hxxps://cdn[.]discordapp[.]com/attachments/1475510646866186262/1500525614049001472/LoginApp[.]exe?ex=69f8c0e0&is=69f76f60&hm=d13fb552decd14b79db4fda056354bf011cf3efe54a3b766d751ca1c91fe1044&

Analysis

user interaction
yes
max time kernel
46s
max time network
49s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 15:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cdn.discordapp.com/attachments/1475510646866186262/1500525614049001472/LoginApp.exe?ex=69f8c0e0&is=69f76f60&hm=d13fb552decd14b79db4fda056354bf011cf3efe54a3b766d751ca1c91fe1044&
Sample260503-tbwpfscy2t

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
16	1624	msedge.exe

Executes dropped EXE 1 IoCs

pid	Process
4124	LoginApp.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
68	discord.com
69	discord.com

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\sq\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\sr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\hr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_4132_1531040755\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_2083795820\_locales\eu\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3284	msedge.exe
1624	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "149"	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222972207843210"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-643422742-1162610606-620613169-1000\{7B0D7739-692D-4891-9528-0A0AB07B1B9F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-643422742-1162610606-620613169-1000\{C725F92B-FF92-4B2E-9AC6-1615656FE817}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4124	LoginApp.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4604	LogonUI.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4392 wrote to memory of 4456	4392	msedge.exe	85
PID 4392 wrote to memory of 1624	4392	msedge.exe	86
PID 4392 wrote to memory of 2016	4392	msedge.exe	87
PID 4392 wrote to memory of 2016	4392	msedge.exe	87
PID 4392 wrote to memory of 2016	4392	msedge.exe	87
PID 4392 wrote to memory of 5932	4392	msedge.exe	88
PID 4392 wrote to memory of 5932	4392	msedge.exe	88
PID 4392 wrote to memory of 4728	4392	msedge.exe	90
PID 4392 wrote to memory of 5008	4392	msedge.exe	91
PID 4392 wrote to memory of 4728	4392	msedge.exe	90
PID 4392 wrote to memory of 4728	4392	msedge.exe	90
PID 4392 wrote to memory of 5008	4392	msedge.exe	91
PID 4392 wrote to memory of 5008	4392	msedge.exe	91
PID 4392 wrote to memory of 3932	4392	msedge.exe	92
PID 4392 wrote to memory of 4716	4392	msedge.exe	93
PID 4392 wrote to memory of 3932	4392	msedge.exe	92
PID 4392 wrote to memory of 4716	4392	msedge.exe	93
PID 4392 wrote to memory of 2928	4392	msedge.exe	95
PID 4392 wrote to memory of 2928	4392	msedge.exe	95
PID 4392 wrote to memory of 6032	4392	msedge.exe	96
PID 4392 wrote to memory of 6032	4392	msedge.exe	96
PID 4392 wrote to memory of 6032	4392	msedge.exe	96
PID 4392 wrote to memory of 1864	4392	msedge.exe	97
PID 4392 wrote to memory of 384	4392	msedge.exe	98
PID 4392 wrote to memory of 384	4392	msedge.exe	98
PID 4392 wrote to memory of 460	4392	msedge.exe	102
PID 4392 wrote to memory of 4132	4392	msedge.exe	105
PID 4132 wrote to memory of 2300	4132	msedge.exe	106
PID 4132 wrote to memory of 3284	4132	msedge.exe	107
PID 4132 wrote to memory of 5884	4132	msedge.exe	108
PID 4132 wrote to memory of 5884	4132	msedge.exe	108
PID 4132 wrote to memory of 5884	4132	msedge.exe	108
PID 4132 wrote to memory of 4628	4132	msedge.exe	109
PID 4132 wrote to memory of 4628	4132	msedge.exe	109
PID 4132 wrote to memory of 2776	4132	msedge.exe	112
PID 4132 wrote to memory of 2696	4132	msedge.exe	126
PID 4132 wrote to memory of 4956	4132	msedge.exe	127
PID 4132 wrote to memory of 1036	4132	msedge.exe	128
PID 4132 wrote to memory of 2256	4132	msedge.exe	129
PID 4132 wrote to memory of 2256	4132	msedge.exe	129
PID 4132 wrote to memory of 4896	4132	msedge.exe	130
PID 4132 wrote to memory of 4896	4132	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1475510646866186262/1500525614049001472/LoginApp.exe?ex=69f8c0e0&is=69f76f60&hm=d13fb552decd14b79db4fda056354bf011cf3efe54a3b766d751ca1c91fe1044&
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffc6a83c188,0x7ffc6a83c194,0x7ffc6a83c1a0
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,2231575945247239749,18247781413174697985,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1936,i,10278276224455020396,2077134776010050625,262144 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,17224749951937868536,18187870409317296737,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,9478965361646692658,15871313497127101893,2097152 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,2509761394317412792,10273525026938553574,2097152 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,11092874007304415072,9090185224352989058,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,1296301785272725157,5211741161520914150,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,11483113409201582123,16570572995788490775,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5560,i,805832177045779557,4130848544846900912,2097152 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7115894073511195993,2800105872689348230,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,14794374534645164312,9218162411257400234,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,3441529764767992594,650884392217249465,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,3441529764767992594,650884392217249465,524288 --field-trial-handle=2308,i,5234695787281097326,14092545712772778155,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc6a83c188,0x7ffc6a83c194,0x7ffc6a83c1a0
    3⤵
    PID:2300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,474181081842063412,14989288645770274026,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,13759562366925381637,14173082504822501357,262144 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:2
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,2257653036563447128,5562759439097767997,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
    3⤵
    PID:4628
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,6869908316491056153,10900633077321783015,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
    3⤵
    PID:4980
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,6869908316491056153,10900633077321783015,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,3670932677974447874,12781353751449123206,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
    3⤵
    PID:2696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,14259996487768084955,1253695722323683742,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
    3⤵
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,12929665908074058218,13464571814002180729,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
    3⤵
    PID:1036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,13980702234155697503,13591051059445763429,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,4926851807566704426,13837746262240791065,524288 --field-trial-handle=2084,i,165228836158800257,596851858887669547,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:8
    3⤵
    PID:4896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3688

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3344

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2232

C:\Users\Admin\Downloads\LoginApp.exe
"C:\Users\Admin\Downloads\LoginApp.exe"
1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4124

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa396c055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8ceb411792f96dc33552b05fd12c152550f572df8d4eda7fefb9cfd19ba4cca0
MD5 05ce2a76c1953bf832fd5e6ab4b79649
SHA1 b2aacb53a5e13f67574e95cdcc5a6aa70a46185a
SHA512 bfc5ae6f147150a3c65a32bb9af9e112398ced079686f2bc3d849380e239a984153aa7c8109cd0d724b1a01be93126296f8b7d4b15a977a7ebc8bda50093e5c1
TLSH
T147D0A735635DE012D1AA04B6505141951E5EAD8A308B41D9D216804D4DEDE19D3D7182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 924e96ec20750cb6a5239ec6615014ae8ebb3de4d3c60595d6c95e7ccd197fe9
MD5 9b2430d85ce0b6612f557c45f7f3cbcc
SHA1 0a1e10f745cd18a847854cf92a1d4154f1e53a18
SHA512 187d6a5fac24a44192cd7964a293cf55a01134f6bd0ced9759bf4dee1fbc0273c5e118208cf3606ca4853d0f0f145448fc8342dac94a0745638e99f4acafd46e
TLSH
T1FED0801C1275BC31D4BA8575544537092D1DED675543533B5433557C0D87E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 958aa2b4762a1183b2043f7583303b96d6c089f0304281db01ecd7061688fca2
MD5 032eed624e40c260f6cd1f630f35fbd9
SHA1 e410505f3f1bead01eab2175ca4ed796cf555a25
SHA512 a126d15ae481c8d27c96b47438a8940fd661fba3a0d862950d8d52f1e9d91d602513645d27bc36fb99ae5c7ef059a1c20321fddc38623204e612d66fa2d1b9f4
TLSH
T188D0A778271CB002C19654F6A04141952B9ABD8A308B41CA5117D00D0EDDE1492E7247
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8d2a076bd264c48156f27a9a58ff82459b77020f22b2e99e20bb3bfd02f05d89
MD5 ed29231820ef4aa5282377403dafaefd
SHA1 2d30c45c2474f31bf4ce00aa651981576b4f805b
SHA512 3b227c1dffb84e0aedc1f41ec46d92429a593ce345f438e78f6ad041d8b8b74146f081eb50148a053479f751e3070eecd97e5d29b09aa632e43ee28b65024ace
TLSH
T1FBD0A7782718B002C18654F6A08141952B9AB98A308B41CA5117D00D1EDDE2492E7247
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce180cf0fce9a4a96685bbb0c58efb5750080d37ce961b69a74ae38b49eb68c9
MD5 2abcf056d353616a5983a10f17185a31
SHA1 40d71f06b42cf03d05e8dba44f76231dd24d9fd9
SHA512 5bff16b6683201694139145fd708bf7d834e97a5792e68cfb43b011e13c0e993e1cfb6a8c6f450aa2437fe486fb6f3ff1af62a05b918ee73bc195ec5cb0b3e02
TLSH
T1D7D080181275AC31D4A68575548537093E2DED675543533B5473557C0DC7E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dbcc3c8d1b76e86e40d040d4745c8f328ad4acc43608d3419a6f91d201bfc6d6
MD5 023d5d8fdd7fb0f1474d94a84fdbe7c7
SHA1 096c26bfaeb46e81e940378d765b2ffed201a936
SHA512 19d7ea7f82da66291d18407b9eab87a2016a5589b18ffc1b02670c18dae2ec9be56eaf764c381ce7957118920332bfda0dffcd2295f1dddf9d758407f6b38ecc
TLSH
T19DE02BA9C811ECA71DFC171870544B85E76413172B80494F3A3CD20C8F70A3F52C585C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3e4b61c81da8a834ffdb1317ddb0f08a21632e9e6c2db1c6c91c29774be42e12
MD5 e38f6116e3de72423baa29c2f84bcd9b
SHA1 db511596e16480a3ddabafa731855de5fa4d3641
SHA512 ef2815de22b2c7573da5e21c37f890734094209a4b1710ff3877ae78bf64add5109ba62e1f66d630e0fec1e314e8b680576f2e0f12b2689d699ca26db1b645d7
SSDEEP 768:rKkBmgUTmHpKZX3INLhJ9mGTvhPVhPoPGK:ukBmXTqKZX3aLv9msJ9hPbK
TLSH
T1F213C47E730C1DA5CAC6293D0D2B6A7A2B32CF22D9D92587733177104BDAF423A0E650
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 800ed1c350e1c25beb154e4451a8bab99aaa9fc97876b10052b520a603c7849e
MD5 f8f6ecf0820f8e8c15f533c6f55676f3
SHA1 80a15837a1f864ef963cec8c998979bb276be29c
SHA512 23a01b9e1837ceaf5bbae6e0aeb4f28def87c6875805bf122f1d7d32016a8e27aeab6465ebff1678e1c50bf9ccca82b4472593f7fdcc3cdbb6d583aa4fcf7827
SSDEEP 1536:Lpkj8lnynMmS0pUD0KfsFabOy16lxzFE/bVO9dAFLvIVEdM5514oLvnIZYQ7I:L9r1IV/14evMYH
TLSH
T143446EF75955A01BCFA802F5E2033A3DD17B051D2CE1F8E9E6380C952965F22B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 afa86d183a56354077692d10a82ba03eb5ee255c947df8dfb953c03df0f9cda8
MD5 89f4266bedda5878f1ddfcf14314239c
SHA1 cf18929079baa2b06e77100f2f5b8b323cdde91c
SHA512 1f3a5c4fe0422348a6d4901343e171795a780e0255e1766bfa28eded082358e8fee77b63b1821251e38048e13552bd5cd8dc08c2b5ad8c35f7b9b92c059592a4
SSDEEP 3072:ub5mNiH8GUG/iLasFxzlhP0HlAs0qMXFHZprZ:M54bvG/iusBl4lAsOXFHLZ
TLSH
T140255CEE8F382C87DD6B4D70B4E0EC22BCB41293B51AE1D34818C99097963C6679B5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 6dac6e00873a85375d726c519751c1ac2c311815b6ad8043c71acb2c9b25cdfa
MD5 6e6d341781451a288ff0b0323104382a
SHA1 f3e8ec6248f92c25a0e04fe62a8bfc8e2e2d9058
SHA512 aeb1c2e8f53152c2d25694c5a4bb5d4199c578c1ecaeb0d18fe1c789b3062eeb6cd3d098c8d87b88b19f73df5866673209a47c33db3b72f37da42ad0603089c5
SSDEEP 24576:/XWcKJN2GJkUtsRv4ml2l9rcD7eO05Vip/A8JhjjPhTR++pMtu3cYtgzKThOJ3O:fCNJDtT2+cHeO0XiNLFjpo+p3KzKTkU
TLSH
T183866DEEC6685C83CE678A70B4E0EC477C7413C3F555C1D38958C69402AB7C5BBAA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1a0d50e63e163980b342401953e416b803d589b479a42bd31d367c7f18c78e01
MD5 95b39071de2e9ab28f84ce22c36c3f2d
SHA1 5c3c2a7a9ec58e88ce37345f15666ab245a61d7d
SHA512 e1da6c23b6d49f883933ea82dd497d3a0ba8b316530910d38f5a342fb7855d6446bc29e7d51625e6fe796b2dbe0bf9e962333f0aaac69491ca0f321eaa355c17
TLSH
T1BC41953483928828E7D205718AA2345DB370AF59B4D75EC937F25BFEBB66F4211508CD
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 e7482c5fd2758288f308e562dcaa38414b6151d658cee2421f492fb55d44f903
MD5 30ae71e524e296728e3935731e2dd26a
SHA1 976a4882cad98dc09f279f6005b8578198d802d8
SHA512 e346edb8ef7921f186f6d10a427874d874f4dcb5145d09f57de06a8b5f28149222d89a7d966d9daa5457d03dbf6b678ccbcb826850b1bfddd565a2ebc9382467
TLSH
T18DE0D89868CBC52D6A1834CB42747F0DC1C13492D6C96EC71B14CCC07603405BB95657
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 e22106b0e0cc436337ac914191023eaa6dea31f7c9b0fd33f20aafc16a6a7c7e
MD5 cd3a8961e2fc90e0d3921eeb993193b2
SHA1 16632961c6b5538313501599e19b96c9237373ff
SHA512 321f92a77b1b46442adb4135726235ed2ef9e49c8a30ec55c5bece7146e7f918a38ac5bf68c99c097a376851fc0e65833e477d2bdf8fd74db728e34450075971
SSDEEP 24:TLwga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jiqW5L09CcK5fQm+W+t+t:Tii+7f+UZD4jJ/BbWxBcCQm+W+t+
TLSH
T1C1E20E4D3F51F511C8FC733DA0C1C6E09EFC686C8A4DB57282389CA2CC526A2F49E50A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 8d3d985e30d7b2e431022c5f4cfa1135c6407d5765a01acf9f5e32a44c4ea92f
MD5 b7e701095eea2450edb9817e4e3d979e
SHA1 02652baa72907addf8b594ec23a52a78a6aa61bd
SHA512 c69144acab4ada15561e4b60ccdbd6e1ef071af4874fdb24ec460e5fd374f719f6dd255b3d52cb70f530cf05227c1740023ddd65756044e18ede345b822d2df3
TLSH
T126E0260418CFE179E256A8D383A87B08C3D23403A2CA3AC61758CC81710A241E2FA695
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 053f878eb8fd51b9aee1e3157c34b3bdd663d8cc65b52f8fb0fc3be58d63fc22
MD5 1a80efa43180bc7ed1b5884346f59d04
SHA1 4709eb5f78185fa71018513b6dec26ec6cb71115
SHA512 d3024982bc88d21978fb1bc9481cbc751d23d78b61ae27c26e964b993c197bbd7fe5673c69a0beee547b73179587bc6cfb912318316fdbde61e31b11cb9eb78f
SSDEEP 96:nk3T1IU+bGz83uy3+u4tgp4DLjGQLBze9z39jBHMsDEuspU0wbtqrOQpPfR4J+M2:nk3T1f+G83uy3Ct7XBBKjH7DXspU3i
TLSH
T13C14201E5F242721CDBD917629E744B35D7CF03F8B5366CA686114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 ab83c7c417fdf8c3d2f62082b0bcd4f968c0d0cb5a220b6370babd3175dfa395
MD5 971365f0770addd3080b1976029c36d3
SHA1 6c0d8dfc7e21d4780b33af64864653d6dc9e3700
SHA512 bcf1baa5c0af4768ca6f6733fba0d4ee7d58493c13c0864995c4cfd1d7ae5a9b03631a68aa04961d3869ec2c1cd38ef8f850517f354ea41658a181f277296c5c
TLSH
T157E0D860D8CFC159A34560C74368BF48C3E03407E7C82BC91B14E841B002044A6F55D6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 7bb13caca09a48ea618853f679390549c5b34e3707284c639b3b25b7f8ac52b9
MD5 f4767238ce197777555ac673845c2df4
SHA1 81342a476fad5b0f5340b22c03ea8b37ebec6dda
SHA512 9163d017446c93ee9444be2133f489cb5773331982af9fb62a853884ebaa50747f82321f7086dcb4f2cce7d9078c7350a4e21c35b95d52c7d7d9e034b349f440
SSDEEP 48:T2SLopFMatSaw/auUOt8BoFHFt6QLEVOBH:iSeMatUaAKSR8OJ
TLSH
T14392114D1F343220C0F44B36DDD085572F7C101CD3A37A96EE1460F38ED656BB54596A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6a6779a22efa509570158b4accfe7d590ea6225c635e7bd8d0d4eb1897ef19c9
MD5 bf6d1b3c5bbd48588a768c119bf6d615
SHA1 ee5ccb18f6a83ce38b9b5ef87b5690066411d9f9
SHA512 0e8e9c4df551a72fd6cbb904de27db4aaae5fdc7967e3c1e9bc9fd4403febd3c2027e6236cb4cdb6acbca56640994967e884952c65f6d86fdc97acea6b994109
TLSH
T15B31AEF783F4856E8A0195F0BA186E2FCE5D0560436C7D9AC5E4AF1B93E34A1E14194B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 53629754b16fb79acb6626c3e5fa72cef147f5c5dac91ff303900c74905838d9
MD5 c34fd45e52ae0155ce9fcf122e47bd65
SHA1 4834a789743c4f1040eac4f92ba60b9af04e92f3
SHA512 472c2656f233d4a7195c3e9a7c1c31f5167dd270841f95c1d55498fadf2979d9e8162b589d8583d9c014d885eb4d9660e91a36f7d72e3485670c619635ea0d13
TLSH
T11241CEF383E8866ECA0195F0BA187E2BCE1D0560532C3D5AC5E4AF1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 ec367f3441fa8d822bd2ea749a897b6b53cb3922930a71920e38d1f0bd20b5ff
MD5 936a58ea3d59d606a198986b542f869e
SHA1 ceb554ed803a0e99039735513fc56ea4736ec858
SHA512 ca07fd7f97c76611493f5bde4ecfa9e740547498d6bb1c1bf3e4a7f78b70d1b62bd594ada5587f7702fcc7576feb55d944f46d7a55958f902ed7c23cee88a411
SSDEEP 96:OIEumQv8m1ccnvS65jVBtL90TofcKhnF9rskw44g:OIEumQv8m1ccnvS6lDJWK
TLSH
T14BF2E0FB06276206D98448B0A4006BCEAF16004B47F6F6ED76D447E3F7931E2B5B9746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 debebc3873e28a467c11f44cab876f38772e1f6f1efb14139b763b128e7e1c74
MD5 d0f7977f25d61ed03d5761fba3184d0e
SHA1 208c994f692993ff4b34b3c92a4960789176e3db
SHA512 0f4ee7209ba66d66f1a716773e57fa7509a46c8109f8073c4ce21de52a9598651e6c6967418b75110803ef44594154e6ad5b36e52696c40cb7e39cf4f4eeeef3
TLSH
T15CC0227584BAE4B2002A44795984F88076B4C074028168A1C8AC823C61C10F7AA0202E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 72bda917bda6423298de8b21030441103e39aca7d1b50147e3d055bff327bb38
MD5 b75b53ea0780aa9ed26732a6f95bf56d
SHA1 d0ca600ef861f720e092f1578b32de0045fa9eac
SHA512 66b8826e998a4988c5e6debaf91ac1238626ebae07a13742f7f829ab4c52664c6507386c3bf050070a595c84876e4341659a5de06d5ee4a25306c1e89de1046e
SSDEEP 384:sxZvLDT/fnsnWv2a4vfQ1sLHbGCS33NZF:sH3T/fIY2a4vf7HbGtJ
TLSH
T1C872F8156A389D7BCCD7D209FA557F53D7F90523A2914E44A9FCCA0C04E6AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 7a2c487f24095d9909096418494b06ae54172aecce77c34d54de257c6fb8a143
MD5 bfad61bdb54b620cf601c8f6d3c6181d
SHA1 1791ea8eec48607caa8760a06307dd1be4c1a890
SHA512 25d44e27f750aa6df7b7c3b3b083d5914e8872904cdccf747641619f86ee37205fe9f8a9256abd7734df821ec37c79b7e52456c86eea70522a4e00d03d8c878d
SSDEEP 768:KJ4Z0+27pLuL/8MWv80Xo8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIYsLLlXZUJRroT:KJ4Z0+WE/8MWv80Xou1ja5YsLLxyJqXD
TLSH
T1B8F20C3B6C4CCB7E4F804E9CEC2A7E8E6DE8028F9698885447F9944C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 fb7ef134c3df2c37d39fd50b7dc67a4317adf58b0ad1f9980181298a0bf5875f
MD5 1f578f5bbf2bb547fcf11c2abaa03ed8
SHA1 c12876f51bca7cb7ffba9566a6065ee395b4be1a
SHA512 e24c6d3b98024933e087771d598b9682392107f8453b954305e659d68fc7abc84363fcc6b69d3293d6b7a22c636dbcc3b45e2581fbb1e438bd9b6c4c6cd44427
TLSH
T117E0269416CAD17E615720C703A4AF08C2E47427D2C83FC66FC0DC806583504B1AADD3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 05d3c198f940047efc0c8ab7727e84eebed106726510f19c3fc8a062e9e1b8ff
MD5 4c11563d97b76faf89a4a6550974e8df
SHA1 765d4f6107dece2607b8fd4fe85d7edbaca76645
SHA512 67bd453bb14efec67a5e3a1c861ecf86b352fd74058add4692e7850a79243a2f6687d7a977c7876a76141a61543fcb2cbcd82197a18001262a9960c34fc94d78
TLSH
T1CFE0D86825CACB6F635724CB4368FF0CC1F27413E6C82AD52B08DC8873071407297951
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 645f4c0389b083cab79b944fed84fc3c1fd801ca7055ed2a18dd398458706e27
MD5 ec52593cc337e5ab726b845c89e83eeb
SHA1 dd0eefb56fcec89dc247ecd62f24a96ef3275ce7
SHA512 6993291c207a35918103b038959e00e83132109a5eb14d23d054ad0241337e3c2f6a86cc9d476c7d8dcd8e7daff27b93a2f9f044c98a09b5ea4d74b3769f7d39
TLSH
T128E080B455C5D63A514564D343A4BF0DC2F1781797C63BC597188C457306144F2F9591
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 29KB
SHA256 6fc203af7765d3ef869a80b1bef394d73134a6d9c4203fa0a2750d78e0c210dc
MD5 8c72e13bedcf2bbc4a3c7bf5cb123530
SHA1 8a04afef9273cc845743646ff31be579ede1ad46
SHA512 bf2e2e889fa31eddf5f5cb97031a997719851ed7399e1deb3d20dbf3e6e7ccf52286d28d4c6ce68fb6290e23cb16350ffd0b4e5a7534125d976c2d6638c38f9a
SSDEEP 192:ANtDrpn3F2E9FHwgRBL3WDfSZXMFF7xJt5DJfg:AzD9n17lw8BrWLSJMD77t1Jo
TLSH
T1DFD24811713B02813E7E294E9591B86F56C234737098B92B3BF804A64F6BE21DDFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 a258e0b98f126248c21e3d4bd2b2085c351fc11389ba263285d95e812f569fb2
MD5 184464fabdd73dbbb7edbb3ae509346e
SHA1 ea3c9310863311150c20cad8e21cbbcc85548477
SHA512 71e6d8c7c635fc5740b69adbc34f78cc2f4fdbdcdf16a0ccfc9ac0c305966c77fd984c847306e4cb5cddc9ed2994999b32d79bf46520635e32b2b229577d7ffc
SSDEEP 192:ANtDrpn3F2E9FHwgRBL3WDfSZXMFF7xJl:AzD9n17lw8BrWLSJMD77l
TLSH
T10BC24911313B02C13E7E298E8595B46F62C231633458B92B3BF814A64F6BE21DDFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 dade1ee9e87d3e155d7921aee0ec54b84e3bb87d40f7b97dd6d435e14b4f4ea0
MD5 fc262b1114a17718f5d37fa0f5408698
SHA1 41ac083561fb775c7b8222bd825a677621077aa3
SHA512 7d8a6212b5825f71e140a5df02dfc2c79c153cb49da994f1e164b395666ac4ee356a1308a6ab10360fbdf4c5a66c6dcd87d692c942547d6b10724ef3bf66ad87
SSDEEP 192:P+xWMd9fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxx3fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T17A24630A7B747001EDE6D9725CB080771E3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 17103361c92b29f835c4099a33d65d4a3423928d6c9d5cbe1e6cc2236d9cf3d6
MD5 60eb3ee8a10656ab3258e45e2bbb278b
SHA1 714f812b9ba0561a1545337436ec8b8c727e6979
SHA512 a9242ff9b9acc297b5a04324916ee7440e7c233895ed6ba7db4a3560b87d5b5161edf8f62c8af6def511256f93f8e887ebb82809313d1821c2b6efabc5d62234
TLSH
T10B5188C093A564D5BF8ABD82C21A781378E13E6B350E6971336E44F44F458258EBFD25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 16KB
SHA256 3a70eb52c365a5b6c7c07e94a5f6f76c762b759f257e0fc5750dd6bc64c5eed5
MD5 58631fafe83a215c8d4e87614fe73890
SHA1 3b5b256241403667e7048947d3e2b459ea38e831
SHA512 882adb1ed886291cd01566b0478e5a1ec8a1c75d41eafbb93eace5728c849fcbc94a8167c6a6aecd8d134c9f720267973f1f9b34e4c80c4d0e8d39f74333671f
SSDEEP 384:MH3s6is+EQvIIIebOMIMeBAQZdewZdeiZde4G7Zde4G:Gc67+EQRQZdPZdrZd1sZd1
TLSH
T12572B4A967141777D35F1F7B0269C75253DADC834A22660D3020AC9E9CF2E678AE02F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 84e4ea97bcf1bf1ccaab058e724e8ca1bfd3cbae8025416c47a1a6a5e6cb79f1
MD5 c3acb7cce3a5c5f5724efd454f48f9a1
SHA1 7da136f80107ae23505c41496324c28bf3b357d2
SHA512 8eaa7742dd3a68be8ab52858296eb9d47b8c2cc7dd2c39043ae685b316de10bfcad15ab18458804ad73e5d29206f1cdf952029dceaca398af444d84319f093c7
TLSH
T153E0D89064C6C1AEB11660C70395AB08E2C23413EAC43ACA1B00CC45700A105B2B9152
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 74c35a09bb3d21cc404609e284ab839c84b89a0fdfd9feae99ad4e4c522a6fd9
MD5 5f70725c5f1d89059fe2fdc747cecc20
SHA1 daf469fd366b17f68950f1675cf2ed18741a64c5
SHA512 84015391c848d1cd01d67f4c6bce54f1ad740f4cfc8c795d9adcaccdf3fc2bf8042bff85ab6c6bfc0dac7770f735e5a52f9e8e01850bba30c1bc189bd8ba213b
TLSH
T13321BF51F320C209E18A967E942BAB351338D8169FFCED1F507924292EB2B011E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 bfcf542d66c6f3f81b8c936235ca3a148dbf8cab368c154e14ea6f11233f8266
MD5 0c9471845572248c1ee245f8ac358638
SHA1 cec646cf45f1c9620d27d43ab3180543a61d46e3
SHA512 34639d3594c385f489a3e194fbeba76cf2f1f60003f8e0bbca189e390e286c4c3e18c16880a760c133d0fc528ff2ec1e9a09a846d6628b882503411c29d89313
TLSH
T138E0D85074C6C1AFA15230C302A5AF48C2D23C17EAC43FC51F04CD45610A146B2BA153
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 debd03dd1fee4b3b1e6f9fd9c95e7c4dcadd1d23a77e1fdb2f55c438a0aae0df
MD5 79a25707aed5ad029255540ae89e16df
SHA1 40c75e03fe2491f4c2dc734b95aeb28630a290ba
SHA512 b89f563afc2556fb4b6983b711777e93a56bcd56b47158c9d30dea051fb5f9f77281b1d2cebd05396a0ddc1968c50b2355a07bd4de1eef39db723e3a446e7b9a
SSDEEP 3:MsEllllkEthXllkl2zEflW1DOK:/M/xT02zb1S
TLSH
T14344040C7FC44C05C54510304051C3501370D7100D1157C374F14437DCDFF401C05000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 557c3d733acf30f1e88d05db3d8b91212191d369c3dfb4f1bae178da7b3874da
MD5 ba04e10fe4936260b8be1db25cae8102
SHA1 efc80889af2b5b89d297f5038673391f8973313b
SHA512 20ccc470d89f552f749a29f2babb446b46790eb61f6ea98c48287b06ba18d97f89f5dbf238edf828aef3f38da1c0541b43c5b6d197ee88775ea570fea17153d3
SSDEEP 768:FF4xhwgNmxQGZJvyyS9Ho28Z0E9dnqV792:kxtSrJvyyT0GnH
TLSH
T19DE219B1D4989DEB98E6CFC9A24AF6426EE40273C58C489CD6F46D6D309F4FD4343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b40cd9b0ffa81ba762e615604545e5000507455dc79f2555ea5b81c07b199b4f
MD5 708876d745d54568af6933aa50f37c47
SHA1 67d9f2ce2fbf3cbdc46a5f979f6a09928c2d08b3
SHA512 88bee4b56b1593273ae72cbb8cb9884bdc7131727bba485d033b7d9f4aa0bf18d997f57f10924c5bf29737775598bdf4e11d24ae696a44e02cc3df9959da1572
SSDEEP 768:FF4xhwgNmxXGZJvyyS9Ho28Z0E9dnqV792:kxtSMJvyyT0GnH
TLSH
T1A3E219B1D4989DEB98E6CFC9A24AF6426EE40273C58C489CD6F46D6D309F4FD4343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d251c2cb3ee6f0e5a3b7e2b98f829641689ca30160b556afa3c27b382a157004
MD5 be0578a330b46280b02f6fc23bf4cc1d
SHA1 6badb39023cf733e68651967d6f097739a06d138
SHA512 35493a43b2ea5ec2e8024daae9289d42beef1c4584c135dde1af1c1a9a525f1efaf286359bf2d9472918ed288d541dccdbd5a6b00cdb8ebed8b1c087191d9dbc
SSDEEP 384:nqiFavqMg3sNh8TUNTUlIm2TJvuxOiBqNLqvfqZlnvyWDGXRYV/Vw1mRQCe0yWrF:hFayv3MwgzmxUdZJvyyGXRYk1m6/0rF
TLSH
T1FEC25A35E858DDABEDE78FC9A70A7A07EEE01163C99C49D4DAD40E0E00DB0AD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6af2395bd60fb3d765936769a8e938ae64c23e3e14f9b30f14af30d9f74b2591
MD5 fb0e939b63c046e2557e3db59f649155
SHA1 2f17e43846fbffbf0a469bbdec99dcbaa7bd8fe9
SHA512 17e10f7ff18facfeb3656e4eb456bccd79b8bb1f06f392f5499be126503cdbd67ca287a0b86cc4cd3e6505ad618d57293a5b183b9f4a6ec2f2a914d4579f0d99
SSDEEP 768:zFayv3xwgzmx7xZJvyyS95NBRYk1m6/0rF:gyv3jS7Jvyy+BmkE6/q
TLSH
T1B1C26B75E855DDABEDE78FC5E70A7A07EEE411A3C98C49D4DAD40E0E00971AD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 646f9714e09e188055d0c62dbedbcae2d4ca475761da3b9819d09a48bc88b851
MD5 f0ca943a718324c976145f2127d11381
SHA1 6660033032471def8b0ceaf103725181c89cb4be
SHA512 5210f54d5f47db9204c9d9d0d33b95aae45504506b30fc4819779ec8cbed91957692fe76d8187e5b48d433a6219cb1014b88b8d5a86a1dd47e2fde4141b1ca61
SSDEEP 384:nuiFavqMX3sN48TUNTUlI493TJvuxOemIEqvfqZlnvyWDS9k+NBqFvvSArN1k+5K:FFay43hwgqmx5GZJvyyS9HNBqV7S
TLSH
T109C24A71E8A8D9ABADEB8FC5F75A7A43EEE411A7C98809D4D6D40E0D00C75DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 e9ee04f5b8dee79805b87bef31471fcd77569be258da4b32f570b84bc4d2d39f
MD5 30db3d6c37d117cac590ba52221b0772
SHA1 1c6ce42f216ac97ac0c91f0bcc684b6b0aeaae5a
SHA512 f3548156dff0dc14beac593942ed136a9f27d811aa1e2a0d1473d383a12a7281e05a44bacd483ae4d109a9d89a8e470e24d7810ead7911cb68ed8ee47f3d831c
SSDEEP 3:MsEllllkEthXllkl2zEflipDCY:/M/xT02zPp
TLSH
T17444040C7FC44505C54314304051C3701370D551455157C334F10C777CDF5C01C0D100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 d2bfb0d816239f9cb954da32cc382d6d2c8acc4fd0b55801db3c9d66436c493d
MD5 590dfc756af4b37f0e06a4569a244b96
SHA1 ad04d5e87cb93aa428a43b764a16a7dbc7199b58
SHA512 79335164bf0039d73a9ad2c6b537c2291d8a6738b745b540ce3d27fd50df72a29daed0e7418f936d1b36a3c0c6ff8082eefa7d05166b937777efc7d38d232ddf
SSDEEP 768:1QIOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:6xhaqLI1WcxKgdfHJHH
TLSH
T16C63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E792F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 efc85d197fe5ffb752e3ed05e6bcffa3cd9d17d887bfd640e20f148a14f9a95d
MD5 08e55aabacb2a529d2943a6cf76a3f8b
SHA1 79f4c4d723e427401a89888713bf80446083c3a7
SHA512 b3b41983672ef5e94f1fae58b4da6a270e40251a89422666511ec2027828ac312f410d8013769810717ae85ab76537667d88903090ec3b50eac204051d91eb4b
SSDEEP 48:qkef8fqJ/IHRH34kWqB1kQnjhHmr6ITmUo:VDfqIHRHIbKkQndHmLe
TLSH
T1E342886EDA2CAAA2FEE00B3ED7D1D0127B35AA0EC2E4D5F1095B905757C440401DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 91f7383b19874e624ef40cb50adfcc0e1baff3d4d78468000c84e8f124ca890d
MD5 4bfc3ff747722189b65681a4747e7d92
SHA1 44be36531dbbb4927ebae4a9fc4d467c146940fe
SHA512 2c7c89c9db895ae0308c7967b31447869842f8fea1e2510ff2a17f014a8117d2380fceea9c46ee2a248a5048cd61769e618e66aa27e15f77b55a4bacd808633c
TLSH
T10D41F958AAF91148F3B76F1A5BF6A86E447F78772F47945D10110D4F0A72A00C962737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 bdeb064a1b8d0a27d477c3918e42713abe653d8dfe222d43d35198f3d4c8bd12
MD5 0a1259557cd693d3da1d4db9ac01d3a6
SHA1 6677a3fb825871a87c0c4af13b6b21cc10416854
SHA512 58f3d5bd460492c525cdb90482cc1fcb1e398468ebe3a6764bf87a67b31200196370c966af8137e16092950bd6f3c7f1240bc6ca84af52a2a80e0a65b938aaab
TLSH
T196514D5CAAEA1159B377BF96ABF6B85D447F78733F06945D00110E4F0A22A00D9A1737
MD5 SHA1 SHA512 TLSH

Submit Download

5cc62949-9305-4d86-a7aa-a66f712b9691.tmp

Path C:\Users\Admin\AppData\Local\Temp\5cc62949-9305-4d86-a7aa-a66f712b9691.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 0826992cfa5fe5dcfd509afc47135fffde0ed59e28a070d806c73d77887c5f35
MD5 092651c0b1b16ae2a999bcc0efae61c6
SHA1 1360cfc0a7f05736c2465addd73c4c2c317a56b8
SHA512 1ef11df009f5c5e60683383a71c16fafa1bddd159fb41a8fc0f25b6d69aac6e16ba66cf16099ae96905232dcc3de3564aeda9e79ee311934dd0c4bc26543f8c7
TLSH
T1A6512CE13535673F8BC78BD960760C845870E18103AE9B5CEE669435BD5CEE0532EBC9
MD5 SHA1 SHA512 TLSH

Submit Download

LoginApp.exe.crdownload

Path C:\Users\Admin\Downloads\LoginApp.exe.crdownload
Size 529KB
SHA256 1846456c11baef1c704e124a4be70f49a287e48df9b8ccd510ecdb510dfcc0b3
MD5 30239b0f2efef9c5cebb040562321b95
SHA1 4bf4a88dff33499da1a2ad5369344a42c731ab23
SHA512 3eb5b5fd744ea0ff0180fd6af601ffb2495c0b317fe61a279346b3127b9f8fca733499bffb167b797740750b087317461c9a83518f9a742b40d39c8d03d2482b
SSDEEP 12288:L77rekCERotGOt4NU+jgt5b0KYhxrOkn7xQ6mvruD3RbTeG+AccX8WOO6cnRiD8:fcEiGOGNUF5QKsdR7C6miD3Rbx8HYRV
TLSH
T16BB42344273C3039CB734B355D72A6918A7A360BA913CF8DA2986444DE57B4A17B3FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1668-35-0x000001AC3BED0000-0x000001AC3C071000-memory.dmp

Download

memory/3344-407-0x0000027FF9800000-0x0000027FF99A1000-memory.dmp

Download

memory/4124-474-0x0000027EB7A80000-0x0000027EB7AB8000-memory.dmp

Download

memory/4124-475-0x0000027EB3A10000-0x0000027EB3A1E000-memory.dmp

Download

memory/4124-485-0x0000027EB8D40000-0x0000027EB8D48000-memory.dmp

Download

memory/4124-484-0x0000027E996D0000-0x0000027E996DC000-memory.dmp

Download

memory/4124-473-0x0000027E9B1E0000-0x0000027E9B1E8000-memory.dmp

Download

memory/4124-472-0x0000027E992C0000-0x0000027E99348000-memory.dmp

Download

memory/4124-724-0x0000027E996D0000-0x0000027E996DC000-memory.dmp

Download

memory/4124-725-0x0000027EB8D40000-0x0000027EB8D48000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads