hxxps://guns[.]lol

Analysis

user interaction
yes
max time kernel
50s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/04/2026, 07:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://guns.lol
Sample260420-ja494ags2v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3548	msedge.exe
1724	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211437479722491"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{BA6468FB-E5D9-4CE5-9252-8DBB8E6F8FE1}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{3EA50DCA-C340-447D-8FEA-5D0C3ACAB0C8}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 4136	4124	msedge.exe	84
PID 4124 wrote to memory of 3548	4124	msedge.exe	85
PID 4124 wrote to memory of 3304	4124	msedge.exe	86
PID 4124 wrote to memory of 3304	4124	msedge.exe	86
PID 4124 wrote to memory of 3304	4124	msedge.exe	86
PID 4124 wrote to memory of 1696	4124	msedge.exe	88
PID 4124 wrote to memory of 1696	4124	msedge.exe	88
PID 4124 wrote to memory of 4352	4124	msedge.exe	89
PID 4124 wrote to memory of 4352	4124	msedge.exe	89
PID 4124 wrote to memory of 4352	4124	msedge.exe	89
PID 4124 wrote to memory of 5260	4124	msedge.exe	90
PID 4124 wrote to memory of 5260	4124	msedge.exe	90
PID 4124 wrote to memory of 5260	4124	msedge.exe	90
PID 4124 wrote to memory of 4712	4124	msedge.exe	93
PID 4124 wrote to memory of 4712	4124	msedge.exe	93
PID 4124 wrote to memory of 3324	4124	msedge.exe	94
PID 4124 wrote to memory of 3324	4124	msedge.exe	94
PID 4124 wrote to memory of 2972	4124	msedge.exe	96
PID 4124 wrote to memory of 2580	4124	msedge.exe	105
PID 4124 wrote to memory of 2580	4124	msedge.exe	105
PID 4124 wrote to memory of 2580	4124	msedge.exe	105
PID 4124 wrote to memory of 5788	4124	msedge.exe	106
PID 4124 wrote to memory of 5788	4124	msedge.exe	106
PID 4124 wrote to memory of 5788	4124	msedge.exe	106
PID 4124 wrote to memory of 2616	4124	msedge.exe	109
PID 4124 wrote to memory of 2616	4124	msedge.exe	109
PID 4124 wrote to memory of 5060	4124	msedge.exe	112
PID 4124 wrote to memory of 3488	4124	msedge.exe	113
PID 4124 wrote to memory of 5936	4124	msedge.exe	114
PID 4124 wrote to memory of 4012	4124	msedge.exe	116
PID 4012 wrote to memory of 6016	4012	msedge.exe	117
PID 4012 wrote to memory of 1724	4012	msedge.exe	118
PID 4012 wrote to memory of 4352	4012	msedge.exe	119
PID 4012 wrote to memory of 4352	4012	msedge.exe	119
PID 4012 wrote to memory of 4352	4012	msedge.exe	119
PID 4012 wrote to memory of 5688	4012	msedge.exe	121
PID 4012 wrote to memory of 5688	4012	msedge.exe	121
PID 4012 wrote to memory of 2584	4012	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://guns.lol
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffdd68dc188,0x7ffdd68dc194,0x7ffdd68dc1a0
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,12668206684326707385,11396889555013577271,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,8051641399723588035,1080517276008064778,262144 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,11178784448534900065,4187279876211386925,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,3028082618628731604,9782200344826507463,2097152 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,18383037357127775244,7382935754997653612,2097152 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,7572544437295792920,16443791005094958912,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,13943898159084232348,10289614596216018351,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,17077364986466405077,11828693929771991467,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,17077364986466405077,11828693929771991467,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6296,i,13748805639553991836,14964652953802805639,2097152 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6340,i,4007490541481189443,16735461753589664644,2097152 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,1217891151298311911,6164737561951712467,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7056,i,324611212554791843,1571867696939781800,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7060,i,5407083591110663249,647287425802831262,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,10245657048632298461,12527194496058606844,524288 --field-trial-handle=2276,i,618251176883591323,16466666723584053103,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdd68dc188,0x7ffdd68dc194,0x7ffdd68dc1a0
    3⤵
    PID:6016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,9495242475082317760,12622563249185607518,524288 --field-trial-handle=2280,i,15883081004553697480,871571402641905880,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,6886691954262165187,17144198137209541089,262144 --field-trial-handle=2280,i,15883081004553697480,871571402641905880,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
    3⤵
    PID:4352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,8215890576813373956,137072332466865469,524288 --field-trial-handle=2280,i,15883081004553697480,871571402641905880,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
    3⤵
    PID:5688
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,5512202841989196574,11018641107914888152,524288 --field-trial-handle=2280,i,15883081004553697480,871571402641905880,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
    3⤵
    PID:2988
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,5512202841989196574,11018641107914888152,524288 --field-trial-handle=2280,i,15883081004553697480,871571402641905880,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
    3⤵
    PID:2584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
MD5 1fd2da899cebd4d5aac2a3d85c0bfd18
SHA1 3f4e6dbc96df63582e9ba17acceda5012e453d7a
SHA512 840622178b39a880be2d80a1349d1dc0f7bfb63bf38c38c71fd96b89033d54de3e6a88f15ad237f3b66a8ebbff2bcfb19f5b6a6e94882c94044f73046f231584
TLSH
T1D5D0C0CC33B13C26C58C807004457F4D340BC4A20D42C3263433297C0CC30C428514C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4836dbaf78096bd27813596167584c682487ec87cfd0465e188bc58a9318295
MD5 075b28c90a61a0d5967462959ec08a3a
SHA1 903134b89d92d916a16ba8e71da50e6668275ef8
SHA512 24cea1b272517285f97387b16934cd6e6cfaacba277a5a3db393351e547f6149d71be8952b6010a29bccf0c275b3d3e0d70b56eff9e1151b3c3e6a4aa9c60930
TLSH
T146D0A7747B95A00BC32C103301519695670BC50125968655B069445DA8982ED67D58C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f131cef72deddfb7a0b09908055ff06ea4d04401df0b85dfcb87983505497ad3
MD5 3efd5c6808b4594eba7cfb7c7d4522c4
SHA1 5006ac0f4b20aa3ecc243f303e22cd716dc00632
SHA512 df6967d8adc7e2b821f0e70ba97c914bae69cee42cfe1e99b16cf32a681a76d3455e1de0c97dcdca184264d08d6fcbad118233888844b9a0a450d8c3e3d92f67
TLSH
T170D097A07B59600AC318003304A0C7803303C14119168200306408ECA8151E833884CB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd04dec9a65c9ebbd9698b7d59631c916e6b6a0a7afdb22ef48d8a4a82d902d0
MD5 5491f296a003c3ba16025eb18fdfb799
SHA1 8104d473f5d8f681400a64b5d0ac5523a5d56b8e
SHA512 118ab6dad3343099380a953888db90a14fe8c7dcb62f906e55a163cdde9b95460d37b865178c48bfd20c166ef6b725e5b61ca55fc83a0221383e062a36b68b84
TLSH
T1CAD080D837B16C26C589947104857F4D351BC4A24D46D7267477297C5CC30C46D555D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c2f439704ff00b208bc140b520e77dcb3c62fe155619cf46f75f343a5fc506a2
MD5 6e6065aa61c76bf419363208189bff6f
SHA1 173d30b871ff9ccf111420c9324fc0aad011d476
SHA512 35e7cfbc6cdbc4200f37015beac76b350522377470399efe91ce8ba3374db541227f35dddf79b83181ad8df32c76bc36416bc24cc999e47d71f3f99ccb07fa95
TLSH
T199E0E5AACD319C2B06F94B1820125647EB61135B2B51894B7F3D82088FB4637095985C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 df16459d153e5f540067b7bca63f05a6ad48f94e2c170fd115bcb98ac5ee1b7b
MD5 e671cdda48e11c0b2a821b95b644201f
SHA1 6a9ab55ecc92c79f3119dec0349f2528cb384efd
SHA512 d848b0216f977d95c1bb3d274f665bb64ffcdf9127b300cc5d3073af56a23596649d6731cd254599bb30d973213d3e95fea7506470d6f8342f09f51a9473088c
SSDEEP 384:OU9c+Ltl8fX7p8nFt7rTYOMJjzvOOYmNsVv5Yl/8B:VW+Ltu18n7rHMJjLOOYmNi88
TLSH
T1FC13947D360D9E01DAD6003E7D5B8A326B71CBA1C5DD46C7B7F23526039ABCA784E209
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b556e7a111fed1c6c3989403819edc7865c9a38840d8f018af73d0f2d3074931
MD5 785de3c850ba727075e08814bae4297f
SHA1 502d21488d6212e781fa9acdd68b16832f0d6906
SHA512 6378d283fb8babcacb3e0d5348bc9c098c02d015d0e3282b50176a6053529a81baf54190ffaecc1664b33067ed284e8716f787043853c70a0ad01e2918243ca0
SSDEEP 1536:cu4kV4I7R8oFXpxC0f3vgRF2TMaWAm3/jPCjr6mN8JIxoJVaTefxCNmaJC:xpPCYU2/pjrdN80usicDJC
TLSH
T1254480F71805A01BCBA802F9E2033A3DD57B451D6CE1E8E9E63C0C952875B72B6FDA54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 33cc87722bc5f266299c33d3e6c74ce420c8d5bccf58a2ebff33a9ed299cef19
MD5 2481ac96a8ca357408821f68f8737be8
SHA1 19639dc4a26e4083a64fb34d2ddd840bed03fdc0
SHA512 10153bd513380331e1ad58a52f128cd769a2d250121fa42d16afac75905d8ae925e73ba4302d356af59985314c066d5e355825f9d37525cd741b1296c0bdb797
SSDEEP 6144:a5SmWGbG884fGHA+30U+9ZyaJ9qbRX1kSMZ3QG:a5S6FfGHA+33+9ZyaJ9qbRX1kRZ3L
TLSH
T130257CCE8F386986DEA79D70F8D4DC2A7CF811C2B9A6F0C31805C56406C37C66B9669D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 f25481e26eb535dace7ab09120bfd86f34763133eb811db8236c2c9d24a9e470
MD5 bebaa7cdc9925e99f5b1e3bbd0b18384
SHA1 8ce480ce1fc82c0b48ce1154f27fb6ff920d5432
SHA512 ff8839d4068e81d90d86bb1337f29de1ee3f7c6f8bff9f228017df479a51cee3da3eb117ed99d971dda4013810592fb3d8826f150a22ce61ba4f0cf2576c200c
SSDEEP 49152:TmCVhHEljQv2i7A+WBofqSFtFNYNMNH3sHWY:XVlmjQvdUAzGa
TLSH
T186868EEEC6785C83CE678A70B4E0EC477C7412C3B595D1D38958C59402AB7C1BBEA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 1024KB
SHA256 b03b8fc9fcd2afc934b6ee94e4471ba402a897dc26e5da6f83282808b48a7681
MD5 63948c8b70bbb9f3dbb4022aae3f9d66
SHA1 c1f5d5e6e6af6e5c0a6851f0b926ea232d1ce3b1
SHA512 c6caeef7cfd11e630e57504478a28e81da08f5a1c25c392d6226b38e82c09898fd90f08d188544f72cc2b047b49c669341c127c365f5c8d8849cf94893ca5435
SSDEEP 24576:Glj9WKcj3OhRThostzTJTPeUNmuSnFzOJ:s9WKcj+rdostnA1lC
TLSH
T17C252345EE110DD299F6762C4F924238AA12AF0B607AB5CF4C0F734E8177593E3EE946
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 735KB
SHA256 49254cb1425209ecd2f3f9f86916d20e52a6eb2aff77f057341ad58d14a9b226
MD5 f0b9b2a475319a91216cda0ddebe54fa
SHA1 38cf0f61bac6007014813c2f276ee154f7ade10f
SHA512 47707d17cdd9b8fb148aca1c06df47e6f9f9c22ee39294b510cf5b5d99d87d62e0ad2650e0568392b33b54752bf35bc157536923f5486c876eef015df22bb69d
SSDEEP 12288:XtS9YZNs4gAZChUXtc1qixfXMlnozPPcmINGEXUaNC/H4Vpq70oBu:dS9c6hUXtmqixfXeozPV0lUtYrq7Xu
TLSH
T108F42353C2187F4EDC59B3FEA66283AD24B12475769341AAD43E23F3C52AF45C4A1E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b0696d090f1bc330b64f6bfbdca254d7160eb8b5cdf76cec5174114adb9cfa50
MD5 e5d4961e0a9cc46cc4a8159a2cf45956
SHA1 362266374fad7b5d76e7d4faadccf12276a9ee42
SHA512 9df80ef552b446d1d5ba1c6384daa6c24ee2113af86487924a9fbf60657475d4dad5acb9fb232800947032d7ecd2d3cc6b3395ed17f651b71d53b773270ca1d9
TLSH
T10251B75702B78E96EFD0107CF7B1382E326297696E1F0F1A33F807BC2952391550185C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 74a4a1cf27d85a5e8778c58fbda11095fc560797854c6991bea3bd73c7386d41
MD5 74bcc586e59d4b37db1fcdabb3dcc8ac
SHA1 7aa691d8c4a8a1bcb96e164d956004d3cc3eff75
SHA512 a546cdc926337bd5da304d58c69f2ade574b092dcb18153b28f894d66ba58519f3152211596f67b3019f35a88a700e0299b7057532037c886f6bddb996c13f87
TLSH
T11B614F9612B7CFD5EFD4207DFAA0342E323283656D1E0E1AB3F96BBC2A61B90544144C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5890c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5890c2.TMP
Size 2KB
SHA256 b2652607678e4cab7a39d427a44798e1af05b9641f31c3e17c5fc6323159fe09
MD5 fceaf7d0535f44da072dc63e89aa2cc2
SHA1 0c6da6ca03fe219072fd273b063c86a6a476e4fa
SHA512 dd0c98227527a89eef20c598efca45deacf928ff71a551076b03f3afda1137acd22b6dcfff3ff3ee516ac6d05e27caf11e7f679d64cbff8fe59a4c50d2b2f141
TLSH
T1C251979703B74CA6EBD5247CF7A4356E226793A91C4E0F1A33F947FD2AA17D1440081C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 791cc9a5f52b2bb0322486e7e34586f495c0905aa936c10c676c472715f131ba
MD5 dd5b75b64e54f4dc42a78a2dd30183d1
SHA1 d92a775c8768b0aab4b2389763ada121372983c5
SHA512 f22300ba8b7c144e70dcc605775ca3dddb2da76508b457d942994ffe6865c0ee47db8a06528177acade3963275da5231bcb26bbee24cceb477a8fd314ddaced6
TLSH
T109E0D8B498CAC15EF5103486563DA708C2D47883E7D66D431704C8CC7E0E001F641546
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 78bc740eb225fca71b6aa61484ec4d1e042365d0f97e14237d800bd6ef22cb4c
MD5 16cac04f5c3fccae75c82242d9bd7d9c
SHA1 9743723f6dfae8adcfd4153e33c38da717cc3b0f
SHA512 16c92de3f377e0c1e3539e557e82a1519df1833befce12514ca304fc9afcd8ac86cdff530c425aad4a399f33834e8aea179af1dd99e0e033f5536cb7242ca17b
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+j7EW5L3YkK5fKFtI2qYpj:Tyi+7f+UZD4jJ/BfEWxIkCKFO2Tpj
TLSH
T109E2D18D3B11F911CDEDB33DA0C2C5E05EBC692C865DB1B1963C9C768C52AA1F49E11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 ecd07c23a080461da49ecfb90089d6906ef1fcc625a4a3e18f3a8b643bd93894
MD5 cf90001522fe17763cf641f46605d5bb
SHA1 957f48a0622bc2262bb3857d5f5028feb45a7b46
SHA512 ab03c85af94ec96eb81044a43a4377aa1a842ab7eee424a08f29cd37a33f97f73cfdff3e663ae5dda63b7c4ff87dbbb3b649baa219d8fc68f418a1d76ac1ef9f
TLSH
T175E086744CC9C16DE01968A7876D9708C3E33456B7F839571B0D9C9C6542A69E6D6280
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 7fdff21f78822759abd969c7c23c7262a459e2330e292e401167ae2e8250b5ee
MD5 5547a8297e49d2f447dfa343849470cd
SHA1 3008c5b6328e6c778b07e306e251b6e9c02b9317
SHA512 4023aeae7a2e02b92bc57b52a9e8022034ac6ccf8aab3fd5d1f7a140dc716187551e6487de4b7904f69c75733aff2c3d639a674ab3541c4389718562cd1ec88c
SSDEEP 48:IzBmw6QU1Pz/wdoclolFXv/lsz4UCL2ezhNqMVMcEGFkGlRPjcsO:UBCx4do9lHRnqMECRhO
TLSH
T1ABB208432F357903EB412E3F791754B9DA3BA32C5FA59E09346068518CFC44694751EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 4af6111f837c578aef5d88f50a47e749a0d67490e3dcb1fbeafa5847248fbca5
MD5 eb83f28428deb4daeccaefb6431c81fb
SHA1 044c545d4f3a0b0d3fb4be930edd92437b0fc6a2
SHA512 bcedbd1ec15324d3483c3ec4092998a98ac570d3877f0eb9de89b4505106daba8d3cb8233a8b6157796f5e27b6db7696143d458dfa64599b7aedf46d9168468e
SSDEEP 96:npqGAIU+bGz83uy3+u4tgp4DLjGQLBze9z3lljBHMsDEuspU0wbtqrOQpPfR4J+/:n0f+G83uy3Ct7XBBKxH7DXspU3if
TLSH
T19614214E1F753722CDBD917669E744F35D6CF03F8B1266CA686114B0CEE2A42A02C4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 668B
SHA256 84ce1f28dd4f18a10b3d21d18ea7175d51198c2b28382fccafd3a93dcac22ae0
MD5 5eca234dec7ba078bd520b17edd5f81b
SHA1 8e287d2a429455c21ca8b1ea9a7f70da2d68eb08
SHA512 f53103002d7e3c05fa299ea22dd3a24efc16c218bd720ef632495df5763477395cdb5037fa243ccd51321c4741202871049f52197ec007d81f66c5ac5baa29b9
TLSH
T1C701FFF36C6A5943E7420DF02EA337AEB366A21C8DE8D2A5CF02951A4EA01F540E6911
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 20b58b9cfd531c5ef834bc6131c142e36e6c5e45a323bff8c5c91b0820145667
MD5 a04950b76e46454ce300a88eec0a4580
SHA1 fab63a0ab143cba50e22d00f09edafc25391717b
SHA512 ead1e2f04bf63a4dccec83c69a2cce457135501d54bb6d38c72df01418d5e6346bf6e90cec895d45bd1bbe4c15a5d7b0894e52b8b8db3b2f73c228f16aeded12
TLSH
T131E0487045CDC1DEA208605B875DAB18D3F4350BE7D96E915B0CD89DF545544EA921C1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 b3d4cb481f90757610b17dd3b862a07d778c747d5ae182037710494a88c3fcfa
MD5 898c86a812ebb25f6bb571039f786792
SHA1 de2bae16d4d44e400d01375ac1df885bf730d91a
SHA512 aaef0a636216a90891f7542af17d3cc6e27f1e06b547e6a0380c1604fe40c883b00cc1ced7e36168c2bcb9db41c3bf8982d224049959734e6479d9ffc750e16e
SSDEEP 96:DqO7PMyUlFaPzdcLINBj69AzPLNLLuLmwS/AmuW:DZ7PMyUlFaPpcLILj69ePLNLLuLm//AI
TLSH
T14CB1C0F783E9866EE91162F0EA143E1BCE1D0515436C7C06C5E49F1B9BE24B1E141E6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 af09c9ca1ac604792559fa870021e46fca94686bce393ccaa90c130ed04b2cfa
MD5 1b4f11e3e99a3160111369d72f372a7f
SHA1 d0f344baff47d5fc1fcc76951bbe7293718f310e
SHA512 5fd8fc5b2ba2fdab404bd3322ce4a0fcf1020ce77990e7591b6c05a8f69e7492d4f39f045d0a6e96c0c72d954cc24c5819137b17f4b4916d4367af43d82bc0db
TLSH
T121E0C0EB853BA9B3103C86B62C007450563AA43205D408F8DE62807CB4C74F30A01472
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 64eb6ac295e028fdd4756fced1291f29b451915fa7861c018b0240bd51b0703c
MD5 69ccc1f09ef3716b5b902399a169146f
SHA1 58976f4dce4569d2e438e049fb9e9b4ca4b1087b
SHA512 641cf1ec25154039870a780da1792b79fc4e1ad130578ad59fdc053b502a17e4b50dcc470e66c8926a2033a0d9250113100aa9f8c0bace907ce2918be41ebf3a
SSDEEP 192:sxZCRHyMqZ/K1Ml8Eky/fEsPWpVJUxOczvSzodpnoHW6+WNmNn22NzWueicNirU8:sxZCoOy/fEsPWvJUHvpoHbc7NONiEyV
TLSH
T11F72C7056A38997B8CDBD61DF6557F63D6F8056396905E44AEFCCA0C00E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 9d8de204f352845f5becc33a621177c445eada633fd987c45f02472cca9bfb9f
MD5 4ddd72ceb0275aab4ba33a011de42d1b
SHA1 d4aa4c953a1d0a55822ff426cf82eefc90d199ff
SHA512 1f1923056ab4f341cf4391a457dffd63e9d47b419841d3726daa37aabec982e553079cbad3dc033d00f402692f2110e5143f36649245e4f40643e331271e4f5b
SSDEEP 192:sxZCRHyMqZ/K1Ml8Mky/fEsxypxOczvrzodpndHW6+WNW+N/YKtEcNZSIgjcJ:sxZCoMy/fEsx6HvwdHbJ/xNkjA
TLSH
T1B572D8056A389D7BCCDAD619F9457F53D7F9056396904E48AAFCCA0C04E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 80f433bf234f3c16ae3fae017a9bf20bb7ef4a3ae4b3668272df55a459af5c51
MD5 4f07b39540280923c67af3a1da667ed6
SHA1 099790bb91f4fcf9d24cacb89d68982a1a29bc49
SHA512 7023866357d1c0ae48c5e5f12873d648b8433c07f77b4cb8efeb1767120203bfce38742320b79dd4f559a539d191cee9043f32518adc03dd5e8af0ff3365036f
SSDEEP 768:AasqZr+7pLuL/BlWvBDkT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZEx4Llhf51YroV:AasqZr+E/BlWvBDkTu1jakEx4LXB1j5X
TLSH
T171F20A3B2C0CCB7E4F804E9CDC2A7E9E6EE8028B96D8895447F9841C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 6f70307c62b0e39f276dd98e3d8be5422c327cbc2ec326d040c910a95c6d4928
MD5 2619d38473a60e40620f2f2a8d74f437
SHA1 427f93cf3388d825a47e8cb76df72b7488efad3d
SHA512 5db459b6f9311c7cd462b5f07c125db33c23d40b326d844a915f1fdcce88655b2c1c60c517a6c203295a859f3a90d39e9cc7346317cbb891de574fe720593eb1
SSDEEP 768:AasqZl+7pLuL/BlWvBDeT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVkEx4Llhf51YroW:AasqZl+E/BlWvBDeTu1japEx4LXB1jAn
TLSH
T1EDF20A3B2C0CCB7E4F800E9CDC2A7E9E6EE8028B96D8895447F9841C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 73ea02304243dcc4823e29b30db2e7c13fe8088faf39c3155832762acaa21ddc
MD5 7698e35615dba86eeeae13c2098c7974
SHA1 154c513db00cd74babd05b36dcb69dcb4a3142bc
SHA512 3c2c82e0da82e1518efbf6dd482b075f612079a5f16ab545363122f5aa3fbf7ae540906f6d47d4efa3698fc2a67012cec02e4ade478dc8cbe642870507599f28
TLSH
T1C8E04F7405D9C1BDF19930470B6DCB0CD3E87417E7E93D522F58C9AC6543944B596181
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 36cc8424a67acb64476ef28e430d405953ebc2002314f03ceb1978e2e5df6f46
MD5 830303aec0a2ea58464069d31bff0a2f
SHA1 8a78261155f753510357a9943c47ad5e73defb87
SHA512 6abe497d804001bc7b7125e89ab23c3080f88be591d9ce726b0b4dfece50725473c98f39a8c840cbf172fb29aff10e604b21255211b075b2ecb102475807faa1
TLSH
T19BB012647F10F502C2ED463036A04B50A320F00514C6669758AD7F2A2E841A4BF00DEA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 5d062eddf2922b6df4c91035fe10fc69fecc55ca03df95804cdf742f92727530
MD5 3aeda32e10a2f3fd90663e0453980ae8
SHA1 4904a787a3049fc94a9ce78ef9404c67caa34b4b
SHA512 6d1d94e39e1335317e3ea80ca5f81e02a178db13ee522c3e0ee1531a6c4fe0f439d171eff4447ea86aa249a8a11adb24a6b3a851a40213717b3f07d6c2f94829
TLSH
T16EE0D8301AC9C2BEB1892487432EF30CC1F27C02E7DC29517F0E948C6386640B243151
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 34d1d7e696ffc587ee2b98617dfeb51817dee6f83309a0be75eeb1ed63c50d0c
MD5 9f8a20545ddbf39fd775e3b3d898c569
SHA1 bfc0102ef459937c645f95b17c0da5268b3d959f
SHA512 7dbb638717f9bd05c108dc4ef1db7771152644524e06b88c762a5c4ab50f4b8717b7e6a644c1c357325af3eaa50c180d4ffa99615e044fcab13e9764d0bb5b98
TLSH
T1A6E0867046C9C2BDA04964874B6DFB1CC2F17C06A7D83A8A9B0D449CA9C1254F6A6590
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ec40cbdc2bcbd42f56216e8705a2fdaa2cda3642879f649f06cb9f885cd5270c
MD5 7ca45003664d1f1b5df6eb801ad91ec3
SHA1 5d0736405b4ea9d31881f8f1acad7fb25c3219ab
SHA512 18a45395c99e03331bd1c1872593cdb7dc7dac338450858d946caab55dc7b87b02d6a9b7a46c9a7486483591d3b8e739e3d1208e49a4479e1578732dad51e771
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qnL:+BOVglYXrbtZqRvJF7N
TLSH
T1E1B22D11767B0380397E258A9194B46F62C270A37098B42B7BB945B64F6BF20CDFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 f6ee353d900e5111b474ac1e8cd3dde728ebfbd0052c5b5bd5fae379ac7212ac
MD5 0f5d04741f8c44ac668277a0572ca375
SHA1 0cbe0dac693b7b4b0213d20f53c6b082173d2376
SHA512 c24d60fe99821d651a54232788e52402e3007b19397391f9d4b5e030cec3db91438cd3064618e569ff81766557201ea9498bbe5a3fb51a1ebb383de25f71973d
SSDEEP 384:+BOVglYXrbtZqRvJF7TH+wXkgGyuhit84cZMuBQgtWwS:+BOVglYXrbtZqRvJF7THEG
TLSH
T183C24810767B1380397E294A9195B46F62C270A33098B87B3BB945A64F6BF10CDFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 cffaebc95335f242c797cf2ac7b7d4ec2f82c3c873e880978ada1f2e6170aab4
MD5 a43b3c2a379923d2f7292caaba005472
SHA1 dc441f1da0a2c06e401d160872678fc537d924a0
SHA512 c14188c6ab0bd4ddf2cf859c78c37edc50aa67f748c6b1a0347bf276eb9421c9bf5871f3e9c52cfbafc83e7fcf9986040cc9e4bdcbfa3766f1abbd7ccc7fd43c
SSDEEP 192:P+xW8wmfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxgmfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T12624740A7B747001EDE6D9725CB080771E3C716ECF22A6915DB254698EB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 67fee15bf5897dd036d52c2a6477434cdc950f6e14c81cc25ec224c5a93568b1
MD5 6a1a7e927fd517ad905c5b0f945a8919
SHA1 9bfa8c834cbb1ee52948da3c71718517699a9802
SHA512 edcdec6c7d9672018e25929cc9d09b0f4e632af6b4fb682d73f6e1e4fe900f02944c4d5608df7fe161bb8f04136b864730660e1aaa2a1ce7abf34d1d4e8ac1c3
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBg4B0s4WhGt:DEK3tjkSI5IUltGhp22iSBgOx4WhW
TLSH
T1FA52EE9FBD783213DCE543329AC212E5BE7B503D8FC1EB028CD610211BF95A153AA58D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 c8f069566cec5ccca0d11fffc0a89fb7050b1eb26ae7f3ffedebca55fe56195a
MD5 d044e2c30204048bbac650198dd66981
SHA1 62aff10164bb8071df4dd3d33580f5a9925840fe
SHA512 7af33130428acd3cb6987d7b1359023f5faac1a495319c12a30c99a231d83d6085271e8660b78054b642208aa39a929c61f8ecef3a84b646923336c20429ff09
TLSH
T1935103C0A3F564C87F89B982C21E640765E13D6B364E58B2632E85F54F48C25CB7FE25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 99edb5327e7716801fe07fc558ae578c19541dd5ae77157b594c519f8d4a1e82
MD5 89238c80e99ebada22bfb82236ec1834
SHA1 0cfe9119fd3a1f94f765ab4afbd2e315650c7afc
SHA512 78f9827c731715e39306d5adf62e9a945c6e0a41e79c02be580a1510166850b2893cadd30a17026eb1626db0d8bfe6dcbb80267c7c46bc2a454b21335e931bc0
SSDEEP 192:v8OHKmAs2tlrHMrs2GFf+vlrXQo+IIIObeMIMk9YcY:jHwsSssh8XQo+IIIObeMIMeB
TLSH
T1C45283292A051B33E15E5F7B0359C7929BDA88814572222E34213C1F9EF3F578BD91F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 94114ba7bd001a1e0d6dc72119bd8491f206379007819ed8eb947da426e1b55e
MD5 dd71616a627622bf87d3cf81d5b35089
SHA1 818d6ba36e8a3aa90769c5356db3159e135b19fe
SHA512 c64f0ff8f035cea95b661e6fa7d966330f38e8ad4dc6fda98ab2b8788c0a0057e8516be63afe4a854e4c2406d0b07d081bd2d7f3a95aabb2135df52d97c6e795
TLSH
T164E08660A9CDC1EEF2546087476D874CD3E53907FBF929A65F08C4DCA501944F29A181
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 89d80516226473e2bc156bcefde8f3b79c0f31003103cbacc0fe9246ccc42eb8
MD5 425beb724d0bc54e9d28071c12953734
SHA1 cc2698c1af354b77af9de0a0a63c8328c12fa6f3
SHA512 a584d90dd49edaf2e174d1f493a2de8444d002ef69385f7f0f149610ebde2bb4d3ea7e157cb682c23ddc9539f1dd20622182dc13a20c7d4a564be6eec23960c1
TLSH
T1FE218141F324C149D14E8A7E902A9B351738E8129FFCDD0F847964752D71F141E8BAE6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 0e6579c2a94e2a73201160cb6dd711f6961175519090f0fb0d2c05f8b3ad5d3b
MD5 45d84a8590ced6eaaf91545b50803c09
SHA1 368fbff6b716969aad9fdf7d758198f0b7de7caa
SHA512 f65d1e38072311ecaa398dcf0f43db5dfd775f8b529a10599544e752324b25ad0279d1527d3148667524cfc4d773f8f61a7b257ede245c763eb7e50d752b5dac
TLSH
T18CE02620A9C8C1EFE05A2087026DC748E2F6380BFBD82F4A5F0CCC8CAE41941F28A181
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 3a744bb5b06c50ed7ddb27e5565f5f344fc8d188c38c771cfd8e8b0cb2eb787e
MD5 4e77dca143459964a2da8831b8a49f94
SHA1 a6694440355fd73efe509954b43323b1a5a34e1a
SHA512 56b4e91f4266d82e6bf0b4f1066744d20f78246f546b7e382855cfc367a3f55bc0eb3e2d198b127a573f306db965482f535dd03526115aa68ebc1c4d3fc1b35f
SSDEEP 3:MsEllllkEthXllkl2zEelJ9nl:/M/xT02zN
TLSH
T1004402086BC86E56C91456704011836443A0D8140521574338A104125C865840D10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 37c121ff4385c3dce95dcfc04f54647da0e9b3931e27ad44d6f7bce329fb6655
MD5 8be0694ef309d260867c2f1e09cac480
SHA1 4ad4157795010189124eb4696641bb9f27a36625
SHA512 3d7d85e6130d6f442d0a57a72b0b00ac6189cc7a7ef54c0ea2a9b5bae106642a64ab840379ce384721c4feacd5e7be73806b5b94f4e329cb4558a0cddbe1c73f
SSDEEP 3:MsEllllkEthXllkl2zEelu9Qql:/M/xT02zNuy
TLSH
T1D144040CFFC47F45C55454304011C37403F0FC540511575334F3041F5CC75400C10010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 fd4bf1f1304829cbaed8342abcdd645a67c0bc96d407326337ffe46e1c947190
MD5 d58ee17393b59a70936dfb1939f3d7a9
SHA1 7e6b2172bc43295ca83369aa82f5c58e925a0118
SHA512 8d261d5f070f2679b00695cbdb729d8366ea6e405b667fabf853e5485ed924e638fddd11f9283d1173455b2b3873b9b6aaef27720f3263548670758884f9f8f7
SSDEEP 384:nukiFavqMg3sNy8TUNTUlIm2RihYAcrmvfDYWP3jVf5eQhCVS7o1dKuiNGXdrN1D:u/Fayv3ZwgTiA2YWPxf2Vmo1tiwXZD
TLSH
T151C23A31E898D9ABEDE69F8AEB0A7B07DEE00257C5CC4AD4D9E84D0D10D719E1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2e89ef4808ac87435701d1a079e17249efb7cd250f9ad193ac4b62150ccea3f0
MD5 d9f4138a1ae5973f94fea9169dccd223
SHA1 0a97611f8c745cee31cbf8338cf1cbeacb3932a6
SHA512 5daa1713435545db964ffb486cd0571d38ab54937b7fdd686bd41c1604b4b2b4fcc857e3e50ddf67014bf371ff162763784ef793af3ed711e7cab71b735a1827
SSDEEP 384:nOiFavqMg3sN+8TUNTUlIm2Rihdg1emvfDYWP3jVf5eQb8HaWhLS7o1dKuiNGXdv:lFayv39wgTiEpYWPxfILmo1tiwXZD
TLSH
T1B7C23B71E898D9A7EDE69F8AE70A7B07DEE04297C68C4AD4D9E80D0D10D71DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 96364614211bd31e652cdfd088f09f7e50899733d6e1ed12fbfd87e7ae65d513
MD5 ecd8e08204bc5b96983b0022ca780160
SHA1 66321ae35eaa6c0c82e2dfb861fbced4bec58d58
SHA512 f978f72fc92a2dbdcb2fde5185a42be599a2f0100224950b8724a8c821a5bbb4d8dc3257f95494a1fe809753eefd9f7ec5a6b6988ef7005fd7144651da3228ff
SSDEEP 384:n1iFJjccCs+Bt0S3e3sNS8TUNTUlI4pRihKXlNmvfDYWP3jVf5eQb8HayhL6SgVZ:8FJccQ+3twgii4oYWPxf8L61VFDP
TLSH
T167C23A31D894DDBBEDE68F89E74A3B43EEE012A7869C4AD4D9D94E1D00871DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 92d68b1fa7b44516690bd1bba1cb84e270a26baa2a41d675ac55dbce227d63de
MD5 efdfa1e524c228fe1e001b5cba74f158
SHA1 a1f7ee38f33c868be73dc58ca372152f39dcc4ea
SHA512 982500a15deb6dbcc32e3f4b8c78c1a54638e69a1443bb2d536ee0016603594d6028123a13bfd207def13b5a4f8280dc176ebd913483246b2b6ea099ec0d6696
SSDEEP 384:n3iFJjccCs+Bt0S3SsNS8TUNTUlI4pRihnXDNmvfDYWP3jVf5eQb8HayhL6SgVLl:yFJccQytwgiiVoYWPxf8L61VFDP
TLSH
T106C23A31D894DDBBEDE68F89E74A3B43AEE012A7869C4AD4D9D94E1D00871DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 6ac0534f683b14ed7f6cb30137df4c817bb3f308408d9c63f8dd13af194d8133
MD5 661f0fe5fb8fdce94777cab140f039d8
SHA1 cb48d940883e5ef13998a6b1d1ef32d3952b37fd
SHA512 1381364d55d1a5f314cfe7bc42582c4382da7e6ab85bb1d53ad6852c226e76e75399858bb5f2d645734fa9622c4b44b167a7aeca5e6b16fdee15a17332026ab9
SSDEEP 768:yFkccQytwgiigoYWPxf8sSLYXKqa6vO61VFDP:zccQyebYXK/6vOgpP
TLSH
T136F239B1D495DDE7A8D6CAC8A746F642A9E40173C98C4A9CDAF97D39308F0FD1707822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 2d527a64e7d5332474253c528ea14ae9d20e39e48f2d0e90129f9b48d4b339d1
MD5 cbf6e011588e8489c3574a23781e7d82
SHA1 a76bd70e31fab78d1b258f7509be8117d1b5d751
SHA512 3e7609ba5db6413f093c829fe29179a9f49f474baaa5da8986bd73ba60c10e074d170452d944a13355880d675959ffcdffef1034e7c7c608d8e44dc7daf8a0d8
SSDEEP 768:yFkccQytwgiivoYWPxf8sSLYXKqa6vO61VFDP:zccQyeWYXK/6vOgpP
TLSH
T1A3F239B1D495DDE7A8D6CAC8A746F642A9E40173C98C4A9CDAF97D39308F0FD1707822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 1903c66946604903f32afd94c1c631e456b7205ec01ecdf42ec19592459994b6
MD5 dd89119e2a3f01163116e759aa0436d1
SHA1 720690350adb9e56f0dd7e4981283ef93491cf66
SHA512 852f421c1560bf061e09b2cb0c9863920ab44c01a0019d1b030acc8e0ea775215c56521e38e1434d390922cdf867eead83c6cbaf3ca3fa02864d30a8b4ea2b70
SSDEEP 3:MsEllllkEthXllkl2zEel6Kl/l:/M/xT02zNz
TLSH
T16D4402486F846B45C5141030411283505360DC600911574324A108A65C966400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5911852223ad62832377fd453984f376bdd504851377a8ce0d5f9db2810373e1
MD5 fcb584e6cf8d71415e100cf78c8cb265
SHA1 0e09545036abc7982423c77a131583e33278973f
SHA512 4d6bcadad7d622429f1919fb9b61e3e5d16be21381433913f929602377ea895298b430483382dbbe9600aea197bf8c1d0fc9a9b3e6acd85ce58603fc05b88446
TLSH
T12B41D15CB6EA1148B3B76F1AABF6686D487E7D372E06949E00110D8F0A63F41C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 aa50e9588520b3da55084d990f33c2f2164048c28f7cabfc0af1b0eaa3f835cc
MD5 cf14dad673a6fc221d4e275991f761c4
SHA1 6a0214fc70dc231894d26ebf5b85416101fe5c8f
SHA512 b448e6d069fb91f2c88f9df62462d4aeb0400f9d36d75965a64427596d7311880340d79b8e4bbaa31703e1fc9eb37bdcbb75bdb73c30ac142ed4ba928d769840
TLSH
T127513D587AE91158B3B77F599BF6686E847EB9672B07C45E00120E8F0623A40C962737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2972-267-0x00000239036F0000-0x000002390379D000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads