bf17832d1c570b9808adf01a88141d995c26f8600ee0706dd8ede1b991c92e79

Analysis

user interaction
yes
max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 18:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
room.html
Size 16KB
Sample260925-w6vfzstema
SHA256 bf17832d1c570b9808adf01a88141d995c26f8600ee0706dd8ede1b991c92e79
MD5 857712539866d8be4371d49b2a1e8b80
SHA1 98bc324e7495d3dd303615336abc7f024de80a2f
SHA512 370285c4a3b2b21e281899d240897d76c28a9a4c96c4f5b170276107b8b38eb6123c0f470a3d588ae0fd2dbf5ee68466794baa871df29adb67a32446f7c7e0e4
SSDEEP 192:OBeaMdWHP5h69m937Tm5Lr/uLDgw0RKCfJG0/flLbQk42Nh9wxfmaJkJQ16Tw6r7:OBeniO0gnDkkPKcw/yvPzyd934
TLSH
T14572A923F8A8053A303BC5C97484EB4F74B0D107D1574758F9AF32A58FCADE79A9650A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2620_1015928773\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2620_8571420\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2620_8571420\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2920	msedge.exe
5664	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{5F0D07CE-9568-4BC5-93E3-94087933F322}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{63B5BF53-BCE7-442A-A30D-85C7FCF6A562}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2620	msedge.exe
2620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of WriteProcessMemory 57 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 4600	4816	msedge.exe	90
PID 4816 wrote to memory of 1660	4816	msedge.exe	91
PID 4816 wrote to memory of 2920	4816	msedge.exe	92
PID 4816 wrote to memory of 1660	4816	msedge.exe	91
PID 4816 wrote to memory of 1660	4816	msedge.exe	91
PID 4816 wrote to memory of 4920	4816	msedge.exe	93
PID 4816 wrote to memory of 4920	4816	msedge.exe	93
PID 4816 wrote to memory of 5460	4816	msedge.exe	95
PID 4816 wrote to memory of 1576	4816	msedge.exe	96
PID 4816 wrote to memory of 5460	4816	msedge.exe	95
PID 4816 wrote to memory of 5460	4816	msedge.exe	95
PID 4816 wrote to memory of 1576	4816	msedge.exe	96
PID 4816 wrote to memory of 1576	4816	msedge.exe	96
PID 4816 wrote to memory of 4664	4816	msedge.exe	97
PID 4816 wrote to memory of 1436	4816	msedge.exe	98
PID 4816 wrote to memory of 4664	4816	msedge.exe	97
PID 4816 wrote to memory of 4664	4816	msedge.exe	97
PID 4816 wrote to memory of 1436	4816	msedge.exe	98
PID 4816 wrote to memory of 1436	4816	msedge.exe	98
PID 4816 wrote to memory of 1600	4816	msedge.exe	100
PID 4816 wrote to memory of 1600	4816	msedge.exe	100
PID 4816 wrote to memory of 5892	4816	msedge.exe	101
PID 4816 wrote to memory of 5892	4816	msedge.exe	101
PID 4816 wrote to memory of 4768	4816	msedge.exe	103
PID 4816 wrote to memory of 4956	4816	msedge.exe	107
PID 4816 wrote to memory of 4908	4816	msedge.exe	108
PID 4816 wrote to memory of 5800	4816	msedge.exe	109
PID 4816 wrote to memory of 2620	4816	msedge.exe	110
PID 2620 wrote to memory of 1468	2620	msedge.exe	111
PID 2620 wrote to memory of 5664	2620	msedge.exe	113
PID 2620 wrote to memory of 200	2620	msedge.exe	115
PID 2620 wrote to memory of 200	2620	msedge.exe	115
PID 2620 wrote to memory of 5272	2620	msedge.exe	114
PID 2620 wrote to memory of 5272	2620	msedge.exe	114
PID 2620 wrote to memory of 5272	2620	msedge.exe	114
PID 2620 wrote to memory of 5072	2620	msedge.exe	117
PID 2620 wrote to memory of 2260	2620	msedge.exe	118
PID 2620 wrote to memory of 2260	2620	msedge.exe	118
PID 2620 wrote to memory of 3684	2620	msedge.exe	119
PID 2620 wrote to memory of 3684	2620	msedge.exe	119
PID 2620 wrote to memory of 3048	2620	msedge.exe	120
PID 2620 wrote to memory of 3048	2620	msedge.exe	120
PID 2620 wrote to memory of 2424	2620	msedge.exe	121
PID 2620 wrote to memory of 2424	2620	msedge.exe	121
PID 2620 wrote to memory of 5860	2620	msedge.exe	122
PID 2620 wrote to memory of 5860	2620	msedge.exe	122
PID 2620 wrote to memory of 5200	2620	msedge.exe	123
PID 2620 wrote to memory of 5200	2620	msedge.exe	123
PID 2620 wrote to memory of 4960	2620	msedge.exe	124
PID 2620 wrote to memory of 4960	2620	msedge.exe	124
PID 2620 wrote to memory of 2388	2620	msedge.exe	125
PID 2620 wrote to memory of 1272	2620	msedge.exe	126
PID 2620 wrote to memory of 4768	2620	msedge.exe	127
PID 2620 wrote to memory of 476	2620	msedge.exe	130
PID 2620 wrote to memory of 476	2620	msedge.exe	130
PID 2620 wrote to memory of 1256	2620	msedge.exe	131
PID 2620 wrote to memory of 1256	2620	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\room.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ff8535cc188,0x7ff8535cc194,0x7ff8535cc1a0
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,567717718427202822,7203496530618056623,262144 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:2
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,16846371431086400018,9375927497180050085,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,3144124243763879390,7052782526421356289,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:13
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,394716111932109372,17930350513307154781,2097152 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,8880737834268418239,12790907103984375944,2097152 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,3405649048462255869,2547639927033296728,2097152 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,15808860608197699376,17438156651919546883,2097152 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:9
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,15921405789416037996,14269289331861408069,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,9238701143864844006,10318681272248793479,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,920359840354824836,9875532492548095672,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,920359840354824836,9875532492548095672,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,9786373354869505747,5816712001760674944,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,13305249247761652452,9443940902167166661,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,3537511718470703823,10652062172741854852,524288 --field-trial-handle=2788,i,12446794398066564328,17921697729760751507,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff8535cc188,0x7ff8535cc194,0x7ff8535cc1a0
    3⤵
    PID:1468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2068,i,8723620262832347749,1126255244755892960,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1956,i,162706952282624050,13399079820107771451,262144 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2672,i,3615500429028759327,11340583739660578721,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:13
    3⤵
    PID:200
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,5664088426015290929,6051720555263793798,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
    3⤵
    PID:988
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,5664088426015290929,6051720555263793798,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
    3⤵
    PID:5072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6812746119705766418,1682078002373553357,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
    3⤵
    PID:2260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,4710390540859344757,6351279249824495648,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
    3⤵
    PID:3684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,2145252605485763706,17197192620494557642,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:14
    3⤵
    PID:3048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,1367950347714346847,12637902871829652652,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,17598744567156123777,235436278626364471,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,1551903548221450151,15224870967907413802,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
    3⤵
    PID:5200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,4538275348662214825,4115378303394592438,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
    3⤵
    PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,13429464602032205013,4040451088794516730,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:14
    3⤵
    PID:2388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,5378013655580483630,4900237457125555947,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=1392 /prefetch:14
    3⤵
    PID:1272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,17908149785079657342,7994528405747697862,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=1412 /prefetch:14
    3⤵
    PID:4768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,4086628535215495437,7224345882535116218,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
    3⤵
    PID:476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,16994699407741797405,6265796813903275659,524288 --field-trial-handle=2488,i,17709868859777089581,2045391167049867852,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:14
    3⤵
    PID:1256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03d00329319490e3d2ec6b61f9e8a12665158b83eb73666756d1d6792b979c87
MD5 f9bec72d29f1e0f2dd6e4006cc5b0d46
SHA1 c44504c4b51c6c746aacf532c10c5ebff657e836
SHA512 3ef3eafd3550a107bcc03bb01b841e062973d0f912dd8a2203b224f867da719d795f9e4eab5be22f3fb2b6bc67f0e278ae10878c59dcdc1c08148e8c5decdb62
TLSH
T1A4D080157DBCA7F4E12D203E5225010576CCE553FE435105D89165594CF33924095DF5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08126c54bd139460b048bed70881ec2eed246a5165d23d58802f8221a04e5af7
MD5 6792f56a8b16de71cdff46ee6b1cb134
SHA1 2b344e6bd240f256e8ced955a740db088b329901
SHA512 5d23317e53f46eddbd06ca669cb69d8bc0c7843ef8345fa5123da2678e3f073a1eef30b8cfd5c04c904daf3a7d089ea52b412f4df3b917047a639782da4db03b
TLSH
T1ECD0C00CF9AC8378D9082037923501163B88D100FE03500180D122A504B3310004C0B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 701ab4b65e8f87235d9723a0ff7bd30ab02908cf9a9f0668b7dd6377a1205868
MD5 6567b5b05006e88c32f2b8fea4b167a3
SHA1 a53084bb034fd83eee2596f0d7b86135df4b15e6
SHA512 f20132a2d3b09024e6e3ad68fa53e1f286b07a65cd6e1108ca8765c543140fc832805d2dba1f886a6ad86bc1dc38b64a499776e110bf449a0db17a802228818b
TLSH
T1FEE02BAECC21EC2B54FD5F3CA4504646EB0013572640855F773C810D8FB422E466586C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a422db5590a67f6d3053e2eb263ad61202c149f0628fff8501d888d33f51bd78
MD5 69166df50fadf805bb8fbc4a1de51b8a
SHA1 b9e98910555b4c94f87a799c6f2344406f487318
SHA512 90f7364e1f4171de5d162b9509849c835c537ab0f06aa7205e8e06b23e3a6cb0038bb428aa305fea073530118e2ec0b70c1c42512cb80c82c74b3fe048be773d
SSDEEP 192:qQXKI8uRSKxSF1UXgmrP3pzzlsSVODKdg+IAxC9QaBnH3j3DMlH4Y:qQXbhAK0F1UDrPZHDIAxGQaFH/MlH4
TLSH
T19A13D97E2EB9CD95F6E2403D58DB5B78533395AED3F411171ABAF2288661B03DD0E082
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0f02d41ffc76063c51db76fb23cd81211fb3fcf61954a0f271c2bab8c87dd539
MD5 701a85e18fba66efd00a40f92bf6e9c4
SHA1 a0180548aa95212b80ec316c28e9163d0c33652f
SHA512 c352b2b03ac7e90060ec06aac06a25d99226adc89cbd3e37a2ae60a3015ca80af93ce5b2dc6772c3fea00318e144f487def5045ea654bfd9b15b2a21fa01627d
SSDEEP 768:NmnNTREb1GmL/HqYL/wWSpASbJhAAE/bf83cB6Dif/NaCK0RDG8L/to8nFLCOTBg:N/b1GmL/HHL/w/AuCfVaCKkL/tN7wi
TLSH
T125444FF71951A01BDBA852F5E2033E3DC1B7454E7DE1F8A9E5788C812925F32B2BCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 a91cc03cd9f28edaebb33fa63e8eed6bba864684e470403f9b47fd67973fb58d
MD5 199cbd7e1ea8ce04b38f9706264d7026
SHA1 0e2ebf274feb1cdf91dcf3f3305048c690c581df
SHA512 bf632af0d48fe1d74cb63035f439a6d98cf1e73e5c4731b3ecc75efad7cdf09de7a043747f2edc12ed390aa4228c14e99b0fd8558852c280992beeb52ff27b36
SSDEEP 12288:hXLhaH6fMiveU/KyDkUxuCcHBH4YCMbyXtp9SwDm316Uw0UjI7NCBmTCRBlh1etj:VMbNIoQHVGfKxM5JuiE6lg7
TLSH
T16E166CEDCA7858C3CD639A70B4F0E9477C7413C3F995C1D68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7faab35d04b283c5d7bc63df88e2795d901e18e1ad7d29c57200a09ac95bec87
MD5 75013f5a81eaec8514297e461bf3aa8b
SHA1 f887e66cf9ed3212cc033096cc7b7184aa8aa430
SHA512 8515e207c39de76316fda8aba16833cba5d6fe99d201d53a5b9d4d5bdd0e40e228d3fcc3eac2f7c69ae0e4cf15d8677496bb6b94e97194d8e6ce75e44565c9b2
TLSH
T1555145C89EB1C10AF3A53A7080C91E4AF673D18C9BE31E95DED2C4F81989793C24B85C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 b0a86679999ea7ed9c4e32fa2292469ef760676cbbb527d2421572f828bccc6f
MD5 1d31648e9950c6f21641285107000762
SHA1 9faba8cec1421f9b63fafec3a65eaac2b2e232c4
SHA512 b9b128b9ae77f98dd3b04cc9edf22a7f47563433016c2a3415333a752891f09ae7f771fb33a32d566b143fce11a477176226b13d2c4c7e06223f2c8cf8696f50
TLSH
T10BE0D89864C6C1AD662475C2453C6F08A2803796D69DEF07370089C0778A141BB4568B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
Size 304B
SHA256 1f844da045ae4e4e56937a272b1c4679f12badfc99e892895bf61bcaea111fc6
MD5 e31621408f289cd9771b4a7bee72f0e6
SHA1 730336e9c21b7f4f753b1fd9c4cafb9d868be5e9
SHA512 a0fe5b23623294e52f151bac2e1d57ecdcaaad55297289ddf3657329e75744e6776ddf4421e5d7e89f899f72465181a9e33dd8e0ac64671678ab6126344a1f60
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 319B
SHA256 19dbb3ae0d39e07b6609720a0d843094b8edcd646e73e27f45947a41c88cb85f
MD5 aa97db73af5f70129ab07815cf00b5aa
SHA1 b768c566bd09023fe17a62c613746822a404d5f6
SHA512 a89eae0285e5592ead22751cdf329b5b1e53d40354b9efc0b597d38de2945f8243553b1233335f8b48ad2b088129b3a559a90150171dac7ac5392b6830c5df5b
TLSH
T11EE086691CC9D23E551474D7D3B8A718C3A1760FE78C7E023F1C9C407152544B79A796
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 ce6512c6125986ad50c77ec865761a85a82b351e59da891e2845ba14f6fb81fe
MD5 b4a9f50ad3ff02c646a77219a3939e5d
SHA1 49892e47f5fadc5a3d6414fe85c47f9ab31a9779
SHA512 7d2c50395b3d02d8f710b1a8db58ca531adc0f5dc6030069aaba69a7dd968a5e778970123e52d089de950c64c609a873fe4ec8477888209d76320c68723d8cd9
TLSH
T1CBE0866804C9C12F955878FF837C6758C3D2764AA68C7E023B09A8806151A45F79A38A
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 26f87c4e7cd3304fe5b528076266958e98a2b1196f1420e7b6e93575b2039afd
MD5 ecd4ffc489bf8a74289493c76f61b224
SHA1 2a9bd95e69e201a7a2f086fe3e302fadeb478f11
SHA512 99f383131146a6b87ba2f0770adcf6b3668388deaa7b10b987f56d96910a0ab1ba2038618d84d3334899dc85bc33f3b2d80e53bf1c5858cceae4c971f7fe5d53
TLSH
T128E0DFA544CDC12E631C215B823C7B08C7E13607EB8C7F022B089940B046008B79A3CA
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 738b1110e97258dff4e78944c8434827948d901d0f7499c0a02afad4f052da9d
MD5 96e7c97046be41ac1599203d5bd126dd
SHA1 ed42ef15cc40e4bd123faed07e903f39f785a7ba
SHA512 08e8518aa8cfd73069f1da15339fa0e325ef3802021b1a9ff62de52a32a70e0fb2c022136a432a3065938d6bbb79e9e72a65c855b6033619494d73bf91757e44
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oewy+PmFKfI9O9:qDeMatha9RAq7+0Kl9
TLSH
T174B20E4D1F346222D0F09B77EAD184632E7C251EC3733699DE1420F2DD926ABF5060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c45fff61d856ec8893ab2f7a51a6486ede39e755819043dd3e7ce51f7350f8a0
MD5 bddb093a739f7cc853069455c46cfe86
SHA1 d9e63edd59d583e2e7198924defa04e4db80165b
SHA512 e12cd1d98ee436e5d91510ec64d37210ef1768f216de8cb928f82a7c09886b4c26e11c3a9eb1b6a2e961d5caad5657a9dbd0c5b1a101620a714422199f6710a1
TLSH
T1A1519EF7C3E8866D890156F0AA187E2BCE2D0914832C7D5AC8E4DF6B93E2471D18195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e937b1c4784eb629a25bb681d83ef745383d18b9d29146a67044cf23aaa6eb40
MD5 2e1928e75e85a2c445719d351c4c59d2
SHA1 4bbfac0b631b84505951925195d64911fd030c7f
SHA512 092314e1f66f2acd4a0248e57e3accd5e38970f0fca2c0d2bca3796ab94a078313dd9751791db3aa12d5a5fd2723e28da8c6b0bf80132894444f6d4c65dace75
TLSH
T1A741BEF3C3E8867D890156F4AB146E2BCE2D0915832C7C5AC8E49F2F93E24B1E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 f39c53ee47c33f7d9a56dbe6ab1333a5e7a35479dc18c1553dcab17e0d9ccdbe
MD5 021eb99c2da521c5fa8853792d931bec
SHA1 21e0d68ac653c3d93acdc2e6b8946184858cb41d
SHA512 64bb4efecc6dcadc024362974442ade09406d9a860f8d55d35fef6d0a5c267599c2b90c44fb7dc5be7b1a89405664c5a32b97a98455a713832519fca2278cc7d
SSDEEP 48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBBlx:eIEumQv8m1ccnvS6HsIGcf6CnF/Y84g
TLSH
T13CF2DCFE07276206D98444B0E4006BCFAF1A005B47B6B6EC76D447E3F7A21E2B17935A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 a0db5cf827e85a3cc261c4f6bca313b856fb20fd6e030429f87a6b5961e306af
MD5 052ba3376f55a03a9b31bd3e8a7869b6
SHA1 9b13c7240b58a494309189144c02975616fc1ef6
SHA512 c512cf98eba5036792fca59febd17a70bcd2acf2439bacd4800e5c80a191587fd3096dd2a8976e5d1c858723eeb4c7d864cefcb9c84760c6551c060c0d8bace7
TLSH
T144C0229182FEE0330425063D0AC0A880BAB9D030108094F0C9ADD33C60800FB5B0102A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b72818041613802641d869953c5f01ed2d8c28ccc28ca24325a20b5defa535ef
MD5 f06ea0d9416e92cd90e3754d8aabe2b2
SHA1 089e077055b527599404cf801082d77cc0483084
SHA512 d56ecb17480a63ffd7916357675f34dad2c3d2aaf20aed8e894134f502e1163e902fbfaaf105be6bce4eb967d741e629634e8b2c2e8b84cf62566a9a05ee3769
SSDEEP 192:sxRoRvb4Z/fqLsVWpVbqmBkGzoA8pi/g6+WNIYdBmlgShIgD6J:sxRop4Z/fqLsVWvbHBk7i/5Id6
TLSH
T10542A659A928A93B9CCBE21DFB667F53D2FD103361911F48A6FC861C05EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 10902d0ab1231347dc2a6a23221c9fc403e9492f2b63041f395f5d98f9dd81bf
MD5 8d4deb94d0ceb63aad31cc2654848468
SHA1 e01011fdc9a2230c5865666f608e486de09b43d8
SHA512 eba52990b98b0902d9c9eacdf2fee1d06433479566281a89a22536e938add9ff78a4397abfe4a21414a323def631921d55c89b7422cd76dbe9ab039012f69d67
SSDEEP 192:sxRvRTb4Z/fqLsDqmBkGzoA8pi/g6+WNIYdgMGShIgIJ:sxRvJ4Z/fqLsDHBk7i/5IUs
TLSH
T18F329659AE28A93B4CCBE21DBB657F53D2FD503261D51B48EAFC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ad7f41c49a17622d573357b086b6293fe7c47efd3dbb1ade49a1e9039bca979e
MD5 70e5f453f9891af7d8be372d9ed48458
SHA1 a89c059ab4390ac2e04a2a93af3fa0bde06ce3f9
SHA512 5db932e83cc30cda8f0acbd12d6d1f6c63168aa10d07640aaa082d8689f2c65cfb00f6fbd281b49e52bfcedd12714573a3c00466b7f14f3e820e6d8d5324ea79
SSDEEP 192:sxRoRTb4Z/fqLsUqmBkGzoA8pi/g6+WNIYdkMGShIgD6J:sxRoJ4Z/fqLsUHBk7i/5IK6
TLSH
T10632A659AD28A93B4CCBE21DBB557F53E2F9503260D51B08A6FC861C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3780e3142c0329f5b9dab86af07ff8e9591c76d1d1e4620b569689514382ddc9
MD5 001ea4934699a060fb440fb7429142ba
SHA1 c4104f774481fd0559fb404c1127add1b106fb0f
SHA512 0ada9bbe3be1eaddf3700a5a5c7a0a6b217c0abdae6451bcc7ce352b52627597726b5ec57dd20040a71b6e5316ea25906f6d45cb488066915fe580b793dcd6b7
SSDEEP 192:sxRoRTb4Z/fqLs4qmBkGzoA8pi/g6+WNIYdgMGShIgDoJ:sxRoJ4Z/fqLs4HBk7i/5IUw
TLSH
T16F329659AE28A93B4CCBD21DBB657F53D2FD1032A1D51B48EAFC861C04EB6DD121780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e98653faf6e71c32924bb9985dd5126117d88dfd70fb0f734bd5433f9e16ee3a
MD5 f816262131600503a01f209670db1fc9
SHA1 9a6d29714eb81c9f540ce1201a96bd6a6972fed3
SHA512 ac4f5af2a32a3d9f331739dab00db0593e88f230324b748da89346a692004695242d1b0d546ab31708c7171e4f5377e73c08d27633c5923eab7ad14ba881e56b
SSDEEP 192:sxRoRvb4Z/fqLsGNWpVbjZLeCGzoA8pi/g6+WNIYdBm1GShIgDvJ:sxRop4Z/fqLsGNWvbNLn7i/5IPN
TLSH
T1C3429619A928A93B9CCBD21DFB657F63D2FD1033A0911F48A6FC861C15EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9ec294ed3632a7879bf1310e313f6c195f6af36a2e11d52b244cfabfb3f17c0f
MD5 95daab0d705652f869d343127fbcd62d
SHA1 2937258bfb6a1f1a28c1b048c115cb3a72d8f218
SHA512 d4e2303fc94e19c4d48a2b17a9187eb034d7d661109f872a77d54f23827889f85cc4ce901d49064a0e9a81f4e8c2e7fae7be52cbf6b02b857c00a12380bfcf30
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRFwroKrd:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0Vp
TLSH
T169B2EB2B604DCB7E4FC11A9D9C196FD76D9802C796588D4047FED84C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 c5b07609d98fa6aff68074afa6c7cdfe9af6285f04b829ffc15f3e37bc5c9838
MD5 7bf5212912b4d39a2faa37f0dd2b8c2e
SHA1 7e9bb2086f4c0569882cfe446f02fab205777108
SHA512 7b055b2571c8d09b3796ab7ed3b0958395391dca6793afd6f1f56835acf276d5fb2a35e8667260751171614e92eb20cafdbb743d62afb73e0aaa0b7d1bb0a2f9
TLSH
T17FE0269485C8D57E7265304342ADA708C3E87B4BD2CCBE423F00DE84714B905B996292
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 a6ed185bf337405c1c558d16900f02af07a22f06c4e5c10244c715ff3401ce17
MD5 e39075e895b68f378c92357cd28a0066
SHA1 9ae02fac5ec874c5a11dec32f2ca1f74fedb666e
SHA512 bfa4913817c57c233439c19364716118385ae84f13c0057b07ccc15c7cca30a3302982b8ab414ac612b0ade5834d947f4fe67cb2b433de4a0af797a37b63444a
TLSH
T166E0D86856C9C23F628670D7426DEF08C3A37B17D6CCAF123B18994073072847247251
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 927ca0500fbac6c770c57bf870dbebb9d68f50710b5c5c4c385fb56ff331a2b4
MD5 122ba3a629d22ff6683b9c9ae8fc8749
SHA1 9ebdd52821d9a7ecab12ded183b8fc01c3e2f914
SHA512 9a85c95c75a9c99f676b0c036178b56a9dc152761e2d8bbcc90be035885ed2769f3e09c4a6c226773e3cc8a5c8c998861e63a1b7a7f026e275178e5e22ad5da1
TLSH
T173E0867849CDD23D5505608753A8AF4CC3F07E0BD7CC7F46670C4840B503254B6AA795
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 22c1f563810050c285d62efc73e19c2808442db5375ba4bab98d43a53c035e47
MD5 04d8b4bcfbc50be9cefb1564f3d7eb90
SHA1 bdffab431d0c0eeef8e0e3cd59350c8be9ad1aa5
SHA512 78af99b082a610d7c4e478e4d95b17967c6ed7a803e9467b929373fb4836b6be1e6910d48167de82f2a03ae14360a7692a02fbe91c43da36981de22be7be7122
TLSH
T1D251F65270BA22613E3E250C80E0A59E234236A733D5EE7B37E804561E27D664DFDDDD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 688d71f4cf85a80638954aa51b8bf32212b7134607b7eb8a666a2e981d2c7a8a
MD5 3c5840bb566eb1ffe75f0408cbad0332
SHA1 06ad9e1d8ffbcbb0341f027e8975e0b5322b1c6d
SHA512 f14828ab67131fd3d5f6030ea41959ac8b7ff1e42695199a88ec7aa30e8456494e1ee2e71130b2b43c65b8fac653b48972de6c6bf59dc8537326be81eacba076
SSDEEP 48:KIL2HLtNdivlwRIebiKhHpRi17ys4JLLyf9sZNH7PUvbOfIeVUKhRpPU1NEsOn9e:KMMwKxSCaeUKraSq4KnKuCW
TLSH
T133A1045271BB22203E3E250C90E5A55A238236A733D5EE2B37E804660D27D6A0DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 72e645d10970e2636703aa2e3ab890aa820b22520e13ee51070d2f1297e54ec4
MD5 f5cfca8837a386b879a21df8612a8a64
SHA1 a642cb174dee8b77824a1e96f2450a190d02cc01
SHA512 08d633289c28c8eef5ffc776c88a67392a8621d6280ff635f664e035163ce63c829db05d0637b82acf6c662c24bd4eeffbb349b03953e23d5f6b03399ab1cab1
SSDEEP 384:DNrRZyCSDnxTICi6MEhIKyll7svbFKfk7:xFZJSDniHLyI1l7svbF9
TLSH
T1CD44850A7B747001EDE6DD721CB080771E3CB16E8F22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 f7cf2ff67b83f265ed80196342b906bd4fb1efcbef8550d2bd5c93350a452d50
MD5 e82e7eeab8044c19c0859266e01fcae9
SHA1 beff4ff876fb238fe6a644ff23c187355b66015b
SHA512 f585b7eaf4e512e15f0bb0ec7fe644bf6c28758c389cc9cfe0c1280304f263b3433cce21784168e682d74094e764d753a987f3e76b9c3ec35f9eecdd75270cc9
TLSH
T16DE0489232F530746F4D9540D154350771843B963749CD7133A945644E4481E4EAEE3A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 7071b8a8da721a27954072d9e36057721a687dbc10d01288441c16ba147aeb47
MD5 489d767b6083b8690ca313ad5317fe0d
SHA1 3a9b5f7e1348890b3a5a517bfd440fbc1edaebf5
SHA512 8ab84eeef3b685b3d60c51ab44a85e407f2cd3f747c43b5a0dd08f64b28213819edf99d085844c23b5a5ef9961e75e38cd8c3cfca2f699a50f1d6c7b9fc69a57
SSDEEP 192:KZOHfAsFYVQWIIIlb1MIM3eYcYklu0MQ2sgELE:dHYsGQWIIIlb1MIMuBDb2s
TLSH
T12642845A56051B77C04F9F36236682817BD898C24232212D71962C5F8EF3F9782D52FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 dc9ec186ada9ad39ef5115643f86f01fcd847474eb6811d1a718e11e2e3559d3
MD5 ff4632fb90434e33fb5d42857f534518
SHA1 f2fee2c2f27fc7b0183a6131568c584736d68cc3
SHA512 1d3d77b31ce8b1f6ce03e9930edd8af878b81e886ccddab8527242a3ff31eb6a67f11fddf04ad56f2bc2b8b9454f91121eb030494468ca9b1c9e51c447fbb7d2
TLSH
T1A9E026A4A8CCC2AEA21C219B213C570883C63B0BEA9CEE067F00C444E441100B7AB2C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 2b958092c1c1780306bec68cf64b057d1f93c247c39673c1baad704270de1076
MD5 925f2150ebdf4a25f47fb2d04a13c3f1
SHA1 c249ac5d1885af9af64bc774f4ca06c2e099c6fc
SHA512 55619240376fcf56b22b2280c50283944f1f77106fed3f0c34bc8301ab52c6b28fdf22d97d38ccb0580270ed9066020466cdb27c9c4f392b4c44832b8407cb5d
TLSH
T15A212651F330C158E54B827A607EAB6A0778D8538FBCEE0F58B630752E71B041E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 6d57f592c4bb1edf1f555eaa422dbcc79921c3ae0d05bd2ffe1325481ad54d86
MD5 d9f97975912129d155361908d4878a66
SHA1 5dbe83d24f4dd86169f5dce7e2f850b296a134e5
SHA512 e71104931faf17109698960dbad9d77d46838c1e7cac8c10db1c0d2ec5dacb98d3b27abeefd2becc256d369cfb2d6e56b0348be77892aaa2913f3687a66b9c56
TLSH
T1F3E08054A4C9C1EF521521A7017CD74C93D23A47EA8C6F076F04DD445541145775F2C6
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b0f6e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b0f6e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 03d06a2ed3b9d021bd218872935ca50630d7d8d58c772d8b4cba1fd19770732d
MD5 445214eb274a948ab1f59d5476576521
SHA1 fd3b96689e834c0402c0dc661e497d20972325b8
SHA512 b92be8e9c6d6668fc1dd0743d0d11d64f3d7343a6097bf961aefd5ee19605b7f9f91a349fb4bd8bf4c65872d899d43d37ab304a0eb17913ce24d8ae6d59e6fe4
SSDEEP 3:MsEllllkEthXllkl2zEelAQ+/:/M/xT02zNAN
TLSH
T1ED44041C7FC41415CDD470304011C7500370DC540513D753345304135CC7DC40C40000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e87871acf1d61a51f99995073ca4da314dec4eaf97f8b611d1738c951517c0b2
MD5 08a2738156246d83be4ad23d37432e24
SHA1 3a4a75c9cce2b1ae3bc598fbc7bda0f07b7354e8
SHA512 cad0cab5fe3fa454d9cffcb721f55e3b2ca16ec1cd1694b8e9df05e6c6e878ea4e34afe9d3a83380f4ea644c1f8eb60bf618ef35d4277d6ba181dd03006c4c7c
SSDEEP 3:MsEllllkEthXllkl2zEelhf+ll:/M/xT02zNJa
TLSH
T15144040C7FC4143DC5547030C411C7510371DC54051157D3345305537CC7D500C10010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9e9e953f7eb504a486a50602b34077b7ef80f96d23061fa51ba6709fe0420abe
MD5 4a26be5082025a5d8f314aa1f0db044a
SHA1 f0c737667f5199d2ba0a740279a24160b5a80c5a
SHA512 c8785ce0c54bd4f958d6dd4182bab70931ffa3c6bf044def209ca99a447569ac6995099c12c910ee7f6b8e6e2fd66974456c292e1d4d3f901563ad544deb1b4f
SSDEEP 768:Gm3LzWK3Oqji1h3Yogkl5akl8pbHW0AWD5hw/n:Gm3Le1h3Yog05akl4bHW0Ashw/n
TLSH
T160F2AFB9EC75DE735DEAD284B5166202BFF890675BD84AC4D4DCAB0E01876AE030BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 fd3020ed867e1d679919d90f0d3b71eafe958e04f8697636ba1a4c6e623158fb
MD5 aa042a443a4444633af4b1be067e0470
SHA1 7874f30b7a42746a7cfa079551e2af983d026818
SHA512 4cdbfd52db8d448f4659a616fab317ec731b440d58421a046dc622a3285fa8af1f46497db5239bcccbe29d60c650629862fe1d24b9bfd711d8195f2cfe6b45e4
SSDEEP 768:Xm3AzWK3Oqji1h3Yogkl5akl8pbHW0AWD5hw/n:Xm3Ae1h3Yog05akl4bHW0Ashw/n
TLSH
T1DAF2AF79EC75DE735DEAD284B5166202BFF890675BD88AC4D4DCAB0E01876AE030BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0e4feb5f39ff29821cfdc3bb6aaeab4fa0fe21abceae0f3fab1bc7becfd67335
MD5 724402ced7ed4136403490190ddb7526
SHA1 71211ae72793a71be5c934751d2f15d19ed418b6
SHA512 f8777e2501e6ba5d8d3498d86021a13138c387d121759d75e7015c2f1a966001c39419a5111419b54e9af5d4e8c45ced2389f7c4e8ff714ea7685643949fec09
SSDEEP 768:Wa3dpWK3Oqjj1h3Yogkl5akl8pbHW0AWIphwd/:Wa3dd1h3Yog05akl4bHW0Alhwd/
TLSH
T117F2AFB5EC65DE7349EAD284B61A6242BFF850675AD84EC4D4DCEB0E05837AE070F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3156b52a88145e1f90351c112dabf82687c6fbf3df624cead03dc1bb43f1b2c9
MD5 269365872c6efc4ba27335a79070c3fa
SHA1 4a907f5892eb237cc0df8d19bb72a10c7feea789
SHA512 67afbaa18e4e4e005209106c29bcfff6f7ab07f3c7f3715b9b0b1c9cb723726a1e5ede4642293ac52040ffd596dd62de36b4da8e2829be32f214c630f8e2d7bb
SSDEEP 768:b/UxvxjgC+b3A3WK3OqjC1h3Yogkl5akl8pbHW0AWD50r1:OZj3+b3AC1h3Yog05akl4bHW0Asg1
TLSH
T18703BF39AC69AE734EE6E244721A5347FFF8596356C49AD484DC9F0E06873AD030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d8d8613afdacbc41ae8e011119d95bc4a219c4b84e8f8e6b033ee14c6b507b54
MD5 dd06f8a973ba36ecc8629a4f2401a11c
SHA1 b084d347153a89813fa10f0b171d1063ce3d2050
SHA512 e726c098762ba7fbf6fd8939e2ab3e952477bae7ec999d3be195b2c32d50cfeef64f30aa752830ea58eebe08635e98a9957faa59203ab0d84b58a9a777a0395b
SSDEEP 768:ta3dpJZ3OqO1h3Yogkl5akl8pbHW0AWITt/CwdLwd/:ta3da1h3Yog05akl4bHW0AvRCALwd/
TLSH
T15503AF7DDC659D7B4CEEF384720A26167EF85137A6E84A84C2DC9B0E41A36AD530BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bd6fd2eadb6a0413eff25477f24a827a23476cae10e62725e2da9a973962e802
MD5 51f69fa8d08396553f1a9a8c2c164238
SHA1 d1b96891a9a3089536e004565da3d8ec78a712dc
SHA512 0696a8941b4732a1612835ab7f0155b53348850b4cf39f4d69daabce1bf33a3504f53e020e5c42db85367b0be6dff01f0b375c1363fe7a94104d5551a1ec1332
SSDEEP 768:ya3LdWK3Oqji1h3Yogkl5akl8pbHW0AWD6B9guhw/n:ya3LA1h3Yog05akl4bHW0Alcuhw/n
TLSH
T12D038D7C9C649D3E49EEB344710E26166EE8517BE9F48984C3C89B0DC1736AEB70B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 55KB
SHA256 759bd85c729b16eaea3f023ebb48adaf9135637b07f1a683037937e7d680a07f
MD5 b1c9ee516755a31c25bf9ed8cb4a24e3
SHA1 de484d4d9abefcae0a07cb7818f8ec119b02d59f
SHA512 95f9170760781db5e58e67d6785173206c46f3379e2433c9241e3b152183e0a548960132150d72e9290ab9b6d0c680f222724afc9f118b1652d93db237259084
SSDEEP 1536:Ra3vp1h3Yog05akl4bHW0AqfTNiUglORCAKwd/:R0xDg05sHlpxsIRvKwd/
TLSH
T1C543BF39DCA4DD3F99DAAB84A3097607AEF4106796ECA9D0D6CC5F0E00A72DD0347C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 6f54733c34bdb35f1acc9b0a1bce2345885e613f2ac93decc9bac8d0dadfde52
MD5 c60fd539783c7a6f74789b550bd288dc
SHA1 421ac040144c37570f02f7482e28db9e91bf459f
SHA512 b6196bcbd09835c36080db722a03a2424d533a3003e1770708e702264dee94504480b443bf466c54996d20950092be7c99b47571e15f8f971ba132c621912cb5
SSDEEP 768:B/UxvxjgC+CZ3wpK3OqJ1h3Yogkl5akl8pbHW0AWTXSHvP0Vv:UZj3+I3N1h3Yog05akl4bHW0AGSCv
TLSH
T1C503BF39FC65AE778DE6A244761AA317FFF895635AC056D444DCAF0E02872BD030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 1dfe5cc8b397aaa7a8d867626a8db9d7a8d40e106e6f18819166e978b5a9205c
MD5 3179e61b19dd73d9d2900927b12e27ea
SHA1 cb6315dbeb07ca186c9bd48f1c6795b79fbe31e2
SHA512 3eef28e623d28fd5e4c172a4d99deba7c0023ce6d8215de87d9ab3a79f5099fb3920a6b12536233571f4225bfa11149d13bf88127651f0db42d6b4c3a9cd82fd
SSDEEP 3:MsEllllkEthXllkl2zEel+fu:/M/xT02zN
TLSH
T1C944041C7FC4141DC51470305011C3504775DD14051357C7745104135CD7D400D00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

9afa1336-49c8-4132-9a3d-5a6c936a9278.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9afa1336-49c8-4132-9a3d-5a6c936a9278.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
MD5 e045e65cd8ef3d083617318874fb79ea
SHA1 c2fa643f68ddf8df9e99d41cecc7525e5a2c08c3
SHA512 23c380211a66716c26bb85d47c8d82531cd1ed92636bb91e281a4abb9e2e2123967e8b4761d830c99c8fabdd7d6e7526165d78111e0ffae97194ce7a1195dcb6
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfL:TY/IHRH34kWqB1kQnjhHmr6ITmU9L
TLSH
T1C223886EDA2CB9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 0da721a9f62eb90c36261bb760fd7a9188f2f8a46ccfce79c68f851fcbe628be
MD5 1348d9640fee2342f7886e49d7133695
SHA1 b70cfe3a6bdf9f87912e0fd1d672178d9304f2ed
SHA512 3c4717e9317d1557ee02dd865a639bbf134cede913410219111583caa84e112637a9065291f1b1bf8af3ab860daf084bf820097efa87251d52f2d643fe6a1151
SSDEEP 24:wo+fAqL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uwd:8AqY/IHRH34kWqB1kQnjhHmr6ITmUi
TLSH
T1AC42876EDA2CAEA2FEE00B3ED7D1D4127B39A60EC2E4DAF1096B505746C444405DB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21986765-c109-4d2a-9408-9a33d43d8e89.tmp

Path C:\Users\Admin\AppData\Local\Temp\21986765-c109-4d2a-9408-9a33d43d8e89.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 bdc048ca572232ba011735a0b59f144b50530765cc3c47c5a8a89b0abafa3a15
MD5 f9c30f879b7dfc415818b48cb9f58353
SHA1 b0086326b2cc228a9be2fa68bef73c066190daba
SHA512 562e00b08127f7331b3367be8dc851c9cafb46225988f56506076844d68ac8c2451aae44f042b550663028a2d90b2b3a573c4bc950d1ee65753e1c7f4bb84b83
TLSH
T16A11A2E13535772F0BC64BC9A0614CC02560E595133F7B8CED5A5560BD1CEE2AB9E3C9
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2620_1202251476\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download