hxxps://github[.]com/puppygirllloll/Windrose-Game-Dedicated-Server

Resubmissions

06/05/2026, 16:21

260506-ttya1aav9m6

06/05/2026, 16:10

260506-tmn4raes3v6

06/05/2026, 12:05

260506-n9gqashx2v9

06/05/2026, 11:43

260506-nvy12acx9r9

Analysis

user interaction
yes
max time kernel
68s
max time network
733s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/puppygirllloll/Windrose-Game-Dedicated-Server
Sample260506-ttya1aav9m

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
38	camo.githubusercontent.com
39	camo.githubusercontent.com
40	camo.githubusercontent.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ja\messages.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2812_1177922884\_locales\km\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2296	msedge.exe
4956	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225581188465458"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{AA1AD5D2-66B0-4378-A281-36269D2152B5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{D812EB4C-4B8C-4AFA-8380-F89DB001D938}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\WindRoseServer.zip:Zone.Identifier	msedge.exe

Suspicious behavior: LoadsDriver 12 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
680	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
680	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3424 wrote to memory of 6024	3424	msedge.exe	79
PID 3424 wrote to memory of 2296	3424	msedge.exe	80
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 1704	3424	msedge.exe	82
PID 3424 wrote to memory of 1704	3424	msedge.exe	82
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 248	3424	msedge.exe	87
PID 3424 wrote to memory of 232	3424	msedge.exe	88
PID 3424 wrote to memory of 248	3424	msedge.exe	87
PID 3424 wrote to memory of 232	3424	msedge.exe	88
PID 3424 wrote to memory of 2408	3424	msedge.exe	90
PID 3424 wrote to memory of 1276	3424	msedge.exe	91
PID 2408 wrote to memory of 3500	2408	msedge.exe	92
PID 3424 wrote to memory of 804	3424	msedge.exe	96
PID 3424 wrote to memory of 5140	3424	msedge.exe	95
PID 3424 wrote to memory of 804	3424	msedge.exe	96
PID 3424 wrote to memory of 804	3424	msedge.exe	96
PID 3424 wrote to memory of 5140	3424	msedge.exe	95
PID 3424 wrote to memory of 2768	3424	msedge.exe	97
PID 3424 wrote to memory of 2812	3424	msedge.exe	98
PID 2812 wrote to memory of 5324	2812	msedge.exe	99
PID 2812 wrote to memory of 4956	2812	msedge.exe	101
PID 2812 wrote to memory of 5580	2812	msedge.exe	102
PID 2812 wrote to memory of 5580	2812	msedge.exe	102
PID 2812 wrote to memory of 5580	2812	msedge.exe	102
PID 2812 wrote to memory of 5028	2812	msedge.exe	103
PID 2812 wrote to memory of 5028	2812	msedge.exe	103
PID 2812 wrote to memory of 5812	2812	msedge.exe	105
PID 2812 wrote to memory of 5256	2812	msedge.exe	110
PID 2812 wrote to memory of 3872	2812	msedge.exe	111
PID 2812 wrote to memory of 3524	2812	msedge.exe	112
PID 2812 wrote to memory of 6040	2812	msedge.exe	113
PID 2812 wrote to memory of 6040	2812	msedge.exe	113
PID 2812 wrote to memory of 5144	2812	msedge.exe	114
PID 2812 wrote to memory of 5144	2812	msedge.exe	114
PID 3424 wrote to memory of 6024	3424	msedge.exe	79
PID 3424 wrote to memory of 2296	3424	msedge.exe	80
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 2636	3424	msedge.exe	81
PID 3424 wrote to memory of 1704	3424	msedge.exe	82
PID 3424 wrote to memory of 1704	3424	msedge.exe	82
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 3988	3424	msedge.exe	84
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 5944	3424	msedge.exe	85
PID 3424 wrote to memory of 248	3424	msedge.exe	87
PID 3424 wrote to memory of 232	3424	msedge.exe	88
PID 3424 wrote to memory of 248	3424	msedge.exe	87
PID 3424 wrote to memory of 232	3424	msedge.exe	88
PID 3424 wrote to memory of 2408	3424	msedge.exe	90
PID 3424 wrote to memory of 1276	3424	msedge.exe	91
PID 2408 wrote to memory of 3500	2408	msedge.exe	92
PID 3424 wrote to memory of 804	3424	msedge.exe	96
PID 3424 wrote to memory of 5140	3424	msedge.exe	95

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/puppygirllloll/Windrose-Game-Dedicated-Server
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2e0,0x7ffbb385c188,0x7ffbb385c194,0x7ffbb385c1a0
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,2498380328596861639,385946198979573085,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,6202479507576076994,3652376309310500265,262144 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:2
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,6814943770577007025,4262066682085652791,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:13
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,4852988779053863128,2292937760163659024,2097152 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,4045319015709671153,4325924034735272555,2097152 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,10601633577256892253,15005896345449487773,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,8402759903529234083,7403299457484652796,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,16798733896838081152,4862938701740959307,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,1687014378927746449,1329555370966656539,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2408
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1116
    3⤵
    PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,16798733896838081152,4862938701740959307,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,17731399535988805977,4698799622762937500,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:14
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6400,i,3016483962407946533,17980649759061411410,2097152 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,8636620055932241252,17959867222303867910,524288 --field-trial-handle=2544,i,1873373472653656449,7457283362319584660,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:14
  2⤵
  - NTFS ADS
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ffbb385c188,0x7ffbb385c194,0x7ffbb385c1a0
    3⤵
    PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1732,i,1381297188205358453,15187907164082179750,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,1597745150686237182,9462241081357353021,262144 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:2
    3⤵
    PID:5580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,18154704208839685029,10317589166694753655,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:13
    3⤵
    PID:5028
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,1583089493972175849,15232084129671116158,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:14
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,1583089493972175849,15232084129671116158,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:14
    3⤵
    PID:5812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,6071212157177161830,12487158401639230283,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:14
    3⤵
    PID:5256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,18426835300211616112,8805727020109120374,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
    3⤵
    PID:3872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,13384260080087760233,14130350965032851530,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
    3⤵
    PID:3524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,282501950233376696,10821598860268386969,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
    3⤵
    PID:6040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,4982491232132833214,5750028510855972404,524288 --field-trial-handle=2668,i,16568865354455757262,16881904036653500607,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
    3⤵
    PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4348

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:704

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2708

C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" SetNetworkAdapter {77d18732-84db-4ce1-9028-51662bfb8087} disable
1⤵
PID:996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
MD5 38623c06e100113cf825efa6a44b2386
SHA1 479d8e0c6d7d10c05203a37707a6249d2537a9ed
SHA512 452d7012b949688cabc6afbf4badfe9d02c090f30c06557f7f87b606cd716cda97771136964935eaa4d1668303889011f75ff599a79a6837c285ef84ebc2c8e7
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosfxWMk8xVZ4YWI30otWn
TLSH
T1CD257885B34494FFC8C35A7189BE27902774F6DE5F02836B6A377A0E2E271D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 71f86f37b013034051fae2e3307728bc40653c617383d6aa85219dd8ea093ca3
MD5 2ee9c9062df63fee32f65bc087b93005
SHA1 2874f6b34fdb5f9ff64aed6e38005f7940050b27
SHA512 99729f971f840d780b0e5404260284b048d532cb0dbd20969536cacd61a2d2c52568d6b9d96f6f0168b93eaa3c7236b49d8aafb6138d1b1fcbe89990c6af5af3
TLSH
T1AFD08C4821F66CBAD09ACA7219057B0A2959EAA79E93AB2A39B36C784C4300115911F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d8c0ebc33f7882ac8aaa0f941413384749c7672a7744de3485d53f3d7a832ce
MD5 fb7d9391eb1040937b5c31ff61febe79
SHA1 0be0bde544b492ac590e441f96bf8d0a378d3782
SHA512 d4a405f080afee18100d407e824cc3366114b1acd56307d247bc25ee87ffaba37406581a2dfcfe9320df4d014582f86fd300e9f67a54b4fcd2e471e1358c493d
TLSH
T1AED0804425F15CB6D046C57115457B053955D6A79E539B1A35F36C784C4300115511F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 34d67a2c8cdc209e050273b4b54882237a3dee66e6e25dd7c6b07465c6daeb16
MD5 cfb8773fa4750aeecb99a3ca251e382b
SHA1 7782a0b332b103eb9bfc7a917ad845f3b838d324
SHA512 f78377e80fe7ceb41d078daaa5219736ba4e1ebc03fa982faced3baf0ffe9f37a3b105e1ea7568ab77eb1532f5c9e8157e5e1a8aeac5b8bdb619f55663c014e0
TLSH
T15FD0233032FDA047C05A047300107150258692CA34CFC489F326C00D8C9980D23D21B3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3adee5a267fabf78b5266ae703c6b3a3c0b3fe1b05c24b363cc0f3d6c9b32007
MD5 5049e93e6276d9d31bd7ecd661342951
SHA1 e8415e8f95d318080f3e4e5bd47f528f27f5d805
SHA512 1734d634c947c5ae2b2f3821158526faf001819397c3fb649f371b62624b1f587dc28ef13b3b2c70fbef2815d13c11ec52b6628c703e96f45d69c456d1170bf0
TLSH
T15FD0972132ADA4C7C28E48F31010A68113C2228B754F9B452121C00D480602872C2262
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 76f1c37ee8f6f8e51a4a4c14456b3b9a7ffe7c3db86493762a9745f5acfb4c80
MD5 986318dfe31691d90fd255db34f9ac14
SHA1 f09307439121a56429141ede137928642f7b9932
SHA512 bf04d32df68fbe4905bebc248e063592f7629ec85854754eb2fb0a6cb420c65ce26bf8f67ecb2ef45fb0681773cf8e1cd0f96000a1255f66b5ce41e375f1d266
TLSH
T1CCD0972132AD94C7C28A48F31010A68113C2228B754F9B492121C00D680603872C2262
MD5 SHA1 SHA512 TLSH

Submit Download

1b355a2c-7bf9-435a-ad8d-a029847a5dfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b355a2c-7bf9-435a-ad8d-a029847a5dfd.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 58b699056e81db3de6b7dcb73f3ced514b754281e5df14501be542ecfab93216
MD5 8755ce42b9ddbb7b01205eda4ddaefa1
SHA1 da1e93d3adbd222ef97dfbcfefd807e70b0e8063
SHA512 3d62d482471f36dfd1754cd4ff03edaafb6940de0f3d600ea7d0a4223ed758bd7acf4eab6beee68fc56adfef1112097ce04a30f2d49b00a6794cd60bee6dbff6
TLSH
T16AE02B6ACD259C3718FD075921450745F75117271780590B3E3DA20C8F7567B45D6C1C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 596b8dd488573b0212dcd2f8d933232b3358035f8debcb09f1a440e2a8af9ab0
MD5 71e2af3ee9121a870a15c768d2046d79
SHA1 d0e0fca72bb3cf02120794c1bc59bacc530b1ce8
SHA512 9ae0227d6d5911af2ec231c86d1daf040ae37e568b2e001db4edc64d73b06244047bc3354d2747a75b95fec450fa2fbbc8647e2f2bdb267abf8f17574778d28b
SSDEEP 384:AI82k3qpT7IH2ryJDJfIJKJZJJBVfj8MdIGm8S70jbygB2ZV9:AI03qpT7IH4szgGm3obyCqV
TLSH
T1C113A07C3A785C13EAC3943C0F6F66329B70856DE6C885074271F1D6132E35EB92E6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 698d5bb69e8564333ad7596122f1e6c821a5ee5768a56b5b3d75330429a28221
MD5 1fc69e2c68a05952c9892520e6c22a47
SHA1 087854d6f7809bb382ffa8ca0d56d106a20d670f
SHA512 2ebe149694c48e99748cb56cc848a2dd78bb100d6743bd549735521953f569d6b7bd5bd96b0eed75c0226f46a606b6ff3a94a804059ae3e5a07ec2cb38fea71b
SSDEEP 1536:6k6qqsNMnSt2SSbad9xA16SRysPbQ1FpeWPqyRsksTSspbXxpE1+MyxZo5R2WFDI:SYsPWBPhRskshc+HCRhzvipd
TLSH
T1C94462F70861A01ACFA816F5D6063A7DD27B011DACE1ECE9D6390CD16825F22B2FDE54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 ac9cc3828eb2e56f7a1d61b9b950962ca168b05ce841672191f36cbbe8c582aa
MD5 17e9c18dec8e1c960ad1973e1d9b844a
SHA1 272ca686737fc9ed2b7bcd84e5cdb03e63882f3e
SHA512 490dadc75a743abbba0b3d85962f58b984431a36b8468e96667b6a209bd5a61d8f1f5bdd11182bb853cbb874852aaf693a1bea22e75d6fea78a829875539e903
SSDEEP 6144:w50CFGOts5EPc4k4sVCFZlZ88PkQBngPARaP1KL57hGNLc:w5FJAEPxk4sVCFbZ8GBngP5NwuQ
TLSH
T1C1259DEE8B382C87DE6B0D70F4E0EC22BCB41193751AE1D34818C994975A3C6679B6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 c763f3c56949e2c0da0e3980fd0897ad476772bd7c79385271379243441850ed
MD5 367d1e7474809e1dcbfbd9ee5c03b72c
SHA1 3fe4339856fb74eb7a54bc3420ef0911fd738d89
SHA512 dae7a114530f7341bcd8fab7a38229eea41cfa7225bdfbf0912836cb7dfb3923858e131f1a4a0c48bc1de5d0f28acbd5330094140cc8bad26c5c046e7545c31b
SSDEEP 49152:JDnial/ou2ud8q6tcBNcoGB8yidmsz2SEx+BNnj:xXt+ueqSxBw6xY
TLSH
T12186AEEE8A745C83CF628930F1E0ED577D7012D3BA94C0D38568C698469B3C5B79E29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 d032e44ad81f14ff49014b049a038651571bd5030cb4801037c6a47503b484d6
MD5 02fd94b8b5018ec4aef71427ced56fce
SHA1 91d1406d46a64cf2a5fa5bbcc1b078a4063d0eb7
SHA512 fe9a419fff5410e5b88197c392535af6c5e8f08d351fa72aa016542bd23d33898da1ca08e9dbdb4833939098e7c7794e3ab84b866ef296f94752fb7cae06ada1
SSDEEP 96:HriwG4OVd7lkD4MfuE632jcS3mv9K1+AyB3:HWw+yfuE632h2vog3
TLSH
T197D1D47481B49966EBE4C8B62BD01A857934B22D08CB4F2204F8C5FF3A6E7F9510F51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe584bd9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584bd9.TMP
Size 3KB
SHA256 8dbc949453c8d72bf60b6cc546ac3c7607496b6fb334ce2020f04e7b2a4c4268
MD5 8d4438336cb70675b023a8c925f967dd
SHA1 873caa9c5b834236b9cc5b16c510d347335c086d
SHA512 d4f044307f4555bfa34647c4f4ce8e35434dc1bb74c497f8b6445616b75765755882ca70ed346185c77f57c822dc7bc2817b8ea872f62f322bd7d9eacd32d9e8
TLSH
T11581829481748865E7E080B73FD521C8BA34B7291DCB5E6109D889FF1B4CBE2910F21F
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 95ddd5fb4678ae274b219a6fda7476a54853a3e128e250d348c42252150e90b0
MD5 70335c679c3e0d5cd6352bfb8cc6e600
SHA1 d2ea170aefe5132ad2b440fbfdc7cc279fcfd9d6
SHA512 126fd50fce13036a72d32523b9b5f152dcc89daafd9210ff930a87197cc3c4d4c23fc9a6f421354d5c8c354f12159f0623a0ed20b9b51ebdceb9f4d426e2f724
TLSH
T1D9E020E854CFC2BE6D3474C742396709D2C0B45AD785AECB1B04CCC07706041B345756
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 4ecba48ba7c2ee81e72d242bddd877986e37715301af07fc7a87390e3de17f1f
MD5 11e91f9a64f800693f5dade222ebb035
SHA1 37a6e22405dc3ea88f5d3b6413cd737022873fbb
SHA512 8e04a1d11d6e61c5f39ee982d1450c71ce4838df77d377ae80dcac583912368c2656e5a42a92aa63605b2f358d48c1dda8abce61d81301db3c89bfb8ee216abb
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jcHaW5LawK5fKFtImqYpc:Tyi+7f+UZD4jJ/BSaWxDCKFOmTpc
TLSH
T146E2EC8D3B11F512C8ED773DB0C2C6E05EFC692C864DB1B196389CB68C52665F0AE10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 513B
SHA256 388c5c95f0f54f32b499c03a37aabfa5e0a31030ec70d0956a239942544b0eea
MD5 c92eabb217d45c77f8d52725ad3758f0
SHA1 43b422ac002bb445e2e9b2c27d74c27cd70c9975
SHA512 dfd5d1c614f0ebff97f354dfc23266655c336b9b7112781d7579057814b4503d4b63ab1263258bda3358e5ee9457429c1a2451b22261a1f1e2d8657f31240d3c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 af6f8e88589800403778ea5a56c5223292b3e156f075ef06fd99fde3d0a1fada
MD5 5b84650bd9df56cd51cf5ba116b7c036
SHA1 3923f23a1fbc6621b5feedbdbe6b927b13dfd12c
SHA512 ad7d75dc48b92d5eb3290b7a929b5a5105c325d772973082e53f769221cf5b293f11415ab2416e34be01e5bed63540df39e162027d1f040ce895b84f4be41557
TLSH
T1B3E0268C04CEC1B9D82868D38779630EC2D0380AAB883BA6570EC8846241749B78E790
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 22d81f67956d67f1a5303a86eb3e03d5472854f585cff7866125abfe532eef30
MD5 e32e612d6ebc81d63bfdefa806d36743
SHA1 22cdc3d6b6a8617a153c38121d8733b630159b5a
SHA512 ca5c5b31f139cf04c939feb03c23e5876d487ba9b07f0c09d9cc2d2678191ef80f63323650b4ddea8b9f45f15b3b105ad7ca86316ddb327cc752552e131221f0
SSDEEP 96:UBCxd4yoeOJsUYlTCGad2bybsq1pW4EM0j:GaeyoetUoTCtIIhEM0j
TLSH
T186B228AB5E307407CB451E7F25096DB28E3BD26CDFE2EC5470304422ECB899690759BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 9497164079f86481d148228a1f8fbaaebcb1740e63775925f0f7f94488bedea4
MD5 8d4e78603373c9c9d71bff0eacdc2458
SHA1 501e07abdf4f19879aa4770d50a415f84ed4eb96
SHA512 2c5ee2f59141d5815c0127e76828f0c1ed070614c42fc7dd6d0d4cc1254e9f5aa8c330d4942654ff834551e5f04beb4324fc04375f5123e5a2950780fe025934
SSDEEP 192:xhbnjn80+G83uxXBBK31GkSJ7EJH7DNspUk:xhbj8a83uFBBQ1GkSY7DNspUk
TLSH
T1AC14315F4F353722CDBD417668EA45A35D6DF03FCB13669A2C6204B4CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 506B
SHA256 99a01436efd8dfd27c4ec42d62242557509f44cb384c720878f3b5b6c1aef3f0
MD5 4454c7bcec233d3649190abaf32fa265
SHA1 4756d49b8e8e80dfc08cf8daa5900744a3ae025b
SHA512 29efa2d60b0391ac6a78af9e538d91d8c651ee4b149f09d98aec346fda7147e6095bb68da5a5a730d107cf56f5ad782c145374051da76b809bc4d6c2e7343e73
TLSH
T169F027B34020A5EBEF975DF4A48828A4BB57A0188EC88B89C533A1044E956A016C7123
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 1de91d7c070250dbf6f28810a2b073628abb12efe9e7b5dd31dca7510b7abe1a
MD5 a93bb72b6856f850b545df990d76e4fa
SHA1 24931aad99f690e78ff1b2465803c382d2b4b1a9
SHA512 2891b2ab450ae04d9c7ba9c3317f89a7ba6efb2b14664169863ae24f73cbfa225b63733940c6a9cc57023e5e6cb451b474e1ea904bc4596614990ed7787cbd36
TLSH
T19AE0D8E445CEC17DA54860D74325B70ED3E0350ED7886F955F09D884B105604B7953D2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 e9aee19e95a4889868edc85f701c49cda3dc76292625227e92d505b7a9765584
MD5 39d77bdc2b495cbe029fa3a8569c75d0
SHA1 5e2eb5bfab9bfec55510e786abddce07d381273f
SHA512 6596f841e535d7dca515b5b7edbde0672da75ed102287b45fe95bda797d9bf70b3dd148f436f79e183699295edce13bcdf08c8962125cc72676b8c275c29d814
SSDEEP 48:TNLopFMatSaw/auUOt82uHNK4NCV55zN:deMatUaAJTZV55
TLSH
T1EF923F0E1F302120C2B54F36DDD989972F3C211CC3632AA99B5560F3CDE18ABF24A07A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 30c084467abeefe9114c40ecffb9e39ab4dca5c74c966543a246f280fde3513d
MD5 f1c0a9cb792928e2d313122ffba57c0c
SHA1 89f528209db2c0a87940bb66200a528ac2a1f3ea
SHA512 9a87c1cae4b70580145237d5c65bd38b45346c68b60913d4c56bf3b24e2ed643acff720b67b3f317ea92a142a28960b48d8ccfc297dd890332a4d1377eaa5fe9
TLSH
T1B56189F743B1956E9B1295F0FA18AE2BCE2D0510831C786A85E4AE07E3E3871E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 88031e3fe3bad80e90b7b4ae4eed9c9156729702bbba0b5a6a1b505636a877b9
MD5 91ec7452a3c9c56bc4299edafff79bc7
SHA1 0e563cb004f1b9b42e67e36fa64276f3f844c3c1
SHA512 e3952b68bc3688cb9be3dc7f2892a7e1425be05651254205387915a01d01d626cead73967538611e13f5f102bd10f14be29e3af44b74a1ef218607ba1e76a24d
TLSH
T1DD217893C2BFF81F003D8E671E45789A697DA83A01A194F5DAA6C23CB1851FB5E19025
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 c16922c17a020eb8cae2e408bea29c89e1df6d750402bd909ecc58dc64966570
MD5 8ae0e003696281dffa765782c199bccd
SHA1 b986b9a68dc58fe4a9b4a2e90c43b7e91830d58a
SHA512 1108607c8f7dcf90db3193ff3094f7f9d14e6c071e04223470edfad0f782dbfed4d00263f8165c28c22e86b52c7da33551e182eb76cdbd10fa95a3b84055d973
SSDEEP 192:sxZnRvyMqZ/K1Ml8Xoj/f3sJWpVjfpxeTP6h2zodpmMz/W6+WNrOqBXY0rXsqiMU:sxZnIZj/f3sJWvjxITs9/bVX5xi+fu
TLSH
T1E482E816A9389A7BCCC7D219FA45BF53D7F91022D2944E449AFC9A0C00E6BED270391F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 8027ce072c23856e8c6576e22b4929b45dd851d92f1cfd22762f167f01418282
MD5 7c32c19d8da42049bb3359fdd72d7e09
SHA1 d13ae605784efa8c78b7909363e722c1cadaf351
SHA512 0396093bb9c96d83892e140dadba2056cf1135c84cd7cbc41c9e505c2332a250d5e035f16cf1ad67ff8c3981158f750e338d72d1d508cbdb0885df53fa458315
SSDEEP 192:sxZnRvyMqZ/K1Ml8MFj/f3sQfpxeTP602zodpmMz/W6+WNYPf/Y0rk1qiy3IgjSJ:sxZnIdj/f3sQxITv9/bo/57iyju
TLSH
T10C72E81569289A7BCCC7D219FA45BF53D7F91122D2944E4899FC9A0C00E6BEE271382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 0045bbf914678a39513c46f7136090e1e032bffbaf2d2581f7b4dbd6e42c3800
MD5 ec73ed443d96970f3a61fd36438b6092
SHA1 3851d2fe7e8e05fd6e7b8fa0137ccd26cdac720a
SHA512 ac0abc75a7852fcc553b29de34ce1868a7b689314e9c20be8209d5eec26af944b180657e33347876c8dd4b54b07433c6f9912cdb26a5ff357c58fea0e8c1ff02
SSDEEP 768:kA4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EU3SLl9:kA4so86s2+CE/HzWRmH9QYRu1jaKEU3A
TLSH
T1B5031D3B684CCB7F4F844E9CEC2ABE8A6DE8018F95988D9447FA444C03C67EB55161DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 af7dab7e64f6d0748a881068dd4041874f967c7115a7abcaa5b1c246141e17f6
MD5 ddfe63b8a6548ebfa98efa76d01ac944
SHA1 772ab9aa7ec83b164c7901bd4cdc2f7508932ce7
SHA512 6b17a17e626b6cbf70d81af41c13652a4d689760a641c095df1b6a65b463469a72253fbc2c94bcd780f6275489c3eadbd642e1c3e6e5fff05cd5efe739f55757
TLSH
T12BE0269446CAC1FD602920D303259309E3E4B42FD3C83E8A2F01DCC57246605F3E62E0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 65dea0ab02699f7f28fdb92839a80ca7813b918e5360e1fa2af5e684a07ee4b9
MD5 288dabbed0a464f63172ddec81a87388
SHA1 93d8afb5ab80d127686a62d8e1de1691a1b0fbea
SHA512 2b2d9ef60d49fa553b930604855dd505b64545487083bb1fd95c4a3dccd104424ef8f08bbbf3139b221e383d91e2c8570fd2300ea0a09493616c411af994f2e6
TLSH
T124B012503B4052B7C8CB053616544BC0DF04E803D04059974D4B8F284D056D52F80ED4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 a8135fd3bd35d986e62bf046029e4a7177517460ca795e4e8b64470ba0f49cb1
MD5 b27e62407c5bc46700f5919e703562a2
SHA1 a28dfe8ac942284d6eea5f5502efec09f7a65201
SHA512 c668296de55903af9f96147c2872143c6e40df7dcd9a60e91620ec9acc32adbeaaadfdbb0d6daa851a620d36db220ec6a9a2352d43f72b4cb059e5839d43d22c
TLSH
T10FE0D86456CAC6BA615920D74315E309D2E2B41BD7C92AA92F09E8C5730A240B3972A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 be08257430e53fff95c25b084a731181ddad0ef8b1b3ab02cd25105cd482ce11
MD5 3464ca689815b1d29174ae1135663af0
SHA1 1efac8bf896841c50be28074933e237ddd04280d
SHA512 537a3268c5757a998e0d3e4c928183ee8427e4d65b9a3302e4832704de334a0f5a287deb5fb71a1afbd3b61686d2d1e7e12c8029b9bbb49966ff9426d973b26d
TLSH
T13BE086B849CED67D5909A0C3436AE70EC2F0F80E97C83BDE570C84C4A206249B7AA690
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 4f833cec9179c1b1e431b9633e03bb4e150104021528d98c046b845424e6b446
MD5 ace31526ab3cf2cdc9453854d4631fa9
SHA1 a2bb27909bdc7143d2d5b73b8ea2a932dcc7302b
SHA512 c82b67bba0a8fce1040908bca0be37d2b352ee8fea562d40692510d326a90e0bffba16cc049304fccaf33fc52a4bc7d006dc2c5a8936232e62e3b6a59c1dffda
SSDEEP 96:KkGQKTyeupuKK8DF6KOkKeFGKWoJp+K6wKK6UKXqAugKHqC6S0KzSA+IK/qa2jSm:ubB91NPhfYXHkvl7X3S9r4dFxhnc
TLSH
T1CFB24751797A02907A7E398A8596B87E52C231637118E46B3BF900B50F6BE30DDFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 0628c981fe935e43aa7fe7fcff20e8eb020949212979a4dcd54858158002ebe5
MD5 ad3663e8a03310af870940672f6e1e79
SHA1 aac25e0a05c62076641f4fae360da5f4245f3ba0
SHA512 03b160a800a9cab4e9af3220d66e1ea620a9e0e909ba409e3ffb392adfb233e7df6dd70f8a839aceeb0b9713e30df9a39bd9de15d0c08f6db512b81aa7e01271
SSDEEP 96:KkGQKTyeupuKK8DF6KOkKeFGKWoJp+K6wKK6UKXqAugKHqC6S0KzSA+IK/qa2jSI:ubB91NPhfYXHkvl7X3S9r4dFxhnEfnWu
TLSH
T16DC26951357A02D17A7E298E8196B87E52C23067711CE46B7BB900B60F6BE20DDFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 a71aa93a35725630c6abc9b36ce196cfe969c3695d39b93c82cbe7abfef3b3c5
MD5 cc7553556215e0143f08c950e6836860
SHA1 a0d5f810a5265136e85ff90dc0f32a57b3ef4277
SHA512 90b0ccc52c131d3cbd04f985c6894ee40039720a46320f5d5eda4f49e6d59d4347d0ebb6cb348a43c4e481587aa8c40c4d6ce98331aa99ba1c5c58187cc06ae1
SSDEEP 192:FvoWORYJfT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:aziJfQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T1FD24740A7B747001DDE7E9725CB080771A3CB16DCF22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 f1bca3c8094961fc75074375632d3d269f4a1804fb4e1049e604570f927461c1
MD5 145be5912e80530150e6f3e7a87a423d
SHA1 fdd114101ffddc0957f1159e0950ae5cd46bf15a
SHA512 ba59c2ce17cb915ad618a7e67669d3f1650aa82f5715a0ce7b563e1582b43a8f189e2da33751df1335131642703df4a249949d41932695417cf0304cd888b6ba
SSDEEP 24:LLjGxhK3thdkSI5QjUsEGcGBXp22iSBgPH/v1zB4ybeIybQpkGt:TEK3tjkSI5IUltGhp22iSBg/nb4cHGW
TLSH
T17D52E19BDD306263CDF74B7065C092E67F2B443D8E859A420EBA40026EF9857A71F35E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 69bc05b554c6883811286747a50dd947d0be0c9c8f927cea0f73ec5e0c3e7af3
MD5 2d740bb34dc879cc01d26a4dbce4d072
SHA1 44c43d742f537878318828f5058e75a98f4a3a5b
SHA512 ef89d38af53551309469495356131dddd639bcb9549097510cb6c0ad7c43c49df22c0fce81dd64318e35a8fcc83546e302a040156f5ce9b6348b564134b8ce96
TLSH
T1F85175D493AD15D5AF8DB9C2C21E7813A4E13E6A260E58B1733F44F95F488248F6FE21
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 20KB
SHA256 d07f609508e3d2a436868da78981c12884c7400fb5671b94cc5a4d3b73f08c3f
MD5 701383848ae175192a10b071eedc57ff
SHA1 dbddadd06e2b0c9bba56e3260938d5cc17b1f7c3
SHA512 abad9824b11fe82e9f6e320123718ae95235d935983effa3859ea1cc1933594e45714a22b0cf41e6a1655d877559fdb2a345d36a888476aef75202a8b4ed5b75
SSDEEP 192:g1OR++AsPliq7ussFnvO0B7AKQPIII+buMIM0NYcYV1jnZjnajnUjnA:HRostgsQGwAKQPIII+buMIMeBCtB6QA
TLSH
T19E92D5BA62292F77C25E1FB621598BA407E6D8424E66230C3036544E8CF1E7787D22F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 cff148df28edab5d31302e1bb48f528ce70942a2225c02bc60f1c105d0341317
MD5 e9736da8bd5873d3db68d1719fe82eff
SHA1 8b391bf73f359b760f789b792d3f824cf4258d1c
SHA512 d5dbcfa74c4394b943e46a94a86eddc9a80b60cc035e4e90f38e2bf1abe05dcc2b37385186befbba4a6a30fcf5a42b3721fedc573f63540c53b3f19024352d0c
TLSH
T1DEE0805C6DCDC5FEE91960C7036A5359D2D13D07EB842BDD2F05C4C86145244775D651
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a8e043eec351395f6875f2a50e7471ddd5f5351271f59fb448b2462921aaeefd
MD5 055ae957508a8b880f508bf7936f6315
SHA1 42c1ecad1981b8c1b3a746dbe4c44adb0dbef368
SHA512 a238d52803d07c660dd482004e40ae11c7c7e88eccc233d0a243bf3ac786cefc9126d62264a7ece88f23def8edd03cd93f63964cd64e559e0af5fd41341bfaf4
TLSH
T117219155F320C149D18A8A7DA02AE7361738E9169FFCED0F847924356EB6F001E8B6F5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 d077c40a5bc44b9f70a65849eceffbea4736b2c1d3e7735f0d52e34270bb1dcd
MD5 4ee2b01388a6ac0a4eaab3c56b87075d
SHA1 270b731419d6937155d70ad60c0ec9c0092c97bc
SHA512 de2fdd5729f95d9f5f218c6387c03ed519addb41af3d20b49f5a054856f4475d8c6cea0043e0884db8ce97432c6bb6aa7b6a4b974553369e0b15d6dbc7fd39e3
TLSH
T13BE0D8D4B4C9C5AF502520C30376E34EC2D13847EB842F955F01CCC85206645774A351
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 1da2cf568abb92b49422680d072d8cde2c22835362b8b9a3e9a1f2b59c67ccaf
MD5 f12afa8529751be06d6ffe11637815a5
SHA1 875be215c9bde942c051c18e451976e469995b81
SHA512 0a0b7314c795f74ca6dafcf54870e829c632edf489a5504cf1f9cc87655f40d7a84d54b00472221af394d7b5fcba54265e29b2b6abf0ea794cc99a3a3cd983a4
SSDEEP 3:MsEllllkEthXllkl2zEflWIl:/M/xT02zdIl
TLSH
T1924404047FD40D05CD4010F4C071C3501373D4300511574335D1543F5CCF5411C14000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d74ed9d74070705dfd89059af810d27eab7aec8fbdcd8bae9dab085efee29097
MD5 60eb06b141b74d32bbb645d231643c6c
SHA1 595b910e3222dbb03e6214fe2155a07f296dc6fa
SHA512 1cecdeb290a4b51dfeb68c7f9c8254afb73e9d9491367319731acc5e43d2dfc57d72ece8efc1758f3fecc678d0a952351eb71ded20c9dbf309d975261e401595
SSDEEP 384:nYqiFucXqn08No8TUNTUlIRbhegPSY5GCKVFfLY6VCMfRba+yC0/uDOrgWt1r55Q:iFM0PwgRh9JYYm51m/FgW95bM
TLSH
T1B3C23B32D864CEBBECEA4FD9A34B7653DEE011A3C99C4EC8D6C85D4C009B59D1B0B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0893f5a28e6c0aa54adbb5ac9a6300ca77065bd7f65f59982d0bcde153f3ec24
MD5 3bcdfb70e01b072cffcb5a837a6e440d
SHA1 647d6e060bfaff26ed579d454e57294668570bfa
SHA512 d27ec227e79fb8538b42e142c8e5d105722831886011ed19929781a9c99786bb0b8f029b4ca1593d416fe53f022458b272fee07b0d79f51aff0a6abe5267829d
SSDEEP 768:mFM02wgRh9SYYm51m/FeHOqq41fz95bD9:j04h9hk/sZDtzjR
TLSH
T105F2183EDC54CDBF98EEAB89530E652299E05273C5BC4998E7C81F0C80BB598F70B915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 885949fe497c8c70062a4bd414c4adb301dba29688e37176f641f8d245356042
MD5 509c4b27a67694a93c201011cb25353a
SHA1 8fd075a6b24b51b97ff5e51645e80d964b8e3fcc
SHA512 279bf1d1b625549ae1998b13548093427008f10a6c130e423939a221db283cf120e444d4c6baf92de765654d0ecbdbb7225bff971e6e2978f8eca3d2206d1b60
SSDEEP 384:nzqiFavqMg38Nx8TUNTUlIxBgPSY5igLVFfLY6VCMfRba+yC0/uDOrhbRYV/Vw1d:FFayv3GwgG53Ym51m/FhbRYk1mQ/0Tf4
TLSH
T1A5C25C32E864DEABEDEA8FD9E70A7603EEE05163C59C4AD4DAD41D0D00DB09D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6941610c9148b1dc303aea6139d4afc96424b59b2bd71f5e705e9866d64d102a
MD5 46ee63429df6fd5b8c495f58bb25adf5
SHA1 a3c90a37ea46630b49e691d2750a2197a2d79a53
SHA512 4891dd8ce0360c652c3a780ef12dd5983e69aef0165c0ea19d971f5c3fbd462b4037948d890ba9c33c9c05a5a8d0fb6b666a3de2b980c547a9e27b48d1b7c0db
SSDEEP 384:n0qiFrcXqno38NF8TUNTUlIRbhegPSY5XZKVFfLY6VCMfRba+yC0/uDOrebt1r5v:mFzo32wgRh9bYYm51m/Feb95bD9
TLSH
T197C24B36D864CEABECEA8FDAE30A7653AFE01163C59C49D8D9C45D4C00DB59D270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ceee0e2540798c356bc43c628b9eb88353aaad50f691b32e6f950e1dd6897ea1
MD5 5f92738232884ab592090a545164d54f
SHA1 6a985d0f16338a6263a1ad6d8a7b782e06523e7b
SHA512 045ca04abb5c37dbf7a38d9efebd08ee2a23a7663f865bd54ea7a3b015027f28ad5211832d81c3320cdc634e3397755e71ca3445010ff234484aee43e2aefa45
SSDEEP 384:nKqiFavqMg38NL8TUNTUlIxBgPSY5oXBOVFfLY6VCMfRba+yC0PwRYV/Vw1mR2Cg:EFayv38wgG+BEYm51mPwRYk1mQ/0Tf4
TLSH
T1F5C24A31EC64CEABEDEA8FD9E70A7602EEE01167D99C4AD4D6D81D1D00D709D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f2c4382d6f14de40719993a23eafd7d589027186bbe2e12f39f846e9afe9100b
MD5 0e5fb59d1031dcdf2d902c76ff76f8b6
SHA1 12901275619b503012f4b164b42f8792cb6ef990
SHA512 a0fcf3783f3ba2c5dae7207160b487c32d57abdaec0335297829fc0e19c46a9d3749b8c9441160632109c01d44dd77b9fee2f48440236f78001322daecceded9
SSDEEP 768:mFM02wgRh9NYYm51m/FeHOqq41fz95bD9:j04h9Ck/sZDtzjR
TLSH
T129F2183EDC54CDBF98EE6B89930E251299E05273C5BC4998E7C81F0C80BB598F70B915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 380d9d32efa6b9c0b25109d7d6819549d9a03c90768dd30c42632bdaf8f69d50
MD5 60dc6a42712ebe03a566da3dc2f7483d
SHA1 480bf2339910421c18da7a85e64e68e56070764c
SHA512 a2fec5b643d7ec3fee89ae31a799870a0e146ff433a8b9b3091fde5a0280f040a4d44e0efb07a19075b3517fb2cbaadd27195d6561e9d8614ed78ed5026c721d
SSDEEP 3:MsEllllkEthXllkl2zEfljeI:/M/xT02zRI
TLSH
T1364404047FF41C45D54011704151C3503373DC150533574334D144375CCF54C3C04400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9dd26251-3560-4c54-8cce-8c01e4575e41.tmp

Path C:\Users\Admin\AppData\Local\Temp\9dd26251-3560-4c54-8cce-8c01e4575e41.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads