4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 19:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gate.html
Size 1KB
Sample260810-yacbmsgj3y
SHA256 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
MD5 8150f458ed6fb9b1db4e5cfa57a1a281
SHA1 6e5726854d28687b560d7fdcb5c782c425c7dfb9
SHA512 4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c
TLSH
T1C021353EC1C1560AE0271164FBC1F7A86669825291970F703B9EB176F6CD0BB56A36C8
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1424_986392247\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4480	msedge.exe
5716	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308640999269814"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{F282B674-2225-46B6-97EE-90372ECBCE76}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{307C0930-087F-456F-8F95-D32016C8C871}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1424	msedge.exe
1424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 3524 wrote to memory of 4556	3524	msedge.exe	89
PID 3524 wrote to memory of 996	3524	msedge.exe	91
PID 3524 wrote to memory of 4480	3524	msedge.exe	92
PID 3524 wrote to memory of 996	3524	msedge.exe	91
PID 3524 wrote to memory of 996	3524	msedge.exe	91
PID 3524 wrote to memory of 4884	3524	msedge.exe	93
PID 3524 wrote to memory of 2296	3524	msedge.exe	94
PID 3524 wrote to memory of 4884	3524	msedge.exe	93
PID 3524 wrote to memory of 2296	3524	msedge.exe	94
PID 3524 wrote to memory of 2296	3524	msedge.exe	94
PID 3524 wrote to memory of 3688	3524	msedge.exe	95
PID 3524 wrote to memory of 3688	3524	msedge.exe	95
PID 3524 wrote to memory of 3688	3524	msedge.exe	95
PID 3524 wrote to memory of 5748	3524	msedge.exe	96
PID 3524 wrote to memory of 108	3524	msedge.exe	97
PID 3524 wrote to memory of 5748	3524	msedge.exe	96
PID 3524 wrote to memory of 5748	3524	msedge.exe	96
PID 3524 wrote to memory of 108	3524	msedge.exe	97
PID 3524 wrote to memory of 108	3524	msedge.exe	97
PID 3524 wrote to memory of 4440	3524	msedge.exe	99
PID 3524 wrote to memory of 4440	3524	msedge.exe	99
PID 3524 wrote to memory of 4996	3524	msedge.exe	100
PID 3524 wrote to memory of 4996	3524	msedge.exe	100
PID 3524 wrote to memory of 5448	3524	msedge.exe	102
PID 3524 wrote to memory of 2484	3524	msedge.exe	106
PID 3524 wrote to memory of 632	3524	msedge.exe	107
PID 3524 wrote to memory of 4512	3524	msedge.exe	108
PID 3524 wrote to memory of 4564	3524	msedge.exe	109
PID 3524 wrote to memory of 4564	3524	msedge.exe	109
PID 3524 wrote to memory of 5784	3524	msedge.exe	110
PID 3524 wrote to memory of 5784	3524	msedge.exe	110
PID 3524 wrote to memory of 1424	3524	msedge.exe	112
PID 1424 wrote to memory of 3348	1424	msedge.exe	113
PID 1424 wrote to memory of 1052	1424	msedge.exe	114
PID 1424 wrote to memory of 5716	1424	msedge.exe	116
PID 1424 wrote to memory of 1052	1424	msedge.exe	114
PID 1424 wrote to memory of 1052	1424	msedge.exe	114
PID 1424 wrote to memory of 792	1424	msedge.exe	117
PID 1424 wrote to memory of 792	1424	msedge.exe	117
PID 1424 wrote to memory of 6104	1424	msedge.exe	119
PID 1424 wrote to memory of 6104	1424	msedge.exe	119
PID 1424 wrote to memory of 1520	1424	msedge.exe	120
PID 1424 wrote to memory of 3052	1424	msedge.exe	121
PID 1424 wrote to memory of 3052	1424	msedge.exe	121
PID 1424 wrote to memory of 5860	1424	msedge.exe	122
PID 1424 wrote to memory of 5860	1424	msedge.exe	122
PID 1424 wrote to memory of 5004	1424	msedge.exe	123
PID 1424 wrote to memory of 5004	1424	msedge.exe	123
PID 1424 wrote to memory of 5156	1424	msedge.exe	124
PID 1424 wrote to memory of 3488	1424	msedge.exe	125
PID 1424 wrote to memory of 2928	1424	msedge.exe	126
PID 1424 wrote to memory of 1980	1424	msedge.exe	127
PID 1424 wrote to memory of 1980	1424	msedge.exe	127
PID 1424 wrote to memory of 1580	1424	msedge.exe	128
PID 1424 wrote to memory of 1580	1424	msedge.exe	128
PID 1424 wrote to memory of 2056	1424	msedge.exe	129
PID 1424 wrote to memory of 2056	1424	msedge.exe	129
PID 1424 wrote to memory of 3956	1424	msedge.exe	132
PID 1424 wrote to memory of 3956	1424	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gate.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7fffba0fc188,0x7fffba0fc194,0x7fffba0fc1a0
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,9148028088470633701,14808369092065147755,262144 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,3693934387087541781,17614796870848946370,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,1967975125213311679,10478568075395489456,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:13
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3324,i,6937004704715703278,14527832213160605958,2097152 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3332,i,6959227839345142540,4039774097571428439,2097152 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,17354950279412333200,15882491271548357119,2097152 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:9
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,13251196981326462757,13338178026022644018,2097152 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,9392128727617870867,10148868922548874847,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,6456780666352377065,4798510186496897114,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14168862500730812019,17237780384183054184,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,14168862500730812019,17237780384183054184,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3312,i,16960462535804818362,1490630393558037728,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:14
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,14288570499559870200,11143066376886896470,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,10076357877257799814,6031732658321911439,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:14
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2036,i,4755229163944719920,218748788555916980,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,12835802224676186934,516268094616613586,524288 --field-trial-handle=2168,i,6961768466694028566,17571817129214944012,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x284,0x7fffba0fc188,0x7fffba0fc194,0x7fffba0fc1a0
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,15382320450674889003,13727720510795553764,262144 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,9144321572944248862,17096635156604659437,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,14363865930405263151,3390424861921762332,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:13
    3⤵
    PID:792
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,8526184923218903563,9977016856502743711,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:14
    3⤵
    PID:4456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,1394154376295796989,7663511661912811998,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:6104
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,8526184923218903563,9977016856502743711,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:14
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,2269747568882373622,3469844745873408834,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:14
    3⤵
    PID:3052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,12958893883943134736,7321384889670373988,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:14
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,9198173785092680621,14532182856698268917,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:14
    3⤵
    PID:5004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,1446530995992851405,9770726880404373355,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:5156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,9075698117970709482,14708417342814736817,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
    3⤵
    PID:3488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,15410137605106938056,3581638497046141307,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
    3⤵
    PID:2928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3168,i,16164867412697244059,17828631529166691546,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:14
    3⤵
    PID:1980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,800691024838960173,9268435569005426426,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:14
    3⤵
    PID:1580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,13622871399560695518,15228655583349447487,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:14
    3⤵
    PID:2056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,14601748670405223307,6388933549207134741,524288 --field-trial-handle=2284,i,11541043913479390200,9845366284850417803,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
    3⤵
    PID:3956

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 760e87d367abfa51ec930bc94cadeedaec5ffb482be3355a9d911b3728abb6d3
MD5 0d98888974299912da844b369f36f8fe
SHA1 c3b007b5b602a20d2f4fd99f7bcec499a63e1527
SHA512 dbb9321e5f8f39ea1c1a322252ac7782523c2c0e8bab7da6c1a1256e2f23c399e8900b6ffe0ea1d7668a1df2138c3aa368b750bff6aad79ef78a39e7fd52a9e4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b83aa929ffae7ff5e45d3b98b564e3ed524fa35472ade06cdd508d8277192c79
MD5 cc12c8faa312c766b17c5ea47b17c972
SHA1 089ec8befabddbcf26f72fd129f1ab0d97961481
SHA512 a2eab00023687df3ff824c02518c7d08c33bd7526f06b3be8fa618f3f38fce99acd1dec94aa3620a21b3a8ec64a5ffb89bb2764a9e9774021f9a69c5c3fc3ea5
TLSH
T182D0A7253549A9C8D251103254A00212A2144963759247095211E46ECDB918667EBDDB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 743d993b6d3667ae741712960e984e860b017853028e10246371f687a2f4b8ff
MD5 541d1346cf812e6d3db9b06a4e47c563
SHA1 c4e5220842f3aa1648f6af0c50ea80dbe514b28b
SHA512 1b74181968dcfec3b456c132aed863f2ea95110b03991d37b80ceca6ae516580e0fb9e62cc20d9206e4d977a3269754b3841a73b2420429dad58298b4661929a
TLSH
T1D6D023257348DD44C342143268D15313F76145253457CB169111F06ECCDD189B3EFD9F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 508049c832a304eaf09ae09ed962f2b641cf4e50c046952397e5a36168e59341
MD5 e9fe98bccbe56a1ba10c78987f4cb61b
SHA1 96b1dcade8e355334f52d6876fbdae742dc96cc3
SHA512 972a03cf5f60e3c9bcffa2d246153f3aede9a9fbe26ba1e9ed7f629ff9fa5c4cea264657eb2aa23448e9115ad9eaf4231afad2ec72f284235bdae760c89790fa
TLSH
T195E02BAED916BC3718FD176CB0500789EA5163572B51990F3A3E520D8FB126A4685D2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 9cdb683d1d34ae0d039ce371ddb3265929a65cf1b25a33ed54e6ab813f77caa7
MD5 e2651743ecb7b5c4b956524fadc1685e
SHA1 23f5f40d5f9d99ebbb0df3469ca4c3d46ac62161
SHA512 60bac754cc6a92c426bcb36deb0eabff762e777c61651603bb0b70197bd684111a3de9ae9d023ccc0d115e79cacb92b2c9f4581ae80b1d1e2806973f0f230d5f
SSDEEP 192:2aRcXFS/m14hnloDXrBqyHEGQ3MfSM5YnIYRT1ovMHuecK3BaNZjC1Y91:YFSe1s2zrIyrQ365YIYQvMhzaNZW1Y
TLSH
T1F213D6FF7B618C96C2E681BD244FDBB1A376CA39C5D494938232B42D6B51F4268CE403
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ef30ed9d6a30af314947f59acdd13fbcf16a9783f99d4ddcacd158c3253a8fbd
MD5 4b16ad321912837ce02d8ab90663611c
SHA1 8a5ea29cf674af0bd26251ceb9f2c93f28f5825b
SHA512 193f8d50c8ef173dda1cfd77fdeb925a9cdf54157ca11aaa3e0e235635f3244b29f8229df859becf71630e46b8a17a8a55e3ed5dc21e8fd0f020bc98b137cd18
SSDEEP 1536:xah/OL/yEL/Vwxx/BcLQVxDBdVW0q1ase01YHso4XJL/4L/:xW/OL/7L/+x3hlW0IuoL/4L/
TLSH
T155443FF70951601BCBA882F5E2033E3ED177451E6CE1F9E9E1784C952865F22B6BCE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 c905a863875349ce02b723f31fd716cb521b4abed74cd1aed419e3f74a8dd074
MD5 e62a02fc6ed5912dcba27d854f62a454
SHA1 d1bd9abfb2a09e57a8812212ca88cc289eefcc3f
SHA512 e55c82fb86331dcb9e9db68d0df66eeb0f1d52f43eabeedbf24faa68edc2ba52c11ab135f291693b87009c66b8af6d4bed2075feb839445183660f91cb406554
SSDEEP 24576:fHBbYmf9MKbaLt1NG1lQQ2XcKX+JbTEZVP157JxF7QYbmTi:fhbYKMK2TNQtKX+xa15dxxW2
TLSH
T1F2167CEDCA7858C3CD639A30B4F0E9577C7413C3F594C1E68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 63768f58833f8ed515b0615e3a25bc98416c65e589541ff9aa2921c9f5dc2ed6
MD5 f968aad10cadedf79b7ff2cbceac547a
SHA1 d2eb7f939c99e5582932b53759268d12e8b7683f
SHA512 f973960988bd040d3bdcf3e9fe4a03d3605d1b2a264fee92a907732b12fb7c1ff03a6490554df90c76cdb8e70d272b050f0d087e87defed6d8442f2eb8bd8fcb
TLSH
T158610CDA136509D2EB2155FCE5E1D8B8BAF8847BCA072B0294342D3E5CE2F185CD9533
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596690.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596690.TMP
Size 3KB
SHA256 5ea185773801a26e7e31d638506607c77a43958ac7102278a7b009b0c6b7e07a
MD5 5f8107aea125d3b8e5ee567090f1d641
SHA1 566094e955b79d3f777aac14ee0a4ec3dd89f41e
SHA512 aef40a45398ef19dff6d15eeda9e373e798b5b4df6cadfb0289790958f5aeb5d52620a5f8b4c500180e8357d5dafb0ca9e98f4bf8a0cca67b5e4eed3b963a27b
TLSH
T13B610DDA136509D2EB2195FDD5E1D8B8BAF8847BCA0B2B0294342D3E5CE2F185CD9533
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 be6b4b484204d0b02c0b6df9f16cb10a519de791ab9cf99bc944de6f9e4bc2b5
MD5 af71197bb371a547024d393c4e7d46a3
SHA1 0958f351f52e6f726aded58d940b5dcba9f4fce8
SHA512 b4f635fbc122d91af57d1aca3dc31fefba21a53454aaa7c8730b8f1621d97d2fccf51ab2dd8ea076fd795ba6f4cf50f2e4bed6fe7501818a247034754e4a2b4a
SSDEEP 3:MsEllllkEthXllkl2zE/lUp/:/M/xT02z9p/
TLSH
T11B4404147FD4144FC501113141D1C3543370F5500713574335515CF35CC57500D40400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 b5342e0a0d54ea8999e51e190dd2446cdd56d634ff099a6745e9bb3c2add1ed4
MD5 7d244ce0ed411c398300eeb900c95054
SHA1 9bab19b94195ece695bfed9117766bddde995331
SHA512 40d2d57d2f84af6a80c37aadb84aed14038508ca9d8d025ff69458ddcd72175d319d521b77474fcc71594e22781f7c7450631fe7069fc7053b200cd95ee614e1
TLSH
T188E06890A1CAC39EED6436C311B0970CA7B83062D68CFE0727008CC03702082BA42DB2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 b1637a6800c64c80bb7c1b084d51f519ca0134dce0f39aa3c55cb44d6b4805d8
MD5 c36c08f90d60fceb5f4c5f3486f15755
SHA1 a592e30acabeb3f0ce3fa81818d5bcf592207927
SHA512 dc0abcb4c00ae278783ea30c468a874c1022c3ba6a447a37fd7b8e6d6b65444ce5d8804847a221eec81520c16c2c4ed94106a7b8630a6e9240d5ee54bb787161
TLSH
T140E0DF8804CCC22EDCA46A9782694348D6A03403E28CB90A578ADCC47342243B6A62F4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 17de84bf2dd6ea405adeeeecba52602ef559b311836b60a60db1689752bae687
MD5 bb3cb218dd889891e2d389c57f5dd007
SHA1 9b5ff8e623384f8afe08e69904e0bc8b85c498e2
SHA512 96712cf139c2f4f95be829837b5eafb9819d69fc78292734f1c627300bdda278e3612f955d6ea5670f4caed732f8f5888620b958b4401fc3925c568d61b40a32
SSDEEP 96:sACW/tejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/E/3RbbEOVpZf24JkMfXSFR+B:sACWYH+bF+UI3iWGVoWN3qL/EpVVV63
TLSH
T17E24100E5F352722CDBD913668EB44A35C7DF03F875326DA6C6114B5CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 19B
SHA256 ab5c71347d95f319781df230012713c7819ac0d69373e8c9a7302cae3f9a04b7
MD5 0407b455f23e3655661ba46a574cfca4
SHA1 855cb7cc8eac30458b4207614d046cb09ee3a591
SHA512 3020f7c87dc5201589fa43e03b1591ed8beb64523b37eb3736557f3ab7d654980fb42284115a69d91de44204cefab751b60466c0ef677608467de43d41bfb939
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 fcde514acc0fa24afae98c16c56f74fa9665def9facd88b65bc20adf2acd4e57
MD5 20b62462f8810a2f9d771856fc23e35c
SHA1 5add2efa0ed5091849f0445c8e0f8555d72daeaa
SHA512 4149dffa770570b4385198bbab076b9eb28595f1d2e1c812872b04b727270946a5ec68be9e5dd260b8f956a417dbc14b90aa427a269ccc37289b7b26a19769f3
TLSH
T11EE0D86045CEC61BEE54238B5225670CDBB03406E78DFA455B05ECD1B2C2008A6836F5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 00765957ad4b6a18aab62d767dc54195a2de4669d86e2cdb84b7eb229201a8bf
MD5 9a2d8eaf8567c38561e60547eceb3e2f
SHA1 b6bb00e83ae4a2e31aade2384c513aded8444809
SHA512 9f37c48b2a428a66864795885aef181bbb47b47b76a99c1869fd5626ce51432de89c9647cb3624ebadc1bc27f6244b016d5f58c27f9fbf1f4d4ce0e8f8710421
TLSH
T118217CF743B4957E9A1182F0EA08AF1FCE6D0411431C79AAC5E06D2793F3462E085A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b8776d08614d33b454eb8a77f0d1bf5d063b78f9390a274bc707e2f9c5b87ca3
MD5 5c6e83428b1e645356e98ccf22f2e450
SHA1 9f6ffee5705795d8fbd6f716eb158bf9decc4b2d
SHA512 c1e5ef21dc567f21d4f444d9e6f680dc9696690565ad1a0de3fc2a34f7b25f7d15444cfee6bdfbc1dabc0d2837bc66d27f3ef3ec09bc5f35c884737780dabcf2
TLSH
T137217CF743B4957E9A1182F0EA08AF1FCE6D0411431C79AAC5E06D2793F3462E085A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e1432c97fbb163d51bfafe00b04aa0afe514167b8b3e897d034a2957c544d49a
MD5 0662a27385226673cbf63d3f06957f12
SHA1 5d4e511b2a29a1f6d13902dea18488d374705fb6
SHA512 59216a1ce2a8fe90da8933bf86c2fdaab4c32a3576017f11f46ea5244858b306f034b429fbea010ea020913e5c90b4ef32c8dd177d5557b1141b989522fc4104
TLSH
T19A419BF3C3E4856E891156F0AB186F2BCE2D0915832C3D5AC9E4AE2B93E3475E141D9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fa0b721d-a49d-4476-82c8-dea207648cb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa0b721d-a49d-4476-82c8-dea207648cb5.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f09aff3d3bce192355bf7d2c61677b0ba672f6dadd87dd3769557a09379c739a
MD5 6a33098ef1a0d90d57b0f37147eef1f4
SHA1 61f70aff06ee4e2b4bfe97b3890765818aad3bb7
SHA512 40668e7a442691e2c914053032d47037c0009c74c71fbbefbc7e5330d519cd253e860c986c5937494801293c4a1bd588523cd315c639ef74311424cba44bc091
SSDEEP 192:sxRWRG89/fKsEWpVlZyJHMZn0mJBzoA8peY/g6+WNIYMPh3BGj/IgDrJ:sxRW39/fKsEWvlZyJHyn0mJ8v/5IZ4Z
TLSH
T1D042B6056928AD3B9CCBE21DFB557F53D6FD1032A1912F58A6FC9A1C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e41c96b6db2794d336e28f4bdec08f1007b6b150cd78600c637a2d74093b1ad6
MD5 8898e431543568978be86965b0b19247
SHA1 42852116bc960cb40280deaf38f69aae09257542
SHA512 246ba66bf62049640dd79455c4041a2885846ee0bc0ce78852375f4f5b9dacad28ba1e7df56f5aa89bb9cce14d5d3ab9b76baf83583d090e0c89e11a3c24e6b6
SSDEEP 192:sxRWRG89/fKsEWpVlZyJYCb5zoA8peY/g6+WNIYMPh3BGj/IgDrJ:sxRW39/fKsEWvlZyJPEv/5IZ4Z
TLSH
T1D842B7156928AD3B9CCBE21DFB557F53D6F91032A1912F58A6FC9A1C00E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9779df6cd59d2d5a7b294739a4fda520a68ab01bd5288c57e99ea4bae6af173c
MD5 fc3184ed3515095127e20453e00b6ded
SHA1 a0df3f968e0a657c99dfcf9005d2940e756ae3eb
SHA512 9df4feb1b4e05ad70e5673a39a953e367538012d7839e600cb31f41f18a58641154f9f7a322643396b831d6671fdaf5e4d836d92fefed926c5c5a39bea1a6ac2
SSDEEP 192:sxRWD89/fKsWWpV/ZyJYCb5zoA8peY/g6+WNIYMPh3Mgj/IgDeJ:sxRWQ9/fKsWWv/ZyJPEv/5IZtu
TLSH
T16642B7156928AD3B9CCBE21DFB657F53E6F9103261912F48A7FC9A1C01E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d775765fded0d27429fd576b9892fa286100caf83f443f4bdbfbf64a2e39a23c
MD5 dff4fa9806473a7d86f3bec0e76a04b5
SHA1 a503d7b898a4cb4791e0170cb3d996d043a323fe
SHA512 f038ac2de64ace35559c249221da86908a4487291b2e04d6cbc9ece05c76b9bfcf27902b577b8b608b68a56ad668a5e031c01c847f5ee3e1266b3e1e3ea30587
SSDEEP 192:sxRBrb9/fKsM6JYCbkzoA8p4Y/g6+WNIYEgv3LGj/IgIJ:sxRBP9/fKsM6JPFJ/5IG6s
TLSH
T1B532B7166928AD3B9CCBE21DBB65BF93D6F9503260902F48F6FC961C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c551fcadc6a59aba28719b669bd007eabb3735c2b3b7a0534e21a7947e27c2d
MD5 8e2ce1b61313554368af726804a90d77
SHA1 092c054cf9429918e22a532a810ef10a5d99feb6
SHA512 e2b771215b507109e43c6618163d5e27c228afac7fb16eb426cfc942de7b99195d31f891a9322b5929e2736a4ccf09c84480b020662ebe7a1f8529a0e9bddf2d
SSDEEP 192:sxRWrb9/fKs7ZyJYCbkzoA8p4Y/g6+WNIYET33LGj/IgDeJ:sxRWP9/fKs7ZyJPFJ/5IX6u
TLSH
T1D332B7166928AD7B9CCBE21DBB55BF93E6F9503260902F48B6FC961C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 56cbfd6526806210f029d053dfe294c13da3ff24e6d762881ec65c84606f3225
MD5 0b3e41181280e02f7e32f62d20b6ac4d
SHA1 18749e7089b44041a8a34ea552a8b8dec51541c7
SHA512 767ec079e223a3509ad79d75c53a44024f2e87b833660d4c7cfa08431bb15c07662c95b7ffa866c9637b029f7e5eb5d0a570e13198f29db5f00a1767fa8d6418
SSDEEP 192:sxRWrb9/fKs76JYCbkzoA8p4Y/g6+WNIYEgv3LGj/IgD8J:sxRWP9/fKs76JPFJ/5IG6U
TLSH
T1F732C8166928AD3B9CCBE21DBB55BF93D6F9503260902F48F6FC961C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2556505fa831aa707f241928f5348fbcab2e642a6174bd5f2e8ffa6dc64a54ba
MD5 b820eff322754b32a2c0a672f11f4256
SHA1 5bbdf47b74963ca087714e87125706cb208b1721
SHA512 c9ace4d800903b0bc89ab9bd1eee8f1c53c582fa8da03682ab9ae68ba15d8f55ce97a30ae7b08552477f865822036033051e113569e7b3753a81f5cd5fd90154
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVq:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uo7
TLSH
T17BB2DB2F640DCB7F5F804A9DAC196FDB6D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 1141e31a079dce3a60229f8ed49d3d638b0369386d28436287bea8d20fa0336b
MD5 f0d263811f74a8c474056d2ca27730ed
SHA1 9e4b3e36ffbed612f5aa4c98b27a75bb45c56d4b
SHA512 1782774104ec459f5b1ec1f9fa913f7398a3a320a5e3c8f7ffb09a71f7fa4b6914e018cced5123b4ecbd31a5afc16e50656a6991a30cf3ce7c87e26052fdcf62
TLSH
T1E2E0DF6415CCC27BE8A5228706298308E2E9B40BD3CCB9066F81DCC47383685B9A32B2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 dc9d68de490c72894dad3eedc9631d1b68851ce4e4cd7dd76edb055115458293
MD5 01abd8d32eff4c501840e4b0299274bd
SHA1 53e8b962beed010b0914459bd4ca166905abaca1
SHA512 bb91bcc613b7350aa68cfafd02bf78e854bdd8ab27e01b0536d2bdc1b5a3a0aad35a8182a478d0446d9fecaa29a56298b468622774810e81db400059cfdb32e6
TLSH
T169E0D8201ACDC72BEDE6328F6255D70891B27402E7CDF9156F09E8C07347650B2432B0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 3669916915a5b28258ae7d6314d8eb0cc6ec15373542430b7efa5138fb501641
MD5 5f0572eecb2232b599c8c251edb0b4af
SHA1 be5ef8da1db4efbf661f0b8bffcc06595cbbfa9f
SHA512 c011cf4aa94fb5101dee7a77b76d2ec6c98b3f7de62be378e9d619752da4e28857f85704ada32cb2222cad95b5e95cb6eb7c2eb8a4e453b32bc8a2490d37bcc5
TLSH
T14EE0DF7059CCC73BDD906387427E970892B07806D38CFA0A970C98C0B342201B6B61F0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2c8337f24efc6fbc1193a16f5d9ffea9adc75b96988c2ea6a56f703ca4b4f77
MD5 2192e1729333341bdc719624a9ac8a04
SHA1 01520cead413f14255f86d1761b1d07865333104
SHA512 9ea5a5d8d5d0034a93acfc4c487a71ec81bc85b30cf68d15d30bb191e6d154cab1650b10e51dfd57f825194c8aacddde9d462515f2d91ea0bfa9d61de276f888
SSDEEP 96:KREP2qc8cKWkB5gaKK4/ggKcKiJ46jlmx6mkcsGu8ftcmGKEDcIGIuGnYGXlLm9a:CEP2qc8c1kBKay/ggRKiJ46j51/f
TLSH
T197811104357E42D13CBE650CA4B9C967428275B6726CE42F7BAB41F20BA7E016DFC5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 30a10e689875fe1ba3d58cecc84ccfc535c2d006bd1ebc964d1077dd558c3b8a
MD5 1239829d795cd9909c48507078b6829e
SHA1 e4ad61a5a3bf8ed1f2cee6ad9f7bcf440a5177fd
SHA512 4e01d0cd6c93879c05d2982310e12617876a2651a1edf9f0a5d4320dd95d906040536941c0c89b4047cfc96ba4a65112bffb7afa4630da16fd825584417b39c6
SSDEEP 96:KREP2qc8cKWkB5gaKK4/ggKcKiJ46jlmx6mkcsGu8ftcmGKEDcIGIuGnYGXlLm9H:CEP2qc8c1kBKay/ggRKiJ46j51/I
TLSH
T19EA11E04357E42D13CBE6508A4B9C97B428275A6326CE42B7BAB41F20FA7F016DFC5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 4b89c493c93543a8cd69972424ac9a4743535d68440ef245701ea789f0a6ec87
MD5 e55cb16ac50be51bcf1e7ce93b695016
SHA1 c1ed55ea62afb48f067460bf7cdafc992812892c
SHA512 b5573e3e6a03ae2e4685099ed753136f9d9fb0c7085c858d958a2120a382cb4d83e594a392a6f5c990074ebb83fbbb9fa42cbf228da67419bc235063d73eff38
SSDEEP 768:xFZJSDninw9fb9fV9fW9f5yI1l7svbF9:xnJYnhVbVVVWVV/
TLSH
T1B844840A7B747001EDE6D9721CB080771E3CB16DCF26A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 d063c1287c670dd8fd4e9a6240e95bf048886b2b57226fafae9360bce9a880ba
MD5 e55969f3bcee05067966fbbfb9fb58da
SHA1 da51758359464606c2669df86802d4d64b4c2112
SHA512 7a1a1731eae77d816c52511862daad32e11973d88b10023cd485091dfe0bc617c517e541e3d2180c0a2ea36ea31c1c08145806ca29c823e889abfc761fe8092a
TLSH
T1CEE0DF8027ADA4E06EDEA944C02EAA23B0843E2A530DC435730F84F44BC58082E6DA32
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 3d638ef4fb2b86b52fd135444f3697115bfffe2c78fffaa9930ad89e06f5c6e1
MD5 5cda00c743eb0ad0e1b2962f0d005038
SHA1 3ecc9ff374580c1efdb094a3a309f18eb3c51078
SHA512 8417044311b77ff063c6bbd84028bc15889640e60e501c53d56f190516b9f756e0e6dc96710cf1a85a1373ccc238f0297d742112cd1621fc18e08515ffb1c151
SSDEEP 192:LLQEIII7brMIMtMYcYLD0KO1MpAsElrNBusyldlUlQFl1:LLQEIII7brMIM2B56KsOusy/Ok
TLSH
T10642845A26015B77D08F5B7A13B286546BD84C820472212D76573C1F8EF3FD782E6AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 819475140b4b3ab8e697f4ef9e0d4cbac97831c719dc92651e6a42ba85101681
MD5 5192f89276dbfbf0de1f96d6073a9046
SHA1 fcb7776c4930dac46209a46bc035d0938575caf2
SHA512 1e3fe33477af2e6d74e20fd005f5f6e3482250586cccb042495ff76645f550b5246e98b4f81bc7867fe6d4703b8db4963595ee667dcaf6f50b9a5dfcba7a8fd8
TLSH
T117E0D81454C8C26FFC64228761654708D2D43503EACCF90D9B05CCC47243505BA961F2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 335a5855b35bb9b8cc9fece2c73d472bbadb620acb955cb70452e2db0955f102
MD5 4c43570420946af53fda59bb851b1d72
SHA1 137a28b374b058b4147899792cfb48f4503f6691
SHA512 937efacf37983f8627dca93ea4c90172be9737d7d3aa8694cdc8a744291686c83b85baf0bdcf20ac483080bc5e0767c9dd2d5bb78238cd2883fd51dce21f74e1
TLSH
T1F1210495F330C109E14E827A607A9B291378E4468FB9DC0F447920346EB2F040E4B3E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 4e85ae7fb0764ee3d072aa5e3c09a77973ed3b008009e5a270a7fd7158bd1865
MD5 78c475420579c08f72b0aefebc5d79b7
SHA1 c09ef4b5f3f0e6bb356f96761abb4adfa9da6271
SHA512 834c4dd15b07d27165efa0fe3645eee0047a2984ef8f7546fdcb0255b5ebc386df665c898089c4b9bc3930e5b8810fe9d79afec7ea9fd29c83630dbc0b30affb
TLSH
T143E0D85064C8C26FDC60228341768348D2A53807EA8CFE099F02CCC46383546BA971F2
MD5 SHA1 SHA512 TLSH

Submit Download

6fce16d0-abb0-4982-bd00-cf2b20fdb156.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6fce16d0-abb0-4982-bd00-cf2b20fdb156.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 c45473e4657b1ccb042bb70754593a21513d45059121ba3f61322e7702ac5ff5
MD5 f8f4f6cab4ad2c20e279fbec15294574
SHA1 05b8bc25ff094519c9ea21dfcd9d1d6092284987
SHA512 2f283b7516650ed48614fa09d3ed9f1f14465f731449598d1f79e399de2fa7701fcfab38c5bc403526aefa78f9ca9d49f55d90046a6b6a108397eb8f46c8ca79
SSDEEP 3:MsEllllkEthXllkl2zEE7Kt/:/M/xT02zVOt/
TLSH
T15C4404447FC00707C505117441D1C3501371F4550511574F3C514C537CC55710C40000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 f07db370d3b38d46a7e75852f340ae101d9c358b8f84c34c8be1ae6d67cc0cfc
MD5 468f53fab3b4f2b41be1d0d42732abfb
SHA1 34c7a637171c181f0d5048d53fe253b6b45c8fa0
SHA512 8ccfa8febbd7cadcfa0b1b3737706a71b9cde32d86346e5f0ae58bee40ca5dc9d661c4b51015eaa50cea353b9702367d969ebd5117b656350de1859936c9bc2f
SSDEEP 3:MsEllllkEthXllkl2zE37+//:/M/xT02z1/
TLSH
T1FB4404447FC00505C505103045D1C3F00374F4D10511574774714C577CC55710C40040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d3e72f401ba3bfbc3a09075ceea23173b4f1a4622cc09db869bdc47aa5c556c7
MD5 c40af09a8431509947b19393cd9de679
SHA1 137937a53074968b416897f9dcbd3bbb0e11366b
SHA512 c2c34e0fadf3fa7d53a85154f23acbdb304fcdfe9b86fb073ea43321b8edb721c9f317f0224278720f32e6f3f05cb1366bc8bd1972ff0e760a346a4cc8a18835
SSDEEP 768:Mrv+4UNbdUC3d/ioHMLDTd+Z+RCveX6+qTko0u229a4vsTKxR:Mbsb33dltCvVTVKa4BxR
TLSH
T1EE03CF32F8699D738DEAD684B10735836FB81163CAC81B94D9EDBB4D014B5AC270BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 3130baeb98b6ea72305951cb1949b4780facef1ff1e2a113e0251284fdc6edc4
MD5 5de236dab1af03df3f21192bdd156505
SHA1 5dd3ef27439684ea7278cbcbf212e6e63203a8c0
SHA512 6bd525d3d2bdbd56ff5299e6acec3a71d73123e3f022f94ff64af584d8313a9a353158eaf405f7fdfd5b90bcc24363720ec59cf77eb26132179a1d1d7dd2ff9c
SSDEEP 768:trv+4UNbdUC32/iof0LDTd+Z+RC5eX6+qTko0u229a4vsTKxhy6Dq1K:tbsb332JlMvVTVKa4BxTcK
TLSH
T12813CF31E4B85D738DEBD284B10B35476EB811638BC81BA499EDAF5D018F5AC270BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 48KB
SHA256 32743662dae1b048ce82a081cd500d601bdbbf2514c43ae446fb20d10d3b5a83
MD5 efff4b37e75a700a3a5ce9a863114754
SHA1 e5ebd657797afefe8ddd00ef39e091659729cf69
SHA512 8fe299b51f7537d0c533235694aca24f5e5b32e56a87343997d679c5e8ea43bb3107a548bf3f6bd843dec54aadac660abf9c5a95aece0bf0376b552686f242a8
SSDEEP 768:0Forv+4UNbdx3owgD/ioebLDTd+Z+RCqieX6+qTko0u229a4vsT7HbGRhy6Dq1K:7bsb33MI0mRvVTVKa4U7GRTcK
TLSH
T129239D399CA4893F89BEBB44A10E35176EB81177C5B45AA4E7D96B0CD03709CB30AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2a7c70009a0b151e572cb5dd30544ec1e892df98f4f4e6a02a7b09ee2cded912
MD5 b9ae47b8ca605d29f9628b4bf4c5b14f
SHA1 dcdf61bf56fdd7ade9d942eedb0ca969a406ab82
SHA512 d9f6701f7714985e9c43c325c525f87f1ef847fef787b2aee92411a102cea854b7b5d1d3bd0f289e51658ac9459296fd5002bb828a9cc6d2a1d70b31f7a60b9e
SSDEEP 768:YFE23BwgNoeYLDTd+Z+RCqleX6+qTko0u229a4vsY3hy6Dq1a:V2335mEvVTVKa4fTca
TLSH
T1A103BF3198A48D3799BED784F65A36839EF51173CAD89B94E6ECEE1C100719C270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 a252446e42a7d71fde8023e94eacdc21477adcac3aaf682303497df62fb2bcda
MD5 affc1cf24b364acec1acae9d4465a9c7
SHA1 7294d962c74e7ca2ca9bc761c86a6657dcca8dd7
SHA512 fbc6812974deb85866919dd59d478e84bb00b566feaf3f8341990611bf14e58153c1bc1644bd73e2277ac63099aa18012bd488cecae5ac69d7ab962702b44985
SSDEEP 768:dFE23BwgNoeYLDTd+Z+RUeX6+qTko0u229a4vsY1NKRguGy6Dq1a:w2335yvVTVKa4tNK+uEca
TLSH
T1BF13AE35DCA08D3F88EEA744B24E35579DB90173C9E49AA8E7EDAB0C502319C770BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 36de2e3c7a76c50c1a7217fe6259c0b908ddc47040990dc8713a6e01ce80fdbd
MD5 a1bffee354ff6eb702b66196505afed8
SHA1 2beb5d1c89f3e3e40154a95fde2acdbb654b336b
SHA512 78cf429e76c59b6cdee37444419204ca3aca4ab130cbb587c4a505429eb8de89d5d4581ac86b8db0a153deb70fe3b02f25f98f7175b0995d433a5078a50fd692
SSDEEP 768:0F0rv+4UNbd5C3owgD/iof0LDTd+Z+RC9eX6+qTko0u229a4vsTKxhy6Dq1K:hbsb+3MJlIvVTVKa4BxTcK
TLSH
T1DD23BF32E8A88977DDFB9684F10B35476EB91163CAC45BA4E6DDAE5C014B0DC230BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 cd1afe2a1381e2f80a31becd670d65923f5a7be4203b62369aa6765248226853
MD5 c2052d0525df80ac3d53f7093487fa46
SHA1 713aa70cf3a1febfd2e570d751251380f1d86a2b
SHA512 731f9e691081d6158fd471f0b0c3356d695cfb16af0ccc6ff20992f30092d52642136cdc5096f20aca72d308a43a9a4bfaafbb8b5dfc34552a391f7a4a43ea4d
SSDEEP 768:prv+4UNbdG3uZTNDTd+Z+RCpeX6+qTko0u229a4vsSKxeVH1SdW:pbsbU3Cu0vVTVKa4gxEH1h
TLSH
T16F03CF32E8A89D738DE69684B14771472FB92163CAC81B90D8EDAF4D064B5AC170BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ee83037d187bda738883986bca61043da329b82f4512c6492735c3a34b97ea92
MD5 3dee3adb7193f2f8de7ea0accd043c23
SHA1 819cecce302c44d20bc52cddb8dec4c6a2062e52
SHA512 d4c47938223daf32dab9f39a4f6d749830b691889daee81ef6724f80ddf8a1bb3a287b8e85c3bed21ca076af3a5d039a59bdae46ad8cc5c67b2e266ffb8c89da
SSDEEP 768:prv+4UNbdG30zTDTd+Z+RZeX6+qTko0u229a4vsDAeVH1SdW:pbsbU3dhvVTVKa41EH1h
TLSH
T1AD03CF32F8A99A778CE6D784714775472EB91163C7C80B90D8ED6F4D024B5AC270BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 f2382a33a250c951d50c57a87d8215cdd5d5a0e83b24b7ae4d88f83fdb1dd912
MD5 556a39e5fb000804262ed7b749558ae5
SHA1 9fe1bd5fc80203fd6405b20423fc0463798f47fe
SHA512 b3ca910898e06a7ebaa8a16b66dd4084d4398dc5a76796380a40c53c64f540d0237e40d003d53e02c0065dc61a898303a5888aa21bd8229da07a9c0190ee8bad
SSDEEP 3:MsEllllkEthXllkl2zE5Yp5t/:/M/xT02zpp5t/
TLSH
T15A4404347FC00545C7001030D1D1C3700370F4D10511574734514D777CCD5701C50010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

08d3572d-572d-4ac7-8b89-23fc4549d9cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08d3572d-572d-4ac7-8b89-23fc4549d9cb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

612dd236-fbd7-402e-b188-471364fc2d80.tmp

Path C:\Users\Admin\AppData\Local\Temp\612dd236-fbd7-402e-b188-471364fc2d80.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 0eb9ef26e955523d99b1be83674dfdeb4d3021caf8b6f2418d28351f666cd51b
MD5 be8f47fbdcc65ca9fbbe0379e9e964f0
SHA1 d60a2be17ee535432156ab61e20b12c54ba3aa61
SHA512 b5009557c725b9579c779dc927a64d9df0f8dc085714466468b55711738735c7a4b6187584c972b0e8f04b6d9b91fac16d09a0b0fc82353642804560461a771a
TLSH
T12E1136A43932737F07C24BE890364C85A950E595032F669CEE4BA434FE6CED1A31E3C6
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1424_279676754\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download