59e0ce125001036913fc4e1b7306cc91b5ef10267abf5503d0
TLSH
T170D0A7B4B305DB10CA0E01354814B6102666822438DB8B3398A1780D5DAD814D39E5A6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6ca31efa01cdd7d3041c49cd60101d457893604a4cb9f863e1cef823419bd9da
MD5 ab8b40dd9610135693864549aa15d662
SHA1 5d89328823283804bbee15aa1e8ef19f5b71e8fb
SHA512 415da62ddfc1f562aa261b229de0913ba3ae6f471611eda23adc764c1c31af0acbda690acd4ab05dba85dac41333d42dbefd55e98a0cdcec765695fc7c5f8003
TLSH
T13DE02B99C921AC3719FE472C60514242E76003672640890F7A3DD11D8FB266F4189C2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6b6b0217c11c555e75dbae7df3db968336ba05e905352e1b91a133fd598d2f6b
MD5 81ae30821405047826a83266e650b739
SHA1 4aae0866dc30b7e1d7c6da7d1521a14fada320c7
SHA512 6a5674fdec6a5161ee2a37696aea21508d5591dcc11d60de52a80c57dae6463f6a72e7d37aedf85095062d8db1ec3fdd6877d2ac158285980f2d6a2c075630d5
SSDEEP 192:+rVqJ0atJctUb97JfeYD9ozvP1Y/N0uNHon9UCF:+JGtJctUR1feYD9QvP1MnNH2UM
TLSH
T1FE13EABE27659C36CAEACCBD15235F705B72D924E1CA4C23153D70A92A25F05E8CE43B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 6696828bed94eaac4cfc08b5c822e9a4adb289c2e845d102434871dd4d0fa59a
MD5 c43be77af21c047c8d9345005ae9952e
SHA1 8f62c6c6e0a9762f78285ae04b7f753343aca3a1
SHA512 2f47e4b66db6c3b00cd1d03e770a35cbae5f628a3587af240e7f89d15358f69f9690e1d2a44ae6b76e9bff08e8ebef5b6ccbd70c3e31f4fa7d2cc69fed8b72a4
SSDEEP 768:SxUDHeuqz+6g4O4NYL/YgrL/DynirMRIB79b3/BUKCLhEcB6O7:SicneL/YqL/D4IZBpcL
TLSH
T1A94461FB1911601ACBA842F9D2033E3DD177451E6CC6ECA9E67C4C822825F75B2FCA65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 07717ab1cce6e9609169482280ff85bd40320aa27c56e04285dd67b6f4125119
MD5 e9b0e76d6c1ed9239aaeb1c194ad641d
SHA1 94df33bea4bfaab8182afb322cfce4f23f8a5552
SHA512 fc080c800a16aea9456372f1d6d7c1296f92bdcbdf91b1b7cf82cc12d3aed796d14ec67b8a2f47f610a3eabc354d19e169f02a69c3054f937ba01464f4e3e0f8
SSDEEP 12288:NZTHpXQpEJsXbSJ1jLQWkj9IgpL0KfFH+pzn/qL/ELLp6p9Y86fzyv4gd45/S2al:THp0Q/TMNtfiDlSnWNlX
TLSH
T1EB166DEDC96858C3CD639A70B0F0E9877C7453C3F995C1D6889CC584026BBC5BFAA629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 3f044574bcc1e4aef60ac756d3729c1441e61b9fa4408c5080d664d251494180
MD5 d058c8eb1744135e989ad768a2db3f74
SHA1 5061f832a7538cf10db2643f5b68724e162edfb2
SHA512 36e88230984a096522810963cf6aff44fe5be15c8b62e2f064157a169aa01bec59d2ad41664bc4d629c1ab8bd1eb1354adf7de45bcc0673f1d77ec8fcd3ca1d7
TLSH
T18E31EA428BA035C1DBB694F209DC675632F0F479A5036E67759CAEB48B01FD2C2D0037
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 94c5287f875333559858b04b741a22c339881c9d0ad6fafb9f97dc89895dad55
MD5 6d40d7697e282e14caeaf0dcf97efc79
SHA1 58ac0c9e42a6cf8af15f536a56de65c9be2fc1ba
SHA512 d732916c99ac3353d5d96a989374c67f38d93488d28c6c34e915aec5462b55781ba99a29f5625190e95f138c401259566ba0adb4c3d44e718d2535e11fbf3dba
TLSH
T1D1E0D8D4F8CAC15D5DA0B897533C674882C03496EB96AE172B1488C47642005B356D76
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 c5771c03b6f9e148cff0df359852a6ae8df634334f728346fe63852529e54bcc
MD5 e7db91b1ebfba4e3e94f4926e08f7bc4
SHA1 e42826277f7a6a55d31c9d5856173d2bc227a5c1
SHA512 064e2ed3cdce7b4618d4f549e954e14fadc0fcfc5d8a829840191e24511b2259b6b59119da7d164fe8a1f82bf2936fdd877171e3ef8754d6e10353bef453e468
TLSH
T1F0E02684D4C8CB29999868AB877C670C82D0348AAF883A336B5888447101341B3EBAA0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 e11e7216a13bbe48674b58d5e81ad4d669ea9f14cea66e2b24fe7616b38bda47
MD5 7647d854a57f0967ced773be13df489f
SHA1 e356bc44b5c1e73da3b1d48fea1296e2654e5c40
SHA512 8cfecf419fd76bc6cfb37a49a2e189a0b4c092a767239a00423a8fb5c994c0517638ac51bbe14b82b02b6065a911fd896eafcf78c5f1a32052de4da58ce69e1f
SSDEEP 96:raEskDvW/VtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/MlibbEOVpZf24JkMfXF:rXJ+KH+bF+UI3iWGVoWN3qL/7VVV63
TLSH
T15B24010E5F243722CDBD913669EB44A35C7DF03F875326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 a4eec91cece4a9eb1773a66bd1b4fae0d072d28edb68eb4b9a8f8232e05a0bf0
MD5 aa9e340bcae69c579e2ae2426fb2c213
SHA1 783a2ca2f7c7a5233f9757b17850f13b37df7887
SHA512 b991ba88ca91a808eeafd881663c8a7c403d96584fadcda30d13b4c333382389619e66f0f2fcd30ed7f687e16dde558caa1f5ed78645deed2d88f2186a324975
TLSH
T19CE0D8E4D4CDC11D699420AB9739B70DC3E0344ADF8A6B222F149884B402904B7976E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 190bc5394e35a0adff5e3c1e88596b48087462cd2f672dfb89dd5a7bee0c622d
MD5 3f6672764d13fba3aa753fc6e4bd3721
SHA1 388e6393e1dd215911daa344e00e1e18a4b7e8da
SHA512 47af127b7c789879c5a7e43891fd1cc371f39ce5c7506c7e8ed39b520a0cbac78a3e3ddfa8ee8dcff6129e14ce9ea82e60c6eaf4c6b2481624ea0cfe0f5be7b0
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7ohwbvrdJN:qDeMatha9RAdgZj
TLSH
T112B2004E2F347221C1F05B77E9D085672EBC101DC37736559D1860B3CEA26ABF6064A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8f119221689eca3e8406c4805c9adf1d1e951fe3485a8e385148c6b7b2c8123b
MD5 1643f48b10c893ab129942bfa62833c1
SHA1 9455764b541fa3bc00716790e19c9c32faad3b26
SHA512 9313849a5f2974868e1663aa127357f7c49af78f348c7e4eb2590666c61467dbb4ce53cae848b026f68de5dba92f7f53c76d9d903185078808dec2b2cbd1dba3
TLSH
T10341BBF3C3E4866E8D0546F0AA146E2BCE1C0915432C3D1AC9E4AE1BD3E3472E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 484ab3f9917b9ce221900c143af5ffbbaa237004b837811bf831bdc6681b97bb
MD5 ec0541dbb36c01fc32814ad8f5ee6e0c
SHA1 5994e6a3abb3b6c65bb1cbe5fe2484f471889434
SHA512 526e2e08eb3b3395a0d07e0e34c9a8e68a631e8f6138c64b25fea194cc7277f6292781d81ec77ab6aaa6df0880f15fa60142518d87787810e158a4bfe305e685
TLSH
T1CA419EF7C2E8866E990156F0AB147E2BCE2D0914832C3D5AC9E4EF6B93E3472D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 d5cf82e440c74feb436c88afb8d028a7d734d5af8e6adb76b72f02957d6e538c
MD5 ce21dc978e4ba7e1f588190afba7d9f2
SHA1 772c422a488b63880831ff1bca50e4346fd3b65a
SHA512 51965121b354d8d22698d90273e20107ad8725f34d861088e9f9f6b01e0c039b76df6758675a0f93f6da44e13c350e0fdaebc0961823e5522f85deb086b0b0d6
SSDEEP 96:eIEumQv8m1ccnvS69IF18Piif5nFXdnGXM4g:eIEumQv8m1ccnvS69OdMVn
TLSH
T1C9F2FFFA07276205D99444B0E4009FCEAF16010B47B6B6EC76D447E3F7A21E2B1B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 1cff9966a977e9a117cef28fd9657d6a46ff49aacaa33df038a2ae507aeae15e
MD5 aa278f4ce7e7854a7cd4d8a9c8ac328a
SHA1 6a2cf7a803d4c6e65aeeed49e0f1c99dbd3f5b03
SHA512 ea82eaf7b5afa6c776a188de56fd9672c928a97387568264e3ce46de192d35d0d618c1f2e488749ab6049bc050537affe2a73e187ae2c15caa3f31978d64abd9
TLSH
T135C0129684B9F4BA102C497B1D846885A67DD4B4004194E1DA95A33DA1914BB6B1203F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4618c1b9e0783701b26837433be8287ae81b93e29b7ecebd04708fdcc92a60cf
MD5 a8d9ec0b54a403f393cecac4a5d72076
SHA1 fc153e6916efcc79f4d3b2ff05932669a181639e
SHA512 1ce63a6e998e5dab750b9d5b60c461bc50ed14475de0d7fa1779929d7d0256adccef3cd6fc655000fab13118aa62d6474bf0725b02e094051dd43996f9e83f17
SSDEEP 192:sxRvRdb3/fvsmWpVzF6ZWdzzoD8p4D/g6+WNIYKjrdDKGdIgtJ:sxRvj3/fvsmWvzFsIL2/5IjT3
TLSH
T1CE42B715AD68A83B8CCBD21DFB657F63D6FD103261912E18A7FC9A1C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 72c4f153dca41cc7f116b72a2f11c9cc3e4c3534c317a9d112436a54bda79180
MD5 0260dcdfa45e409bd9af50126a8a4b5f
SHA1 e291da4e425991442441f60dedb9431772a0a32c
SHA512 ec5f392f6a113bdb808a7bd46da9a932eb57191f85343c2ba4f2d61a4cdc86ecf3eff0ca84b0c57382edfe80c435eda6d85a2da54f70245f6bf4918b147409e8
SSDEEP 192:sxRvRdb3/fvsmWpVzG6ZWdzzoD8p4D/g6+WNIYKEDdDKGdIgPJ:sxRvj3/fvsmWvzGsIL2/5IahTR
TLSH
T10242B715AD28A83B9CC7D20DFB667F63D6FD503261912E18A7FC9A0C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 329bb701570b3afa3514b0ea530fdd1f05d0ea8cd0db473ffc632dc4eda0e8b8
MD5 962fa27f36cada1a3281266575b49390
SHA1 e8b75df358a1ea563f125a578691cf9148f28e64
SHA512 cd1ba4b59c1eb618450ec0679995b5f026caadf97171c57a021c83d2121bcdd7f02553d9da5d62d03dc0e04e4ac14ab38cb95c30ebe4ac515a0c62d63792208a
SSDEEP 192:sxRMRdb3/fvsQWpVKFpq1zvzzoD8p4D/g6+WNIYKjrdDmgdIgIJ:sxRMj3/fvsQWvKF47L2/5Ijts
TLSH
T17742C7156D28A93B9CCBD20DFA657F63D6FD103261916F58A7FC9A0C04EB6DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 aab4364e4524eee580868ab461da7c3aabb720c2fd22262ddc6c586b768fddb6
MD5 da8aece6556b001716fe0a2ffbdc2f76
SHA1 3d1a3b271ba9af5993bc9cac9f149b3283bc8674
SHA512 6dbf203688e00a4791073cf7e12a5614e9b3bceea7e14f104180ca36bc56fb63ea026c6fd51e2f7485c0cd43010930bbc125635c4acbe9ee17444c49b1665cc0
SSDEEP 192:sxRMRdb3/fvsrWpVzF6ZWdzzoD8p4D/g6+WNIYKjrdDKGdIgtJ:sxRMj3/fvsrWvzFsIL2/5IjT3
TLSH
T1BB42B7156D68A83B9CCBD21DFB657F63D6FD103261912E18E6FC9A0C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 23b00b761514ee21b9a9d64dee7f8a78f8b3024979e91ee99c94a4a445c93ef1
MD5 6028c946b587cd2f02f038913ace87b0
SHA1 dd7434f1ed6d3bfdb24773ef7c25db1b574ab16f
SHA512 6b4b0e6ccfb555a85b8af5d9eea035e29cb89e8457b061c245b5674b19563f0fcd97f1e768c462954ae47553191846f03545810961972afcd721c048be84399e
SSDEEP 384:US5Yi0hfCtgvZFfxJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVDT9NHRIWrow+:UQYi0NWgv7fxJ8F1+UoAYDCx9Tuqh0Vz
TLSH
T1F3B2EC3B600DCB7E9F800AAD9C197FDB6D9802C796989D4047FE994C02C77FA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 7c10415cb4c35082a6c8e6e5b95667d814bada76e070fa84f9345050af9ad758
MD5 d04f124464df9188006d71627e80c956
SHA1 5567de968ad00dfda1520c3701cb766749b35b7d
SHA512 6025b1283a811f1bf344f8ec3f49513280b51ee1ac7b3070f7ac3aa580ce783fe1cc7d9ceec2facee10d6861acd732c6511b3e0483a734697d24676b39a76807
TLSH
T17DE026947DC9C1BD6AD5205B073DE70882F4744FDAC8BE632F48C8487182508F3AB6A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 3b6def4014b6bd127fd98b3dee4f30e2262d6740151d5f727cb9d6ddf174075a
MD5 d61d27a48a5212f5ce6b5dafedad7b22
SHA1 40ca50a1eea2a6859bae3b4102d48d951cffcf88
SHA512 c94de94fb6a1f96f5db1a4627275ba887ede72ed6aaeec358a4f279370a34cb1d3f3757c30ffbdc5052199459f33a532be0a2421e3c512e4942455306a4a1d4b
TLSH
T1DCE0D8A875CDC66A69C6249F5728F71881E2B447DBD9AA332F489444B246140735BA60
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 3ae1b93aa68aeb8a9b8afd46f3b3cb64c2aa6f718f94582140d676b832a6856f
MD5 ffea5007cde5fba8d316d0942a0062a9
SHA1 7ff61edbfc69a27980fe962decd1ff8e313ff62c
SHA512 6d1b75f632c4a671352aaea35b7fb91e39f8ada5192ac3eb603e0fd40c6366b93c91666c9158ddf394eb53987b3811a747d9f8b65541b0e780135668b2fc1d9c
TLSH
T1DAE026F4B9C8C63D5984609B437DA70D82F07C8A9BC9BBA35B0C4844B501100B3BFAA0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 9f9d4dd6bb2382993c63ee0c31662710b562615797cf7659bd00d57b3d55a679
MD5 b88af8e2995db4c5d3203966900339c6
SHA1 d173860ae133b496c6e34ac44d44e416d51f83d6
SHA512 dfc25403b3b0e9107ee0d29a883b310932060515be6f66e249250c5bd2e066f11d81a42622a6599065836730797538fe9dc852a266a7e936720d38129c41d701
SSDEEP 192:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNi5tPUgD6LTqN5eHKvWK8c8VEhq6SfgAHu:MaNpH6
TLSH
T137E15056357E53903CBF690C85A9982A568274E73118E43B7BE801B21FB7F029DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3555fbf1458d8c529b23dc67b384efb8ecac0dae8174ed608bbb87cfad0bf58e
MD5 a067bba3b912d25523011ead4b41b341
SHA1 0b1a35dc6c5682ccb036c4ad49501fa091d3df65
SHA512 6fa819219358aa4fd1eb050e3922b173b329b8c5f885b1acd58baeb50f42239e8c76ee7ce2216acbe856eea411ad5c11be6208ef9d3130daab19a6b3e9e02c61
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkr0xFzJZlWNiYgtlK4UgDlcLTqN5eHBoBZBsP:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQN3
TLSH
T16C91D456317A5250387EAA0895BA882F96C274A33214E43B7BB811B61F77E039DFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 aa69c9b64aea480c0467d10c1e4cd12a436cbea76dbb962218b51cbd9413b330
MD5 813b9de1d2bcee7fa197deb1ddbb1c85
SHA1 26461deb2b676d72a7141006f1183da31cd0edcc
SHA512 5f577701ece552ee8b1d4edf03ca41b3641210f802712d02a583f51c904535479d185a4fe9492d7bb3df4545b6528f779a6001cf0e7b8e1df32b36c1d9ba7872
SSDEEP 384:DNrRZyCSDnxTICFMEhIKyll7svbFKfk7:xFZJSDniTyI1l7svbF9
TLSH
T1A844740A7B747001EDE6D9725CB080771E3CB16D8F22E6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 439da6f93b6573824b3937fdf6cabe46145e970ca9acd45a96e084efffc7727d
MD5 12f487b8b4613a28c8c76c8cb29e18f1
SHA1 2c19fb56dc1068c4b7e12aa06d75df31c0ef7547
SHA512 071bc78e2a0c3c380e3f381a203f0aee637b0fe8e7b87635bcce92feb58566171b9fc45a0e40c52968c8611d437b9fe6bb8226a00df50797ccdb4555422b64a3
TLSH
T180F082C177ADB0D47ECAA980C2192C03B4D83E9A261D9873731D45F84BC48095F3EEB6
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 6c361527c1b24d65b23ac658c7bbd8967e49d6de9a0e3e3e01a1d15a37edc5cd
MD5 da5324570e30650692486210986d4cec
SHA1 1e406e2f5368a7c27abf4b16a2ea8e061652dc5c
SHA512 e89dce17b2e6fc072270a530627a22b935ff11fe55b272b5685a506f3a5b6da7c5ecf52516922c88457b43a852c0b79b7109dbd08b8dc61423efdf5a1fe63d56
SSDEEP 192:795QkIIIbbLMIMNsYcYGOOwCAs3ll8M7uskL:bQkIIIbbLMIM2Bvw7svUs
TLSH
T1C242646B26051B77C09E5B37136787909FE48C814172A12E3366AC9F8DF3E9782C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 2b47c5b52d38a5949eb46eba3d3060f3d99e2e91122a2972af88c718f521d911
MD5 85cad13c3e64f8afe592ed6d192e6927
SHA1 8be53911d4c5054e26f12fe8fae66a4e9cfa2c8f
SHA512 68e9efcf42e6e87c040747e376a7f56a280922fd32f8d70317f7f8b4cf8746be2220fb8f950c643723884d0e02a03a79679ac98543caa49dffd29c198ee649aa
TLSH
T1CDE020D0F4C4C27E69D430AB123C570C92D03447EE946A372F00C4487441244735B5E1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a88e2ca6d3a0bee742763ad369234d4effba82c7d6b50588a2b54b33afa163c1
MD5 dd073c3c742a4fa77ae13b433a12584d
SHA1 753db00707bb2f75191518246ab7337ad5000745
SHA512 eb9a7638eda141824caf2534d03f37bed52a94926229e27fe39c5add54070864c2b758aae8e1d7d0e4f8bd6332f167b04bdc76e4dedd5c1c90c0d1ebdd5c3f2c
TLSH
T107210456F330C148E15A867E907F9B361738D8168FBCDC0F40BA20346E76B040E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 dd426fca0f2f2d768b8f0abc8cfd48e706005f62096e55c5afc5f35979c035c2
MD5 cbce389cb855d675b4db8dd9799f42e9
SHA1 d3960326a1921c954973f212b44fddceb7e38edf
SHA512 e8345eb4b03697b373e458fd71a6307f28a147409e2a4f71b55a8959b651593558e6d41f913790e6536e5dc44e0bf87c70d664996c2ee0a84bdfdf82659e4df4
TLSH
T1A8E0D894B8C4C1AF959020D71378938CC3D53846EED52F531F008C4A7141141B36FA61
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59fc38.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59fc38.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f0e4108833c0333b828de3878fc651d69b8e3d3afcb126eba4f6bc1fff0414
MD5 1f708d796e62b593e340148008f3d2f4
SHA1 bb90475a782f85aa32b582c926a0bd36207e4289
SHA512 777640b89ba316db50944d29dcf9a2ae7a11ebb118958b2829c3e68044e34c9661047cec954b7874296bcdfcb77210435d6a5d21a4fc5d9c9a14954e247f498a
SSDEEP 3:MsEllllkEthXllkl2zEfl4hqlt:/M/xT02zVhql
TLSH
T1364404147FC0040DD5003030F055C3501371D410051157C334D744335CDFD504F10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aef8800d1ebd44f3ee83c011666936eca065db1bfa65a6f307c4d122f08d37d1
MD5 c84ec50a8bc41a3ee5060e79ca6ad202
SHA1 e0f0bd1132db957568889821668c492e7de83fa2
SHA512 1b94b543754f5990367dfb4d8947c978e7fc880e97030805119fe75aebc44a3ceca35465dea31e2df2487ef76163edb370d840b2f9b5cb509cd7fa2dc46d68a1
SSDEEP 3:MsEllllkEthXllkl2zEflEUt:/M/xT02zM
TLSH
T1704404147FC0040DD54010304051C3701370D410057157C73CD154335CC7D404D04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 03340c9bd56daa8d1e2765c6ba4111903d0ed9641718560e2a8d7df2ea3c0963
MD5 d03e05689e4c20977ff4c7a43d3c892d
SHA1 cbfb2d66cb246bbd8612b85dd35456fbfc34e5a0
SHA512 c09119526b9c1c3d9e7ec90e05466b35a6ffd2e13eb3ccd6a395e0c6bea9d92fbe35d148b1825e2e8b33ed33bdeb6b7f38278931f8a37f67113c0830ca27bca0
SSDEEP 768:pY02338lYyap7Hucys6BRvi82oP4/z6himo64RbG02ewBKZOp:pY023I3imOz6ImoNBG02evZK
TLSH
T17903AE3C9C148D7ECC9EF348650E26625DE45237D1B819A4D7DEAB0D917695CF30BC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 56KB
SHA256 ff4f8999a3fd6523e6a3ece798e776b276aa9430abed91d9790592489b7b38c5
MD5 b0c2f213b550bb58c7383cd0a49a2d80
SHA1 cadac10cd6783462f0896c7b17510d3c342cbe80
SHA512 bb7acb2d81396480d846bddafddefcd52dc6eb69f471e3b8a4ea6f7f99f644dc7b43462e42a873ef2bf80a203ee4c6b3240e5afe82d6d7884c45797e381e6e97
SSDEEP 1536:BYW23S3imOz6ImoYVPAKDkrkjPbq9CevZv:eWoStvX6kXCC2v
TLSH
T17C43BF39EC14997BEDFBA789A60D3A469DD05273D1ECA8E8DBD96F0C106328D530BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a25f24e158972d2a619ee2e27ed6516502987dc25bdef350ff98f69091a1f455
MD5 6ae90197958c5b7044fcf268106cb638
SHA1 41a4f048547389ffaaa66f21dc2d4b00e1bc7a92
SHA512 1c7f6dafc714196dad32afa11bbd3023ec16a0da0ca470eac5a8f4199ed11e989069c85cd4f7994928d60aa6aafed27490a05f04fc7c6278e118ee58afa103cf
SSDEEP 768:tYkrv+4UNbd53NH8lYyap7Hucys6BRvi82oP4/z6himo6koz:tYkbsbL3NY3imOz6ImoHoz
TLSH
T1E303BF31F8589D73DDA78284B0473A537EE4522345C859E4E5DAAB0E16CB99E130FC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ed3ab047ae89736bfda1f592ec433436fabf4dcf13b35e1abbdfa6822799139
MD5 8f3921dd85f71541b68320e0049bb1cd
SHA1 040c33f7656ece9a1b6d5fdfeb84bb5045a91322
SHA512 0224fbe632948f0acbf52f4c0b198ac58d2c38f4da973151f2d73ce73a860808b2b55f18566c34be2f8b64ca3a9f7471960dbde4f86f04581f572ba5a1130d84
SSDEEP 768:FY02308lYyau7Hucys6BRvi82oP4/z6himoxU2ewBKZOc:FY023S3imOz6Imoa2evZv
TLSH
T1A7F2BE30A8158DB2DCEBD288B54677936EE4627394CC5D94EAEEEB0D1583A5D130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 31d8ddb55a42650aefab5180f378c5d4cc193e31c9f5ef8bc1d470cb2a72eb90
MD5 a69274b5434e3573e6088741d8d09431
SHA1 afbe541c9969d3e7465aa716e30f1871c03d2a8f
SHA512 d0f67254954f26e29ab729ec6cb158c37959aed871cc4f3b158612127e16787fcf99010fa39e124fc2fb866dab95bde2d22dcd00bdfff5350be68650e724c25e
SSDEEP 768:BYb23L8lYyC7Hucys6BRvi82oP4/z6himoxzM9F9AewBKZOc:BYb23O3imOz6Imopq9AevZv
TLSH
T18503BF38AC145D7BCCEEF749B10A76536EE45237D0E858A8D7ED9B0D1463A4DA30BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6507beed91a7eb3ee63c0b4c44a962ac4fb8ff31ff5fc7dbc920bc1f0ec50bab
MD5 019eedccf4959fea0450665d6c44c976
SHA1 386b8ff3dd2b557a7d5eb5289d8820f72ddc783c
SHA512 c849158ea8ba89c89fe65b8921578440ff1c3c32e37a06e7503f7429058db591a5970b0c3631ba5762cf57d3aef26c9a1cd3abf3bfd2268d04014196ccc8d01f
SSDEEP 768:ZY023L8lYyau7Hucys6BRvi82oP4/z6himoxU2ewBKZOc:ZY023P3imOz6Imoa2evZv
TLSH
T148F2BE30A8158EB3DCDBD288B54677936EE4627394CC5D94EAEEEB0D1583A5D130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 dbf1e11a57ed97c1648dc30968328aae59b7fd86f20d3239e8f9e57a24bf73e5
MD5 f328fe2b1d65ed4a7c8d8a390ddca1b4
SHA1 ebd0496919bc1019a527289a21ca768dcc1ffd14
SHA512 8e081ad696325e37e23ac164c12a2db6d4aa6f3a3c631799ca2e243317d7125380c9e9f708f5cf13419e1e14f4706cf2da606bc8c4a1acc2a62481c6922889a4
SSDEEP 768:xGrv+4UNbdS3OMjlYyh7Hucys6BRvi82oP4/z6himo+A2bwn+h:xGbsbw3OX3imOz6ImoL0w+
TLSH
T16B03CF35F4488973ECE7C28874467A537FF8522345C91AD0E6DE6B0E128BA5E230BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e561e7ff03ca49ef502e29b6a598c362477aff611277c244960345e3d0ffa07
MD5 cfe8314e7c99e8dbd2263f7db00b3917
SHA1 d578dc07b9957a3d692767faba32db0024333db6
SHA512 73d45a21d14bfff4ca105f46e34598850a9646d0ec1d5a8e4266c6adb3425092fef909e2778a6e4f09ad0174e3205875afd8c4a867ed505bf8dcb492768f420e
SSDEEP 3:MsEllllkEthXllkl2zEfl3eWKll/:/M/xT02zT/
TLSH
T1F84404147FC00C0DD51030344071C3D01371D4100511774335D104335CD7D400C05440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

79d518b0-7f20-405c-9a20-4dbc9475816d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\79d518b0-7f20-405c-9a20-4dbc9475816d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 f35a4f569a8d6e9a53c7abbb2fdca981cdaaf4108e2934925648d90000b72a42
MD5 29f0806ef1eab44a9cac51d6178104b2
SHA1 da9a041647bf896631ff9a3a1470aec96da1eeb0
SHA512 02d7f20c525765b0a77f7738b19fedba3472edd6c259dff60db5beb1f82ebbef1c72f48fa68ede5aaf452b953f8d1b959494e48c37cde60ada7cef9e322eec56
SSDEEP 24:TLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/sufL:To/IHRH34kWqB1kQnjhHmr6ITmUuL
TLSH
T14C23896EDA2CB9A1FEE40B3DD7D1D4127B36AA0EC2E4D9F1099B406746C540405EB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 4KB
SHA256 3d13bafc62a832bd678d471ce97d38891f0b64f126acf3f00a1382d8018665f2
MD5 ce2b0dd2b3bff5bd7bc8797b03f68054
SHA1 763795ad556d894de45bf365ecdc51c7b41d717a
SHA512 d615f2c65e352df1e861944890da0aa490523b33ddd56aadbd567f83f217d30a5ccfb242df3029ba3c35903ed873b71cf43a10bc681afe0c88e88968f211228e
SSDEEP 3:ur/lFllQ/8QuQll/l1se6SlLgcSFYojpuyOV9RUIFDn:1/Zl1sejjGyjn
TLSH
T1809112421E0094B7DE84273F35C200DBFF721D022E81E804707888639784609F618D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 85f22ab4da663d97d5adc165d7b5aff250d53388ab4b39188031618a1902ad31
MD5 453a52100ee3bb64a818af9987ea9ec6
SHA1 f50392bc6bdb0f2740cf4577f4d28e2546da5e7d
SHA512 ee015ce28c8159690e1c6600875cf577cfec1155296511774e41f04a8c10f1213a3339dd6bd0a048c4a6f85c7b0b631a51d61bfeb6f138c021a1c0d61475356d
TLSH
T1AD21F5E4392563BF57C74BE490664CC49D60E499433B5BACED1A9034BE2CED0A72E386
MD5 SHA1 SHA512 TLSH

Submit Download

f34ae75a-ad39-4f72-943f-ded2ca27e7eb.tmp

Path C:\Users\Admin\AppData\Local\Temp\f34ae75a-ad39-4f72-943f-ded2ca27e7eb.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4056_1349553283\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download