6c03577e1e1e11856cc35ae28823a54517756162220a738d0faebde52c9ec125

Analysis

user interaction
yes
max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 21:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.60.html
Size 11KB
Sample260828-1fv22stsbs
SHA256 6c03577e1e1e11856cc35ae28823a54517756162220a738d0faebde52c9ec125
MD5 703e72eda78002eaf5f3af877e6ff742
SHA1 04bfeae93193c132a1c15249ac96a5800f4277dc
SHA512 20c7614ab353523322efa9ca2c3c70f484b202b35173949b3107ec20fd76f0e8fa6a27106d18f49421231cd8be3ad56fb208976c07539c0cbeb60c9231066dc9
SSDEEP 192:xUhrCREdT9iuiri+iLiYWKjdGZipfi0Fi0bB9p4cXQI+Su:ahsEfiuiri+iLifiNi0Fi0bvpW
TLSH
T10C421E033F6916B0B2726A9235775108EBF086136E2140B8B92D45C9FF7FD85D791ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5924_893988121\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5924_1312765715\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5924_835637374\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5924_835637374\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5924_893988121\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5176	msedge.exe
4556	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324265719078646"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{B825AA51-5696-4BDB-A900-562823D81B1D}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{BB2ACCB5-9A0C-487F-9A1C-4DF98BAF98B3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5924	msedge.exe
5924	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 3084 wrote to memory of 5612	3084	msedge.exe	89
PID 3084 wrote to memory of 5176	3084	msedge.exe	91
PID 3084 wrote to memory of 2636	3084	msedge.exe	92
PID 3084 wrote to memory of 2636	3084	msedge.exe	92
PID 3084 wrote to memory of 5128	3084	msedge.exe	93
PID 3084 wrote to memory of 5128	3084	msedge.exe	93
PID 3084 wrote to memory of 5128	3084	msedge.exe	93
PID 3084 wrote to memory of 2496	3084	msedge.exe	94
PID 3084 wrote to memory of 2496	3084	msedge.exe	94
PID 3084 wrote to memory of 2496	3084	msedge.exe	94
PID 3084 wrote to memory of 4424	3084	msedge.exe	95
PID 3084 wrote to memory of 4424	3084	msedge.exe	95
PID 3084 wrote to memory of 4424	3084	msedge.exe	95
PID 3084 wrote to memory of 2812	3084	msedge.exe	96
PID 3084 wrote to memory of 408	3084	msedge.exe	97
PID 3084 wrote to memory of 2812	3084	msedge.exe	96
PID 3084 wrote to memory of 2812	3084	msedge.exe	96
PID 3084 wrote to memory of 408	3084	msedge.exe	97
PID 3084 wrote to memory of 408	3084	msedge.exe	97
PID 3084 wrote to memory of 2452	3084	msedge.exe	99
PID 3084 wrote to memory of 2452	3084	msedge.exe	99
PID 3084 wrote to memory of 4972	3084	msedge.exe	100
PID 3084 wrote to memory of 4972	3084	msedge.exe	100
PID 3084 wrote to memory of 4320	3084	msedge.exe	102
PID 3084 wrote to memory of 4676	3084	msedge.exe	106
PID 3084 wrote to memory of 1524	3084	msedge.exe	107
PID 3084 wrote to memory of 3248	3084	msedge.exe	108
PID 3084 wrote to memory of 5924	3084	msedge.exe	109
PID 5924 wrote to memory of 3436	5924	msedge.exe	110
PID 5924 wrote to memory of 4556	5924	msedge.exe	111
PID 5924 wrote to memory of 5960	5924	msedge.exe	112
PID 5924 wrote to memory of 5960	5924	msedge.exe	112
PID 5924 wrote to memory of 344	5924	msedge.exe	113
PID 5924 wrote to memory of 344	5924	msedge.exe	113
PID 5924 wrote to memory of 344	5924	msedge.exe	113
PID 5924 wrote to memory of 5084	5924	msedge.exe	116
PID 5924 wrote to memory of 8	5924	msedge.exe	117
PID 5924 wrote to memory of 8	5924	msedge.exe	117
PID 5924 wrote to memory of 1016	5924	msedge.exe	118
PID 5924 wrote to memory of 1016	5924	msedge.exe	118
PID 5924 wrote to memory of 3536	5924	msedge.exe	119
PID 5924 wrote to memory of 3536	5924	msedge.exe	119
PID 5924 wrote to memory of 1500	5924	msedge.exe	120
PID 5924 wrote to memory of 1500	5924	msedge.exe	120
PID 5924 wrote to memory of 2064	5924	msedge.exe	121
PID 5924 wrote to memory of 2064	5924	msedge.exe	121
PID 5924 wrote to memory of 3172	5924	msedge.exe	122
PID 5924 wrote to memory of 3172	5924	msedge.exe	122
PID 5924 wrote to memory of 5284	5924	msedge.exe	123
PID 5924 wrote to memory of 5284	5924	msedge.exe	123
PID 5924 wrote to memory of 1408	5924	msedge.exe	124
PID 5924 wrote to memory of 5684	5924	msedge.exe	125
PID 5924 wrote to memory of 2776	5924	msedge.exe	126
PID 5924 wrote to memory of 5860	5924	msedge.exe	129
PID 5924 wrote to memory of 5860	5924	msedge.exe	129
PID 5924 wrote to memory of 1820	5924	msedge.exe	130
PID 5924 wrote to memory of 1820	5924	msedge.exe	130
PID 5924 wrote to memory of 3288	5924	msedge.exe	131
PID 5924 wrote to memory of 3288	5924	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.60.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb3012c188,0x7ffb3012c194,0x7ffb3012c1a0
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,9924141687490550777,13761230931543322775,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,2338035521927079988,12315247609015847456,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:13
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1832,i,1904859381223195025,12802054687711675055,262144 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:2
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,13119949415932373139,3754776856518010406,2097152 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,14251306547028544222,4228171871552485221,2097152 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,8437102607244368485,15278518380643846839,2097152 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,314571988747251780,215667329355118170,2097152 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,1522963879684061226,5367876001490790593,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,11966683546980292428,8241530794434395893,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,10891280746266793320,12507033631530506759,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,10891280746266793320,12507033631530506759,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,13523899862231340993,10253060044952294558,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1356,i,9516983745077153954,13768726264885095651,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1120,i,5837144864444282679,9928217491290465473,524288 --field-trial-handle=2752,i,12585513446591827638,1404196388181153916,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb3012c188,0x7ffb3012c194,0x7ffb3012c1a0
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,17842524649112395411,6618976100101868402,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,16658789071884279531,47394093777138301,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:13
    3⤵
    PID:5960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,5519263522688222906,10411861678889520621,262144 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
    3⤵
    PID:344
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,3491909810241431625,18017049267560999133,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,3491909810241431625,18017049267560999133,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,7354992292560700875,5513374241210273377,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:14
    3⤵
    PID:8
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,5372020912859777399,5919000467119074691,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
    3⤵
    PID:1016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,1533142611099467397,2606484760794672179,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:14
    3⤵
    PID:3536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,186926164239202355,442156487324378242,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:1500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,14694708505442075163,3929945934335610057,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:14
    3⤵
    PID:2064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,14602317800068409538,6781081873959714719,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
    3⤵
    PID:3172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,14870857901273751311,5320226333381187283,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
    3⤵
    PID:5284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,5258718164555694683,733465524064728585,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
    3⤵
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,17736332172472413503,9407519324335980625,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:5684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,4801736509470032073,2600802522076179580,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,14186325036681935991,10092816986191692139,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,8157486671943977148,15212532115946962908,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
    3⤵
    PID:1820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,4392218032423994093,12386939769348511257,524288 --field-trial-handle=2380,i,9473615446338640190,17326040556011190576,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
    3⤵
    PID:3288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
MD5 c1825e771385238aa2866582788cf8ff
SHA1 cdd34f1c740914ce98dfac6172ecd00fb2da9783
SHA512 33f14925d45545eb4c68af5b5b273b9724142601b0f5098ecd00afa7d2c73115a7bbfbde0f2118a5645868d8b32a69bd2a748d5d5a3d469656956f8af0313fdf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d9f278830047fea435113fe8a9725fc5d8adb7a8599235abd4009b7a5bea9d96
MD5 382dec2adec462bc8fc4269c19f837b3
SHA1 414ad3e4a0d3ca18cb168ba5974ab110bf4a9229
SHA512 636f90cd07a8688bdb2e67c8e9a894da8f9a5989613980371b195b0ed391fbb0920c75660e511b14de3b81c2d08f88c2b6cfa4fbad4a69d1ace0272fb2fbeb0d
TLSH
T1FDD09760BC1CB6F0E01610381221030039AA2196AB57520AB020964ECD35042B2E89AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9aaf7060a6626c0689c73dd906a62efc9891cf45918f9cedaa92008d7b6f15e6
MD5 b67b4b99160bd6826c4da74f4f368456
SHA1 bb8e2c790817572ce42ed9d31d999434a600fb83
SHA512 4f4da4e7842f6989c20ace422f14c453943a91e75409d0c4a837d3df0c90166d19e4776f9497eefa2fe6ee1c48097c590a0ae006a17a8258bdbf48874ea44da3
TLSH
T11FD09790780CA1B0C05320312246A3023EABB064B987B1017060934ECD92040739D02A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 340442337404df4ecfc48f6c1891bab36af3c0a850ab627f5adbb21f2db4b737
MD5 38c87488db3328e988b19de21734f663
SHA1 eea14fbf4e51049a3678a399a450fbf1eece666c
SHA512 b79765ad44cf4757e56d6df99a8293113e034286a71fbbb4bb178f361da7c2ccab9ccd39a4ffdc1376883fefb30f8ccab03718ee0fecd77a6758599cce23780d
TLSH
T1C2E02BA5C8259C3B1CFD172864544746E75113672B9044DB7A3D920D8FF5637059785C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 585ae0d32d55a01e536660431ebe946a7f6947b7ffcefe79d6f8b7483d6d78aa
MD5 3852c6d9914702414a7829cda5b7eb62
SHA1 3cdabf5e35e9e5263d65475641856797529386f7
SHA512 8c3ff94f1b156c5cfa77d2b8f6f554f903ab11367f6bd3ed85ef836f1e4164f31d0ce36347289de5ea36868b37b74d87cb6f25433589741172232352b8d2cf2c
SSDEEP 384:ufi2dJblkTeTRlE3K89r54LIjCckJGoMRmWFEyF:Mi2zb78X4sjCckUtrEyF
TLSH
T1A3131A3DB6B5EC42EAD7603E92475B309F77C6ECDAC045432A3672028715F9919CE487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c7aedee945e0b758f100ce2e8dc5c1c6c83e8dcec30330a4c56767310e749dcd
MD5 486c98e057bcde5e54d3c618f8173557
SHA1 afbf5f996850fb9ed641ce1c7bb5b8c4ebb43b1b
SHA512 0ec0194a23a9ce03d35f585fe16edecc552903741849b1486ff8827996f4218b2a3f7a6d31d02a63ed4f971ae8a221405ddf64d25c2b253b0f639978b63cb554
SSDEEP 1536:VfIL/jbL/xsCk2BXDjkumyW/I5bfZstln2cxAYb2nsj63g7VjLqsQwYqw+ww2bMG:VgL/XL/6B2N+LcZZ
TLSH
T19C444FF70951A41BCBA852F5E2033E3ED57B455D7CD1F8E9E1784C812825F22B6BCA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 2fc7ab41522fea3d37adbefa0b2f2dfa1869c73ec92b31e25f4b5cc4679c8e9f
MD5 22d919b445089411e60787ab3fc31993
SHA1 7062d58d41aff030bce495fd720895757d662535
SHA512 0808118e685e9642085b36d07e04b0fcb15071bb8e0c3bc2456b380125e782779f8630e5b40176c744d582b7be938aef709ed4d6da0e4ce41107e650939e0949
SSDEEP 24576:sHquupeVgowZTlx8RFPzJs7hZ22VzM9slXxXO:sKVp6goWTsFPzqHg+lXxXO
TLSH
T119167DEDC97898C3CD63AA30B4F0E9477C7413C3F595C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fdbcbea2f206e40a617045d3bc7e93217113c69790ffe82cdaf4a1fb41960738
MD5 fd07f3450ab1a1871f622754987349a5
SHA1 3e68985662fe96682ecfb66aecb80637831f2cbc
SHA512 06ee5398d7026de907b20734a58663ed8b9f3686e70dab7ed67cdf5f30ba55c4f2840db1ccb3990a220638b8bafd38893b8b64d65bd97ac0fb4590996843976d
TLSH
T11F615193233ACBE1F72089F870E9B4863DF496C5210B2E27A5525D7C484EF4258EC9E3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594ffb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594ffb.TMP
Size 3KB
SHA256 fe7fe8b7024113834ebb07d013bbc355648bf70eb53defdbe4ee20fb57255461
MD5 21a4feb0207a2a7a1debd3287f54432c
SHA1 2a701e0b8b6a0c7996ec132e12bd62ece4504b99
SHA512 f957d38d892a0d1eba7d14af9b723d17bb80d13af6816f3b21b0bc06e1d9dc36fe5c602b7cb1754e80c1d837f63bebbb68a470818fe595fa90d9733c3e353ecc
TLSH
T14B616493233ACBD1F72089F874E9B4867DF496C5210B2D27A5525D7C484EF4258EC9D3
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 61bc3b54a75a500f8395386f041c65f6d4eeebb4671a5d3dcb45c9cb28522a07
MD5 260589d5153aa97a0297e075427ebcfa
SHA1 8c133536c6df8800591a3fcb0b5ab44b15274fec
SHA512 f686ef05e9174096b5be35a29763abc69c357fe013e269b99b81a28f10001e514d507301beb09cae8c10da62c94609b18bcefe8039e8596b011445f83141cf4b
SSDEEP 3:MsEllllkEthXllkl2zEklrdY:/M/xT02znJ
TLSH
T165440404FFC50C0DC540D1304017C3700373DC100511575334D304335CC55400C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 e11c714d679bdb880907a71f9f872e72df31e0b9448bfcb138adc2f1e96bd2c0
MD5 33fbc45bf78300b64e0883b31681c120
SHA1 d31795cc58a25bd443b116457b4335850b144eea
SHA512 cf3cca1ad409cea1009a77a2172c1e4747d038fddc5fa4fab87242081345d52059e6dc7cce0d8d4b09898d315d73c5b686c7d28ce6ed905bb96b0f912b624c82
TLSH
T136E0D8D8BACAC2AD9A6035C3E134571DD2D03452D6C6ED031B0088C4BB53112F64995A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 a09b06656609086b56339df6d7413ca4f1cfca5265aeca29a75554a56ddf6a70
MD5 bd6aec3a4bf2408e2409ec1d72469e21
SHA1 90f5714671dd1912857d85745ce0b7c8c8b8798a
SHA512 99dafb9be319ddeb63d79dd03c07a7d9773d96b822c34220aea2215c1e7c2604540ca4bb38b82cd7d89bc62e945b51bfd21fa7fc8b8db29d3934f78d9d8d16bb
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjzj8VpW5LBiSFtI6bycNVqYp6bv:TtD4jJ/0UC+lf5QVpWxsSFOyy8VTpyv
TLSH
T1DEE2E08C3B11F511C4ED733EA1D2C5E09EBC682C8A4DB5B0823C9D768C636A5F49E20A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 b2b5b29a58413ed0e008a3517d8d350f56542f380a494fffbf8a9b962151ceac
MD5 f2b0bdb6b29c2a14395b3ab452eb9a23
SHA1 0d483358c7d2465d9594c0ee321c5f4a8ef6ad6d
SHA512 56fe4e7f9472241afa89c6843d2443ad5859715e964142a78a4bc35321ccacbd5b0b70bad98a27743d238907d5c4f6a687b7544b136546046939290cd2eb7a67
TLSH
T186E0260824CCC3E9DA566897C36D470C96D33422BBC9BA031F088C40A261242E3C6698
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 98e7b3748275474b6278046c2222cc7dcf636255e8f01c5e4a5ffeb254971360
MD5 33cab68799ff6a15201dfa1af74ac741
SHA1 ceae353f9a63063f317a9e9bf355d09eca14c976
SHA512 b47e6bc6853eb834fab0e5b0d34b476a1bb9070ab1e7804e134eab6e6ab02af42c6d66f60c375a57c6b3aecf391638218074befdba628a67851441b148ca7123
SSDEEP 96:raE+WlDRtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/YibbEOVpZf24JkMfXSFRe:rX+WN2H+bF+UI3iWGVoWN3qL/fVVV63
TLSH
T19124000E5F253722CDBD913668EB44A35C7DF03F875326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 a20c90b01eabe811d72fcc518907cc654a16d66383d0d5c7240a68155994b675
MD5 ffbdcb32725036b22eaf45fd23cbd30a
SHA1 b3d7b43194e2c0fd41c7e66b432aa0bff7789237
SHA512 b4cfcba02084d3f3cafb7dd779017e03f554bcc95c144f46e49e6bd22b3353a6e975018dfff61c5323c2fd6595b383b1214c0442c296018c89a67656367e616e
TLSH
T193E0DFA854CEC2AEA608318BD228670CEBA13406E7C9AF031B049CC4FA62104F6C26D6
MD5 SHA1 SHA512 TLSH

Submit Download

374d1b71-91ef-4eb8-8513-476a8b87a927.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\374d1b71-91ef-4eb8-8513-476a8b87a927.tmp
Size 1KB
SHA256 25bfaf2faae758681fdab1dfaf1329c912be1e11556c189ebd128fa812a75490
MD5 acfec1cc469ee44ca67833017befff30
SHA1 b7246a5b0e265d5001b1282ba93c1f2e9ccfac9d
SHA512 afd6c68eaf24945fc97b81b474b45ca8c269e1b77b516c81317ec68afca0b2d2eb13c01d9ad0ea4452e39e258b115aa7b067be3870632435912c9fc8c7595ab0
TLSH
T17931C2F783B4957E8A0196F0EA146E1FCE1D0511432C786985E0AE27D3F3472E045A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 a426acbdcb05d311c532d57c8d0c269ca1a329b4726f4df4f672a45a62410759
MD5 6c1cde9b952fbe9e1a8800dff5cb8d05
SHA1 8915ced7261a93ebb33746a2f198a2d07eef012d
SHA512 aaefcba0f2251b4dd470bd1749f2b94fd1b31467c5d47e2a913884b9b981b7c697c59b170f252965d1dae7570274861eb34b3156c738d19cd90b55c6cbf6b655
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7o/wt15PiX:qDeMatha9RA7K15PiX
TLSH
T14DB21F4D1F347262D0F11B76EDD089672E7C501D83733A499E24A0F38EA3A5BF616066
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6c3a92e43947fa2a36259b07f709f758e7986d3f5dc8cc47336bc45d0c02a043
MD5 da05c729ee2d2725c334eeb5ba83a5ec
SHA1 8f7a4b9d891f9249045daf549cd1582959863dfe
SHA512 f097e8912dc907c05571c84561e4276c1812059ed25aca7d5db993c32cbca275ed507dfd91029f3d6c4c425de809951ba017f8a14075fb54dafe0060f29a2d0b
TLSH
T1D241BDF7C3E5856D8A0156F0AB186E2BCE2D0915432C3D5A89E4AE2B93E2871E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 13d98df9f59c81cf6586342233885fe23242e860ea2d5f963c80862c2eef580a
MD5 df047079e3d2d70855728d930ee4117b
SHA1 913e7e2ee543d7cd7c472fa1eaeb3a4b909974b2
SHA512 06ca2dffe047078e5be6285664c08c5ee1dc277b1de1cb6aa685ebc93f00743351f4a9e8dec413d46a14d74632429ff81e5b861120b7c538aa1c691179000210
SSDEEP 48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBklc:eIEumQv8m1ccnvS6hksGcf6CnFGALx4g
TLSH
T1A6F2CCFE07276206C99484B0E4009FCEAF1A010B47B6B6DC76D447E3F7A20E2B57875A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 b41b654255df262e6ce7e87958a6bfbd3da1976db097de27eeb44c4b2aa427a4
MD5 71c464a42feacae37b9e3af16cd4b8de
SHA1 e551cba221d7c1301dc060acb39733900938c142
SHA512 4b73ab85239fc7aaa9802725dab27f9482f018faf02645d2be7e87be977dd8a7c824f9d5223f84ef3020dd06dce2ca7e6b6f0c88ae32cb93b3932366a096e44a
TLSH
T14BC0125284B9F477107859791E94A8816E79D436015094E4D9A9A23EA1A14F75B1102A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 9416dfa05cb03ed89760c82102969edd9ba060cca2ca0faa41fbba832ca1f9ae
MD5 f1845bb8dc7d77a24136ccc8c8178991
SHA1 5d0cf915899e04a271efe43810a15cfdd55a8029
SHA512 4b5f249bc7e221b95729c19c5d0dabdb1842b22d6c520f959bd1fdf6d0d5d43bfed9084bb4b5ecfcb819baf225289cc242130ad0361d054a97345e66c8a6813c
SSDEEP 192:sxRvR7yM/jK1Ml8QbU/fJsMWpVvf8bN/4zoA8p4m/g6+WNIYJjZwiHg5VIgDOJ:sxRvVjU/fJsMWvvf8/BX/5IsW5m
TLSH
T1AD62E715A524A97BCDDBD20DFA517F53D6F81573A1901E44AAFCCA0C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 382053d683d335d416027b16d7dd2ac8b1db095f440541d2a3e7b53ab405de4e
MD5 e16ac803834a057e209f58f4a60b68c8
SHA1 29a0466ffb447c48670fa1efbcf960b0b6a50677
SHA512 84c4379683e1dfcb2f6cebb4fa3ae37dc4a7c0a80d4d63d06f48759aecea208d4d28de2b5516764ee8b21e8e7888346d7bbefaf0010621c5b11effd6e57582f8
SSDEEP 192:sxRvR7yM/jK1Ml8wbU/fJsRh8bNg4zoA8p4m/g6+WNIYlzZBiVG5VIgDsJ:sxRvVlU/fJsRh8gBX/5IlW58
TLSH
T1CF62D8156A249A77CCDBD20DFA517F93D6F81573A1901E44AAFCCA0C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 21fc2c7cfbc279df6a7fa0bf60e8840381762c4661a2c615806e88b50633ae40
MD5 add72db4d53430db957e8c168842a2cc
SHA1 14ac81b9069eded639ef6421b88206da65473e44
SHA512 12e5c48ca762ea158df7ec5903f2fafe3dc408c592ec603e49d49b0a89823ef8ec6db8c95f0ce42e27839d2af3343cf63df65806b6be0b881b93aade34f85fbe
SSDEEP 192:sxRkR7yM/jK1Ml8wbU/fJsih8bNg4zoA8p4m/g6+WNIYlzZBiVG5VIgIJ:sxRkVlU/fJsih8gBX/5IlW5s
TLSH
T15C52E8156A249A77CCDBD20DFA517F93D6F81573A1901E44AAFCCA0C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5f63f400145b8e4589025eb5b90c142ab1579fd6c95aac1544fc597d80efe2e2
MD5 7e70ff596c8dce1ff5f47b178a4c331d
SHA1 f82c9c1cb07e4036447f265a37b600372241d3c8
SHA512 92cb10529fdbc659740f88ccac91fe611f98fbf33c6856b37eadc337775ce07b4d4b522e13f1d61aee1d335774ea3ded989527fe581fca47b139e18bc77444d5
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13f0roPcePK:dhRACxWgg+fAJu1jaulff0ePK
TLSH
T13BC2FC3F540CCB7E4F844E9DEC29AE976DD802CB96988D5447EE890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 6c0799e3c19f871ec4a3988bb4428b6978f7ba9b4a15e5908b50ecb4548dd828
MD5 a272dc46c5294ea47ace15d868d873ce
SHA1 aab9237de8720440c2574e7fcb43aa4ce094e1f7
SHA512 c424b5da7f0c0c82b7019c0c8fc23aa84c57d6605631b9cc65f805de80846cf64caef7bc258f320405c0ef7b4276c8d1238002fd78a1d5bbce186c35ee23e6b2
TLSH
T1CFE0261416CCC2FDAB15A0474224870CE3E4740BF3CABD476F08DEA4A6A2505F1D25A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 6095ed2671eead2aff8f82e001a7a123cd7ab43091ac8edce5d918cc0351d7be
MD5 f93506f6eb450716a3c1f12c4d7d2303
SHA1 c9410c8228135fe2787e4eec3e4a5ff80665a6c5
SHA512 3e754f15a0f8b18df5f4d3535d51d36957198771a56efc51a19e373b112f50a4a0a891834740181e4f1de11f2e6f54ee7ac59ed79d0046f6a676b5b0456f7418
TLSH
T1A1E0D82425CDC3AAA646208B9235E30CA1A37C02F7C9AD226B1C9954A356140B683660
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 47c32426212940c9529e4e9e6c1aaa832444fdeebc9166683e1d32bc7f641fe7
MD5 2f6d09850f4f309a2c50306f4ef45fb6
SHA1 f1587c10906174acec26cfb2c65de904484186e3
SHA512 5bff4f07a5e54384818cdc3820518b83a6c57ffcba2f396e45d567b0fde2a4f10a68a2283bc19bcc8dae5b95024896ec397b0f5cde0dbd0dbf3c49ee34f8bb4c
TLSH
T1BAE026B865C8C3F99B40E4838264970CD3F07806B3CABA039F085C90EA11111F2E6990
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e0d40f8ecd9ca4d66345f60cb3269bc93007d20d99bfd18c6dcf2da847b25d40
MD5 56b9a1982b33f16a166f356f2a2aa0c4
SHA1 47e5a658a249957fe98309b2388975c58dd6c3c9
SHA512 cf031832a1c5bd2b5c197297afa9819cadf309fbc38f27bcf2e9d2940135dad8feb65a7ceb7a8a73006000158499c78e7a42435a12905b321076fc291eab5b8e
SSDEEP 96:KRHQ1xHF1ZWBu0g5ZK4wg3Zc/32p1qCkQKR+KawoK5GHL2KYEag:CHQ1xHF1UBuF5Twg3m/32p1qjDzXlg
TLSH
T149B1801130FA03507D7F6D0DD0A9B826568238A23199E93B3BAC09528F77E136DFC9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 682d01345c4946fb5edcb37b365c32f41f0631820b07abbb510180d36157abc5
MD5 de350d59aed8cae9370482aff2df6c1c
SHA1 c5e0e316e4bca065db52e152b474892c4953e3c4
SHA512 095b268c7e061605f08c9aa3abc129daa1237b43e5d7e58623dc5e60a738776fd236082ee6d6e609172ac7673403674c1ba078d9bb3dbb645d44d735094ce748
SSDEEP 384:DNrRZyCSDnxTICKMEhIKyll7svbFKfk7:xFZJSDnimyI1l7svbF9
TLSH
T11544740A7B747001EDE6DD725CB080771E3CB16D8F22A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 09e772cbcf94099dd6fe57b94a1b434924de3c2eae2af80122a3435b9b766537
MD5 271ec19ece98d52d358e1b4e53c45923
SHA1 5216a1263535a6b5d580a8db9b77339891eeeb66
SHA512 2a8a51522b6bf4e690491054073b8c944eb5f6c0617d1e4e09901dfc03ad502d3d5888b31b572f3e572aea12ce49ac821e4985e8e8ff9e29baa9130d02765653
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:DEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T14252879BEE342212DCEA83318AC001E17E7A903E8FC1EB0254D610211FB4691A31E58E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 e8cb3aac36cdd3a9dce6fae9748804a86894a6030ad984e3cacfa3b8be2c7e1d
MD5 987c0852ed91c6b8805bbbd669a4282e
SHA1 9b247fe467b5586738cf8b7d69db935905b06015
SHA512 d05f6e90b8ca684af8bf7b9ea12be6dadb9fc24c0a5c90e2d75f5bf6aaaf8ff29ba26b303924fc5c5c93d42c1774e8d7f80ae9d1bc191f6bd1739a35ec6922d8
TLSH
T16AE04F8032FA20A47F8B9945E10C380370893D652B4D9773275D4D948F8482B6AEDAB2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 e57f627bb597a1363cb59f3e038902862be9e8518dcafd0e0305c9d16465ea33
MD5 12c41c5dbb8684d6ed80c0f7ce4b31e5
SHA1 fcc1c4234dd61be9d5fd9ff36dbd2feae6129c4d
SHA512 c4eca7351b08c9b8e48ec5d2643dbfb603b8d91c1695d00847a2a08503fed7ee392bf1ae5ed0c516339475281a29f103dfe3f0868075ac4634415bc064e5bfdd
SSDEEP 192:zHO33KAsAlupECsDxFxQZkIIIJbJMIMD6YcY:63zsiestQ6IIIJbJMIMGB
TLSH
T15E42826E27052B77D19F5B36136B82D45BD888825072212D316A2C9FCFF3E9782C56F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 59f524ac3db9399b071efbfce75d928932fcb2bfa2b1a38de3fd4506b555dbd5
MD5 37d65760b14f11db707d3de116f932d1
SHA1 ac10a0e3908f413c3b22efe674638accafa6b25d
SHA512 95f2d2074bc340a9bc041d272f82698a13efb0fd6c5381570ab84a9d3c0d797e70d5ee684b0b5351cab276274a0de243f3421b659e6dccf64dfe6359f60b5b49
TLSH
T1F9E02614B8C8C2EEEA1620CB5228470CA2833813FFCABB071F00CC44E651101F2C6599
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 045c824f7f1369764f8ee5f5dde0f508b9837e25cf91efc72f490fe6725be1a1
MD5 7d5887451a40065b3c3dfcb82f4916e2
SHA1 2777bc60f636dbafdbab8a58480ae906815487c0
SHA512 9473c6248f518bc41d50b265ac027869008d783879bbda12ff6c70a15a1c39f9dd100b062156ef143fb883575a3f13699b3aba9b6ca4f0ad81891b2d6e0814a4
TLSH
T16F21D655F330C109E15D827DA47E9B391738D8528FB8ED0F84BA20346E72B040E4B6E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 ff10cf92590bef773985dfa3ef85c8c2a4921eee5ac21bb9d931e585abccfd14
MD5 d2c0aa1a0c57282ccc3cdefaa3b36c20
SHA1 c7f8e6403ba608d2d87a865ad9c2699b6b92c7ee
SHA512 eaa0ca320235c85dfebc62971681d537557a08b17366d953a0f92fbb1cfd9a1ecebdc8ee5acf60ba34e2bc12774ba3bb2badae7168afd802160e5d6bbd4e17bc
TLSH
T128E0DF24B8C8C2EF911120A34175938DA3963C12FBC8BF0A2F00AC48AB2114AB68B591
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a77a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a77a2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 fb3f63ccb7c120f36a4ca82a140036412ac56fe7b1d78de455c58e7556795fec
MD5 bfdfa0d7311f640db3398ca10cff9f0a
SHA1 18905cffd62524561bc38dbae0c50d6614179e43
SHA512 3ec676fee422c8320b3e89ad7b9e04d90ba58db6819d6d118a4191169a08d4785087816f616d1c2215a74685f98b9c9bcfe0a4aa410b858ffeae7e86a1e1a62f
SSDEEP 3:MsEllllkEthXllkl2zEelfdKl:/M/xT02zNAl
TLSH
T16044040CFFD55405DDD450304011C35443F3DC144D11D74334D104335CD75510C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 0d424c083966716253e5044bf9b044dfa781b8ff5eeff6b37d259bc5975aa70f
MD5 db38ef04c4d75191f7230225d6a4dfa2
SHA1 224a168ce8fab3d1d201c75a04e702019275c3a7
SHA512 e7090acf7df28a7bb7b7211b83d9f04df919d5c49ef190b6fc461efb6dab9691eeabecf93514cfd5af178ee6afc19d0471431e4474293fa3061a328fc7602a4a
SSDEEP 768:crv+4UNbdM381niJ33JNHXmTWTbc+eqeVH1SvyZ:cbsb+3wA3feWn1tEH1dZ
TLSH
T1C103C0719CB98E375DF79684B04B76177EF911A385880AC4C8D96B4D028B58D070FD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 54KB
SHA256 844a29c8291f4327df52a56fac6652b955dc2796545f8b770591063b1dfab5ae
MD5 bf281774b0a96b4c66efdd62106139be
SHA1 6a9d257ff7858c3b2383cfb8b30f9a3cb76fb4c2
SHA512 5d401f651296e88ffcfc8b48b1a555ec333695c8ffb5034c1907745bcc1969f00b26a6e94266a524d5b7fc19e9e19d25f7b4a328fdde08f71c44c4c1876966b2
SSDEEP 768:OFFU3VwgtshoNHXmTWTbc+hDFk23JgcXJXO+Foig9oWyLNQHDu:iU3teWn1hD223SgeQZD3WHDu
TLSH
T14643BF76CC61DB3F9CEAABC5A61D760AADE54133D4EC54C4DBC82E0D10AB48D930BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 42cf6fcc76f8ad5b0e7e30fb76f3795d8a581187a315899292bdf374e17383f0
MD5 3a1d2a6784d569eb314d78220b5a009a
SHA1 12bb1d09ec2b143aa69f90fb221a17041810d93f
SHA512 ccf26515a4f33683075ce7edfc8f059190ce4d9e4374abd0d04d13af57b15f20987f8f42dfd92de4b7915df87848290d4eaa59217251b4eb528f69fedde8b6ea
SSDEEP 768:nrv+4UNbd13bdViJ334NHXmTWTbc+HqVyLNQtpq:nbsb33XA3YeWn1KiWtpq
TLSH
T17E03CF71A8B99E379DF69584B10B7B477EF811B388C80A88D5D97B4D018B58D1B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 50b992472a9611731cb0823cc32717ee4179d61c81e8ec206dbb4f3071edda39
MD5 656c13a4d235a75aed12c7c0d9c559e1
SHA1 fb11058c06b2da4693e1bce7dfc4924443a99bab
SHA512 4883b4e43cdf0219d54bb9adf7b321f02dd631acccbaca97354da02c61f6af7bc720f2783437746030c190de52850d9ae7696e4cde5b8b757d3881b0d9bef8de
SSDEEP 384:vZcIe38NVOL6OGrBXzRfY9bYEOY5PQPlLJQXmIkdP9IimIMWEfMbc+Hq1X1puLN7:ne3EPViJ334NHXmTWTbc+HqVyLNQtDy
TLSH
T19BF2BFB09CF69E375DFA9684B60B7742AEF9117384CC1988D5E9BB0D018765D0B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 bfbe6ebfbf9943f7d216db63e30dfa24b7b24dd92b6c18573fba7727db32d735
MD5 4cb8f1a1a409593eb78d115e8f5e27c1
SHA1 1dbcf0bde865e4eab34eb70fc43248ee757f34f7
SHA512 96270511cc654a018c1d4bdc01faba5537e0591939f5abdc59fac522d147d2f7f4899369959e64a80b966e093a6903f7f40b1020da7a7ebadc46d671b49f0b53
SSDEEP 384:n6ZcIU38N+OL6OGgBXzRfY9bYEOY5CQPlLJQXmIkdP9IimIMWEfMbc+011X1puLV:4U3XsViJ335NHXmTWTbc+01VyLNQHDu
TLSH
T11EF2BFB19CF69A379DFA8A85A60B7B036EF9016385CC1984C9E97B0E118755D030BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 54fdf1bf2d066bb5e6544b295e9ced989237d0b7675755d103f0c7d12db60bc1
MD5 089a58bbe4244e9860bd6ec53d8020df
SHA1 cf810d9ec7eeee03f654254ee8647d88633d79ff
SHA512 16f64d2fbdf90490f37760a8591de80a824d8041521574225499962f73072c7b56c6148afff9f07a55e66b643471a02c1b4dd08491ad4c07b31cd0fb528c3f21
SSDEEP 768:QU3XsViJ3BNHXmTWTbc+0ig9omyLNQHDu:QU3qA3eWn1lDHWHDu
TLSH
T121F2BF759CA28D3F8CFEA784620E76076DB84133D5EC1588D7DC270D51A695DA30BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 e748c120e6c4177cbcd3a1e9e157d9cb291c572b72071673cce5b991ca4496c0
MD5 2f2cb5a83269e89936647a4f7903efd0
SHA1 cd3b55abbf46cf69fba943634b23afc4979ca317
SHA512 2ba851f2b1b2419c6d67153ced5ba69c56d2156cd3979d31fb573f1240249277e61f4a25b67a29663847e341b4cb469b7adc7f5de1ad004901e2ce7fdb191735
SSDEEP 384:FZcIe38NVDL6OGrBXzRfY9bYEOY5PQPlLJQXmIkdP9IimIMWEfMbc+Hq1X1puLN7:9e3HPViJ334NHXmTWTbc+HqVyLNQtDy
TLSH
T176F2BFB19CF69E375DFA9684A60B7746AEF9017394CC1988D5E8BB0D018764D0B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 21e5d5ea965b3e41b34f951935d9319a6d644cd83811e36b46df70d6c4594ebb
MD5 4b8a8eeaaaf8ecb9a4a73ef397399936
SHA1 0a558242f878d6f19bfe4bf421cf68f35a19b01a
SHA512 c844f74d9988d2aa940cd7c6cb8dc14a1044ae65cba332da6d02f64a63832a27a37d6f2eb3adf1040665ff9c972a082a6f97bdf52acc449f54842df6fa7d6f60
SSDEEP 768:sU3EGViJ334NHXmTWTbc+HIDKQi4jGFVyLNQtDy:sU3VA3YeWn1oDKQr6FiWtDy
TLSH
T139038DBD9CA65D3F48FEBB48660E6A266DA90133D0FC0448D7D9270EA17394DF707826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4a060f2de3aeb4b1aa3eb5b81d6cc52f259098dc0fd5fec8170955fe1d2357ce
MD5 3ec1147653bc0948aaa5e8b193f04ae7
SHA1 448890c6f5d6af2ec5dab4379f0c94909822b8d9
SHA512 3de5b9d30ed8b8e41dfd84af3f45a52ca626fbf40e2d612a22661f7dddb91230a7ebf7d95c44b3e794ea3b43139b741a246c29826c43181fa1cab99e36af1b7b
SSDEEP 768:arv+4UNbdM3Ye9iJ3XNHXmTWTbc+/3eVH1SvyZ:absb+3FAheWn1vEH1dZ
TLSH
T1F503CF319CFA8E379DF69688754BBA573EF8116389C80A84C8D96B4D428758D070BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 14496eacc7aa379e1aae7e326336fff259651e4b378d6e67c0979986ea31eef7
MD5 e5796dbb2b6e3087c59178868af41e53
SHA1 0da89aa1981cb45ce170b45bc0902bca3372625a
SHA512 0da5b32bc5330c80cf8acba9c1a423ea9799b35d17c249bec6ded41122715f54c5a104917559537dcaaf02f1bdc72257a921312fc528695ada27c5eb8802aef9
SSDEEP 3:MsEllllkEthXllkl2zEeluCll:/M/xT02zNuC/
TLSH
T1BC44040CFFC51407C55451304411C3540373DC100711574374D10473DFC75400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

a777d813-ff27-4913-a4d2-04ec5a6a3e23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a777d813-ff27-4913-a4d2-04ec5a6a3e23.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

560b8f40-1971-4ef1-b7a5-db2f49e35dec.tmp

Path C:\Users\Admin\AppData\Local\Temp\560b8f40-1971-4ef1-b7a5-db2f49e35dec.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 f16da7f89b3fc56d4e58f9769f81385cdb43e0aa8e2becd94b0f57a8de08ae16
MD5 0e5cd3cc2d791c733409c529dad917e6
SHA1 153f014b9eb3c4e1057c7c628cdfd125a37a72b2
SHA512 e92d27a99d59d3576decf91cc1748c70bf3a56f85df34cd2ae7c880bee69650165261d21fc812198f689c99eadb35db7d2225cc995e36ab72e73e349c548d03d
TLSH
T18C1135E1353673BF46C68BD490220CC55960F996036F66ACEA1A5474FE1C9A0635E38A
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5924_1097580486\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download