7a8dab6692ced2784ce2414957d4041a50599b8adb195647275d742d98431c6a

Resubmissions

04/10/2026, 02:54

261004-ddxrjasz8k7

04/10/2026, 02:40

03/10/2026, 08:48

03/10/2026, 08:27

02/10/2026, 14:39

02/10/2026, 12:54

02/10/2026, 12:48

02/10/2026, 12:41

Analysis

user interaction
yes
max time kernel
271s
max time network
271s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/10/2026, 02:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Minecraft v26.42+.zip
Size 23.8MB
Sample261004-c6dnpaybld
SHA256 7a8dab6692ced2784ce2414957d4041a50599b8adb195647275d742d98431c6a
MD5 82a191694a8336ba5b0afa72f69ee719
SHA1 618809f05d555e328ec84837622e8963e4de88e5
SHA512 f03a71db4b1b99384fb9a64cbb9dd33e80713898b8bd3a33f25b276d108c1251e1798750a13495a0b45fe238d8fd6677d99930b14a68630f4e4cb6d8d0daf147
SSDEEP 393216:l8VXMAsBZia+BuB+e4UfcouoZtJyLPoMogRTpkSF8A3xelOxwreJCh0ONROwFKY2:l8sBb+Bu34zoR3yUMog9pxFbBSreJCyR
TLSH
T1744733AEA9AC4B5D0A69427FCD35971C1DCEF0BD4D2C22BDEDE64C692047D0322FA095
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Signatures

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

ioc	Process
\??\F:\	powershell.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
4388	powershell.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5204	msedge.exe
4368	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3353145205-3618084634-580274525-1000\{99ABBA83-9673-41FF-A89A-37ACA6D612B8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4388	powershell.exe
4388	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4388	powershell.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 924 wrote to memory of 4548	924	msedge.exe	106
PID 4548 wrote to memory of 4696	4548	msedge.exe	107
PID 4548 wrote to memory of 340	4548	msedge.exe	108
PID 4548 wrote to memory of 5204	4548	msedge.exe	109
PID 4548 wrote to memory of 340	4548	msedge.exe	108
PID 4548 wrote to memory of 340	4548	msedge.exe	108
PID 4548 wrote to memory of 6112	4548	msedge.exe	110
PID 4548 wrote to memory of 6112	4548	msedge.exe	110
PID 4548 wrote to memory of 1028	4548	msedge.exe	111
PID 4548 wrote to memory of 1028	4548	msedge.exe	111
PID 4548 wrote to memory of 1028	4548	msedge.exe	111
PID 4548 wrote to memory of 5288	4548	msedge.exe	112
PID 4548 wrote to memory of 5288	4548	msedge.exe	112
PID 4548 wrote to memory of 5288	4548	msedge.exe	112
PID 4548 wrote to memory of 1816	4548	msedge.exe	116
PID 4548 wrote to memory of 1816	4548	msedge.exe	116
PID 4548 wrote to memory of 1816	4548	msedge.exe	116
PID 4548 wrote to memory of 2532	4548	msedge.exe	117
PID 4548 wrote to memory of 2532	4548	msedge.exe	117
PID 4548 wrote to memory of 2532	4548	msedge.exe	117
PID 4548 wrote to memory of 3820	4548	msedge.exe	118
PID 3820 wrote to memory of 4856	3820	msedge.exe	119
PID 3820 wrote to memory of 4368	3820	msedge.exe	120
PID 3820 wrote to memory of 420	3820	msedge.exe	121
PID 3820 wrote to memory of 420	3820	msedge.exe	121
PID 3820 wrote to memory of 420	3820	msedge.exe	121
PID 3820 wrote to memory of 4392	3820	msedge.exe	123
PID 3820 wrote to memory of 4392	3820	msedge.exe	123
PID 3820 wrote to memory of 5348	3820	msedge.exe	126

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "Expand-Archive -Path '"C:\Users\Admin\AppData\Local\Temp\Minecraft v26.42+.zip"' -DestinationPath 'C:\Extracted' -Force; Start-Sleep -Seconds 900"
1⤵
- Enumerates connected drives
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4388

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3552

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
- Modifies registry class
PID:3040

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
- Modifies registry class
PID:1884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://extracted/
1⤵
- Suspicious use of WriteProcessMemory
PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://extracted/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x284,0x7ffdf904c188,0x7ffdf904c194,0x7ffdf904c1a0
    3⤵
    PID:4696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,8404126065939831724,8811050257000570311,262144 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
    3⤵
    PID:340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,5591866894579841368,7630407260091342007,524288 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,17702751507331772394,9979228052635530549,524288 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,12120706764050740147,4426554626507666322,2097152 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:1028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,8223660232226288541,5417894170269114624,2097152 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5000,i,14137535427224778901,11885610422588054991,2097152 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
    3⤵
    PID:1816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4776,i,14967254245045532104,7451520424470866054,2097152 --field-trial-handle=2248,i,8407930272685014217,13234462735054270197,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:3820
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ffdf904c188,0x7ffdf904c194,0x7ffdf904c1a0
      4⤵
      PID:4856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,5810507505491648022,10351992919961425268,524288 --field-trial-handle=2284,i,819997272663833474,12894964512820369210,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
      4⤵
      System Time Discovery
      PID:4368
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,8256877403314494584,10076494109424021429,262144 --field-trial-handle=2284,i,819997272663833474,12894964512820369210,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
      4⤵
      PID:420
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,271368723431286045,11449920231406694571,524288 --field-trial-handle=2284,i,819997272663833474,12894964512820369210,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
      4⤵
      PID:4392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,16075252407778486413,10529931966755809763,524288 --field-trial-handle=2284,i,819997272663833474,12894964512820369210,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
      4⤵
      PID:3128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,16075252407778486413,10529931966755809763,524288 --field-trial-handle=2284,i,819997272663833474,12894964512820369210,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
      4⤵
      PID:5348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2956

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3ff33b86-6a85-41c5-bf12-c9f60a08d381.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ff33b86-6a85-41c5-bf12-c9f60a08d381.tmp
Size 25KB
SHA256 739ed8722564f93344632795c14b64b1c0f219e8ae7938c98facd5840f0d7f37
MD5 307bac4965d78fc5960c4c43533dce38
SHA1 06f0f778aee06ac455f26b813ab041367edde729
SHA512 f99baed774f2429bf5ca824147497b8d833cb565c3654ad0ab4efcf0b12ed0e5dd7edaf32065b8abb2c264ccec57e0cd5768a0f409d543ff37a3970998a5f4f4
SSDEEP 384:n8iFiZcI63sNY8TUNTUlImkrE3a+p3tBfFBdjbVJsBh7O6R2FeokqgL/7IzvoD:nFQ639wgOBlBxTih7TRc0
TLSH
T10DB24A72ECA4DAABECFB4FD9A74A7A13EEF00163959C8AC0D9D85D1D108359D0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5edd90b1baeb2e089f20776064e97b90615f17d249e44b7a9c0602ff76486d0a
MD5 9d29809c2652c8f7dfc1714b2ac1a04f
SHA1 28fb378c24d9aac9ca93b7f2fca1fbc0a530d7cb
SHA512 c345ef3a531aa93d7824ddea36d18622a1570ee297cad7b5d96e1ae939f7d3707f43de0eb45199d3a54bf405be219fdbc9945a0fd027f574d395ff53007aeedb
TLSH
T124D02B48F9F88054D402103F82604B4033C581545103B001808422650C867020A54050
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a90bea09e212134dc17388b25f224d71e49ca39dcc69bc19702622e77398e31
MD5 1b78c171c4c68630e5b7ebb32c84e785
SHA1 91cf5dd71c41350998b7d2281087fdcfdebe69c1
SHA512 ea0518551e5ebe409c443be54112086677308fdab24beab120e4553deb487efb00bf47a7a850d5952ae98f894136b4b665897af533998d21b0bdebe2ab6f9313
TLSH
T130D0244CF5FCD054D413103FC3304F4033C5C5545103F001C04433550C477030754050
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 77d8f9655e8605dacf9173174ed3d4e541b8abb9b2a53720558cdf09a3f90fe0
MD5 aebdd585defde2f356ce7acd7dee3778
SHA1 28457b1a7c107598e128a5b603a19b45c1aa9308
SHA512 4728ae6158fd005dfd4f86822aa41121fae41905b50764ca02d36b88b5073a3720c6d1831a5d0581a27c6273e0344e9733f61e8f7aab3f5c5b64728b3611e38d
TLSH
T127D0C008E9FCA5E0E035103F83300A4032C8069153036101910415050C5134309908D4
MD5 SHA1 SHA512 TLSH

Submit Download

17d89ac0-0533-45a6-ac41-6c0d6bcfa3ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17d89ac0-0533-45a6-ac41-6c0d6bcfa3ea.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6bab7299-42b4-4f95-a99d-6e3a949530e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bab7299-42b4-4f95-a99d-6e3a949530e3.tmp
Size 649B
SHA256 3329e78300b344f5ebff7b9b6e64a1de9b9ba92cf2e8bf38aef7392686c40bdb
MD5 06c74fc0bf399ef65b6fa220daf6c918
SHA1 4a00d1b92c1df04724e66523235aacbc82df51e6
SHA512 39cbb4dd0ebda0168daa95cc4657d7d6feda3c61f6219c2d714e13a6c47024b753a966e45f857c5d6369176abe0b219afbc93e1bfe74d18e3cb9844d1615061e
TLSH
T16EF049F5CC31EC2B08FC0B1860A54A46E74153272780884F3B3C420D8FB193B8286C5C
MD5 SHA1 SHA512 TLSH

Submit Download

8a743eb6-e052-457e-8a96-1ae56d615177.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a743eb6-e052-457e-8a96-1ae56d615177.tmp
Size 32KB
SHA256 e2f2e7e3887557a18cb5c86ab9bab6bb5a43261591e79e83385ed9ab6bf118eb
MD5 30e5a79ecc2fd4cabe7e9226a267adb8
SHA1 7e6d47e8edcbf25c95218ff76f21760d74b01db6
SHA512 58abb076d9f5b14908df09dab64db35d210ba3f8eb35419e9094ee1e472a045b22133250e15a43405c8551b335da604194234aca6a3e80049e541da8d7b880bc
SSDEEP 768:HaaazDd7pLuLMVVWvZTyo8F1+UoAYDCx9Tuqh0VfUC9xbog/OVKphLLlCQcmMroS:HaaazDLEMVVWvZTyou1jaDphLLwVmXWb
TLSH
T10FE2FB7B780CCA7E4FC00A9CDD1A7EDE6DA8028BA698C94087FD945C02D67EF51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 84d6f392ab7cfd54a773fea91faaef0718935b432c6b29e729916b24537f6370
MD5 95b7d1dddd5dc2f3bff81130860d6492
SHA1 c17f1a52c1c44957c42783a03131141dc74b31ae
SHA512 6e3202c578cc6b1255c221a108e7b299878f78846e91b2f6bdac8a2df7c1e61c3e60d4792e4d09b1a6c90bca57f4ad825df2ced370399092230963a6b1cc2455
SSDEEP 384:xRZNXkHy/6sIiVG6X08v43XEURkunMj/qNFks9l+/eK:DZNX96WVpE8v43XEGG/e+D/e
TLSH
T1DD13E63F72112C6AC6F21C7D556B6B736338E171E1F521430F3AF929936BB16485E812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c9db39b3ac484189de851d77c117182ea0fec66c4703e95e0257d807efdaa4f4
MD5 6070b77bdd1dcb27d709168532de0b5f
SHA1 c1e7bfd2a8c1bc6019d6100f3ba416a672a66953
SHA512 363e8ce01e1f3497302f09d665558fa1488d62825d7be66bf11203bbb11ec99e16f5340d3e1c23d9edab247d07514dc92bd719ab24f391721f27a71c14167ca1
SSDEEP 1536:Rm/M5L/BfL/7/ECxZulzPFI0X7Gh1NrLL/7L/EL/t3nqA4/sCALZO/x6:qM5L/9L/JDeGh1N/L/7L/EL/xS/sR
TLSH
T1FE4450F70951A01BCFA842F9D2133E3ED17B415D2CE1E8EAE5788C952825B31B6BDE44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 831e61869b03d6535e77d8b7124edc7918ab2edcc68bf0906db1a5bf76e8186c
MD5 76f5feab3641ff0cd544cbb9ca52f662
SHA1 69f880272d8df06d9589219edc4979300cb9bec1
SHA512 779e9eba66812abc660fd7b37f6862fec89ef27bba2eb54ca3c61205680b6014369c4f83ee0c6db346766460339916907d06abba287d0e5f6e5dd3b1080d5d27
SSDEEP 24576:zFUR/vBvSnDQkyFDy7oQMLEKsKowMqTGn2SMPUh:ZUVBvIh7oQYbsL+4MPe
TLSH
T1A3165CEDCA7858C3CD63AA30B4F0E9477C7413C3F965C1D68C98C584026B7C5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9f9b6b3327a185220afbaea19d88e354d307ed25096b4c6a4fc5095ef6efe7c8
MD5 3d21cd5b76bf92c2db50d873e9427b9e
SHA1 c516dea7b5d8f21f4ffb3ffc70df5e37bb2b0c3b
SHA512 d471b8615d7bd50e42887c31beb8b00b324cda26265e8f55c32ab588a02494c6957802880208884be8f5cfb8ef7f25a63d9c19b518c59078c24d35d1f32e6d8e
TLSH
T1CE6172A856400F46C7BC343D7BE401B7773695C27CB31EEFC999D5B8AB9EB614190040
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

0cc3c90b-3cc5-418f-a189-2acdd781d2ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0cc3c90b-3cc5-418f-a189-2acdd781d2ce.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 ceb1e2f0accd1e04cdb9acd611125b689c71f77610d55c227f37b4e45d432d84
MD5 d89bf684e6c106f6ff560649ea4340c1
SHA1 4a88b8f0f9c6c1f81ec6cbf84a87aa7f8f451b96
SHA512 765064aeb647823817e053bec4fbc168b92dc200757080d4193e423ac8e8d2df84fbf46ac819ba0337d16a2a9e09d3930db0f6e23918c5dce8700b6766bd4c11
TLSH
T14CE020E9D4C6C11D555434C39274BF0C87C43853D692ED0717C0CCC87A4E145BBD7956
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 027f8b5a3cc0dd6af2710e3728683135cd0fa79a7d926c18d7c0f4a798902936
MD5 6a4c5a61317fbad7893698b41a0230f3
SHA1 1d4030090025c17c9d5a9ad0e0ae78486a42259b
SHA512 cb1478ac89aaca54ea76b700fff9c6a3aff054148ae10edc78537a78d37d184c6c0813a62603e4843eff13d984299240adc26f5701f3954a095dcd4e34846d09
TLSH
T176E026EC44C8C13DE11869A382F87708DBD03413E2A0390617CCC888714B249A3AA2D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 eaebab91cf7e77d7d4f44d8eb2c2823a5b06d088971fbb6049ddb9af34b9b432
MD5 96819f21a752930a3c920b21ba163331
SHA1 f9dc3bf4d7722a5ce79fdac2b3fc55ebd5a2daca
SHA512 aed8286805dc9d7eb09560bc215d6cb07638448c8f5f1893d0b8f91b2a8bcfe9920d9d5f09fb4d7bda510b4fd816fa8b008b45019bbe3dc8456ca69e98f9dd95
TLSH
T11AE0D8FA45DEC11D610C64AB52A4770CD7A13557DB887F051B84D948B40F004A7912D2
MD5 SHA1 SHA512 TLSH

Submit Download

0471f655-8a39-43fc-9809-23eb7403c59c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0471f655-8a39-43fc-9809-23eb7403c59c.tmp
Size 1KB
SHA256 941c061f48a8e997f1a4e4fcf3d56732009685a874a095c16cc725e19e79f928
MD5 ad764dfe23ac075b7878fb416dc5f718
SHA1 8eae6a38cdc5d2831bb614c690dd19f378a8b99b
SHA512 e07a65a8793cb5a4e45a3a79f42406f7d5417c3bcc583b7b10d5213a1c4eb142bad394ed89afe254ab9de8107c62699d34a6e1688f4379016b88374372d1258d
TLSH
T11931C2F3C7E4856E890196F0A618AE1FCE2D0514431C3D59C5E4EF1B97E3471D18165F
MD5 SHA1 SHA512 TLSH

Submit Download

7c2f7a4d-e4bb-4790-ac4d-d497252450f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7c2f7a4d-e4bb-4790-ac4d-d497252450f0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 04d4aa23bc377d32dedd674847041c623efd93a55e1215779a28fd6397c7a140
MD5 41601a18cdcba7c3e86e8dc913808918
SHA1 ba6f37f2a48c9c3cfe3840628520ed035fe4a555
SHA512 30bffe22a08ffb51b311385b9c9deaf40fda9948592e84cb2884bbc4f1b685d57f090fba0bccc1df81c51cf6c2784dcf42736a5bdd4f626cd71357eba9535ba5
SSDEEP 48:T2SLopFMatSaw/auUOt8BMoCwEGOWFWAwH:iSeMatUaAK0LRAA
TLSH
T12892434E5F347211D0F48B72E8D485672E7C102CC3B33A4DAE5560F38D9299BF1051AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 7aa3ebefe574a48671d525f5b19a9735d289ebecd507f71c631bcb3d3a4399ed
MD5 04166d8a12b224433e546783da6a5e72
SHA1 dfe5aee0aefad6223b3d8b0cb635f56b92a56c78
SHA512 dfa57470d428b142c7043adecde80151be819a00d4c976d5232be8cb1c47b249a7a349d4ef72f342fef7f0fc3a6ab710e542ffe1d7a1fa2123d28d63bf630339
SSDEEP 48:T2/IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSSlp:i/IEumQv8m1ccnvSyDHSf5nFXboZM4g
TLSH
T1B5F2CFFA07276205D98484F0A400AFCFAF16404B47B6B6DC76D447E3F7A21E2B1B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 5315a03e104585c674c75f391e21ca88439a5e7643c907b67beaa4e2ba5f5b8d
MD5 2da0bf29c7d29c9ff0f22b7536b3fa7c
SHA1 6b1b790dc20ed3e781ebe17a9ac2979877ff7879
SHA512 9af54c60ed9b9f32be4a11912bc59cd3d1f28b51736a4a2435d4c0ec1b2760d00b4ef73f2ed83b733707a8f361213fa10fc6d05ff16aa758ccbb65ea0d8d4433
TLSH
T176C0229380FAF0322034847D0990688267BCC039800086A0C8E5C33C70860F75B0112A
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 1a19d25ca98279b64d23e21eb1f72e72abb0d6d65be5748b2cf2a649f3da66a2
MD5 7e563aab190c23d53978125712ea0246
SHA1 ae838e2839448a9def28b8fb972e4b565623e33d
SHA512 d8dca10037a3d9275ab7fa8836f369c50dd476bb876613398eb881d1a9ed89fbdac267b4026e884a536a55073728e4f54d675c795a2c3df4ebc91f410a874520
TLSH
T153E026E405CCC27D619A205302E8A348ABF87837D3C43D062FC0CA48F58B504B1E2190
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 77f34e4a55e259a90188e580ea0fb2cb5591a132c554043d7efcc6b6cf1f7fa1
MD5 28bd6c3adfca20bdec468bb031620a3e
SHA1 bf15a3f9c369681a21f1a09b8d28f2b31a35d50e
SHA512 550b87667f08c5fc59117fecdf21a2b8d3b03b719ccce1196093be2a32d554836f14ccdd055746d6412615cf5f52e7599ce72e16538b5ea4ad14dcb4337448e7
TLSH
T11DB012847B00A101D986093102E84B405240E141E088D413CCD8DFB38C0936C7FC1EEC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 ef6b486dac65973843b2ba0ec05cc0bc5b09bc60b4daac53d9d48c861260fcb0
MD5 dc3d79f507f5fc03971897c3a7078aed
SHA1 35179955280867fdef111a393a6153be2b775a2c
SHA512 4a74c5deef846d011c850dfe56dc6bd1316ca84df02e1d59bd73cc1f54dfa8f9864de107578ba88cf40bdc0a90fef916b70a9a17a5aef7d7bf27f7bfbde06d20
TLSH
T1B9E0D8B516C9C23E624B209B92A4F70C82A27417DAD569156B88D54C720F2407393150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 92edc59550cf567faf260abb59c37a753b64c17cae345db4772c54023220a62c
MD5 f72d5cde240c85e9201a1a78b0cf6d98
SHA1 e0965a89bcc42966056b94f69542f80ee99a6c02
SHA512 4a302269f015381b7ad726baeb4e0556095b8501fc503a33a9dc6d23d3749d933a5d4743ea83e8621ad0ac09162d6ec5c2d865ab982de527f31b9e073da85f96
TLSH
T10CE026F449C8C23D511C659343F8F70C83F87C17D7C97E0A67889448B60B104B2B6190
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 4ebfd4bb06437b2e1bde912f62864a2bde3f881a9f135a6d9fd9f1078fe18125
MD5 fc2951d2c72498a87af0cad7d633ed70
SHA1 77f2997dc0382674c9392a9205e40b2e30c7546d
SHA512 e0c1ffc8ce1ae08cd9e2ca97771242746ef134a6486468a945edfb18ab3aac4b94c7a6d3064cc62c6027f94bdf642ff2f75373162014cd394d90ec36cfceceef
SSDEEP 768:q5/FO5XfrQnWaAqOrm1KSoGlUB4Q9WeDdERN/rviDuRlJ1lnKVl+HYHUFDTkdcG:q5/FO5XfrQnWaAqOrm1KSoGlUB4Q9WeD
TLSH
T143B22A1170BF0240787E2D1C85B5972EDA4272A37168E67B7FBC00A68E6AE045DFDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 8a26fed93470a8c5dbad82c8ab17988fbd16ab89bf5a35e5ea6c19b425db655f
MD5 07256e3362eabea6b06ebd50537aa1b9
SHA1 0214de5228fc832baaf5ce54ab1ef9dfeee4403c
SHA512 5249a396c02bd6515ba8fa5ad6679324c7eeedce921b190d0425c1e5cefcdf920d2af2e8d5d1b76a629e8f00bd5c13dea6c1f545573e0b017dec93f7faf1ef8f
SSDEEP 192:P+xWMxLDMfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxznMfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T19D24630A7B747001EDE6D9721CB080771A3C716ECF22A6916DA654698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0104356-c1f4-4bcb-b4de-427465caee10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0104356-c1f4-4bcb-b4de-427465caee10.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

dc8447a7-6ff8-4698-9a23-e9aa58e49786.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc8447a7-6ff8-4698-9a23-e9aa58e49786.tmp
Size 12KB
SHA256 0c60771f62fa2b44c5b8cff0ddc344280924fdab38503fdfa0052e3f99a6b2cd
MD5 f569c0de16bd172400a5c2f6a66c989a
SHA1 594d1c9b846a22ca9ade79d4e7e73d0ba259b03d
SHA512 c4e8366dd728487e883df57810d8b778abdbfb6e1df77b1af2842f7eb16455b2408c2d13722c8c14a6d71e542de7381d979b70e78d6dac9fab2b3f09d92a6cad
SSDEEP 192:sxZfRQjPb/fQs6GWpVwe1sE5zodpyHHW6+WNGYUUffLz8iIgZtlJ:sxZfyPb/fQsPWvweDyMHbGIYiZtP
TLSH
T11842E605AD28A83F8CC7D21DFB167F53D7F9503290915E48AAFC8A1C15EB6DE220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 0e46b8fec7027e5340ffaa66515be7bd9074f9c0fb795d184ece370ec26a0b04
MD5 e9e1dbe44acc93d937257899fbcb8304
SHA1 836981faaddf9692f019c7b6ce994b93740aef90
SHA512 575d727c6e9873f7e2c7a17732851d8672996d8fc245db5255aed16cf4b43762cc06094d756f657dc04f9d1ce8b002b0dbb9649ed70076a1adadf11e420f81e4
SSDEEP 192:x95QkIIIbbLMIMNsYcYgEOaNLAszlrhKrshxA:x95QkIIIbbLMIM2Bla2sZYsY
TLSH
T18252602B26051B73C09F5BB7035A87A12BC98981827A25BD3522284F8DF3B57C6D52F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 f87820f2bea74d54c774b897c581fe0907ee04537d8b0a25636c3110c7b0301e
MD5 9cd91f7d3f300924855b9c53118b14fc
SHA1 d54489044925d32612680fcfcb766979a77ca2e1
SHA512 84ca59b3d8d0f9a06f671de5d316d7a14985567efbbed7c962110bd88889da27e7cb32989a75330c50db1279cb99272c7740d84d2c5bf079aaa96781a4db90c2
TLSH
T198E026E4AACCC22EA159249751F863889B983817EBD0290B1F94C44CF40B101B6A61E2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 61d1d9f9bb8c7aaefd8cca75ada3a78523645f3a50b7c1193db2fb37d907b9b5
MD5 4ef89083c49f22ec787a63f6a75f571a
SHA1 f345f82d7258a2f1d22d02b65305dc790e8a8773
SHA512 45dfd268f2816f9431ad89fbb7abc7e546a6b1a0f87990815e173835c608a0fe0eb5962ef517c8a0d4753b1be8ff24357990b130a78cf38eed7db835903022ae
TLSH
T16721BF65F320C158E18A863E902F97350738E8169FFCDC0F84BA24752DB1B100E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 275028080d34b72e0ab957bc8ceb38bd8ed9c512ad50922bdf5f2ea6e9f31f57
MD5 d09865c5505fa6211a91dc4e398668ea
SHA1 0fd8f8201368b4a8aff1ca7c83a72de5ce1594c8
SHA512 c7599323f33f8612216be45460d06da6e597227d3542a32222bec2d9d9eff584c0d7d7333ce821c134f002c666157fb6282aada2394d48c951decb68e6bd0e92
TLSH
T197E026E4A8CCC26F911920A341E8B3889B953817EB902E0A1FD4CD4CF90B141BAAA1D2
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b438837e712df6a8bce93df8ee9622db4479eaeae1bed120fcc34e3a99deb4ff
MD5 2bf3eba798cdbd21a995992fe4d798c5
SHA1 dc0ad76b0ec78915504d79a347e183bfd726f7f9
SHA512 1904ccf888869e4d071eccf8dfc157de6eea15d1995c33d5494ab0217bc08d507b29fe42c94a2e1dd15fc7f716eaa31265a3a4b07ff553cd355037877c38e41d
SSDEEP 3:MsEllllkEthXllkl2zEfl:/M/xT02z
TLSH
T15C4404047FD00C05C50050704051C3D11370D5500571775F34D544375DC7D410D04010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 b448bd533b099aae49373233cdc92c89af42474b2914778ba56ed963a1ccb405
MD5 9087f260b5da0d81275c852f8a0d9617
SHA1 d12890eab65d88ae7ef2c5eba726a5b722b79750
SHA512 e591ada74b59dbef2e2b3b28f820ff3b1eb0f013954bc37c97e39d2aa1cd4732a2633804dc33d2d4e4f39a0bc47f1589a693a74028cec45ff73d32421c443a6c
SSDEEP 384:nNiF1ZcI9sN38TUNTUlI4kzkE3ac8VFBtBfFBdjbVJsURufXtiZyTvMc9Gj4yXlI:EFN9WwgnZQDBxTxRUXtlh9NyXhI
TLSH
T112D21979DC60D97FA8EE7B88A70D3A12DEE44237D4B899C4C7D81F0C40B659EE706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 323b8beafef6988c3fdec0076bb8773e8a0d7df90bfe60be94a983fc82beadb7
MD5 ce7f2bca7dbd86f4168a2a0701e92ce2
SHA1 6f32c42abf03c6b63bb39538befece3db00d2414
SHA512 ce5ebdfb596415c7cdff0f39ecbec39a640f7efa64670d418b21879571a22c58c65e73a40251881e9d5a604d49d3c245ca0bb3f0688552f1a0d794d178c83ea6
SSDEEP 3:MsEllllkEthXllkl2zEfl6x:/M/xT02zbx
TLSH
T13F4402046FC04807C6445070485193511370E4500965D747249189225DC79400C00020
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

ccb90914-3100-4681-9e9f-87915373c210.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ccb90914-3100-4681-9e9f-87915373c210.tmp
Size 29KB
SHA256 09d18550df5aec1273025382e4f0decfa31d2321c371a6a78717deb974f23205
MD5 19fa95fdf135c7b0812b03da58cef79c
SHA1 fb1636a4a2a469347642b83b7e41c45ee49140ac
SHA512 a96eaf65efc672855f49051861626315e9b96dbf14c1b99eaf666ce2b04ac4811986d3aa82c1c10ac569863aa80b1021b63ad2412f80e6cee5749c540d40a960
SSDEEP 384:nNiF1ZcI9sN38TUNTUlI4kzkE3ac86FBtBfFBdjbVJsURufXtiZyTvMc9Gj4yXlI:EFN9WwgnZDDBxTxRUXtlh9NyXhI
TLSH
T14CD21979DC60D97FA8EE7B88A70D3A12DEE44237D4B899C4C7D81F0C40B659EE706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c6a3a1063db697d846cc7fcf6f15af4d087dc6f3de0e96eea26f0e5a5256042
MD5 34670e7ac9fac25d8309719583dfcf37
SHA1 9debaedddb180542c1ca44aba15a1a8dabdb02e7
SHA512 3846caad04338a4dcf6c1ff0921aad7d04bcd948a31dd1bc5ea0286b422d274504e426e6c15deb39d05e95fe158c693dbf8d7aed8dbb4411cb2d02ef3f3c623c
TLSH
T1F3412B58A6EA0108B3767E5AAFF7A86D487FB8772E07D09E10110D4F0663B41D961B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 82d5600309cc20bb0a3f47cf81a01288b7e1f36e584176f52e9d645b4fb70538
MD5 767fdcb27bdb024aefcfdf68a350391e
SHA1 ad624f02422cc63349ca2aa168863adc5a92942d
SHA512 a645e4e379fd5a45a76e4b8ee261379c12901ad0bb7b712eeec687cfa0adff01038db17475b1d1695fc8a037d3283c21b2fd357c60fa3b1296ee2a561c50df03
TLSH
T1D4515C68AAE91148B3B36F5A9FF6B85F887BB9332E07955E10110E4F0563A40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_xbgg3hnm.af2.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_xbgg3hnm.af2.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4388-29-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download

memory/4388-12-0x00000222FEA00000-0x00000222FEA0A000-memory.dmp

Download

memory/4388-11-0x00000222FEB70000-0x00000222FEB82000-memory.dmp

Download

memory/4388-10-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download

memory/4388-27-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download

memory/4388-28-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download

memory/4388-1-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download

memory/4388-2-0x00000222FDCF0000-0x00000222FDD12000-memory.dmp

Download

memory/4388-0-0x00000222FB910000-0x00000222FB920000-memory.dmp

Download