11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197

Analysis

user interaction
yes
max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.60/Microsoft.Web.WebView2.Core.dll
Size 557KB
Sample260812-2a8xdstyfz
SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
MD5 b037ca44fd19b8eedb6d5b9de3e48469
SHA1 1f328389c62cf673b3de97e1869c139d2543494e
SHA512 fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
SSDEEP 12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
TLSH
T15BC4402123FD8A1AE6F63BB5A57407709BFAFC967979D39D0598251C0D72B408AE0333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1881430386\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\fa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1881430386\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1781695214\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_539019428\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5688_1664252746\_locales\km\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4964	msedge.exe
4000	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310471656988807"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{4E14A4A9-E848-433D-B2C7-D21DF279BFDB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{66177169-FF76-4918-B638-12574A51485E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
1736	msedge.exe
1736	msedge.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5688 wrote to memory of 5180	5688	msedge.exe	91
PID 5688 wrote to memory of 4964	5688	msedge.exe	92
PID 5688 wrote to memory of 920	5688	msedge.exe	93
PID 5688 wrote to memory of 920	5688	msedge.exe	93
PID 5688 wrote to memory of 920	5688	msedge.exe	93
PID 5688 wrote to memory of 5140	5688	msedge.exe	94
PID 5688 wrote to memory of 5140	5688	msedge.exe	94
PID 5688 wrote to memory of 3440	5688	msedge.exe	96
PID 5688 wrote to memory of 5108	5688	msedge.exe	97
PID 5688 wrote to memory of 3440	5688	msedge.exe	96
PID 5688 wrote to memory of 3440	5688	msedge.exe	96
PID 5688 wrote to memory of 5108	5688	msedge.exe	97
PID 5688 wrote to memory of 5108	5688	msedge.exe	97
PID 5688 wrote to memory of 4796	5688	msedge.exe	98
PID 5688 wrote to memory of 4796	5688	msedge.exe	98
PID 5688 wrote to memory of 4796	5688	msedge.exe	98
PID 5688 wrote to memory of 1748	5688	msedge.exe	99
PID 5688 wrote to memory of 1748	5688	msedge.exe	99
PID 5688 wrote to memory of 1748	5688	msedge.exe	99
PID 5688 wrote to memory of 5188	5688	msedge.exe	100
PID 5688 wrote to memory of 5188	5688	msedge.exe	100
PID 5688 wrote to memory of 4752	5688	msedge.exe	103
PID 5688 wrote to memory of 4752	5688	msedge.exe	103
PID 5688 wrote to memory of 928	5688	msedge.exe	102
PID 5688 wrote to memory of 928	5688	msedge.exe	102
PID 5688 wrote to memory of 3152	5688	msedge.exe	105
PID 5688 wrote to memory of 4328	5688	msedge.exe	120
PID 5688 wrote to memory of 4328	5688	msedge.exe	120
PID 5688 wrote to memory of 4244	5688	msedge.exe	107
PID 5688 wrote to memory of 4244	5688	msedge.exe	107
PID 5688 wrote to memory of 3076	5688	msedge.exe	111
PID 5688 wrote to memory of 3076	5688	msedge.exe	111
PID 5688 wrote to memory of 4920	5688	msedge.exe	112
PID 5688 wrote to memory of 4920	5688	msedge.exe	112
PID 5688 wrote to memory of 4920	5688	msedge.exe	112
PID 5688 wrote to memory of 1736	5688	msedge.exe	113
PID 1736 wrote to memory of 2452	1736	msedge.exe	114
PID 1736 wrote to memory of 3140	1736	msedge.exe	115
PID 1736 wrote to memory of 4000	1736	msedge.exe	116
PID 1736 wrote to memory of 3140	1736	msedge.exe	115
PID 1736 wrote to memory of 3140	1736	msedge.exe	115
PID 1736 wrote to memory of 1056	1736	msedge.exe	117
PID 1736 wrote to memory of 1056	1736	msedge.exe	117
PID 1736 wrote to memory of 4328	1736	msedge.exe	120
PID 1736 wrote to memory of 2908	1736	msedge.exe	121
PID 1736 wrote to memory of 2908	1736	msedge.exe	121
PID 1736 wrote to memory of 2488	1736	msedge.exe	122
PID 1736 wrote to memory of 2488	1736	msedge.exe	122
PID 1736 wrote to memory of 4508	1736	msedge.exe	123
PID 1736 wrote to memory of 4508	1736	msedge.exe	123
PID 1736 wrote to memory of 5032	1736	msedge.exe	124
PID 1736 wrote to memory of 5032	1736	msedge.exe	124
PID 1736 wrote to memory of 4576	1736	msedge.exe	125
PID 1736 wrote to memory of 4576	1736	msedge.exe	125
PID 1736 wrote to memory of 2232	1736	msedge.exe	127
PID 1736 wrote to memory of 1764	1736	msedge.exe	128
PID 1736 wrote to memory of 2228	1736	msedge.exe	129
PID 1736 wrote to memory of 2232	1736	msedge.exe	127
PID 1736 wrote to memory of 2232	1736	msedge.exe	127
PID 1736 wrote to memory of 1764	1736	msedge.exe	128
PID 1736 wrote to memory of 2228	1736	msedge.exe	129
PID 1736 wrote to memory of 2456	1736	msedge.exe	130
PID 1736 wrote to memory of 2456	1736	msedge.exe	130
PID 1736 wrote to memory of 2456	1736	msedge.exe	130

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60\Microsoft.Web.WebView2.Core.dll,#1
1⤵
PID:5148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x314,0x7ffd06dfc188,0x7ffd06dfc194,0x7ffd06dfc1a0
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,7172216525560769519,7631606100325920764,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1956,i,13100614817418976986,17741294593352110865,262144 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2672,i,17323476924152820835,1146148347773899326,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:13
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,17352098739283083942,7098113590041164210,2097152 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,8326855844784071258,15999689578224757673,2097152 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,2213731920432007812,14051158128888027589,2097152 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4376,i,12831371956704108207,4105130241563714114,2097152 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3924,i,1326247962327345397,17813118689714589348,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=3932 /prefetch:14
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,3296909996260669526,2348410765648438032,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4000,i,14915599740606148039,3343126849292651498,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,3577029686421189531,16994935772475290085,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,3577029686421189531,16994935772475290085,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,158774641094279740,6700715993374438656,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,18219505503847344547,2547541897583552225,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,8295080257631539095,7567580146654020970,524288 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7040,i,12993664944626641570,73348338478624390,2097152 --field-trial-handle=2360,i,2796986622206666214,12371614252070069779,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x194,0x2f8,0x7ffd06dfc188,0x7ffd06dfc194,0x7ffd06dfc1a0
    3⤵
    PID:2452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,3773412295776340534,10657462912244339115,262144 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
    3⤵
    PID:3140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,12254577010508482748,6264398497370280936,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,10761343185097886393,8637066059367666618,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:13
    3⤵
    PID:1056
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10991010774094606667,8484786301233548061,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
    3⤵
    PID:3628
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10991010774094606667,8484786301233548061,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
    3⤵
    PID:4328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,13083249518014185461,9033341065686205247,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:14
    3⤵
    PID:2908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,17365585754226823419,4931454328821302296,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:14
    3⤵
    PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,1835807929305486055,7259901204795133180,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
    3⤵
    PID:4508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,13110665299938621085,4734638502761050272,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
    3⤵
    PID:5032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,16043513626370064859,15992812541009301791,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
    3⤵
    PID:4576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5180,i,218626497062377088,18389179636661342962,2097152 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
    3⤵
    PID:2232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,8512268786472769207,8763513313690542869,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
    3⤵
    PID:1764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,13823870472615283283,7096170365256040204,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
    3⤵
    PID:2228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5636,i,7323205570149382768,17025686443117016898,2097152 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
    3⤵
    PID:2456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,9082887528024320899,6770011649922544336,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,4419222406264379989,18293760625770731804,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
    3⤵
    PID:5148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,15674536580096206526,18014417580050311,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=608 /prefetch:14
    3⤵
    PID:4876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,7250004223580380004,3795729637009220466,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:14
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=832,i,10613441036645038024,8425898661652448033,524288 --field-trial-handle=2228,i,17357062325222829999,5122508638265074250,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:14
    3⤵
    PID:5904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:792

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a8557436792d10423e36183e9c26745a47246781bd6b0f1545a1b710eb834b61
MD5 11ff8da3b3d46ec7c5363da75461ac70
SHA1 84baea46df7c0bb207999ec416f62a82a4f8571b
SHA512 c7322e3c16d8fe36dff645695adde0462fa169f6abf075440d7f474efed676abe93e10afe7e0e7e18728a337596e6769534da2acfc9b1079c8821dbf4a35e6e3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1ECB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 55a7d885fadddbff4768ba6c4d1831cf3c97e5cee2c6278de82c828bbd98df7a
MD5 b27d7e363563245c4556040952fdbf95
SHA1 dfc224d76f71496470da48460fe6bc98bd6b630b
SHA512 53bb58d5ad6a6e99815ef4adad0abf35d7e22ee9cb08396210cbf4d6d7c933cfd85b85d6129c7d2584767453a8628b8d168f33fd574d277fc5d3c3ab08469a5d
TLSH
T1AAD023F079B2E3B0C60C00388110021011224A723AAB23176240480CEF3C0C2C1CF8FA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d3a944f1371142716efd52d2db0fab426b2c9f88fa95fd832077a0869856a1e1
MD5 bfb2a77c725ccef247fe60e36f212ba1
SHA1 26ba05919fe172310c7367cd78bc5647d746e4b3
SHA512 7dde042e51e50dbaaca445052c8494e2e9f194d71df44046a65a8df5f00b795c1c80264adcbe40774b97b17cc17eba98aa2fc0c3d8783e0846eb9edadddea7be
TLSH
T177D0A7F575979211CA4A0031A4401350337349303DAF6E2792D6540D6F7D09196DE07A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 53e25dd2beaf3924544812a6e0f3e14063fc695ee0a5df6d7d54ffb4a250d9f4
MD5 49da13c54d65eac773282e9d39f8e25b
SHA1 7022a435e8c10e68b5a195ede84f1fc9f494692a
SHA512 06939874a6a5facda77b7e3acafe865610e7124738fa4b773d06d7f2134edd239adf36bc511f027cbc417da0c5bcbc5b3af147fbb422969b1284806131fb09f3
TLSH
T174E022EDCA62BC2B0CFD175D90544A4AEB50036B2A50994F3E3CD01C9FB466A9186C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 593eacba1afa3965c132b53725dfb998878c47d8d548134c622ff754b44e55ce
MD5 d2e823b8bdbf7f487219149598a4d3d6
SHA1 11c19ed3e652c11ac36308d6cbf0377e46f0b1e9
SHA512 56f799430d2532cacd1520c48c11840acdc6f174e17d895f340729c5db18af55f6966ca095c8a10092c35683235e7d49583259db767dd249e6ba6aab58d96a31
SSDEEP 192:GLQ+HK3oIW1frjR4nD1Tu76UDPF0jB8CUtXZi692RWKXZwwMtJtKGeiQUtAU:R2K3GrjR4jz+CuXZijRVXZL+JtqaKU
TLSH
T1EE13083E72D26E5BC2D3057E539B4B3663B0E8A4DAC1A59B6B76F8050B18377790E034
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 20a1c1982addbe2d1bc23849c1490e03589181923f010f4c66414f5f9a28be29
MD5 1fb293df5a134101089e74dbe1dfa039
SHA1 5b3d75ed879e5cc91f440283e87e9133b7b91e51
SHA512 2fdf08a34690fa60fac5b541c6534819c0e327f35814a66b2f6dead7e9e23ede8fde8c49d5c63007827c01b3450d4babd19186014875b4461f6d716de9f4cabd
SSDEEP 3072:TL/Y4L/IadL/mL/yfu4L/OzL/xL/koZv:TL/9L/JL/mL/y1L/OzL/xL/tl
TLSH
T117446FF71951A00BCBA852F9D2033E3EC177415E2DD1F9A9E67C4C852825F32B6BCA58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 55f24a0e9ec7d97a47673d27b6617ee7a846ada578fabf66171f508dda59f664
MD5 b60e57749bc9c218b1445a92a037ee6f
SHA1 d65c8e518b4536cef81e17fe5dfc7b27c959e81d
SHA512 79cfd89a94095a79e1d99e941e9db7042a74ea1111434efcff69e6d961094b22ade8106d9a59744d141ab582ca7f5c46beb73199e1f26614eb42fc069abe9a89
SSDEEP 3072:Fv9G+HN4Az1fOLhZiHVVrUFL68oUCRH2xJmorZ:FQ8uAz1fEZIUFsjRWxJ1Z
TLSH
T196254AEEC7682C82CE6B8774B0E0D9077E702182BA5DD0D39944C5D897D6B8176EC2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7c5fbe1d939a8c62179814ffd0235b6726dab802084c7354be43f4a84dfe1362
MD5 b493b94de8c0582160d302dc412e4c55
SHA1 fbb711724db32b21e28263bb19b51a3c3a98b783
SHA512 8881ade0dfaab0c0abff50aff033af5d096f8be79e47f40ea7a34382230c8e9916845217769670e255532d21c83b49552350589644cbf10134ab31cca8aa71c2
SSDEEP 49152:fjfyFb1jWD3XxsrXK8kO/dk2JabmGKmG:fuFbhWrSK6k2Ja6GK
TLSH
T18F167CEDCA7858C3CD639930B4F0E9877C7413C3F995D1D6889CC584026BBC5BBAA629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 9e4580c817c24ccc65d5ab202491670bcd1963621b5877e60d0534789c89460d
MD5 a99ea62ba18d7c6d4f35c148dcc977f4
SHA1 214d43b37b5b7ae593b836f7ceef39bbe117df43
SHA512 009fc16a3d077cac2a2219d8d3353d4eb45f8a4163dfef15a9ee42fb87ab0240a2e386fcb395379c17aeb20afb520a315976b7b004990e9b45b058eb0e907be9
SSDEEP 48:lSwwLHsTkRr7DumPbfUQAv2+JQjk5kecRvbJCIM9VeISX2FBGi:8zLMTcr7DuMgv2cQjSkDbJfM9VeDVi
TLSH
T10291CA349BD326BFEFEE3A7017A14D4EA67DA4876373171316C80D29A4039F371420A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c54adcfc4b78561ddcbae6e799381c87aca7fc856e70f7f8b253194a00a0df02
MD5 088faafbe6a288b8150cbbdc0772e75c
SHA1 7d47e72c0e6406ed7a652d3e13a177518de65039
SHA512 653fe61bcd536aa18d83bc7c46b4a16409b1eb13501842680a12c0fc2d93c973f135678d3004c48810599e8b9c4ecaf67fe3af45af0ace89f32234c9d4812b3b
TLSH
T12061B778ABE035BFDF6E65305BE58E4CABBC414723131B5316001D2EA403AB3B1524B9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 5eece08e4d1ea88acedc1ca320579daf9d5b0c518e0bdca38e0cf0044e1074cf
MD5 c04699fd532c2015d1273532f281a740
SHA1 e767898b26744677a53703b0aa611a1ad3c7ca3b
SHA512 560492e481112cdc840a5e67ecbcd1fe30047db7191466454e0f7d0c6517c8a9eb4c82708cc0b7077937b1cc44b4eb297ffe6e8fa07780c9ce378fbe9da14dc8
TLSH
T17EE0D8D554E6CA5D7D51BA8B91789B0891803443E7C9BD4717448CC4B646C46F243956
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 2afae527f3e0cdde6b38388961b69784ef694661ff589c43d1ab3351a2c5042e
MD5 c392127ff7aa50212f2cf7a771f69fc3
SHA1 f034b0d8a036b31d3b1a76d4011d74dd1d866077
SHA512 26b57b722fe84bb2f799f5956c58cd6a8e321ad0bcc753b561e977b303510cb1b2e8dd577cc4d5f33db6c2d9a982bf939ffc8853b83c31e077f01e59c37cafa4
TLSH
T187E0269805EAC369AC66A9D78279930C96D0340BF2CC3A42678ACC906101A41A287EA5
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\service_worker_bin_prod.js
Size 131KB
SHA256 5b83ed539c1e9c2769e4e3cd4aa397a66bdd6cfa763e230414c0a885a350903a
MD5 8b795eb263421a7d53c5d4a95646bc45
SHA1 4e48ea3d490b84aa4260a74217ed414bef6b6ad8
SHA512 fb78511b7a274d3c280da40341f19fcd3c2455f6132c41f3e46696e458126a3cec6b27d41b28b2398c622c435a3bb93a2f731fe3e8ed453d365c042b71b8b0dc
SSDEEP 3072:JXNTunelO5KQOpZgLJqVPgbcBJptE/ml/3y7:JAPJOrgmptE/mlP0
TLSH
T17AD3DACCB7A5B4224363A5F5002F010BB23AB8AAE44C85A8F188D9E97D7546D4737F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 14KB
SHA256 cb6206768dcb518bc3a4a752c0059b546338a8f0edf61ca982d3bb949f144573
MD5 cb43e84d547345c8573460bf852674a8
SHA1 8629f30688bfa8aa79602a90c85edb384a5f3084
SHA512 d70e685f0b386e1b366462b500006011d80764d71debe9b9810bd2a3903019a804a3b9e82f84d403e541e2b05a094414cc84cea5d51a5f95563282665513660d
SSDEEP 192:a2zkQELlbJwRmHtUU4tXPJnrHotnsnIh7OZ+:HqLRJwRcG/1mnwIh7OZ+
TLSH
T1316276B7190CD547CAC529D6C6B2ED4DD3438D3BCE96EC9AD568C5AF02BC03036A6543
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 9e77cca577919315728d344d8be4a8f4659d3493db6c7fbc9fcfa15ba34959ae
MD5 bed607e9e1ebfd6b8a2a9d98765258cc
SHA1 4ec562d73cf5a7de229d62930b8d197611a9ff3c
SHA512 1bf7a0a72a62c4f474c1a26ef41c346e2d591825d7118108e98084784454e4559ac7fd727e038271740ea1e5835742c023d7eef6f699f041cc7fdbc383d0fe10
TLSH
T1CBE0D86144FEC3696A49A14F5229E70CC7A83407F6CD7E412B499844B80A504A397DD1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 6420d05ed54180c01fec48abbe3151a5b0cd2a233fa82474940b57b6f5862d04
MD5 97484e775704ae16ee207620330d8a3e
SHA1 e385ae04b5e747a397a7dcc89fa469b7dd6a6409
SHA512 e40273e53bc9721aff71a6bc4bcd16a0a4d541d875309f7bc11c2baaff3e2fba1fa5414bca1107aa600ccb38db62f76677dc2dc95251a5813af2fa1dfeeca253
SSDEEP 96:tDeMatha9G2eMgiN5DwWyrIPD80SfuT3xSSrU2Ob7EqH84ZG7C/Vz:tDLaTa82VbDwCGSz8UqfgC9z
TLSH
T1E4D2196F19501200C4FB92B58CE5DCE9283491EA6783E5EF34BE98707D34787B9638E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2989a15b317a76361ff2e24c38c44a15ad0e20f2b9620bc4e057bea839dbc15e
MD5 a11da5a9b8c9a6a6ddb1c422201ba97f
SHA1 99db539dc1e2cb157fd14ccb3b64835765e4f871
SHA512 010fadf19ece53843d10e59f9ac0fabd74239b134148aeec20a07c3f5dcbdba4cd841d38b7c33ae4f91df9d4cc73a7e2335a34b0ca26821ab5bb02518d5d4e41
SSDEEP 96:DKuObZqkhaVai+VAdzBGO5f0ycZw+Hztt2x:DsF1MVai+VAd175f0ycZHHztt2x
TLSH
T10F91AAF383F5866DC91196F0AA146F1BCF1C0456436C3D5A89E4AE1BA3F24B1E151A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 28e0a95fadc477b83ba517fc85efeb580cb94504ce5f263cb72de4b17f5a183b
MD5 f7a21646ed95254a61eb92d9aff03c7d
SHA1 57fd7b48a193c68bf47fe1af369ffa9c036f2812
SHA512 f3a6f23dbc9eddb4ce6b5194fe90b4294e1f41f8a014286d65b73ba90180cc04a9ca43b72e424e58c26f6dfc5310c5107a154179517da92310896cd38d9633cf
SSDEEP 96:DK3ObAqRhVokVaCdzBqzekuiP0BwB5GOqycZ1dy:DzcYXRVaCd1qzekuiIk57qycZ1dy
TLSH
T1DFA1B8F3C3E9862DC91195F0AA146F1BCF1C0556436C3D5A89E4AF1BA3F24B1E151A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 96f461c4d9529475b3a13b21f0610517b51f8c7804c45097a3e9546683d735f7
MD5 f47c9c9ae0776c7bea4f9c637224a31c
SHA1 3f3d2ca087d65ddd6ac88914b36c5b23e77f95ad
SHA512 aea6142695a35b8b86ef755bb17eab66309e84cccd4960150fafc0d3406d55698f9e17f7931966f1257234a8a7483ef1131367b8869f24771a8c1e2a2efa5336
SSDEEP 96:i/IEumQv8m1ccnvS5tFZNW7qPbfKgnFK/BcWb4g:i/IEumQv8m1ccnvSjJPWrjV
TLSH
T153F29FFB07375206D99444B0E4445F8FAF06404B47B6B2EC76C447E3F7A20E276A9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 8d2b98e267ec87827bf0cd5df04811f8f11a8f46699df65487a1b06e3064d5ad
MD5 5b335484dfd20052bcce00b0ea3d9cd3
SHA1 9690b185e9ee8e575be007077fb69cf55b3cb54f
SHA512 64561b309f5571b888e1e868a41e6d133d767a4855ae067fa33cc473893c87ac79194abb85697a4717db34c443bfacb8970edc3d607af3b56a487226429e2fae
TLSH
T1F2F02B63847DA8BB1028187E1E54BC452575F435A28158F2DA6E412CB0818F36A15025
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 22ec238b4d774770d7709a4576bca7848de641f2db14329e3bbefcda50f75cdf
MD5 1a8ac376bda6441948d043e8a2c6039b
SHA1 458a21893d433063b91a183c2b450f12b61ff855
SHA512 c86aed12c592611f3d3302b98af7f48de6b4033d51d2be7ad27e594b2758fc9e3a95c47159abdc3513ef5625dda501a92fb86078c9ee18291c91c92264751196
SSDEEP 384:sxR/Cy/fAsIhWvQAoQsIWEUL/5J/FDT9pB:szCy/fgYQAX8/5tFDBpB
TLSH
T19072E7066924987B8CC7E51DFE267F52D7FD102399925E4CAAFCC91C04EA6ED2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 431433a6e83760e8ff7cf0ecbb4ff6856dbbcb60ac64c013190881a49785eda0
MD5 82f796ee0bbf0e79d2b16781dbf7a590
SHA1 8b3c5c4a26a78b79463566001bf3dac306398b3d
SHA512 5f77082af3188c11dea41b33decae540da84afc4f5bea25d7563accaec800425b5b03d26183d54f83dda55de3edcef6d7b18bbc54ff34701143bc4f8071b9286
SSDEEP 384:sxR/Cy/fAsIkWvRUpVBEPeh/5J/oDUypB:szCy/f5YRUpV/5toDppB
TLSH
T16C72E7466914987B8CC7E61DFA367F52D7F9142399912E4CAAFCC90C04EF6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aa9910e3ebddd9b2aaa2098c77a46dd59513e38ebe6cc22dc468a31ed61d9213
MD5 4bc05f70f9ec848a84ab300597c181bd
SHA1 c91f89eb7a20c4e5a811520e60991ac13cd24882
SHA512 a7edfe1547ffd7c9d8f440e941d3ce82997497668634f3f35658f2dcffbf1c2b0865b27616fed9022eb4e09cd820f0a94b68b819a5bd876f72ec95f459b13df9
SSDEEP 192:sxRERLGOy/fAssUwGVXYhqEPjoA8pJf/g6+WNP+1/YoZ84Y4yGZIgVsJ:sxREYOy/fAssUpVBEPeh/5I/JDne
TLSH
T19D52E8066928593B5CC7E61DBA15BF93E3F91023A5D52E48E6FC8A0C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 3868a93a13f6aeac663e49c1d8a3835759bef8b7d46e25e3192c0f33c308cb03
MD5 36cec008f24af0806ebd01d5fa98bfc3
SHA1 dc05aa30514b1b18825d0c0ce15371ed355133bc
SHA512 da0fb59afcfc07086d0d8aee9192cbcaf3465e1206f9145fc9333b8bad0a54614c42e46842287476266f2b42f796b34718431d093dad9bf41694d17a53e98e6c
SSDEEP 384:sxR/Cy/fAsIhWvQUoQsIWEUL/5J/oDTfpB:szCy/fgYQUX8/5toDDpB
TLSH
T17472E6066924987B8CC7D61DFE267F52D7FD102398925E4CAAFCC91C04EA6ED2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f8e4191fb8e3fd0504d40aca9cd85e105d01d3b0b237cf27f530a2cddf9d8650
MD5 ee921926e847c35ded660f35f7d0315a
SHA1 339b0da2edf1e7676567af6651829e3d43807227
SHA512 84241a08d89845b0c85833f188a131f0d2912e8eb7896bf4049a47ffebae2024e8ce37cb330334d2475fd9fab1bdb8034a4ded89b6fd3fa20a09337a6829b512
SSDEEP 768:j26HWo7pLuL7MRWgs2f028F1+UoAYDCx9Tuqh0VfUC9xbog/OVCVuw/ro9ue0UrX:j26HWUE7MRWgs2f02u1jah4ws5X
TLSH
T1BCC2DB7B740CCABF4F800ADDDD197E9B6D6802CB9698CD8047FE951C02C6BEE511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d6788cfa-d16a-496c-baaa-108dbdc035a1\index-dir\the-real-index
Size 3KB
SHA256 9e5ab89a238ea58852da469f830114707484b042f346766e48fcc1e541a64efc
MD5 42196a38204eeac4791f22153bf47a7e
SHA1 55de636a654aab4c9a24f21b60a84a9f2a7e0d65
SHA512 90b79abffbdeac52d86e70e9c0d227f6ed0ff1bba528319bdcbd8fc51fcca85078bee8316a888eeafcf4ca69f7d12686b9dfa64549d525255f41091b2aa5a248
TLSH
T15C51D88E4C4A6D59CD7D04B318FB0D82737578FD97859A07669CA230B8C332B3D5A216
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d6788cfa-d16a-496c-baaa-108dbdc035a1\index-dir\the-real-index
Size 2KB
SHA256 62e61b7cd1d45422ddee48388b91a75c5c302f999a255aade91ec22142d7df89
MD5 751ab659ba74a8a6b82867a39082b73c
SHA1 b34042c250e5d8e98fed396c2af8ce7625a69ecf
SHA512 7f92487a2b376aa6eec82180cf28f5e210fc538ab01c62a3cb2d2a70afd7660edb4612874833d16e39059e3ec4eecb1d17b322c01943ef59ca4fa7284b1840f7
TLSH
T19851C79A4C495C9ECC29047258FA19817775B8FD97C58A072AACB234E9C332B2D5A21A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac94c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d6788cfa-d16a-496c-baaa-108dbdc035a1\index-dir\the-real-index~RFe5ac94c.TMP
Size 48B
SHA256 ca5b202d36d2c7fc5a9677c83ccb2a705b3aa6dc09bc872e77480031328eb6bf
MD5 9cf5d0e1566c05d8a3fbf43522e0eebe
SHA1 eea6a20fcf6666a04a65401d11c405bcfa6e8cd0
SHA512 21879fdb63c027f09379693283f9e9764781a18f9676c39a250890d640149447dd6614bd2937e74b1914111fbc2593595de0214e7f205b910b4556037d70ff4f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index
Size 72B
SHA256 40819c321d76b395cc5bc16a52125eac7c087495f20419c4a45b91110306d1f6
MD5 f45e2dd55fc5bd0b09efebb9397e6c15
SHA1 35a9278e1597bf6b2330a34b2a66ae24000f7cf9
SHA512 82df774a828a700a1a43ee216a3c319716daec328733278c12e8761f2c962dd17d305e0ee512438af31762405a1fe1d47130c542fc9b14b1ba031d74f45d1123
TLSH
T168A0021803C5400BC00612F426F61162A2454914A100970940A43744D8B1C69564351C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index
Size 72B
SHA256 1ca94173c3a2042148ce1dbd96c6ee35db0ceebcc0edda1929c37447c5dacbbf
MD5 9f496afc0b83de28cfa06fb4a2e757ce
SHA1 087d6c0dc8531d180533bd441ea3e06fd8d104b4
SHA512 0a81230997749549bb7793d33b3316fde55b2448c268e42c869b109ff8eda14c153104e82acce5dde1b9c3a4f5f2f8aa6eb0fcceae265f8f7330aca7c28a237a
TLSH
T10DA0022512C00203C00211B236DA416352914955B340170D81900659C992577674300C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a98c7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index~RFe5a98c7.TMP
Size 72B
SHA256 f4d7a753e114b43f52c9f937e67ce82d6cde234567257eb9ab4c132310adfca0
MD5 d23c0b2dc375e1263122f40653db12b6
SHA1 72ec726ae80cb8660f777616fdce76218511463c
SHA512 a0c302ceb0ce6f7e88ea11d88d9a4cc64193b4c56aa1027153ab1e59cfbadeb615f4db325a571e30cba691299263a28ed4902a83bf9525341114f01b9192c421
TLSH
T1F9A0021413C08216C05211B13667C2417291C9501180130E60D14454CC928D26B4200C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 075485aa577ba4f4d8f43b60e0006a0cb9952a1523db719847a3f43a9a78e648
MD5 cdb70e899c7e6ee3d547269ee6243711
SHA1 81397867c8482c3fd7154450f54654bee2464d46
SHA512 cf7587ee07048e8874ad480d8c4bcd33de7aee88302cda612d0e11b5acdaffbd4139660f78032c17dba1d11686af9f1812c428e9d63c8785b83186b3a5c2187f
TLSH
T18FE0D8B32AEB6824FCAB97EA2871A4940281B9649949EC4F251E93C750F1252789AC25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c8ff43e998dea9d6d8c6d1c794a3fe102638df3f9bfad47b03092d29db173f34
MD5 862ba460b19919397c081eb4cb788bbd
SHA1 a2598f13da578434d155781b1d66ede754763781
SHA512 fa5bf62e90ce6a96fc8c8721f629fd7abf83ff40757579512e0ed62ae5e3f8ce0a29d3ffd51428de32734358299a8e00a0055318be8cfc7f42756d5adab9ec66
TLSH
T163E061B32AE72410FCAB83E518716454014074648405DC4F250E53C350F02117896C20
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 375B
SHA256 8f47a260d8122583685f9714b5a22209f2219988ed12127f0fb828bb7a437fa6
MD5 35615b848a33a0bd4b25b0eed7827e58
SHA1 e2cc6e59bbbbf364f97733687e8611f62b2bb432
SHA512 b9e10f37dada75a5ece7b8f7d4651d1427bf4f1dec7163adba7bb82ce932fdc44f4991b2813dfed5c33e5d81115e968ad6643b3d1db2eac50ae14c59f72e30e5
TLSH
T1FAE0D8B22EE76824FD6B93EA287164980251BD64D909EC8F251FB3C750F121278ABC25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 302B
SHA256 3b462bb4034fe495db93c9b53e8b3571487317da24933a8eb1680b44e4728dee
MD5 9a1b01ea77c746261972ae3524bbbc71
SHA1 3399f0bc9b0c4bce2382074427cc0f873f85463c
SHA512 0298a396075bdeb4d1425b6b067252b8309b0b35fcf744701647c0f9926065dfe633db850b297d875d1c941fbc6757f9b3088a22b5d45cbcb8fb736b379cf581
TLSH
T14DE02E8B0B081323E88203F3289B32486BF1C1088BDFAFC3810FA03A8BE820C34141C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 4f638cf7954cbc2b3e109abd9ec30343f02612c74fea7c183c4a26d42cdf9fd4
MD5 e68c6109ba0e63a369eb14f76d3abd56
SHA1 4a659801aed1ad1de38f11a56547278bddf53d5f
SHA512 30854cc948290020098cd17d6e79d631373982fa9bc17d39dc0add81531667c9e203976c9f516dd43d2a2d2fe03ea56625dccfc9fc4eb267990ae563a5456049
TLSH
T1E9E0D86009D9C77D746771570126C30CD2947407F2CC39412F858940628694C7153990
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 b8471122855cb2b4c33e769e4fd1c3c440017a01c7bab73b9da6d153fa928f31
MD5 5d9d1971099a4f1a3893b5c01f3b7e9f
SHA1 06ed41858d89dfb4e2014970b34ccba327aba1f7
SHA512 dcdafa0edd02aa0b1eacec4549b7fa2086d33507df4c7b1b9a5ae7394f57a3c6e511e160f58b3788cfd9061b84dcca8c8befd30da766e2f7a2e7ddd0e06798f3
TLSH
T137A00250C98AD105C8C00E7022BD524833594CFF522612194DD8949CCC91266A1C1E4A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 b7fbd59fd01adfbd7920c764a574f708db0fb4af892c09c56ab3d9c4d4f0d492
MD5 80785bf3c6e32607332aee1b836aa81e
SHA1 571502fca84274d632ead3c7e6f1e8d32ee60120
SHA512 282d590b1ddfda05699abf6042f3cfdce23a42d07cda5c3839199757a8db9075308a009a255ca31920b3a7033f1d0ae06a17f195b5db6b05705ad7ee3df8340b
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5ac8fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ac8fe.TMP
Size 48B
SHA256 83a0eefb5def567d67bce450e7cde0732b4a1cc7bec9d1cc4c587f1088a15916
MD5 bb220318fade3d08104ff7980613251f
SHA1 a09ea28916a044fbcda9bae9c05fc162d153d658
SHA512 4a98fb7e9c62c83d9fa62b08f9cbd5844cd9414f8841c4971155aa536b8279803925936d5818bd2c2f13a6a81388f52e517b249fab9325de93cd1b12fbd79795
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 dba80a3d6830c7200d049b7ea7fc2e1e37bfdb69f810c0a458f3dcd5bbb50408
MD5 0ee0f7a71db86ed1f6b7191d0a7a65cc
SHA1 daed16ac0e2a9e90f34b92cc21c3d9e986dbd6a1
SHA512 b491cb6d4bb2aeb5d246a9420fab244e81ea6e1d0229366e0957d52f5a851863816f39adeb9a6f9e2a5323006231331d064ba45b11bc66b3291b9099fb1e5c17
TLSH
T1DEB0125677408257CC87053405744FD6E334FC25010984038D0CFF230E09A783E068F8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 584ba35de2d9b9e69fe0cd4e9c2cb5df1158b646a79e0c7d59cc8d95fa690c24
MD5 b545c7f4f9acf57dfce321e910b30474
SHA1 bde9405ffa981ca3b00c88b9ee741a5fa012aba5
SHA512 7c2917479c34ba31eb2bdd500882e30509a8879601d6b0af921cd5997d4698dbbc993ca12ae30de89971952c58dae2f62cee6e93275cb93ca5682f96930a3da3
TLSH
T157E0687109DBC72E34DAA08F1331E30CA1A3B013F6CD78013B889440720B944B243940
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 bac08fd369fb00a2ca1ffe86f039d22f36d38b639959d42edd5f8ece9024259a
MD5 913cbc74d013a379e207f612619aea90
SHA1 97a34eed52e6fceaa4e70237e175282d6831094c
SHA512 fc00830ea6c8d02c168e7a846d8327716b2d326f128d5c5c0da9dd8d01e674024dc73ed55e00ca6eb51f503481c5f14c80c68e0350e3b0c11a54722a721c0f46
TLSH
T14BE026704EFECB3DA852A1C74274D74C92F07807B3CDBA82674C4480B301588B2A7DA0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e628fe8b95b7a773c7101582e3f61d13ed9804da5e96b071a02405d879c3fb87
MD5 a24b89b096482ebb0d38f4c46f60c20c
SHA1 d9f13eb1988efc9f60d34846a33878f4bbff5282
SHA512 f1cf1ca949b27341d494881927fb8f6e319a806a37a96abe97d28f24f8c8e3132692267bd15d91a7584874700949af38011be4339692958d49e29fb767c38f98
SSDEEP 96:KR2r6WwYY+Wo9lg2+K4Lgk+ce2VUGfHm7KmgIIOW4tVgGOK47g0OcOGlkWPHlyL8:C2r6WwYYZo9m22Lgkte2VUGfHm7KmgIG
TLSH
T1CC91F021333B13803C7EA98D9179941FD2C171A23214B52B77A803665B27E178DFF9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8e802019e69303a6cd92823ad5aa5590126c31b5da88afe8733a30f7d40e5766
MD5 713c6b546f337a191830910e632cc4c8
SHA1 f3b4fb007bb4d92db5c743d5f7b22b04aa8fbcb3
SHA512 7ec451c2589c16cbdb8252354a82ef41df8a07ed58bf6867fc7310b43ee5d51743155a790083c4af132c4e08f74157c4b88b63851b9e0582197f31a144b4be61
SSDEEP 192:C2r6WwYYZo9m22Lgkte2VUGfHm7KmgIIJ4tWGm7g09OGlkWPHlyLf1vzG7gPntWo:A3RGnN
TLSH
T1A4D14E10367B13803D3FA84C8179952BD68271623128B53B7BE902A65B67E068DFFDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 9e142955f6d8be062945b8669ae08d15baedf4188565155e3ef8fedf48853a17
MD5 c2f5aae733a462f2cb665dc1cfdb0f62
SHA1 a75df59384ec92cf2eaf59be5133709449daad62
SHA512 1652459664387163d7c36eba1a93620e7721a8fab8b107859e138e98f59a277d24daa9de47f155567325443dfaacd1940cf59a20f9d05872edcb84335b1fe4bb
SSDEEP 384:DNrRZyCSDnxTICoIMEhIKyll7svbFKfk7:xFZJSDni5yI1l7svbF9
TLSH
T15644850A7B747001EDE6D9721CB080771E3CB16D8F26A6915DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 417B
SHA256 4ed447749b941720fd228d2f4ad14814321ab3d782c799f76c8e79f46c172118
MD5 bf988dcb1c0de82f104a31d1d2b0233b
SHA1 96192daefbac18020dce4110babfbf6395379278
SHA512 5aa03b5e2fd94c253bca29a130935a6f43e34c76cfcab15f9a9bf182042e29a300aad9468b984bd819783f6bc9c79e047af3ce8cdaf07822bd594248f2769b4b
TLSH
T1ACE0E5C053BB70847F8EE940C12D2503E4C07E56220E68B1339E02A88F8480A8E2FD36
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 d4791a0339f141e9e3dee6cb2b71d9234dc5946fe3e1152259dcfb9655c892e6
MD5 fefebb62dfed50b082bf4f7a966cb54a
SHA1 be985fe19027f3ed9b85ff4d18d8fd83a4d55d96
SHA512 002542224aa3825e82f9bde20a693a3e193c21b038183d1c87d31a206c9ee67f03016b72c6fd2b9a54f51e8eb71a034ae0dbfbcbbc1722132d89a34a820c1fea
SSDEEP 192:q95QkIIIbbLMIMNsYcYt4OY8AsblrH7Csim:gQkIIIbbLMIM2BSYlsBys
TLSH
T13E42876B16451B77C05E5B3697A28680ABE48C810072A12E37667C4F8DF3F9783C52F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 44425fe664589ec294213520300d4ff7568a5de4022467bc886a465823e85ac9
MD5 bcb1764970b69d5f1f4cecf7dff8ca35
SHA1 6b5ea7a78d39d6174ee7d775c715d197a5d1b338
SHA512 4ce6d25cefee6988e6b97bd7f74de1aa48949f0e16fe0c277a1a8ee03b33a98115db4c84b4b49be525d6177e790da25f5e621d4e2ae333573751800c7429100c
TLSH
T1BEE020345DD5C3FE7D65668B213DC30C92903417FACC39476F41C8446005500725FD51
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 be977a16e4c01bdb642f4f055c0dd79442d0fb72098331af515f4eb61df2bdca
MD5 03b1863659ebfe66e52063ae5089bb7b
SHA1 635770de08efb85b5ce44726cd24e923359d1c2b
SHA512 377b9aeef831d6bebcf53c80a0572a49a4972d050443f6a02cb2123b6718c93dc36deada7ca462eda3ff333f35c2a8ed6dcf7fbd0641506af235986282f6edc7
TLSH
T124210055F330C149E15A863A607F5B361738E8168FBCEC0F84BA20346EB6B040E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 60b274c9184dc368c200bc5b3e5ff983bc45b392fb3c2e7666aba63111f61211
MD5 ec53b7cd523cc50bed70fb003307d197
SHA1 166ba0623880c3bfb39d1382bbb3a35451fcc81a
SHA512 90b9cf74933cf000831ebe683d9bfaf39730315645330e57439962feb7a9f24b8550c4f0cff37ffca92aec54039278aa8b1a2f9d23c95e52d889fc14d9729808
TLSH
T113E0202464DDC35FA871A5D71175D38CE2917C43FBCC3F816F42CC44510594176C7951
MD5 SHA1 SHA512 TLSH

Submit Download

eab932f8-e73f-43d9-a130-f68374ebaa56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eab932f8-e73f-43d9-a130-f68374ebaa56.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 46f74cee5d2e47a0869c05ed5227543987aea04fa2cb0278557c79aa6762eb66
MD5 c69cda79885a1ee5c315e1e5b2ca78e3
SHA1 cc13a426325eb0d353e6b1892206df0a1b9bc857
SHA512 4494b67ea9deb837446d559ec2082956589f0fed7045a001e07cca1d2dddfda7daeefa901f469e8d40e4da389f9e31cd996362b5633e89b4bbe209a8b3b8ff81
SSDEEP 3:MsEllllkEthXllkl2zEfls/t:/M/xT02zN
TLSH
T1524404047FC0040DC500113054D1C3743370D51005155F4374F10D33FCC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 c0152b38b7f07179ca3e2ef852ba0dc646dfa78b9e3662d8d55124095d3023aa
MD5 893cdc0a0bd227277181fc1265f13ec0
SHA1 8cfc77921cae620e91fa0cad48f979b398739b61
SHA512 2497fe3a6e28fe538bbe9f0c56ffe1924db1f764f3bc082f84b336a3d7fae467a85a11466b589c07fcbd73b80c409ae02cd764bce2d0458535a8998017d48118
SSDEEP 3:MsEllllkEthXllkl2zEflmZRq:/M/xT02zXv
TLSH
T1B44404047FC41F0DC5011131C051C3703370D4101FD1775334D14433DCC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 07a5e731021efecffd9c6a0e94242f2d223d794637c75b05e84be6e310f93d03
MD5 972449c5ef73114e457ed7e813155c5c
SHA1 978c1d63c4f8be308f93a91c0fcd2bef70bc5e5a
SHA512 57fb3dbc18f2c30aab489da4abac8cca4af94f36edb13985b8d5610fe91724a84edfc88662a59ce59f64ce36d0c22581628b88ec36c4f9451a4d8bd3116c4190
SSDEEP 768:pb37q7M/TBOW773njt6ONXyer1IRCznieyUn2Ni:pb375WSIqnsU2Ni
TLSH
T199F2BF31D8959E334CE6F287B1467782BFF46077D4C58A50EEEA6B4D0183A5E130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fb5dc75784723599f8b5bf05e92c7a1471d1424b95061516a5014ef801229fa6
MD5 986f721819fca2821aaeeb2858f281df
SHA1 36d109c3d072cb8a966176139d947405547fcb48
SHA512 5f721a59151f0c31640ebbe55fa055478f15a2f88778c842b2a0af747a2a4b74a8ddc4ca9ecf960cff5eada4bf9b8b44987b6338e9520e2b4e8ba8248b4449a1
SSDEEP 768:hrv+4UNbdz3Ms+/TBOW7734ONXyer1IRCzniBBeVH1SK7:hbsbV38mSIqnOEH1l
TLSH
T1E703BF36E4A89E338DE2A3C6B14776437FB86057C6840790EDEE2F4E069B49D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d7063dc6f3a6f92895da3e6155fcff55e29f3a3983eca4656719d705aa86d291
MD5 de17e14b788eaf93a9c43984fb2e09f0
SHA1 fe6b310321091bae041c45a6494428eed3966f2e
SHA512 5748cc8ee509040ab3de72e7ce5e8747dfae784b2a38250e344d15e83208e85e2b5640214704c099e7e1cb1a494ed519fac263e9bd811d84776be83f77f6005d
SSDEEP 768:xrv+4UNbdz3m7+/TBOW773njt/ONXyer1IRCzniwjLeVH1SK7:xbsbV3bTSIqnPLEH1l
TLSH
T12F03BF31A199DE334DE2A396B14773837FB82067C5840B90EDEA2F4E069759E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 62KB
SHA256 01a66195337ba680c0a8036a66ba661264b8824140c68f1917f2b4ae3d34a1d6
MD5 e7e91d525718a9d8c931b69847a85125
SHA1 fc84a986c4014d3fab79939343151ef1e8c409fa
SHA512 a39d5414c996f299c2d923ac1cd56630ef4d668c40337464b0d97a4d928781708c28e56a6f6ae74e8ad2ef29a9fdb343176c00c93bc7ab14914cb5c042bf71ba
SSDEEP 1536:sb3lemSIqnltHykgn375VTKnGwD6DdxND2Ni:sDvS5nPH7gXKGPdzD6i
TLSH
T1F953BF39CD909E7F4CEAB782A38936169EE4503BC2D88DA4EFC91F4D51A349E6307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d69d795b212b528e507855e305d576b75909e5612ff65298f9ea1f49957a3768
MD5 340f7dd790d0f75f78c80c1e6d0aa039
SHA1 f41692c2048341aa0ef4b0e3f773c19237692853
SHA512 4b5ce27b9b9478a570b9106feb4eda350a4d8561842aeb70f17537d9907c5e0c0a1ddfbf5bd93056e287e9a383816ae268f4239b1d3bdc83a9db5efbeff2dc6b
SSDEEP 768:Mb37q7M/TBOW773oUONXyer1IRCznieVFbxjh2n2Ni:Mb3756USIqn7dxN22Ni
TLSH
T19D03AE39DC905D3F4CEEB382724E36126EB85037E1E84A50EBE91B0D517796DE30781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c47033f87ec8f0787e080846ceebb9f0ac1d914edf22e9a8e413540f26db098a
MD5 4d432990aebdc0eddeb84342ac7140e8
SHA1 a226b87f4a6c44261e980ed73498977ef2be639f
SHA512 29acc70fa5cae2e28d406737c181bd1f630e08c507baeca82c2527a9f0c4119e6120ac76d11589f70765daf0c379dc331c6932faef80ef746887faa3dedec553
SSDEEP 768:qrv+4UNbdz3qj7M/TBOW773njtZONXyer1IRCzni9jLUn2N/:qbsbV3q01SIqnqLU2N/
TLSH
T18E13CF31E598AE334CF6A287B14777837FB820A784C54B50EED62B8D019799E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 43ac5be069a6dd903c179ec011de004223278a36c09202c654eb4efb888d54f8
MD5 e19addbb19e6b1e571f17ea5b4eb9bb7
SHA1 26caebed3f2eef00f13358a8969814beaada79fc
SHA512 58b7c32f36dc5d6acb6152a310ca75c14c76909eee7a493cd515e73f6e55a9f2c2289594a3421a4b01d891f1d3fbc75da1836bfde7628866af16e628098b29b0
SSDEEP 768:2b3qz7M/TBOW773njtZONXyer1IRCzni9fDvMbGxUn2N2:2b3qE1SIqn2reGxU2N2
TLSH
T1BB138B3CDD509D3F4CAEB346714E26626EA8103BD0F48A94EBD55B0DC13396DF30691A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 efcc517d42cae024daf127c985e39766e0c4cd3128f504670a70987b7d04f83d
MD5 6fea0cb8b061a948c1022deba8b47316
SHA1 1b45b188c558d86f21d600801ac5ac0e3857fbb4
SHA512 815181162e63a99f5802b771d1d331090873a75e79c15b02a7577621f9f290cf326dcb245d7a64c4e7e0390df92995e82156dfaecfdf3ed2e8b811a13ceb95f6
SSDEEP 12:TL6KeJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isOmQQtud13nzQd7:TL6Rj0afDdWec9sJVUOM3WzlfGVjy
TLSH
T1C892F122BD312077E8DF0B76B8534CE01DFD16AF8DABB910D9D40D6149A2BC2A6552FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

2bbf14af-0b85-488b-87d0-64204698abb0.tmp

Path C:\Users\Admin\AppData\Local\Temp\2bbf14af-0b85-488b-87d0-64204698abb0.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

f8ca831e-2aa8-4c71-a51e-081e2090bbd1.tmp

Path C:\Users\Admin\AppData\Local\Temp\f8ca831e-2aa8-4c71-a51e-081e2090bbd1.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_178080869\CRX_INSTALL\128.png
Size 4KB
SHA256 ff702ca753a7e3b75f9d9850cc9343e28e8d60f8005a2c955c8ac2105532b2c9
MD5 d056cec3b05d6a863ddfa7ee4c1c9f0c
SHA1 dcd15b46dea9d234f13d7f04c739a2c516c973f1
SHA512 751274949b04c7cdc5e8f5f20fd062bfe130f1415eee524d9d83bcf1a448fbfb4b82dff8bbf7495250a852779c3d11ac87e33275508a4064f9d52417f4ca230f
SSDEEP 96:YpjISYK9mvKBG4+43tmidWQX3DJQoWQpzYKL:Yp7nG4j3tRWQX314QpzzL
TLSH
T1EDA16DDEF15935355323E89B282AC458C69F5302D282D6AF940DD4C572C3DBE68B2DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_178080869\CRX_INSTALL\_locales\en\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_178080869\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c
MD5 64eaeb92cb15bf128429c2354ef22977
SHA1 45ec549acaa1fda7c664d3906835ced6295ee752
SHA512 f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def
TLSH
T153213806EA14BB37825F6036BC657585A3300ADB2600FC3D7EDC941C1B059AA91BB3D4
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_887982564\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download