03fb7c4197918b51c5733cb5c36d52cfc85c64bf93d26a93a67bcfc0d9a5ff8c

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 21:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
_workspace_deliverables_sped-debug-1.21.11-chunk-tracers-persistent (1).jar
Size 16KB
Sample260511-1d4leaew3k
SHA256 03fb7c4197918b51c5733cb5c36d52cfc85c64bf93d26a93a67bcfc0d9a5ff8c
MD5 866ca4524771813d2bffe9f3e0672b24
SHA1 4588331ef2de6b3253925bca27bee3237a8df2e9
SHA512 2dc8a26f4a9120668b70ed1429f4c75f69d76e976b5e0f39a38f70e0c2e8c2499da098c21dba8ffc92a828b218a2b1dd5dbb5ff64bc3867da94c3f396cc38411
SSDEEP 384:aDex8kljr0orp05Z7vWFtE5Y95AKk844idwOqB:aDKlEorp0LQtE5AAKk3diOqB
TLSH
T16E72C067B5CCE81ED60B15B9C84186A9D739FCC5474E244F532C08D90E9ADEF0A46FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5836	msedge.exe
4040	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134230089001119667"	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{A3BD42C7-16B6-4599-95EF-27DC0331D97D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{7529563C-3997-441F-81BD-AE28F3445444}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe
4304	msedge.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 6056 wrote to memory of 4304	6056	msedge.exe	97
PID 4304 wrote to memory of 5652	4304	msedge.exe	98
PID 4304 wrote to memory of 5836	4304	msedge.exe	100
PID 4304 wrote to memory of 2164	4304	msedge.exe	101
PID 4304 wrote to memory of 2164	4304	msedge.exe	101
PID 4304 wrote to memory of 2164	4304	msedge.exe	101
PID 4304 wrote to memory of 5324	4304	msedge.exe	102
PID 4304 wrote to memory of 5324	4304	msedge.exe	102
PID 4304 wrote to memory of 4456	4304	msedge.exe	103
PID 4304 wrote to memory of 408	4304	msedge.exe	104
PID 4304 wrote to memory of 4456	4304	msedge.exe	103
PID 4304 wrote to memory of 4456	4304	msedge.exe	103
PID 4304 wrote to memory of 408	4304	msedge.exe	104
PID 4304 wrote to memory of 408	4304	msedge.exe	104
PID 4304 wrote to memory of 5060	4304	msedge.exe	107
PID 4304 wrote to memory of 5060	4304	msedge.exe	107
PID 4304 wrote to memory of 5060	4304	msedge.exe	107
PID 4304 wrote to memory of 2996	4304	msedge.exe	108
PID 4304 wrote to memory of 2996	4304	msedge.exe	108
PID 4304 wrote to memory of 2996	4304	msedge.exe	108
PID 4304 wrote to memory of 4492	4304	msedge.exe	109
PID 4304 wrote to memory of 4492	4304	msedge.exe	109
PID 4304 wrote to memory of 3864	4304	msedge.exe	110
PID 4304 wrote to memory of 3864	4304	msedge.exe	110
PID 4304 wrote to memory of 2660	4304	msedge.exe	113
PID 4304 wrote to memory of 5132	4304	msedge.exe	117
PID 4304 wrote to memory of 5132	4304	msedge.exe	117
PID 4304 wrote to memory of 5448	4304	msedge.exe	118
PID 4304 wrote to memory of 1884	4304	msedge.exe	119
PID 4304 wrote to memory of 2828	4304	msedge.exe	120
PID 4304 wrote to memory of 3008	4304	msedge.exe	121
PID 3008 wrote to memory of 4816	3008	msedge.exe	122
PID 3008 wrote to memory of 4040	3008	msedge.exe	123
PID 3008 wrote to memory of 5076	3008	msedge.exe	124
PID 3008 wrote to memory of 5076	3008	msedge.exe	124
PID 3008 wrote to memory of 5076	3008	msedge.exe	124
PID 3008 wrote to memory of 3156	3008	msedge.exe	125
PID 3008 wrote to memory of 3156	3008	msedge.exe	125
PID 3008 wrote to memory of 3472	3008	msedge.exe	128
PID 3008 wrote to memory of 3856	3008	msedge.exe	129
PID 3008 wrote to memory of 3856	3008	msedge.exe	129
PID 3008 wrote to memory of 3856	3008	msedge.exe	129
PID 3008 wrote to memory of 1936	3008	msedge.exe	130
PID 3008 wrote to memory of 5620	3008	msedge.exe	131
PID 3008 wrote to memory of 1936	3008	msedge.exe	130
PID 3008 wrote to memory of 5620	3008	msedge.exe	131
PID 3008 wrote to memory of 5228	3008	msedge.exe	132
PID 3008 wrote to memory of 5228	3008	msedge.exe	132
PID 3008 wrote to memory of 5228	3008	msedge.exe	132

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\_workspace_deliverables_sped-debug-1.21.11-chunk-tracers-persistent (1).jar"
1⤵
PID:1032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x280,0x7fff94d5c188,0x7fff94d5c194,0x7fff94d5c1a0
    3⤵
    PID:5652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,8680405783099229314,11165840979415433103,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1800,i,15701579375773670322,14942546161541627512,262144 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
    3⤵
    PID:2164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,2093479851140700923,231421461908202648,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
    3⤵
    PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5741021690052043850,2072634754872020784,2097152 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
    3⤵
    PID:4456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,8685762523049555065,2274558297181763134,2097152 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
    3⤵
    PID:408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5072,i,370297664877944056,15828672804141353181,2097152 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
    3⤵
    PID:5060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3396,i,12876349131224015647,5250165676020115863,2097152 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
    3⤵
    PID:2996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,16441335025137944554,17913594663523398001,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
    3⤵
    PID:4492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,2380862933976924866,11653111134599654151,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
    3⤵
    PID:3864
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,17297453855805341725,17161310329421365520,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
    3⤵
    PID:5872
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,17297453855805341725,17161310329421365520,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
    3⤵
    PID:2660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,7166637500933276544,18441049116286382806,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
    3⤵
    PID:5132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=556,i,4508996029840245271,10753110476023422010,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:8
    3⤵
    PID:5448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6840,i,145982699354597589,17579947914433007530,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:8
    3⤵
    PID:1884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,8122769027484533476,1466477144944753767,524288 --field-trial-handle=2308,i,17123406332711732772,4934762033626153657,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:8
    3⤵
    PID:2828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3008
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff94d5c188,0x7fff94d5c194,0x7fff94d5c1a0
      4⤵
      PID:4816
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,12560864622490669364,13354687696029205364,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
      4⤵
      System Time Discovery
      PID:4040
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,13631453476694896729,3159209862626082290,262144 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
      4⤵
      PID:5076
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,15691709582866775923,9786439498228504555,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:8
      4⤵
      PID:3156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,16140291978922336024,6123017433149586358,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
      4⤵
      PID:1208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,16140291978922336024,6123017433149586358,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
      4⤵
      PID:3472
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4816,i,973641986166030034,15510357541275756027,2097152 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
      4⤵
      PID:3856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,9120748187283830116,17931404639978044982,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
      4⤵
      PID:1936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,17489370160285102774,5876311625545470505,524288 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
      4⤵
      PID:5620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5584,i,7069000011333318871,10399532396621075676,2097152 --field-trial-handle=2292,i,11982245696222452949,10658613466881414306,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
      4⤵
      PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 428ed8fba4fa22859ff19ecf8cfa9e7047dbec3a9237dc169c992c8a1f00110c
MD5 d003550007c41a349dcffa73e0e10408
SHA1 a7979c4a77ae706943417ec81c00b944d6d7080f
SHA512 f7c7b187c425d971b90cb88e196455f01130bb22b7a62cdf286ad5fcc6fc46ad07f16ec27909c757767075143e8c30d64f93565dc608e16d2bc030515f2ec637
TLSH
T160D023773F0EE854F71951309853D75927B189552C4A6B01B312C42CEC2D0D447C51C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
MD5 6a7649ad8529021b8a0bf012adb69564
SHA1 bc6cb8e64c0f5c84a887a19005280de2e2ff95dd
SHA512 316ecd29696eeae0002f91778818c1c4166e5bbf8440eddea3560a6ea0fb49f25e4e33c48c2d7c73eb08507c015f5aa7eb4187e6558ebdc4cd44c5bd980d8c3a
TLSH
T133D0800529B3DC74D055847018D77B4D7665CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
MD5 35e76198d1c2c61d3c2a49119ba65747
SHA1 a5ae8329c9e762bed0a3d6bc5584e8faf6d26a77
SHA512 8b21ab6c5e29ab0ea7652b7adadb04a05eb734a52faa779252fbec4acd45079c7ad3f83f36227a419f0a59fc94eb1cf408bcd782459cf4691b6eb727be746fd3
TLSH
T136D0800925B7DC74D059847018977B4D7555CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0327ace218f13bfbcbfc6535ed58e3e2842e367622120f054be0e37c216a3b3f
MD5 14dd0e5f49c357bdec3b82a742b24030
SHA1 357b3772d0a5e1bc6febe91c52051b8568d70673
SHA512 bc1f858b2e6583738770f6ab9fb76bfc960dae4714402bb8808d761151acdabfee3895f5a49d7a58efd4405da46b5f65005bc8f9ad98e626d5390dfc7b0f8a11
TLSH
T110D023333E4EF41DE23D41705563D7593766CD1928875901F316C45DA97C0D95BC11C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 79f459d37fc40e9e5bcbc9449d14754c056998dceaa7383243864289012c8a4c
MD5 b25eca64168407bbc7e5061b1c46f885
SHA1 4269b7c4056d83f07bb484252bc28f83af6458c5
SHA512 908b2f06172c963601ad35eb0818f2984ec0da9a1cabb2ba846e8e9d96b55c0f20b4f65b1c8ef34479e9399dc34343f668c9fbe812b6f1d5aaaa63d74d35d8e9
TLSH
T189E02BB9C862AC2B0CFD1B1850600642EB45135727C1888B7E3D93088FB1D3B458689C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 130869d3208cddb6d2ac6a33fce625abd0263e656d451778d9811a519dbb9497
MD5 f23d554659bea81fcf823bcfa6818e60
SHA1 9725114ce01e444e5cc28c855663924098611ff6
SHA512 10dc365d86fcf6b33aa6b3fc2d87ab3f0312f1a4cb03744766d3cb520ad1afef19de9a37006b526a0708132dec6dc9f1e920c1be33c815548693c6ef01d9e574
SSDEEP 768:/u2nvDZSJB7RNpZTd8/GI0gK96PVXBoi107a:/j2B7Hp1d8Y9UXB/Qa
TLSH
T18A1328FDBA891D06DAC7213D7C6B6F30A329CBA1CBC947C7B3247066562775E250E206
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 9314b6f34d187c9237b243f9d4185e11cea9c3077b0dbe565084c7f118f8c438
MD5 e9c914baf68c778ecf9ba26925378bd2
SHA1 18ebd6bfc8a8fc4fcc4ea6ae9094cf53716a6da8
SHA512 c158564ff036deff466d9735236a5dfbc2194f28c5c279433bf0f81f1a476bc38c6583b01061ed317aa451bf99011aa5e57c663dd8422209e77f8d3b2ed704f8
SSDEEP 3072:P6BZNoIswGrdr2EO9x9ULcQjcL/+L/YMEUqC5Mz68HLL/7cL/Ua:P6B/B+D2YcL/+L/TNN+LL/wL/7
TLSH
T119B470F74951A01BCFA802F5E2173E3DC17B414D6DE0ECE9E6784C952826B32B2BDA54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 f7ab916f0644bd7d4499751c0eef3a678a4dfe48b399a853f21bbf4ef06e4791
MD5 52d66d14b6e8fe9d353fc2dd832c3edb
SHA1 4f7954b151bc6f1399f8822486a15e247e7bdbb0
SHA512 ea484ef6be8e59f2fc7c4ce0e74d6b100d71203df009309d5bdcc578b3e6cf6f4cc44e2b71048aec32f860916ef4204f4424418e3afd2019c088c35bf8c8067c
SSDEEP 6144:X5oGDagLw4+68uaZaSfqVByd2FzVnralgz0gIm:X5qV4+68uaZap0d2z9Gw0
TLSH
T178A56CEE8F2C2C42DE678A70B5E0EC077D7112C3755AD0D39845C1A4A782BC676EA1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 12.0MB
SHA256 dedbc60a6a398ddff2cac4877b2ad4149ebd7c255c469aafa84aa9d1e38f97eb
MD5 26c6040b1ca5582b7a12fa971c2ad810
SHA1 89583ad658377cac724adb21df51af93704f4fe4
SHA512 8479c01a3445f0da7a9430ce8c611f108adbf2bb02baf57a82b8476938fe516ad8c43d823f9d673997512ee82223e2f9b66312c322874bb7d8ba50c1af392e51
SSDEEP 49152:aBziWrThsFm+24sbCVOw4EBHrrUUvYd/vLjudSHueTnPdF:iprThsxpM2lLrUakvwSfF
TLSH
T1DCC68EEDCA685883CE679930B0F0ED477C7413C3B955C1D2889CC68412AB7C5BBAE66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
Size 91KB
SHA256 65e434e66b6aec68246e8196f8ec3d4a1cebd36a2b72c5fcd44f766b97bd950b
MD5 089343c5f2d2051b24b0829e396584c5
SHA1 9720562c475df78708bda1f3abfd854fd9b6adee
SHA512 d14dca77abdce22cd80d51fc62eed850a16613bf2073ad585b563293154c4dd1e36ed565b49e5075bbf91aebfe44792c80e0eb086b5cc7674b1543b88e7fde6d
SSDEEP 1536:By/GE+ZJnS+WDoSVTu7lnEgEVrXfj7UYuFsRKx2QdoeNmJUHdWoxCAnhGX/9iac0:By/OSoSVTanR6nIRhpWc8I5xCAnhiM+l
TLSH
T1B2930220E4D29053E357AD9315230BD79E650E0CD9FA3358A271620639E69D3EF613BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 d13831db3b3feaa4986804706347141d002e77b0e46e4f60ea91fe106e6786f1
MD5 631c073450aceace065ca2657c1c9c2f
SHA1 bc8307cb0a861dffd3f6ec9a87f6930c0fe9e4a3
SHA512 d774e9a5ca4e4cb6a372182e51fe9dacf37e7f7736cfb384bdaa5a8ce5a8bac25f031898421d89d150324da393c35dcfd3564f713251911b30a42c275fb848eb
SSDEEP 192:qBINqSjKVEdusEKfAJj3hfst8qReAWX0ggZdk5SOYt2eLdTmZayUtAJ+RDBNO3wQ:qBINqSjKVuusEKfAJj3hUt8qUAWX0ggG
TLSH
T10BD16EDC81D65565DFD24970D3D99B2936B88B08800F1FDE71B84DBC6A3BFD284A942C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a1e66.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a1e66.TMP
Size 3KB
SHA256 889d8f45ae38906d3c0a1b9503c726098aa4d91a0324ce13f33d77959504d106
MD5 be0904549ca8b0c19d56635ac1ce42bb
SHA1 030eb29e7b390f983a9e4b23b8e8648acf204280
SHA512 f562041c64896c887b850c491834d51f36d886fa2c14d608f620d6222868ebf3d6ac9f045aa472a7bc63a19d0c9dd81bcc001d626bcec283815ae0ae3d8f58f3
TLSH
T1E0613D5C91968568E7E09DB0DBEE277E76744B0C414F0F9835F54E3C8A2DB12D1AD82C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 c7bcb56db05c7fb4f8577cd51e135a24c00d5ab77f62fae28cc5f42da6f5ffca
MD5 84cb65f42966413a5c881ef3a2b96676
SHA1 37e646106325ebfb72a8c13b32634bfe339a158e
SHA512 c1cee62339b8e0909d52a62485471b8f4368323ac464e26c290dcd478b1edcc76a45d46d2b0fcc01b4e81b920e9ab316319149d02df0b897a5db9737375aa640
TLSH
T17BE020D454C6C25D95B03DC7D2349F08C5C83546D6ADAD479B00CCC07702042F2DDA5A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 43fa915bd3cf3fb2d6edad9f97d6b65be3515862b547435cbc38517a4d82a34a
MD5 5dce7e92a129e7f6201345fc2b22e2bb
SHA1 333eb0c4e5b9b5c7dad920eca388cbe5d9d628a8
SHA512 5d5aa6343959f39a39f2d9061ad7c8b429a36471ace6a947a4a57a4acb8ff554fb4a37b2b36a04629fcec2292e81b100f9ed27a739d6e65cb42b4aca90c7da2c
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jhuLW5LDNd7K5fKFtIy7qYpyq:Tyi+7f+UZD4jJ/BNuLWxDfCKFOy7Tpyq
TLSH
T1D5E2E28D3B51F912C8ED733EA1D2C5E0AEBC696C865DB171513C9C728C52A91F49E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 3cc369bb653a2f8f86c974aee30cfde665ded360a73ff958ed568482d3d831df
MD5 32c6973ea227c98e0640458173a707f5
SHA1 607e37a2d3793875bcda918148b3cc7663db3f93
SHA512 3fe41587c6cbb8f0c99c6ddaa8c9b72b9c2abdfdb8f002a5f09849bad50faba7f8653c2c2a0e2ed83c933de3189fe7225a9f0f815b1a1ae5ba1ae72699e89fde
TLSH
T13CE0260484C8CA69D0646DD3C7794B08EBD8B903A38C3D06674ADCC06202281A28F3D4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 b7ead3442bed89693dfc6516435c851bc2115173d163bd01c9026656f7855b22
MD5 58d765762cecef85ec43c455e777d274
SHA1 6833c7f66fadf0b9126cceadd87254532e443560
SHA512 64721e0f7757c6deffb8c1874fa21a65dea2297319cc0821e577563448351f0babf9e0bff1204a4f40bf1c9026db677dea366945c5e89d569e115bd331247e47
SSDEEP 48:uzBmw6QU1PzmbA6sYckcK18Xv/CZIpchJzL3Cv9RiVXhdPrdJfMsoPQo:6BCxXjYco18XSThJzjC0TxMhQo
TLSH
T1F892C55B9FBD3853EF8A0D76317D0476CE3BE2A89F83CC443464642108F8592A03D6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 44ba3995124cbbd1d1436e247fa11692304cc6a7f81b34a32126a767a71751bc
MD5 f74ab555f4132d078681fbe2858d7c32
SHA1 1e07ba091913c152391e37b26f4c49a278f6a373
SHA512 a8edef148307bfc272621eb9e0b530d1d102edb40830a17b23b1fe3b8e684faa7bdaffbfdaa77525412e2e6ff60fb83a97fbe52f97fb9a85e3a778d00b772467
SSDEEP 96:VIqIU+bGz83uy3+u4tgp4DLjGQLBze9z3UKQJjBHMsDEuspU0wbtqrOQpPfR4J+/:Pf+G83uy3Ct7XBBKoKKH7DXspU3if
TLSH
T1B814411E5F643711CDBD917669E744F35D6DF03FCB126ACA686114B0CEE2A42A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 06f7a93aac5466827c4b70786348b95599458d1245c730e5d5e92e452e299861
MD5 0698facfc86605674525db2e40297bb8
SHA1 8b28ab6c13f609479d388cd349c6d2286bab1600
SHA512 62f60a243131ce78809180957f772e85a176c27e51fb2f5cad902cd976b77aef19336d51de9e3fbac26e6f29c332d4d31517abca693d83b35dcc28a6216589bc
SSDEEP 96:bU+V2jJwRv2gSl3WsKpNP0MKjFBK8YK8hK8o3FO+SPWerzdBSBdB+BvyztpcFCes:Ys4JwRy3MEjiybr3K9y/a0vbtXt
TLSH
T106125FF7180CE557C78168E6CAB3EE89D397983B8EDAF89AE16CD0AE04D50347476143
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 e9d87d4c1cad329fba26cfcaea7d3bdedc8d3703c19caf519100cee158f18870
MD5 c2d3402585f303ec4582ca64ecbec5b5
SHA1 1f5851234b7aa7352cbf0086d927e07f0df219c3
SHA512 a0b8cc422b9bc1a89f8d835ebfaafc15fe29815db2c15706a7b98f62a684e377096b944b0e124e473cbc1908cd905555edce468ce1c3679f79c18eaf5839a514
TLSH
T142E0D86185CDCAAD915426CB833D6B08CBF53516D68D6E466B05F890B142004A7CD6D9
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 32KB
SHA256 2a6e71701bf12a8446778cabf08e21845ed21c514403827b1adc3ecc4852bc21
MD5 af367110a318e2a6a20ee1ca1dfc1add
SHA1 9943544d8664563308a370c7404e1ac62f9c60a3
SHA512 6812402325c25f86fa1872e815420460777e8222a2a33445aace1b01b27f609f506ca6dd0a3640528d768647739a424b753ecd0b9ac235350674cd339f4100e7
SSDEEP 192:4LaSaM8TX5qclxnCeCnbczuvi5GsNXyXAywy0gDp:QvFi9l5CeC4XyQywy0w
TLSH
T142E2F83F5F691604C9CF6931B8B9DD46EA574081AB03E8EB50FDCAA10C30791FE67962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 43520ab6a6c3500d6432f93add060cbf48f1b4d16638dbb3bfec8cdc665a76ca
MD5 ead7140bd73ea917a120254511be51f8
SHA1 1c3b51e64da3de18fa8cab08946b1e044b165726
SHA512 0775cad46b6f1f83adcaa25b5071e29280a1a574f1c3b62247087d25d7e5837661a05d66ec65799ecd6157cc564ec35b4f0473ef9d4ecb9f7acca9f2bfa2fd11
SSDEEP 192:D1x3YdTqYqZGgjka7175cArQ1wXG0Glfa7SGV24Gcj6vRit/4bLSOGqj44R2qB+:D1x3YdTqYqZGgjka7175cArQ1wXG0GZE
TLSH
T1FD22DFF7C3E4866DDD1152F4EA146E1FCE690921536C3D1A88E5AF0BA3E24B1E241B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 a8884be29a7f53ef964ab7983728f2f116b3b783d78ee1e932abc77c651296d3
MD5 fd186890ee30610d8f19f24ebfb2924a
SHA1 5d4ba4a36d5802059768060d4c48c529f518f34d
SHA512 e702026f566d5adea5e7577d06d766da9eee7143ec62b8d43cbe6ba889a909f2804cb8f5fbd17160708c7f13f9397fd9e3d48412cfa2d7d4ece2098a144beac5
TLSH
T178312A67827FAC6B5038887F4E09BC0659B9F43342D260F4DB6A4ABDF5C44FB2B16016
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 f42088a1604afb2c962b92878c23ca9171d91cba1803c9c4dc3fa19071422cae
MD5 76db9eb52ba1dbe0d0006c1f4d154a1d
SHA1 1ea7666b6f5495f9c913fc71657ae33db64ca738
SHA512 fc08b20303c45b3130fbeeda92b8c71793378ecd2b921874c5b8f0bf86d663c9b73c64b036d757c3f5f10249b09e53d816889298a701341784599bf3aae73d70
SSDEEP 384:sxZenIrV0/fDs4WvtEni8+9mJgmdtWHbFeZ29V/mC5ih:sQIh0/fLYtEi8+9mJgmWHbI29Jm3
TLSH
T1BDA2E8176538497BCDD7D229F945BB57D7B901639A908E44AAFC8E0C04E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 6a170316a3dd576ebff95a7281bac7b11995c679e13b8c43909a5e2d0d49d1c4
MD5 d714608332dbb655c53eb98f64360506
SHA1 ecb938635e882a978496e35c778a3af80bdfc1bc
SHA512 470cccf7bb929b19ac6e5d13e751efea494bcac354bad9dbe6cf69eeffb76d042a038d0ff1ddde8228c166f2a77629d139cd40a6d83218da8c35e6b9ef3e758c
SSDEEP 384:sxZenIUM0/fDsswniC+9mJgmdtWHb9G/l9VCmjj9:sQIx0/fLwiC+9mJgmWHb+l9omV
TLSH
T15992F8166578097BCDD7D219F945BB53D7F90163DA908E48AAFC8E0C04E6AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 d3de0e73eb18f0c7f07a9de94ba0f0126e386ce955f74a229c5eaec8ceacee51
MD5 3a9a9b210fbdf7b5c140cb13d3903d4c
SHA1 257a00d64a1b14e04663d4f56c87a554ed489a83
SHA512 090f109a0253d7bfd81bc78ea08ce2690ff90296391f1afc6b64da51e158701b7b0ebe05cc75b261ee527eb26e684faa0d7997aa2f84486cc8ada1aec526b954
SSDEEP 768:DcgLiZo7pLuL/aeWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6MKJLlhzCpUroC:DcgLiZUE/aeWvaShqu1ja7MKJLDOp/C
TLSH
T18BF20C3B2C0CCB7E4F844E9CDC2A7E8E6DE8028B9698C95447FA445C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 14e9c9662b8963fee4eaa8b46c864cc6fb94f6c9bada69e534db4d4139f6a6f9
MD5 95e546d941fa7ff578f23be48871c58c
SHA1 edaad200a1dd58026614f7ebb93946f14e38f8fc
SHA512 3992a5134ffe2003ff2b1896032b65b0a6fa37ebffde6f9e132b7cce3dc8a00f85b897a9b8774fff62a60482636693676d12f6309b0eef1bce695c3a3ebcbad1
SSDEEP 768:DcgLiAo7pLuL/aeWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6MKJLlhzCpUroN:DcgLiAUE/aeWvaShqu1javMKJLDOp/N
TLSH
T18AF20C3B2C0CCB7E4F844E9CDC2ABE8E6DE802CB9698895447FA445C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\04a59cc7-dfaa-49b8-8b2c-ff88b1a1206e\index-dir\the-real-index
Size 120B
SHA256 a0acf0ff332126ba3cb93f249c9b3f3d85b8b0d946f3ed1efc51e1a89605b1a0
MD5 3073defff7f3d7654e192200b403495f
SHA1 2c4afef1d6b9edf874660d3bf17eb16fb23604fe
SHA512 d077c82a08f0c5ce2bab09f1a51ff17698d2f7cf392d7f8089b4660d353ac984d6dcca5bb3694f17b316dc2af7a5f15fc7886b9e9e7939fe8b7461a7e21f0285
TLSH
T193B0124220010B0AC21107F0414368D17A282C4F194211C269E07440D1264C1E523011
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\494b952c-85d6-4869-8f83-68ed97a13e01\index-dir\the-real-index
Size 72B
SHA256 6749deddfa01e7b3587debbe8bb84f138003601ef7b3f0b3e57f15905e681cc2
MD5 8fd993829b66f1a9fa14ede0e02b6c8c
SHA1 e73909197e8bba349f7257988443f5143fa0c900
SHA512 51318b76685030d0a9cdee650c82020f37fd0c35620d1c984751a76be4c9eaca6d005d0d91ae78af3a623679bebe8c9bc6ff93c85cf940b7eb825cc4e0a4af22
TLSH
T1FDA0026002940043C0590BB152DA11503B95DC250141574761DD35B98C633AC5D51444
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\93aa865a-268a-453b-ba8a-daebe072f0d4\index-dir\the-real-index
Size 72B
SHA256 3c64eb3685183a3bb960e06c71383fd8bcdaf1ac60f2b63c47e95f1e9da8f8eb
MD5 7f177c9174081b1aa190325573e2a720
SHA1 4d240221ec13e9252861206cfdd554d306efa2b9
SHA512 c4f666af3787ec140f5a5bf88237892211f316916f26103b62ff08210ccb9b66263697f1cac82e1db877bc55b0349e77a8ea1249b90de67a77314a5f65b90e2e
TLSH
T199A002D002D50443C01B13F425DB01917710CE900641134751A56454DC556445D4224D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ff65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\93aa865a-268a-453b-ba8a-daebe072f0d4\index-dir\the-real-index~RFe59ff65.TMP
Size 72B
SHA256 2ebc5c5e224efae66a581b68e1e327ababba25ecf55b98dd5a3f757223fa807e
MD5 a9c0471be09614aa4fbbe932d76dfc0c
SHA1 8cefa05cd7bb494a891273408065017f1d109944
SHA512 9f95d7879dfae78791163bc9865784c81d7ad3bce3cd539b3128af9fda438716db197b55f426069e7cf152ee918bdc7563593727a8a606e6eadb8777d4dddf82
TLSH
T1B1A0025543C8C085C41311B169DB824213008A201102131A55D304F4CE544426E8301C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c525634b-d4e3-42ee-ba7f-48d143c62b85\index-dir\the-real-index
Size 2KB
SHA256 7c031c4c96a7ae49f770d0cdc33c879b9a37a83937b49264b2edec85d3ebabe3
MD5 cecfb1dbde868344539b052f0c0644a6
SHA1 0ca12c1b0388e762595ff85cdde94c44ec5bb5d9
SHA512 e27ce3a19f58fcd89607481ba94bb5180da32b63658875e853900537b8b2515b40427211580114e4895f904414786e75642badd814e7d63dbbd3f761c4bbefeb
TLSH
T11551D68D8D875B6FF9BC06B300B204D433F44ACC17545623ACBC5676B94732D1D1A3A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1e76.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c525634b-d4e3-42ee-ba7f-48d143c62b85\index-dir\the-real-index~RFe5a1e76.TMP
Size 2KB
SHA256 b0f840f58f09b21a3183535c3070601315eb07662be752ce0cd78dafc5f4a442
MD5 179ff9a6a1ca0724333d0925e09aeb68
SHA1 79fcb998bd596d8b2ee2c350d624eeb4b9b15cba
SHA512 1b389d1194a58e7da363e1908968386697c140515a714f46325d4291027e0f8265e130917b48776b1933e02ed006b6356897a303b66ebfc8efc93d019b770bda
TLSH
T1A451B75E9C430A32C9A095B359CA5465333D68555A49BF0735FC8A33ACC37AD3D56344
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 2ca5e784740e7878e29c09beef21581824b43344e21cec96efb5c9e78216910f
MD5 2710a5dd50df74176ae419cdfa8f1e64
SHA1 8ed0db2d8f08d9810d1eb9e9576d246d12c23792
SHA512 2a1cccea4e5ad273180530cbb5e7534b6184dc3e2b28dbdddcdfcf9940792d9906b50fa3e8255f5b2c40fe00b540755956437503ddf8e86e1fa1b1645819515b
TLSH
T139F05C7B3FE71818FCFFCBD6287100A601117E5A8954ED8F1416799B60F56242499CB2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 8KB
SHA256 ec664500baea89cf30941317510d6cb9e1eb8f6fbcd95397f917599e56d21641
MD5 0051f73c941974a4eeb0d7a4487b72d8
SHA1 41a51c513045ca2ad6d30a2a1c719a756d403876
SHA512 9a7eb1d85454b19fa2fd546d179181f22e1ab1aaba0fe6aa39a65e6e87420c34d7637054897d233561da7b58ab8df471a10de49ebeb257ce934bad6f95c2247c
SSDEEP 96:F1m5H8Jp6QDpk2p6jp3ph/mOapMcXpdmpM5pvy:F1YH0RVo9jO1GcXyG5By
TLSH
T18B129AE3DA14A053C9C966FB2039F5E9551DCA066FFF87A611BC8F6E52402D63328B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 6332be3fb97944e6acc8499c4840096b24a02bfaf8ff3906e449594142a26626
MD5 c8153a3e0a088923790854576c6e3003
SHA1 30a6bdf4856dc71582f84a1cad972b9e495664d7
SHA512 091a53c59ce4d846820a6a51b0a160e8cf8e860d5cb6892ed38bfae153f2a9e7f8fadd20b5948b4883dc407cdd2bd85d040b7bb0dd078aedfa0a863ff745cbb1
TLSH
T1F6E0DF9415CAC2F9A17526C74326870CC2E9B50BD2CC3D066F8AD8807343584B19A192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0fdba290f4a7aaf6dcfba3a16f49b18fe258b8bb411a3d5251e676aeb6c091f7
MD5 0766627c1e0e14ea625c7befb3c596b9
SHA1 dc5d2deb8cf0674acf00ec780ff9415792193e5d
SHA512 455349804a841e9999463bd6973526053f4e3f4281439600dc7e0e4e4ed57b86cb97e412c6801f9bb0f669849b8562a565b0944475e78c2efecd979684027ab8
TLSH
T1BBA0021382541148D0000174D44B06E85250892C4B44721186E49258E85144481B314C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1e57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1e57.TMP
Size 72B
SHA256 7ad3367ca0294a457a9a34d5bda2916eaaa53b655fb326c15af272823b49c86e
MD5 9df443a8e4ac0a4f45688fad806fe7a7
SHA1 12f3877ce439278d6316c4349daf8f7fcfe10cc1
SHA512 424824cb0d73b5db8fa37dba522b61c2a7036d59a34cc2b049776cc2269610c6098bc5e4cfe9b2504133503afdfd7fcc2004fede86764ad5d52cbced034bcd50
TLSH
T193A00220CA8A1404D44905B96115234417728E9D01045306679094ECED930E05EC5103
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 1544bfd2183660d8facea52fb0f6f1c3a2a02982fd81efe52ce0f001568dc7c0
MD5 81d7bdeec5eefe8f49dfcdac26f81cc7
SHA1 ac3e71c9eaa4f42d0d805303ce1d1e18d4bb84ce
SHA512 d997f13e16400e99d39af32a3ad6fdf0282dd487e8427a0abe304a40322d7894969f1f9de52058ce5bf682564f16c0c7dad00c93613c960a1a53335fccb359a2
TLSH
T1D9B012557F015192C4EB4532CBC45B947750E92614408C9348056F305E065A43F10CA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 68447ee6b75e1febf9b66a7c0c000a40246a09b97842732816061095feefb43a
MD5 13ec0c1822e71b83529aba70397a463b
SHA1 83fb00a10311fa9c7f91985aa1bedb5fc3ba11da
SHA512 4c7950a00e92a4861c7a6eecc94457422fc1cffe3c2747ca8e2fe50d806157f921017b858b3f952518af2c7af513ba2b012bd1b6e9341c03507986c111d4f01c
TLSH
T142E0203417CAC76FA1D575C78335DB0CD6E6B513D6DDAD256F0EE4C06386140724B150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 bd88edea0d2cba7f4fa5787bfb67c3f2fd614f67fb86ee1bd0d67825c8230e37
MD5 01e17cdc23f4db91895f9b0e76650204
SHA1 e747d3fe02eea86e11705be5ef83ac340d30edbb
SHA512 b80f02d979026f5af8ae3639fc44d9918244f253f7fd8d5559752ca06ae41c1f77a8aedeb0b44f6e020de62d05db67ab88f7718fb00c471ec4525905f7cff622
TLSH
T1C1E086B445C9C779905465C383769F1CEBF479079BDC7E5A970CD4D0B201284B2AE594
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 70ddb27ec80eb31c3993c5216af37a43fd254b94a4336555cfb64e53add366ef
MD5 7d91e96ad459ec6a20651bc2fe9e6165
SHA1 03462ee5716833dd8fe99f1bcf16e8f3b4b01f14
SHA512 881c14e981e9bf141206c808620a196de328efda751692b04cc28051901f077dbd5c4c8e9f3f0f32a244b30575032da51e5e333697d71fb79b45736356a81a9c
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3BNjnNyNMoq8:krN/INhx+kcxKBzxNDO
TLSH
T14CB23911717A42913A7E398E8595B82F26C230633098F53B7BB914A60F6BE20DDFD4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 9197f75ea23177c1e12cd0db6c0127475451a7b8b26356cf263960c773ed4f9d
MD5 73736d8406f32cfb273f3b83b21a235a
SHA1 be1ff8ae2778ceafa979f4de400bc44d5bdaaa83
SHA512 84581d6e04345529bc3d714a4917e50e436e5303192f895ffd1f9dc46271f057e12ae2889dbfd5b215c855aa1ba2826720f8924213307b414a0cd96cbd9ec9ba
SSDEEP 192:P+xWcezfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxGfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T16A24730A7B747001EDE6D9725CB080771E3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 c8284c231c9bced15f9782a2bccc7f6583f0d69a9110b6d81ad4267a536083eb
MD5 75dc108aaf5df0bae57e9c9e09fe7a9e
SHA1 947a0bbf9ab5c58fd7c4ce97f4eea25032c652a5
SHA512 70dd37c05cd2f13bc611ea7e4a9eb54ebf5c89b355ae3d8e3d487d5ed22523ceeaf6f477a453d03a2f3e8d89976ec40ffb022f6f8faa727b8dba35e6bb660a0a
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBg0LJGt:DEK3tjkSI5IUltGhp22iSBgAW
TLSH
T11D529BAFEE783216CDEA83719AD001E1BE7B913E8FC1EB4254E510111EB4591A32F69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 d155a8dc3bb1ffb6b16e0f555b4335e6e61f276be68d9a3afb8705e5544c2a20
MD5 718a980b0f50eab8a0cdd17a8f7439a4
SHA1 7718d7f62104c5f363a3d8e84eea3e6b0bd9cf35
SHA512 7811e53c10bab4a337b6c8f4ea99f37c9880c1da4c2d44981f335c00206f0e1098270b387d78021a1a90f709c480d26dd669a9c2267bbee5d50521a750d35f38
SSDEEP 192:bpO76IAsKLl8MNssKQwHejl/QkIIIrbrMIMBgYcYW:U7ksKREsKtKQkIIIrbrMIMCBx
TLSH
T1B052851A26051B33C15E5F7B22ABCB961BD6C8814976226D36311C1F8DF3B638BC52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 051976fad9abb7238ef6b2680b2a611ddaf1875c7b9c4c73a54f014b2f9f26ad
MD5 21447d65c7ed470a0ae132edc028a999
SHA1 2653592f6a519c987b041de68a3e132a848e62d6
SHA512 ea2c90df42c684d163d57a3c87e75bef7354d27cd5725f4eba6badffd2b8db2c922dd2a8ee473232ef82532509b9ebeda789b6268f72b0cf42eb986c1ffd60ef
TLSH
T143E0DF90AAC8CAAEA07425C743354B0CEBC8380BEFD83D0A5B11C488A202180B28E191
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6d011067b3bf035d237f274afe613da6273923818a61750e39a2ed5fe337d92d
MD5 6b84b7f2654365f3e3cf76e2a0329277
SHA1 2394283888d0feaeb5bde76486cadaff86752b56
SHA512 e74cbb7bcf115b60f1f6a8b46ae8284abbef2460bb4fbae54319782899d826b559340750385b40a8395dcdcec44a4e62890149244a6741b180dfadfee198fd0b
TLSH
T1C9218F56F320C159E14E863EA06A9B351378E8529FBCED0F94B934356E72F001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 53b8c675215587f77a50b921717fc45ee4e91b0c5f54c9d1700668e1d9499691
MD5 78177504e5baf4488bcbc5e139507e91
SHA1 49501bbf69c8e2207fb6bf1f2936723576069f87
SHA512 d6ba4b1e86c78c568e8a2b9b497efe7907786a3badcf820ec4f0d83e78c99ec641fd78fe8a6238352d6b9b82e04ef7210e92b826135e633da9d8cdb8a9a9eda7
TLSH
T118E0DF90A9C8CAAF907025C343758B4CEBD9380BEFD83E0A5F11C888A202181B28E191
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e6fa77de7425282bb8a878ebf94ce68b271610eeaabe8bdfded89786bfff79c9
MD5 18e0055631a5020e871725fec496dd18
SHA1 bf3fb28c47cd758b421421b34995b336ec330fda
SHA512 c890b476aaf770bedb55c2e4123e353ede219fafb3dfe5415ac046ffc3c61d5d2edbff27346ce961feacb976cea7a87b713678d1aeb2b7b92148c8345ed9cb6b
SSDEEP 3:MsEllllkEthXllkl2zEelPNXl:/M/xT02zNPn
TLSH
T16B4404CC7FC41405C71410304011C3501370DD100D155743347104335CC7D400C00010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9154d241d0c3e14b59bddee39ee2785224fee262747acaed5691e3b83ff8dc81
MD5 b4abae5a16f5e75f748f530da22ad0fd
SHA1 cc3b0d0b4c2580bf589c3f62f6dedee04db1c970
SHA512 a778556ac9ea5c0e27635bc10f09caa8888c651e99fe9f03e2d221ae1e37ed57ac604a1106cb1439798fb178f0cc1b401a9164bbff24508be12dd3c509dbcff0
SSDEEP 384:nGiFavqMg3sN/8TUNTUlIm2ZTPENG6Owf3YQA+I+6KH3Ra43GrN1k+5vI+6J:tFayv3qwgHNyY/+d6K3RaDS
TLSH
T160C24A35ECA8DEABEDE69FD9A7097603EFE01167D48C0AD4DAD81E0D009719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 4a036c76d92dc6237838c35da4bd377d1e11382474fb75e212ef35c9f2e5c991
MD5 caf9b9cbde08cfff6b39a6fa4bc6f94f
SHA1 e097d7c16998bd9bfb9798c32e48ec0f1def02b9
SHA512 532123cc3b934ef6ed12620c73235404b4b8d91e0fc630f427ec295bca68223481fd59c9290521e67924ad321e8cfa3c7ebaf0440972c8ea3902dcbac06f3b02
SSDEEP 768:3FHcpQ+wgQ/dLj6Y/+dl03lFKqa65hkoFYS/ERm0:gQD/dVWGFK/65hkoaP
TLSH
T1B5F218B1E8E49DE7A8E6CAC9A70AF502ADE401378588499CD6F97D3D308F0FD5707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d686fce6faa4ae280f1b811e8a1ad86ea1ed842717dabcfb3ac5cf06aa32ea90
MD5 5a5d8f6f0af57b0ca73fb81ef8ec8c57
SHA1 097cbac39851f2ac0ebec776d77c7fce389727d1
SHA512 753c6d21947b72e31ae9ca7adfc57616559037ba5b6b928adea2034d44dc4948dacb92e589da960a3dfeb1f99c01287ddc7ea1a9e13852331a342f5d77790d8d
SSDEEP 768:3FHcpQ+wgQ/dLM6Y/+dl03lFKqa65hkoFYS/ERm0:gQD/dkWGFK/65hkoaP
TLSH
T122F218B1E8E49DE7A8E6CAC9A60AF502ADE401378588499CD6F97D3D308F0FD5707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0c2294927ba36ce737fb834bd70dc27858666924db1202da0f0431df7233c8b4
MD5 713cf5553b434bda52eb116abcbc49a7
SHA1 ebb6bf8b31d78aca8ee366bc4c4c7522ac5133d2
SHA512 bd4fdd102b3e5e5f89c3fd4403386ee1c0c40b521a952055bce451f5751ded0edde8cd56a2dd012ab33add7489de488f78dbe5327bda4404d4e4aec77a99f437
SSDEEP 384:n0siF9CcmyWCQsN38TUNTUlI4Z/OTETPiGSOwf3YQA+I+xwMhkP+lFYS/EFrN1kc:0FccpQ+wgk/dx6Y/+dOMhkoFYS/ERm0
TLSH
T1CEC25B36E8A8C96BEDE64BD9E70E7603DEE04223868C59D4DACC1E5C00DB1ED570BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bd3811edfd1c6c9861330d283cab0ef8382385c17b2f32bb215bdb49ff64604a
MD5 c9c36841313d65908033583e0140ff76
SHA1 4a925d01f26bd23e36763d3f8f6eace0aade0bb5
SHA512 fa8961ef514ff829bd619f3478ce4cf6a64d7ed999d3a26913667ca8a888b4996f8a63141160ee52dd422949fb522f6b143bc5f6d1ae2b622b43d2818e24b028
SSDEEP 384:npiFavqMg3sNz8TUNTUlIm2ZTP2ijOwf3YQA+I+xqM3Ra43GrN1k+5vI+6J:AFayv3OwgHN5Y/+dwM3RaDS
TLSH
T12DC25B72EC98D9ABADE69FD9A70A3603DEE04263D58C4AD4DADC2E0D00D71DD530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 2752753ed0b80ec19313966db54c7798f2a18d6406420763a212206f4c2d03c3
MD5 013b2903d161480d84395ca6487e6049
SHA1 a8c159e2f32eefb990f0bf2f645129533133d257
SHA512 5f38754278a7975a619b25f8781fc1496a48849a00981c1e52f66dbe1492108ed79ca316c0b02b6fad00eb0d8361318746215eeeea7dee968259396fca477cee
SSDEEP 12:TLpOPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3is0mQQtudP5zcQAJmdRI:TL85UOl0afDdWec9sJVynY3fsuZB5fc
TLSH
T15792C462BD352067DCDB4B7AB94348E10DFD129FCDABB404D9D04D6109A2FC1A6551FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 07bacfaceb948e4448aec77d085ff29691ee091aed1298f0ad2106f7a26b7402
MD5 ca14e6771e3636109275e922c8ebbf66
SHA1 272079ed9da37542f61958410bf20f65576d0b00
SHA512 3a048ceba9e082c46f889b4cf7da287ae83092b1bc96800c10886e20c2f9e21a0d1bceb25784dbe28f58234a60be462cb20e0336b3327614a7c61d0d1a5d8551
SSDEEP 3:MsEllllkEthXllkl2zEelkWKltl:/M/xT02zNkN1
TLSH
T15D44040CFFC41415C71410704011D35437F4DC5405115F43357144137CC77400C05000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c3a19bb6a8775457c9ec28b93759a5cd58bb415f50f5fc5c321fab40a1c9f77c
MD5 8aba1106ef225c4222dc45e6aa4c2f90
SHA1 dd87f303a0c67dc0f917786c5fb6a20d4f234b14
SHA512 53d656fe3a7e80b545abcdd32592296da1289646e8d0996f6f64176019a110b515818cc8a833b29c28227cc490a15acc56ac94430b727f007ce071b490ecc41c
TLSH
T17D411A58A6FA1148B3B77F5A9BF6A92D487EBD772E0AD45E00010D4F4A22B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 e56784f0fedaa94df5038df51f2b448906c2d451918f8799b3f98d046494bbb2
MD5 34024dcd726811fd99cd767e42d0778d
SHA1 930c2a8ffc45cfda8d4c9b64f9dddc23a7c3c792
SHA512 bff1e292627acb6f53aa96e8f486b0b62df8f2c6a84d2c4451b973264c037b72674f3326ef9afc2fb2d1aa959939c80f2aa013bc24f9b90ae4304b77120c27c7
TLSH
T172519A5CAAFD1108B3B36E5AEFF6696E447FB8732F06946D10110E4E0A23B41C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1032-2-0x00000258A6A40000-0x00000258A6CB0000-memory.dmp

Download

memory/1032-12-0x00000258C0900000-0x00000258C0C55000-memory.dmp

Download

memory/1032-13-0x00000258A6A40000-0x00000258A6CB0000-memory.dmp

Download

memory/1032-11-0x00000258A5210000-0x00000258A5211000-memory.dmp

Download

memory/2660-853-0x0000022FAF4D0000-0x0000022FAF825000-memory.dmp

Download

memory/3472-1328-0x000001EAF0AD0000-0x000001EAF0E25000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads