c9adf8db25fecb026f0c9b61063e77a43b38c8251ec84d8aaa7e968ccf81fc94

Resubmissions

15/04/2026, 14:14

260415-rkc8csbv4w3

15/04/2026, 14:08

260415-rfzkssbs8s6

15/04/2026, 14:05

260415-rdvh3aa16w3

Analysis

user interaction
yes
max time kernel
298s
max time network
235s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Homelands.zip
Size 97.9MB
Sample260415-rfzkssbs8s
SHA256 c9adf8db25fecb026f0c9b61063e77a43b38c8251ec84d8aaa7e968ccf81fc94
MD5 1c473bbb8ee2d8fd715f89f978c9b341
SHA1 08661ce84ea35486be99f2935b03bab38cbbf348
SHA512 67f660dd9afa0cc3c48f2437903c33a515b66a46c1a5cea10c8f554e29bfd60cd316146a4c3011376b7c0088cdb491804e0ee155abce3c0192a3be4958b6d9d7
SSDEEP 1572864:ab+4ceQIOB1coHvc+xyc2ewMVnwUzVt/xPVxMgjxvvK+B+jn3G9iZ6DpXIfP:GMDfmc2eDNxzVtZPVxMgRy+gjnGGpfP
TLSH
T1CD283379C3F2F60FC3664B2C15AA00F933EB612153B3A59B29CCD5BCBA827051A5DE51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 4 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2828	msedge.exe
2560	msedge.exe
968	msedge.exe
972	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Enumerates system info in registry 2 TTPs 11 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-914486190-3969805341-592249730-1000\{2C4D67D2-0D0D-4F69-91F7-2EE196126575}	svchost.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 5440	3936	msedge.exe	115
PID 5440 wrote to memory of 3408	5440	msedge.exe	116
PID 5440 wrote to memory of 2560	5440	msedge.exe	117
PID 5440 wrote to memory of 1820	5440	msedge.exe	118
PID 5440 wrote to memory of 1820	5440	msedge.exe	118
PID 5440 wrote to memory of 1820	5440	msedge.exe	118
PID 5440 wrote to memory of 1264	5440	msedge.exe	119
PID 5440 wrote to memory of 1264	5440	msedge.exe	119
PID 5088 wrote to memory of 4348	5088	msedge.exe	125
PID 5088 wrote to memory of 968	5088	msedge.exe	127
PID 5088 wrote to memory of 2744	5088	msedge.exe	128
PID 5088 wrote to memory of 2744	5088	msedge.exe	128
PID 5088 wrote to memory of 2744	5088	msedge.exe	128
PID 5088 wrote to memory of 2148	5088	msedge.exe	129
PID 5088 wrote to memory of 2148	5088	msedge.exe	129
PID 3864 wrote to memory of 1240	3864	msedge.exe	132
PID 3864 wrote to memory of 972	3864	msedge.exe	134
PID 3864 wrote to memory of 3932	3864	msedge.exe	135
PID 3864 wrote to memory of 3932	3864	msedge.exe	135
PID 3864 wrote to memory of 3932	3864	msedge.exe	135
PID 3864 wrote to memory of 4628	3864	msedge.exe	136
PID 3864 wrote to memory of 4628	3864	msedge.exe	136
PID 4776 wrote to memory of 3600	4776	msedge.exe	141
PID 4776 wrote to memory of 2828	4776	msedge.exe	143
PID 4776 wrote to memory of 2580	4776	msedge.exe	144
PID 4776 wrote to memory of 2580	4776	msedge.exe	144
PID 4776 wrote to memory of 2580	4776	msedge.exe	144
PID 4776 wrote to memory of 1132	4776	msedge.exe	145
PID 4776 wrote to memory of 1132	4776	msedge.exe	145

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Homelands.zip
1⤵
PID:1912

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultb6130121h8259h49f9h8eeehbd2a2206c8fd
1⤵
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultb6130121h8259h49f9h8eeehbd2a2206c8fd --edge-skip-compat-layer-relaunch
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:5440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x20c,0x7ffdc2a9c188,0x7ffdc2a9c194,0x7ffdc2a9c1a0
    3⤵
    PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,4643431906756486538,445884288093046287,524288 --field-trial-handle=2484,i,4471854344867354902,5421500807352382840,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,13210805910882819556,13302437246816848048,262144 --field-trial-handle=2484,i,4471854344867354902,5421500807352382840,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:2
    3⤵
    PID:1820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,16109123522560768145,4014763869802607374,524288 --field-trial-handle=2484,i,4471854344867354902,5421500807352382840,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
    3⤵
    PID:1264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5656

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:1068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault5073df49h30dch4e5bhb478h4171c360032d
1⤵
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x258,0x25c,0x250,0x30c,0x7ffdc2a9c188,0x7ffdc2a9c194,0x7ffdc2a9c1a0
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,888229362018131821,15687240901417639811,524288 --field-trial-handle=2140,i,6142193217908450385,2350754533435031078,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,4374327236836716692,4046248356141929743,262144 --field-trial-handle=2140,i,6142193217908450385,2350754533435031078,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,4586057639305678857,10304257807368872326,524288 --field-trial-handle=2140,i,6142193217908450385,2350754533435031078,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:2148

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultca594d7ch7de8h4cb3h9416h87f725fb7319
1⤵
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x258,0x25c,0x250,0x2ac,0x7ffdc2a9c188,0x7ffdc2a9c194,0x7ffdc2a9c1a0
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,3572151774608066399,13528646736269245896,524288 --field-trial-handle=2332,i,8961042959811200322,4293340784860510227,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,8733577329578703761,11513148490546198318,262144 --field-trial-handle=2332,i,8961042959811200322,4293340784860510227,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,697298267124215189,1467502579186793090,524288 --field-trial-handle=2332,i,8961042959811200322,4293340784860510227,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultd143e37eh3346h400bhaa41h437072a4cfac
1⤵
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x258,0x25c,0x250,0x30c,0x7ffdc2a9c188,0x7ffdc2a9c194,0x7ffdc2a9c1a0
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,15288358346458304212,8805556912781332190,524288 --field-trial-handle=2156,i,9021654116500780083,2807952265002424611,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,18002071166100977309,11705094578593365672,262144 --field-trial-handle=2156,i,9021654116500780083,2807952265002424611,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,7711187496234793755,9991165277869059506,524288 --field-trial-handle=2156,i,9021654116500780083,2807952265002424611,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:1132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c9464f914564208f0a5287d2c8076fd318ab0da4664aae67eeff98aa240d1c47
MD5 05ad415d9b1f2a6a97dc32cb25aba9c8
SHA1 0165115fd524a2bbb8954ebe11927136eb9bd4db
SHA512 c261c5c265e2784f92fc935e1583fb354ea6c14d6c0b62f756613f9f88d24c2b855a91a4b0c4e1fb2ffc546dcf95da086eb0878c3dc17935cfe2b1f9db625962
TLSH
T1ACD0C05C12B3BC35D4C7987004C13B03323ED493659187307C2234B80C0306048960C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9b525134efac009c2f8f234420b177c70be3b1f1fd471056c7d7f218b657b0fb
MD5 b3d8896c9224d33c668dea30bc86eac7
SHA1 54664569daf407d55d146cd6167f7075f62887fd
SHA512 4df0985413ed51c43e34cb4289f35da85ebafa5da8d2b64657e5b7c2a029b9f20995558d421f0f8609765e63817f5dd41b033dc8c86e575aa85d2eb7eae5a2b8
TLSH
T12FD0805C52B3BC75D8C7997049D53B47363ED4D3699187317C6274B90C5345049961C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
MD5 531be76c0b4d3ce6131509c7d95980da
SHA1 8d06c8ade4d281ea8e43a1dd0a469db76987e5cf
SHA512 3f61844b74b97a902b9307c088590e72b7ad0e95c0f14948ae3780aa3e04b871d8e5c5cb6ca5f5fdf524ad8258178623c85c528a35deec8559c2d1d114436d1f
TLSH
T125D0C05C12B3BC35D4CB987004C13B03323ED893659187307C2234B80C0304048960C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
MD5 642961cbd4f67f82b3038bc1275d24c3
SHA1 f1df4ba11ac13409c392147b2a9da411bc9cd6eb
SHA512 4f7f98f2ebf15c98a7f379a7975f6dff1c7086a1e3cf81d3daec8c9be6212ba05fb4eefc5fa2c0486a277860dc8b2aecdded5e174409117a0736b1cd3b8443d0
TLSH
T1CCD0805C52B3BC75D4C7997045C53B47373ED493659187317C6274B90C534504D961C7
MD5 SHA1 SHA512 TLSH

Submit Download

729cb48b-6732-4f38-8c41-246efb9533cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\729cb48b-6732-4f38-8c41-246efb9533cc.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0d2926a46cd7af02cf5d522d975b687853d7c689183bd81481950a38a10c24cf
MD5 c0a48191bde16626e1cb0278e3559f83
SHA1 6e469823f622121fe56b3e6810114228516f10a9
SHA512 07bcf2d71670b076d2d508ae72c6a6d9dfef7b6015f0f23378cc41a6f57d16076542feb7d8d71da5e8405bc67ab035bba88015d03aa00f1237165e9d22ffb0c4
TLSH
T10A51C7C035AF961DE3E1E570B6AB101D7A69B78845C60F2DB2FEC43DE906B10A11D99C
MD5 SHA1 SHA512 TLSH

Submit Download

c4201575-945e-4283-8a35-9ca4730f5317.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c4201575-945e-4283-8a35-9ca4730f5317.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 eb424cfd72f315b23ca81f4e8c45d1cac2d48c7df80775d83bc585cc8c586167
MD5 d0f5e8eb972e7485d3905c27cb37b8e0
SHA1 63a11fc5bfa34404e50ca6786e12e2d68c3dcc9a
SHA512 f204e45c0c3881dc13d25df5570ee0327f66e268c4258d7406e794685d360a51254539c483576e6abd76fef1896f92a18488319e52b7345b57ebf1e81318258e
TLSH
T121E0D8E6A6C6C1FD9590388741EC7B0883943AC3D695AD0327018CC47B47101FFC9E4B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 30769a82b288c65b6be043d4418235e227f883921968da7ca2e56e2511f7805d
MD5 c1c041eb5b433020f3b30464787bb408
SHA1 8d8ebdbac51c99df2a161c0f22a840d882963007
SHA512 5dabe7d21d0f3a2c50d706148d6b1b7e00be8fad53c39200858c979a30d3e0163061bf0981f7c0a9fe1db096bb92b16ab372d06d6a845c1941660926a6910af9
TLSH
T166E0D89669C6C17D95F0798282FC779C83903DD2D6A5BD03AF0098C87706101B395D46
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 4e6e6ce28acf39fe539b65f62474a7e76ca26fa8ac665525625819a405c0b69a
MD5 1af43d8169abea3293c855107888a659
SHA1 8177b49aae52379293dbfc3895b64cb6032c4759
SHA512 605458b06d99e4f9fd67b801291b9e680f10cc3f2aef5e88ad88849e806252d458b6c375a3533193ea4f9b5ccc019449687a92ff303da72239869838f1db7dbe
TLSH
T1E3E020D845CCC6BDD1A86597C2ED530C83E039E3A7C479036B4C9C447202342E3CBB54
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 27fbea22e05547bd92f779021893b92f0a44acf8f565ee56fb814f1c033b1fb7
MD5 07c326da48c50d55f81664c8dbbbd16c
SHA1 a180f170531038a781270fc1869bc6cd465c4569
SHA512 1a5d01b8d84c44d326cc02f6cb9fd0b30554262ef4fea45b046af71cb775d5d297a1f3363f131553426525da3159f7e0c01d4b0207ab13fd54fbc243fee6fba9
TLSH
T139E026A555C8C279E698A89383FC734893E0BECEA3A83D02175C9C847241341A3CA681
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 0295560a9ba6ff556b9416e918373fe2587ec6a1196c098a64407fd0a46dd0db
MD5 73e3cf0f9446b8acba149b5b8ce93886
SHA1 b14daa91d7151d7ffbe1a2c495dbd2c577a0f6c8
SHA512 82e4dea901bae803174d1b56ab2ef36dfc3e0628001a319307a253789d7037d986b20f2c24a1f7dfa3b08f671205ecd138937ebe792657967d77bc928eac1fb6
TLSH
T157E0D8B18ACDC1BD91CA216B829C770CD3B43987DA8D6A017B049844B506104E7C1DC6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 4b1a0952a4eb5a2be229e5d0fdf70e048901c9d6214f140327616e200f082a36
MD5 b7c4fce81cde9eb2b8186abb6bd551ff
SHA1 e2944d76bcfb4cce7fc6cb3c67edb7f378041d6b
SHA512 c3fc07ee358809f9ecaa09e29f35ec6a759c9819d424d0364adfe4b16309582b26116ee379b7deb4cc632c9b737e89ef97e8a21bd594f572704ee44129566773
TLSH
T156E0D86656CDC1799384205782FD774CC7B03EC6D6987B411B04A844F109108E3D25C1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 76c0d5a4d84017bdaa3ece43b9db67915a9de91425b3e86a7e17413bd7e309f3
MD5 b559c6b54c5613e6991b69e47b00bf07
SHA1 1b6345fc032f3b107f1fa17329b7e83054d3d44f
SHA512 07f40b1de20fe096964ec4e941cab38480a32e1fb7c7c04ea1f3878be05c0c92955df23ca4c99256f01196cf5c71eb92c731852c6634ae660715e9daaf0e7282
SSDEEP 192:sxZ7RgQBsdfeZBrfUCIrpLHW6+WNGYxeeWphgi+J:sxZ7VBsde3rfUFLHbGCLiK
TLSH
T1F632F9566D28A87B4CC7E219FB567B93D7F91022A0C15E589AFCCB1C04DBADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4826f8a38a44fe9cee62b2cb8dae59f5570203afe98428cbc459f354a7519ddd
MD5 94041360e96e1830c9bb91273fb6a901
SHA1 2f571084d6aaf2af931713f2e02e93fcad63c541
SHA512 bb971e575fa6202e796e996acac71d07c789037cb41a2fd92159657f66fc31c74409685750050e310863a0a8fefd95fae3a6eb40787f2ee742bb574c461a0fc8
SSDEEP 192:sxZ7RgQBsdfeZBrfUCIrpLHW6+WNGYxeesphgi+J:sxZ7VBsde3rfUFLHbGCViK
TLSH
T15632E81A6D28987B5CC7E219FA567A93D3F91022A0815E489AFC8B1C04DBADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bf88e5bcbf7ad318420dd26b9252fe6d2bded07d95344d0b7a5b4ed3e2fc382b
MD5 e41a31c871fb0059a53c80841eaa6e46
SHA1 9d210bbe8b4ebaf19fa4032a78a9dd39438f4361
SHA512 349bcaa1864920fe5d38ec0124656d8d6dd48eb0b1858bdf958716b0f807ed09d153b8d23a8a50755c6c226d655418e00d26e44313a883be0fb9a46431ddd6c9
SSDEEP 192:sxZMRgQRsDfeZBrfUCIrpLHW6+WNGYxee63Wphgi+J:sxZMVRsre3rfUFLHbGC63LiK
TLSH
T19742E81A6D68983B5CC7E619FB567A93D3F91023A0C15E489AFC8B1C04DB6DE320741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8dfb5c1cec5696318df934adf8995602b410296ee2ef33d8bff075f8692e35bd
MD5 8c635b321f8861703b8af1ad1b38a812
SHA1 fccd1f2764752ef59f72811bfe18473d512153d3
SHA512 0245bfeb7dcc629ee30fb167cefe3c2a69fb4226c5991cb0aaa9bfaaa02931e6f24630620e8000e60ecacfa39f6b58aba0e22647138de847dccf0d0014a63a1e
SSDEEP 192:sxZ7RgQBsdfeZBrfUCIrpLHW6+WNGYxeewphgi+J:sxZ7VBsde3rfUFLHbGChiK
TLSH
T16032E9566D28A87B5CC7E219FB567B93D7F91022A0815E489AFC8B1C04DB6DD320741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 9c7f7e15c91827eacc2c6626731ab5309b24635aeae9da1a05603f3e2ddce635
MD5 a8be3953a8a638c9d26658bb7d8e5b34
SHA1 6f327ecd8d1ac8f49ccccc8fa2dd01363113e81e
SHA512 485fb82725d1a6a9066b296bf783c3185ce6452d0788a172640d6153e325ca12a23d70f767f79edebd4487efcf23748e1b0c2edc7dc0dcb629536ab2b7274fd8
SSDEEP 768:Jk2+zx27pLuL/hRWvV/LH8F1+UoAYDCx9Tuqh0VfUC9xbog/OVfDdkLlMeNHFrop:Jk2+zxWE/hRWvV/LHu1jaqDdkLO6H+yy
TLSH
T1F3E2E93B784CCA7E4F800A9CED1A7F9F6EA802CB9698CD4047F9945C02C67EB55164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 5e3d33b9543b4ade9024daaebf514f8fe701d25014a469eecfc9253ce11132da
MD5 71bbc0830cf49fb82895bf72f6563f93
SHA1 c1ee14cd977ea1ccaf293eb500f7fc60a0b2044f
SHA512 82ac8ccc4c22317f22b7e49de205c9b04cf42368a5b9d57b9d84d52c705226f251fa5a4fc16c59dc83aefb9602e3b27e9be9634dc9fbab27933f96d27e5ce6ba
TLSH
T1D6E0DFA186C9C1FDA199264306BE934883F4B9C7D2C83D026F8488447247A08B3A2A84
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 c06dfb8ee45c5556bcc4b6559d484204239f743693cf26e35ae1514cc73ec120
MD5 1942aa3ad91b5a51ff01c47878a554a6
SHA1 50bcdb3d21cc72100b98f5b0317e3f97cc3582e5
SHA512 df9a06b6d80e185c3c36077e9fea952100482d84d39f2eb68cfb9b428386e2ce715f7dffb3317520ddbf7c4067af34d54e2ff8846849f543e6e672accbc9aeff
TLSH
T14AE0DF2006C8C1F9A09F20C302F8A70DC3B87DE7E2E83D022F809C446246604B692690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 eaebbd9defa101d2748d683b393465b1b24db18074e09c73962372c716e9c12f
MD5 d1af58f61c9ac493a7bd7482a05d4d7c
SHA1 1b6357e075b94481c744b09f53ed26ac05b2c5f7
SHA512 a543afbf099abdacb35a40faeb16c7a018c6f9e566ea8469ae9d817bc53b59cff20c701d21ea55b71573e05676cc34c42ccf6226bcb54bd91ce3db88327e2d87
TLSH
T14EE0DF6616CAD1B9B0A9248702F8A34D83A5BDE7D7EC39022F809844668AA04B392980
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 c932a5e94ce6cfb86c317ff3b85a51c0bfd553ce969d7e32734ebce5560e965f
MD5 d2eeedd9d6c7b1f1fd64cdd06d01c240
SHA1 7293e824ca613ade57fdbd3bfd7213d09e54efb1
SHA512 894010b168ffe292d43d31c0c84f3691492b4bee2c11972b209472736eb1d970f2c636d1be2cf3404fdc77fb8dab16cab1599d1498c9d570cef5850a1fbfd954
TLSH
T168E0D87056C9C6FEE1CA208F4298E748C3B2B9C3D6D86D913B0CE844730B240F393950
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 a11c909a9659865a12cf939ac143fc16b8a596e5daad7d1ffb691e1d39dea679
MD5 85a47480c97f51456651340140feeef9
SHA1 e00ad2054e9157a1b944f7eb570b8ba6cdca5d4d
SHA512 1c5753daf045bf12afb6c3461b0ba0c529563564e09d56b6c73f3e09bdefcfc108e1be46f77478626e352fba585602af8f9673f314d5f4b4c5f67c214f754d29
TLSH
T173E0D8616AC9C77AA1D5318783FDF34DC3B27DC2D6ED79112B09E644730A2447387540
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 cd1aa9820663aed9b521161cdeb29ff3c641c3e7eaf604c2f2d32e9b79088c4e
MD5 7bcab3d14e7b14f6e68a6e6cedaf9993
SHA1 f9413837631cfb30a0e1176c7fe9a96855dbc236
SHA512 da2bf832089c927d3fc83194b067db6722ca24519955429f4711c405c42368fda61ac0ae8d2f63c80757944f3bb0505ae4b1b75c42f520f5084d4103156f060c
TLSH
T104E0D87027CEC7BAA1C5208742F9F34DC3B2BEC2E6E96D512B08A458730A24073C3541
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 6ebd984d7722b299219eb7fac0b70ab92d021ac228d6d3cf20d39805411fc73e
MD5 74b6349440e12ef0dd4185e55ebfc68d
SHA1 edc4afa6492265b07852984c0d328abad9abb3a2
SHA512 1265f433afc4c9257b553699e05e52a33b0329c96005867258cb7b8ba208826dee2beaa41ca08b2364d5e052863820cedbe3ca8029a6f4e4b52a99714b327a5b
TLSH
T183E020B196C4C77996D0A08383FCB74D83F0BDDA93D5794157185844720120073E5581
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 5e52c9dc76eef54eb8dbe3902548ae60ddead3946990a9882da2b3b25842ed08
MD5 eae0a295a1b128cbdfa08c800cdaa808
SHA1 5a6f836de2ec5459133ac6419d4ff53b5ec7c1bc
SHA512 9b02768d01c8077ec4c769a809fada7537d1d4be22a987246a01fd54ebb951e911b3c7fb09f75e3a45a3a5e7c0c745d45b4a13537d5f05d8e05bde541bbbcf18
TLSH
T15BE04FB496C9C7BD9184718347FCA708C3B0BEC79B987A8667084844B347648BBAA984
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 0501967df912cb62058c664140830e1eef4351873fc41aa122431eab3d23c16e
MD5 af8b016fb30e7db769fe3041f413c68c
SHA1 38a2d4ecb80ebc2f5682c6f07cdf5d28fb4ae0fa
SHA512 8069839fd9a4cce2ff930fb2d2a9adb3f642861551a5847c5b88ce991b3a0faa5cfec3b9fd0fec5e70f22c7503c390f8441c06c3967b446368322276ab4c0572
TLSH
T167E04F7046D9C6B990C5608A42F8BB59C3B07DC6ABA97E865F0C6844B306644B3A6980
MD5 SHA1 SHA512 TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 b2d3542cd2c729ee27bf7405b3b13d04efd90d2f3fd629b7fc610162d257c38b
MD5 b44feea6491e4690a735d765a9f303ce
SHA1 3a5f3b873771b16ebed4d4935179777db5d6265d
SHA512 87eee75af2c710b4bc9a3f7458131b566a800f48a521066073320a807e9cf69ebc2e965de4a1521e81161c07532b0ef775935727bad65d134778c43b4bf4985f
TLSH
T179E0486676C5C5BEB19920C701FC674893917FC7EAA86E462B04948872452447395541
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 83c4c911687076ecac0dab34678d83affc001e8fcde02b4e4f8a255fc8004440
MD5 cd3df46cb8dcd08e6393452d7602c036
SHA1 05f48531eba63a60aa42996a13905f04687d9697
SHA512 4b9585731c7906ae33090b17150a3e75d7be4d47fe1340383eccfa5cd44d29cf09e88e9c63ac421ea0a565f170817b8dba506dae8a6579b90a2c29b7a58e6df4
TLSH
T124E048B5A5C9C5FEA0A8208B01E8534C93913997EFD4A9462B04884C7106744BB96B65
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 5d2cd79560c5bb4c14903a4333bae839f2379b814e1d5481880fbee51ed69d2c
MD5 0988237279810b7bdf095dc068581196
SHA1 01f7c8025fe6b934c36ce593674409da02bdd5a5
SHA512 8ff47339ee5db4173237b5dc5f78452d4d08a7b288042ba532abcb53c00691ae718b974c191b92284d16d294328faa56e740062487724b045d406e7bd5e76597
TLSH
T15D215A12F320C158E18E863EA02B97352738E8169FFCEC0F847924752D72E051E8B7E1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 4361011a16923fb3026656977fef4ccbba9073e47664312da2bd7bc2c3c1652d
MD5 8f182cf6ecd0cff80ea5a57d0fa96d6a
SHA1 d2fd6d879465abde9847fcc6214caff088accbcb
SHA512 9da9754c865f53f65a112f5a22c68680168478834f1347058e62123f8eaa05d9df5ca356e02e751ccaed945a4fefc0222e1cd6ab93041544187b143637aae69a
TLSH
T109214C16F320C158E18E863EA02B97351738E8169FFCEC0F847924762D72E051E8B7E1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 270dc83562ecf5211a9ea2fd54b735f85dda1016368fb62724b9b5fdd0c7ffc2
MD5 cf77b9d842b37fb36cb12f0cc8d19bee
SHA1 564cbd62df214234a16d32e663cf8cfdb666232d
SHA512 df8d44d9a0887d65dc36b62830963744edf33bfad85f0a23bba6c668e3869e14bdf80383ab1f4e9a33b566c79eb586485845a3273de3c29b1ac4991000ec425e
TLSH
T12A213D16F320C158E18E863EA46B97351738E8169FFCED0F847924762D72E051E8B7E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 795c6e92c5f182163f39ebf50786b2dc704310bc516528b8b81ac16d95d71e58
MD5 195d28ddb330aafe415fff8a139bfb13
SHA1 6b16bb10f8f9ba6ca82ce2e81e9391e4b03b66c5
SHA512 7f976e98ab150e6218f4c289c129fd85461ac5b2f05434357629d792dded8b34607e6b8b04255864ecd67119ef1ee1270ed58f463e05d8b82fff14142e454efa
TLSH
T12CE0D86676C4C1BFA19520C301FCA78883A23FC6EAA86F022F04898863452817386541
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 61c6df2a15b64f441430a1d7189231ce3ea286c8e22c1aaa0c02c5d5ce8eb5b3
MD5 771f8ece093b4fbe3a8bb8f1b058aea9
SHA1 657bce150cfd710253880a5559473529d89a65aa
SHA512 41360b64841cb69b26156e2bbaf05b32ae7ea8ca6e5c8dbe066e049d8b4441f5935fabd81f3f8cacc202e90286e841bddc923e50aecf18bef1f36977b08b4040
TLSH
T1C6E0D8B4B5C8C1FF90A4208701F8A34C83A13D93EFD4AE022F008C4C6206741BB87B61
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 2d77d422941293398262d9e86556ed164f074ef02e6397c51f8f97fbcee2778e
MD5 06f34c5bb8744cb4fbf991aab04beb5f
SHA1 9d62c7d0ad06d161dc6b57cf556ea9a2ae11ffd3
SHA512 a1f4af3cc9d7cba6c6f112243a87df97c10ff1e06984b0f0b8f13248a016e831786bfb4bc54c288f2af806522d4d12e241309d6639f71332a47cb004dc7501b6
TLSH
T12EE0DF20A9C8C9FF9092228701F8B34DC3B53DD3FAA82E021F008C48A205241B78A691
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 07c98315881fe683f473ecea7f078d99d62e083a26a9c7f8a88cd4aa9d8d40d8
MD5 a797cf7f49278147ef75d1f445d91934
SHA1 10bdac0c3268678f819623b06be36dd5ff13d87a
SHA512 26a65d1c90ca77f5df28f573b9ae2c68c6c5d72596877051dd8d14718a753a2a877af84135dd6670b86b39576217288f0ccad8b44e5268a6de47a3d4916e2441
SSDEEP 384:njiFavqMg3sNKE8TUNTUlIm29JCFW8vRvfEPMW5TzTYFdaWBdnS4mtm/PMrNlk+z:OFayv3xEwgWzqPMWNzMdaWBdS4sm3EN
TLSH
T16BC23A75EC98CABBECE78FC9A7497A07EEE001A7D48C4AD4DAC81D0D009719E1747C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 efd07e3e5842f151fb9e628477fbbccecc6235de92b7ae3abfdf0ae48ce936cd
MD5 c30ac7163d761e9097f291118118deae
SHA1 d5e84dca3236fd5d74f3335b7b0e96838fad5969
SHA512 c5f8750307374ec2ca7f087164c08d302a6525eefca145f2e71ae7f65957b006287fe638f32bb8a391b7c82c1dafe1a2a7868f0983ec9c8d1b0f5c1bba5b1c02
SSDEEP 768:gFayv3DwgFz9PMWNzMdaiPiF7dS4sm3EN:Lyv31NsViVBsmc
TLSH
T17FC24B75EC98CD6BACE78BC9A7493A47DEF011A7D88C8AD4DAC81D0D00971DE174BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ed7d8a2df1541929b39aca9e3c9ac30841722bf5b415d151d3c0a07daa013588
MD5 f9e92231f4ba0137578135ef9a7a8d0e
SHA1 df8b111ea20ca75775900eb9d7f778851822b79b
SHA512 ce1be8a3696d55893867579a1c6cab253ae9e198a444be8e36372bb53ec6e05f3815fcae89965a1217259504a7383efad19646263bcc5950d1c1ab383f22b498
SSDEEP 768:gFayv3DwgSz9PMWNzMdaiPiFCdS4sm3EN:Lyv3WNsVioBsmc
TLSH
T150C24B75E898CD6BACE78BC9A7493A47DEF051A7D88C8AD4DAC81D0D00971DE174BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7e2daf0b00b6a1b86c5228408861be1f88633a1dbf7550715e96e3dc3f4b1174
MD5 2c92c3bced7a152cad00ca6ae0ab7e80
SHA1 40b4780506d99f82181ada53b92f2ed5e73b84a1
SHA512 834209cc8ef4310e74a20ef51ce955299b6dc1f0cbc631b1dddcd2a96d35024f2593dc4c1e8dbf9a9233827a2a9c9c9768e3e0aaac1ded70681b57f5494c2bef
SSDEEP 768:gFayv30wgjz9PMWNzMdaiPi1tdS4sm3EN:Lyv3iNsVivBsmc
TLSH
T167C23B75EC98CAABEDE78FC9A7497A47DEE011A7D88C4AD4DAC81D0D00871DE134BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 18e5c1afce54386a7591c552fe915472fdd520f0f5f10823dc4e1193f0c1983f
MD5 f34b0d04931b98395983a375ddfca318
SHA1 fc461b1e35686ba3fba8058097f7f665a602d1a0
SHA512 c8c51e719c0505076867ddf01b066a258ff2e1ba79591a5e173928f912368ea20cb355078ed22f494802168255cb0402240e51822049bed35a736ba333420e7d
SSDEEP 768:gFayv3zwgNz9PMWNzMdaiPitZdS4sm3EN:Lyv3VNsVivBsmc
TLSH
T16FC23B75EC98CAABEDE78FC9A7497A07DEE011A7D88C4AD4DAC81D0D00871DE134BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 81217461235c215440f417cdb289aeae5b6fe81e3743497a534fa54392d67453
MD5 3db5eb5f07ff28db646cba1f853787f4
SHA1 5c95fbf6992496d6efbad6ca352092706a851f20
SHA512 bfb1af0e932ef5c66102827c4db7fc62683e296ec08f65472b1753950bf5c03c041c2d33c632e23f02ed5e991e6b46bcad6cd23d11a5eaba21c811768e8a2497
SSDEEP 3:MsEllllkEthXllkl2zEflNWLCIl:/M/xT02zzLCI
TLSH
T1934404047FC44515C54010704051C3501771D51005D15F473CF10437DCD75401C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 87B
SHA256 c7209c3eb51763e3139fa0a5e5a1d18b610932294b507ba5d043658e45953727
MD5 8e0265073c65dc7491c8b6eda0b62e0d
SHA1 b75642618bae1886d9c426b5183a13da6c21acd3
SHA512 45b190ca41357baa1dbdeff2b123d27428be4c2dd69cb88cb6070f5d6abe9a7728f47fa2844592b192c17961580225348aeb1ec270e161a7422c1a8b71a239d8
TLSH
T168B02447C473C00FF41440D1C45C03C114F4C047411DD0015070D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1912-0-0x0000000000EA0000-0x0000000000F0B000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads