3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e

Analysis

user interaction
yes
max time kernel
91s
max time network
98s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/06/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
StickFightTheGame/StickFight_Data/Plugins/OnlineFix.url
Size 46B
Sample260619-vsnwlsa17t
SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
MD5 59bf167dc52a52f6e45f418f8c73ffa1
SHA1 fa006950a6a971e89d4a1c23070d458a30463999
SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
MD5 SHA1 SHA512

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
52	discord.com
53	discord.com
64	discord.com
110	discord.com

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2704	msedge.exe
4472	msedge.exe
2872	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134263629868466827"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{2EDB7B33-76E1-4DA0-A914-E6D8E5C2B378}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{F858371D-2594-43C4-BDE3-B3CBB935AF74}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{85453C0C-7301-4267-AFCC-AA569AECAFFB}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
1216	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of FindShellTrayWindow 12 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe
5592	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5636 wrote to memory of 1216	5636	rundll32.exe	88
PID 1216 wrote to memory of 968	1216	msedge.exe	89
PID 1216 wrote to memory of 2704	1216	msedge.exe	91
PID 1216 wrote to memory of 2080	1216	msedge.exe	92
PID 1216 wrote to memory of 2080	1216	msedge.exe	92
PID 1216 wrote to memory of 2080	1216	msedge.exe	92
PID 1216 wrote to memory of 1992	1216	msedge.exe	93
PID 1216 wrote to memory of 1992	1216	msedge.exe	93
PID 1216 wrote to memory of 2876	1216	msedge.exe	94
PID 1216 wrote to memory of 2876	1216	msedge.exe	94
PID 1216 wrote to memory of 2876	1216	msedge.exe	94
PID 1216 wrote to memory of 2420	1216	msedge.exe	95
PID 1216 wrote to memory of 2420	1216	msedge.exe	95
PID 1216 wrote to memory of 2420	1216	msedge.exe	95
PID 1216 wrote to memory of 6044	1216	msedge.exe	96
PID 1216 wrote to memory of 6044	1216	msedge.exe	96
PID 1216 wrote to memory of 6044	1216	msedge.exe	96
PID 1216 wrote to memory of 476	1216	msedge.exe	97
PID 1216 wrote to memory of 476	1216	msedge.exe	97
PID 1216 wrote to memory of 476	1216	msedge.exe	97
PID 1216 wrote to memory of 4920	1216	msedge.exe	98
PID 1216 wrote to memory of 4920	1216	msedge.exe	98
PID 1216 wrote to memory of 3456	1216	msedge.exe	99
PID 1216 wrote to memory of 3456	1216	msedge.exe	99
PID 1216 wrote to memory of 3456	1216	msedge.exe	99
PID 1216 wrote to memory of 1968	1216	msedge.exe	100
PID 1216 wrote to memory of 1968	1216	msedge.exe	100
PID 1216 wrote to memory of 1968	1216	msedge.exe	100
PID 1216 wrote to memory of 5012	1216	msedge.exe	101
PID 1216 wrote to memory of 5012	1216	msedge.exe	101
PID 1216 wrote to memory of 5012	1216	msedge.exe	101
PID 1216 wrote to memory of 2936	1216	msedge.exe	103
PID 1216 wrote to memory of 2936	1216	msedge.exe	103
PID 1216 wrote to memory of 2936	1216	msedge.exe	103
PID 1216 wrote to memory of 5988	1216	msedge.exe	104
PID 1216 wrote to memory of 5604	1216	msedge.exe	105
PID 1216 wrote to memory of 5988	1216	msedge.exe	104
PID 1216 wrote to memory of 5604	1216	msedge.exe	105
PID 1216 wrote to memory of 4156	1216	msedge.exe	107
PID 1216 wrote to memory of 5444	1216	msedge.exe	108
PID 1216 wrote to memory of 5444	1216	msedge.exe	108
PID 1216 wrote to memory of 5972	1216	msedge.exe	111
PID 1216 wrote to memory of 5972	1216	msedge.exe	111
PID 1216 wrote to memory of 3108	1216	msedge.exe	112
PID 1216 wrote to memory of 3108	1216	msedge.exe	112
PID 1216 wrote to memory of 5592	1216	msedge.exe	113
PID 5592 wrote to memory of 4048	5592	msedge.exe	114
PID 5592 wrote to memory of 4472	5592	msedge.exe	115
PID 5592 wrote to memory of 2752	5592	msedge.exe	117
PID 5592 wrote to memory of 2752	5592	msedge.exe	117
PID 5592 wrote to memory of 5188	5592	msedge.exe	116
PID 5592 wrote to memory of 5188	5592	msedge.exe	116
PID 5592 wrote to memory of 5188	5592	msedge.exe	116
PID 5592 wrote to memory of 5640	5592	msedge.exe	120
PID 5592 wrote to memory of 2428	5592	msedge.exe	125
PID 5592 wrote to memory of 2640	5592	msedge.exe	126
PID 5592 wrote to memory of 5892	5592	msedge.exe	127
PID 5592 wrote to memory of 2652	5592	msedge.exe	129
PID 5592 wrote to memory of 516	5592	msedge.exe	130
PID 5592 wrote to memory of 2652	5592	msedge.exe	129
PID 5592 wrote to memory of 2652	5592	msedge.exe	129
PID 5592 wrote to memory of 516	5592	msedge.exe	130
PID 5592 wrote to memory of 516	5592	msedge.exe	130
PID 5592 wrote to memory of 4388	5592	msedge.exe	131

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\StickFightTheGame\StickFight_Data\Plugins\OnlineFix.url
1⤵
- Suspicious use of WriteProcessMemory
PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://online-fix.me/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x310,0x7ffd68f2c188,0x7ffd68f2c194,0x7ffd68f2c1a0
    3⤵
    PID:968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,13329072269821848284,7584520109615566353,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,16375435876001898771,11595591200693203894,262144 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:2
    3⤵
    PID:2080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,18047450801041375474,6024784577327743773,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:13
    3⤵
    PID:1992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,233535530873599269,12799588631733918018,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
    3⤵
    PID:2876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,5790504816119814935,14232486509606542349,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,4199348807006021565,6729101108157475004,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
    3⤵
    PID:6044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,17935106389393342615,5818314488230076565,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:9
    3⤵
    PID:476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,12673101375202205650,1702897040287468277,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3716,i,3309038237962073606,15831735944338303665,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
    3⤵
    PID:3456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3736,i,2790648440978270774,13489696547117334271,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5700,i,13722791086707666336,15053611104617968253,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:1
    3⤵
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5912,i,7857416558841350309,9713480565495758885,2097152 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,3603728139550654435,14777801062761413467,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:5988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,12965160966074550091,5533527477046699883,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
    3⤵
    PID:5604
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,1906604909697411144,4598138117090626583,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,1906604909697411144,4598138117090626583,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:4156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7152,i,7413113306197687770,3993224594605673423,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:14
    3⤵
    PID:5444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7504,i,11141766308020095311,17228430557280633316,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:14
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7268,i,16956066519720303300,2284816060932363026,524288 --field-trial-handle=2568,i,9818922830479903050,13563169771747653414,262144 --variations-seed-version --mojo-platform-channel-handle=7256 /prefetch:14
    3⤵
    PID:3108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:5592
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffd68f2c188,0x7ffd68f2c194,0x7ffd68f2c1a0
      4⤵
      PID:4048
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,7324870775362255088,1311875179193709801,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
      4⤵
      System Time Discovery
      PID:4472
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,16273799827540856682,14551090798373565374,262144 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
      4⤵
      PID:5188
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,15812964230716911699,9790281999641650137,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
      4⤵
      PID:2752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,2232551086048953273,1615892866188852278,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
      4⤵
      PID:4844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,2232551086048953273,1615892866188852278,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
      4⤵
      PID:5640
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,10798510676382087906,16229988646583029086,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
      4⤵
      PID:2428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,7569275671657568872,18195584577820470235,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
      4⤵
      PID:2640
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,16408079818940057615,10711917130362220453,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
      4⤵
      PID:5892
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5052,i,1061661381572842271,3248066794402790207,2097152 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
      4⤵
      PID:2652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,2995577495911627029,14818233014810865396,2097152 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
      4⤵
      PID:516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,15927706029080561891,8703290277171508877,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
      4⤵
      PID:4388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,15977386212828866145,10185432745464412184,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
      4⤵
      PID:6088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6016,i,11789283644533937871,6233287694586594028,2097152 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
      4⤵
      PID:1924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5316,i,9070684635756914114,11461264549931760032,2097152 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
      4⤵
      PID:5476
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,285520236125704828,16224865325255232444,524288 --field-trial-handle=2336,i,14541194561967865615,1754347662830051433,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
      4⤵
      PID:2692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      PID:1088
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x2d8,0x7ffd68f2c188,0x7ffd68f2c194,0x7ffd68f2c1a0
        5⤵
        
        PID:1464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,69799483296559484,5304183382756831536,262144 --field-trial-handle=2320,i,16292622788097871488,16678308572764381834,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
        5⤵
        
        PID:5020
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,5754130633494681081,3818002515526812653,524288 --field-trial-handle=2320,i,16292622788097871488,16678308572764381834,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:2872
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,571691964293619254,7836976425848163955,524288 --field-trial-handle=2320,i,16292622788097871488,16678308572764381834,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:13
        5⤵
        
        PID:4488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,16857368662371165329,9026370445700738140,524288 --field-trial-handle=2320,i,16292622788097871488,16678308572764381834,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
        5⤵
        
        PID:2728
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,16857368662371165329,9026370445700738140,524288 --field-trial-handle=2320,i,16292622788097871488,16678308572764381834,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
        5⤵
        
        PID:3068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3704

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://stickfigth/
1⤵
PID:4756

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 55b0964159a6b459538edbc4da6a35f8094fc84679a84737bc0c452f3ccc1df7
MD5 717b332cd72551c09a8f56f6874a9d9f
SHA1 1c25e55f17a458085390be9ec47d722392de0040
SHA512 078f8e145ade41edbb78fe7507cbf512088e27a7904e8fee6d6d448c95c1a44cba8923f11d630ee1d74ef3fe12818a9afa62ec59a474489c359d4befda2134f3
TLSH
T1E0D0A725781A7ED1D13E1076C5204264A96942436762520A7560444EC9655D16EC6997
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 77ee961b8fcde760a84092fc4292fa9e6f4d0cc14ece3c830a5a8b9e1a4ca233
MD5 d755db4a782d60b08ee5f49ab27d86e1
SHA1 a6e80b4d17ff8539eb814b9403841579c5a8399a
SHA512 afa2d49b7be62c3a813a9e5f73bbf9409f01e2b3d90775f831981094be6cec26b2c0f58ae81f95bbb5fc928406660058a3c94f59facd8fd590f69a752bf98403
TLSH
T19CD0232679097D01C52A6072D9104264B665C6477771915F7EB0C44FD9475D0FFDA053
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 df3710c643a30ba8f769a31325e10f6e4821600549f017faf8c4195a8e5aec56
MD5 ea4eaeabc28cc1ef693db9a05005399f
SHA1 b496a5f9a08bab18708a886d5b91da27ac4ccb3f
SHA512 f8a301491cfc5bd2b4948957e742806965a9641f1f9de45a0d7efc6c18d0f3d21fe5887ff7c0d839963eb5420500d96d86217cc7375c280dd878b089b2bd2608
TLSH
T164D0232679097D01C53A6072D9104274B655C6476771915F7EB0C44FD9475D0FFD9083
MD5 SHA1 SHA512 TLSH

Submit Download

4221fed3-1212-4f22-8b60-103166a1bc52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4221fed3-1212-4f22-8b60-103166a1bc52.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0b06ca6577b57fe7ef81a3de8814385f25df287409811adbf0aede635f804526
MD5 de4ee5d1d91fd56d2de7a1931c543460
SHA1 d74bc48d15fc20ec88f3289fee40614b505e76ae
SHA512 2f90d8d34ed06a1fd9343789abd1c267ab41ad875ec7f637e60ec6654f558d2f6e4801a192bb2a971d9ffde6105c37707ed8a47ffba33995743d44dac6e8097b
TLSH
T179E02BABCD229C2719F907296050574AEB5013573B40844B773D825C4FF5A36168A91C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 0c0112bb172743696c3ffb622fb1bac047ae56b8d2f6233438d0e04b72b7bcff
MD5 f5c648b36e6a14c1248bfb25158dc51e
SHA1 5ff715dc9d9bf683ac400b448394ea1ab1f1c396
SHA512 0d6bc3326b58893f2dd45ab79293069cb8b670de4221578a298c9c96bb8cd9c1196e0bb94ec2afbc5c79624e9e1c0551844b345be28c61d5323a5ebcc588cbab
SSDEEP 768:RUfzJxbPyP4qJr88sQ/LguPVDXofuUM7ZnuEVz:UzJxb6P4qJY83RVU2Zu
TLSH
T1C11380FEF3503F9AC6C282BF491B5A7623B5DBB1F6E106170360783997153AA491E834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b6c0b8192c69a90fb5b3bf801168a5f8098488ae5bfc01146854b8c132be9717
MD5 adaf83be96f17b9905a860abaf0deceb
SHA1 a25204022453e70bbc206ee4a7ac5a0bb230b43b
SHA512 f3ac22c387e2cd29c1e48ed8477de0ddcdc58ec08924c8956cdeab8d70b149fb97559abd8ab53d73ebcdc178f33b7c5931ad4c862eb5081e23640063ec70f49a
SSDEEP 3072:2smiL/OL/Y+Y5UL/JTL/GL/u+vpTcLL2GZUzIXOy:2viL/OL/YX5UL/JTL/GL/u+v9EP
TLSH
T16644B5F78850B01BCB6806F993033A3DC237499E3CD5EDA5E5781C992E25B3772B8A51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 3dd343b0d1980e017758cfd19fcef6ab72f1e80aaeb9081b1d43632582551111
MD5 2b6c916bf7e3014dde290db9e333733b
SHA1 395973c26ad5caaad71551f5ff85147042bea196
SHA512 eb6d6ee3719c6803d25bf9e02deb555133b9b739d9498136426b493f2620844dac03902c8a616f300a7d57788f5ada5d387ca37489ce967cfe40f59a8ab96bfa
SSDEEP 6144:+Qm5G4CvMXlP0U0J5CjivzK4K9T0Ib7MgARR:+QoNqMXm51K4K9T0Ib7MgWR
TLSH
T1F5A54CCF4B786E92CB67DD70B9C4CC1A3EB421C2EAD9E0836542C67A14C37C53AA525D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 5fa7e11c7d04339f097c00dca5cb23e49dc1e418a74d307e99c73160324b6d4d
MD5 eb50a117138509d209254229feb5ba6f
SHA1 f41e91a6f9557c62cde557975d9fc8e488603266
SHA512 b645a986253b5dc36cbf85f89d119b6541b41388702fe1ed344567ae7ec2bd690d71ed6838625015ff485e71e71b018e677123622ca33363304060c3956f9062
SSDEEP 24576:wBehnPjJUhbxZVZO3Laa/W1gxtq1MQ84nDoHylTu:wMhPlUhQ7O1gxgP3DoHk6
TLSH
T1DB168DEDCA6858C3CD63A930B5F0E8577C7413C3F994C1D6C898C584027BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0e51541e284b2bda681195fb95ed8d6e2553747450beb64f45bfa5108b6317ab
MD5 77172c2ebc02dbd652e07300cdbc54e3
SHA1 15532f568b6f979b4be14582523aeb41a27d70e8
SHA512 8dfd610a685b16a9266de631944402c03b407e673b6769be0f2f8b9ef838f21cba379411d735a8596afd374b0c0810f967e96b1f3c66c07e2f3e96eaa55cf20b
TLSH
T16A81C99B90E52A3EEBFA91761ED1104B33B5E84336073ED31458F4718C867726C22E74
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599282.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599282.TMP
Size 3KB
SHA256 09d422dfefea3f121bfa1b6ccb19cd0eb2e8c863c6e85942c435e7a8ff068b43
MD5 b340899d240a7cfcc75093a8c75f595b
SHA1 97580448e152d3dd8d0367bdf168741b7907cc98
SHA512 e3b5a97736eb877bd25453c50461c04831ab1050f48b2deea7a60b4a3e09d931fcce0efb885c7a151b7a9e1f581491796e85d0efed55563c0a419aed902a8c20
TLSH
T10A61C85B14E1083AEBF691786ED2204B33B5E98335073EE714A4F4B08C067726C66F74
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 249f6450d09bc431e454b6dcd103eeb02acc365e061f812f48e15c2ec190bc11
MD5 d9c86dcffdb199c72c5c7e24402a046b
SHA1 0ad3ee6fa85f6432f2bb3bfbe93fdcc319798e0e
SHA512 9947ff60ddce67904895c45456ab7d3e963af0dd4599e901ec079ee92b5bf45b1652dc6c243f7beb7faf13f045adb489cf83b18337a7d7856707795f300f9c99
TLSH
T170E020D9DCC7D11F599534C752346B4881C03D96D786AD476740CCC4BA07046F3C1547
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 d3dc3001d727a8374e5c00fd5c593ffce2287cfea40dbea5099b8062dc89a9ff
MD5 d8b151b7b9eacf1c2a4de4de025f01f8
SHA1 91e2ab6f2cbdf6ec19eecff3f7a622f17eaa0e26
SHA512 ce57e570b7d01fec979203384659ed3d1f98bb6ab70ae9830f1d1cbf554b5035ba7076af4318c0c3b0c964a61bc7fde264c4122a50322a9644ff21603454fa25
SSDEEP 48:TtD4jJ/0UC+lf5me8AWxdWxyenYm+6t9it+cp0:hD4jJ/JQAS8Ym+64+cp0
TLSH
T170E2E14D3A13F512C4FDB33EA1D285E49BFCA52C49497170963C9C7A8C63975F48E24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 065e9ffdb4df326744eddca60b88fc26bd95dd7fccb8db2cdd49a06b8d990cb4
MD5 a8368480d4af718e5be34ddd2566a55c
SHA1 30dd7fa0b459c268e60a48f70eada63df9c30778
SHA512 2d2e9b852126d2603dcd4f8c4220cf4f74317925bf1aca9a78bba2062542db9e9ad89ecf358ba82688ea679f644ee7b51148191aa7c1eb6938158393658103cc
TLSH
T17AE048995DCAD61994A86CF383749308C292384BAB993D46774988C4754175B639A141
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 e6371d01fe6d169fa221d316cbe6b29fa1252f38f32c12f49bcb6937c527b116
MD5 4192e35ac12385ccf50289df17faba17
SHA1 16ff940ee57287bb99d05462a1507a4deaad0042
SHA512 5e270a5dea0e6481715145f786f830323b2faf84268d5c6454142f66483ea25b0fe689a811c4a16ed8f12b386e966a0fc19860825d58de2ff05219523ea438c2
SSDEEP 96:3BCxJv9HtgLTcva7oTkVbAFYuRh3OzZSShq:xaB9HQaQoEMFYuRhezZ
TLSH
T19BB2284B0F38B453D6940E3B257E5CB8DE37E79D2FA68CA0316454748DF844EA0388AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 a3508a74e05d07ab1740a29a595918cb55a0cb981c12c9972d74889353bb2b72
MD5 e1f3c00fb595f29d45b40a3ab089b915
SHA1 3f963fda7e32d5c6b56c1132002bd14ec572948e
SHA512 6ee1b58e89a32fdb89b76af493bd59473ea6fc3d6ce484ca931843cfed46f525b354bc9da6ed943df76141cfba905469a1669968e93d1a38bcb3d5b9e53d8cdb
SSDEEP 96:riWotejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/C/0bbEOVpZf24JkMfXSFR+CFq:riWnH+bF+UI3iWGVoWN3qL/lVVV63
TLSH
T1E724111E5F342722CDBD913668E744A35C6CF03F8B1366DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 267B
SHA256 eac7f32303355e2ad87f8980ce6d0073461f1e2aeb92d7f7ba8791ab5c217cbe
MD5 6219bf5a0f793f88b8909bd056bcdd63
SHA1 510320123c6714d35ee0e974983d8239a386b3ef
SHA512 c91a3a0f50a2aaf78d61dcb4648c814c9e3106c14c2aebf94ab80c7191af227e57f8588c057d4cfb2109a3de9ab37f41078ba88f68b20f5bc5c0e037afee0703
TLSH
T18FD05EFFDECAD47EBA0189601326B428E70B0C3B39A4AFD8E16073452D8923C3018511
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 229c234c488eff60fdc8c50357d04030c9a5d3e53f1a793b58a68e004adf17ba
MD5 e302d6fbf6523b20431ccfcb002db8d4
SHA1 2917ac3e68a8117daa41719f43f1c449455dab41
SHA512 81c5c0f9bb1a05ca730a81f015feb25830a83d635c3a91d77758d4e45c54166fa0a8e1a1df8167ea415424c1f77af462ac0d3c62a518d8f2be7ad1f72d289acf
TLSH
T15EE0D8E599CFD12A668C64D74334770CC3B1385EEB892E467B459D8CB902108E7C61C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 d88ab2ebe82fc8095531e41b35add23427223b809aa4c8bd7b92b15561d93ddb
MD5 d69b06d93af50e3a87b52aa9a53b35bb
SHA1 4292836965f91f35878453e4ab6a6e4829791042
SHA512 b49d44ed329b9fbf2a7ff0c342c71d2812d268fb6d0cea5a0085545964f673bc90f37e2c710c1b63442233e68f37cc1b6e66af8f033bab374fd6b278138e1353
SSDEEP 48:Txk/LopFMaty423w/a9NUuTndtLwWoashKEHugWLs85NY7Mv0/8QoyDoPwH44Ks/:qDeMatha9BLt0pqY7fi4Ks/
TLSH
T183B2C86E5B306211D1F44A77DDE18C231A3F311E8763269AE85851B2AE6336FBE051B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 fa4b36f30c6c6b2851734b321c84d9593f05d47f1234679aaa8f33b2061dad6e
MD5 e95053390b8fc307599fdd61e3f2f4f6
SHA1 01954dc0d44c0055c66a74bce7097da6c8574a54
SHA512 55cd85755ec2d3d697a72e7afcf61049834088b19918548ee2481ea91163a9899d626500d4c4eced549eba50835f418fadbc0b84f06630de772aeefb2f4181f5
SSDEEP 192:DskFmMdzNaZ3lRFzbq2bY1+0r2J40t0HxxMS7Vw9iCSRgqeUlZG/:DskFmMdRaZ3lRFzbq2bY1+0r2J40t0Hs
TLSH
T14A026EF7C2E8C52ED82256F46715AE1BDD5D092847283C1A89D5DFCBE3E34B1E201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 36dafed275369bd6bf07efb524f347a6c813550ed493bbb0d84ca6c5a4fa1a3f
MD5 0561a63a8b269e848950277646c3ffbd
SHA1 e55e71564ae504853cadff5aac033f785b3fed99
SHA512 a8f48265007204cc53227046740af6e9e94d16436708759dbff1375101e270d281fcb99aac6cd164d915be5b6e7e3f768dd0ea03310c42758363b99aab58fe11
SSDEEP 192:DzB8D3ioNrZiS+YqUX2bY1+0r2J40t0HxxMS7Jtw9iCSRgqeUla:DzB8D3iwrZiS+YqUX2bY1+0r2J40t0HI
TLSH
T123027DF7C2D8C56ED82256F46715AE1BED1D092847283C1A89D5DFCBE3E34A1E301A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1024B
SHA256 66395e94011b113a55ec2c346711b7010b14a4d1a5021eb86e959e991ed81cde
MD5 6afcd0ddbacdeea748418a3a51b922cd
SHA1 90130f4a9e197e665a06f92d59e5b95ac2cf74fa
SHA512 c1de0d6288dbbcba63f4a8febbe0f226a91e15af8f43e412e847259f5233b5137bb724912a5e4038b7c66b1a7221c44ea8a0b44aee05322d2229760134fb41bc
TLSH
T1241150DFC97EA47B2078097B1C89B98415FDAD34228159F8D5A6C32CB0844F71703416
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 16c27aee65de572a6000fbd79e12cee4f9a768598c3fb4fbf02c6c3e39720511
MD5 3efe8ea2d24022a0d61da9b6b59fa4f5
SHA1 4946d19f2debf80924597b318eadd088ee80bc84
SHA512 4204ae0cb0841a787d8ed1b4be1aab59420cab22bc241162510d95374ead84f51f3a7f1657be1044f75fdfe23a423cfc0208874ea17b5758fee395dd80a899e2
SSDEEP 192:sxRsRmyM/jK1Ml89co/fws9WpVDmQZ2mRzoA8p98/g6+WNWAoH/Brk4BAQpeAgA8:sxRsYZo/fws9WvDmO2mMu/5w/p8
TLSH
T13972CA16A534597B8CDBD219F695BF63D6F90437A6905E44AAFCCA0C00E7BEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 a0bb57104320f0d255b4bd1e979e750719d8652421b4d277565331381f851d5e
MD5 8f61ecfe1bd928ab9015a92be33a3138
SHA1 ccbc56a0b668bba3ae10000f6f7871e444f4adbd
SHA512 37587c11de77c08cb651460f43c7929c2ff5fc02b6cfe5133b6a00ac74d0223aab89eb772f3d1983245014c236b20263ea7e548cf3a2d3589ac612581d383717
SSDEEP 192:sxRsRmyM/jK1hl8QFo/fwsjIoWpVPWPQZ28VeRzoA8pHS8/g6+WNWAoH/Brk4BAQ:sxRsVVo/fwsNWvP8O28kMX/5w/BkA
TLSH
T1F282C916A534497B8CDBD619FA95BF63D7F91463A5905E44AAFCCA0C00E7BEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 363492c7e87b2ce97cdb095a10bfc3063aab7cd99ea09e839c90ba167d88806c
MD5 507465291970e3ab8555c6a6f367fbc9
SHA1 4f59aa05a13f03595b9a00c0fcbd9529364664d7
SHA512 9b2ed335e621cc8595652075b4e20544b09751e4b54bc514446159a2e2c2409405a0582067de9cd1a86bc445b61c406dbb001288dfec3866372b52bd2c99d772
SSDEEP 192:sxRsRmyM/jK1Ml8wco/fws0mQZ29zoA8p98/g6+WNBoH/Brk4BA4pTNGAIgDcJ:sxRsYCo/fws0mO2wu/5O/j8
TLSH
T14262D916A63859778CDBD219F695BF53D6F90433E6945E44AAFCCA0C00E7AEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2c94cd9100eaa1a37caffbdd46ca0d5ac39c04d7340b0056c766280a6c40894d
MD5 a2fda74516da45ec5bd16db694d01acc
SHA1 6947a6dc6ea6dbb972566d36cf8f5e3e64721d52
SHA512 a8204db150eb81b63a27b8acfd2a6338086f1049c7047539463ef737bd63be42fc864a3a7eef3e20069fc5ea6cb0aca98b33a0379745b7b97e42d2718e086877
SSDEEP 192:sxRTRmyM/jK1Ml8wco/fwsgmQZ29zoA8p98/g6+WNBoH/Brk4BA4pTNGAIgtJ:sxRTYCo/fwsgmO2wu/5O/j3
TLSH
T15F62DA16A63859778CDBD219F655BF53D6F90533E6945E44AAFCCA0C00E7AEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 ef6d42e20e76c75b6e035ab488dae8b6db6e3556cbff2ec1fb43f143994513f7
MD5 6b153a956bcf62ef8fdec1608e0f218b
SHA1 74ad9c0be059fb0237d332c7bf4b710a3f603d85
SHA512 bf59a2eacb5e320e6e78a315fe6ac41b53ad8fabd1b04e4c2190c4feec032fcb6fafaa4aca6644a8534498774cf23aa0bf5957f833cc76dc6f42cd9ecc19eed5
SSDEEP 768:Nmymm/7pLuL7YpWgvHf8v8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6LwLxgJroRLGbE:Nmymm5E7YpWgvHf8vu1jalLwNgiRLGfo
TLSH
T114E20E3B680CCB7E4F844A9DEC29BD9A6DD801CF5A98CD5447EA840C03C6BFB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 6dd8a2e50793d16b4383ef7fb285b8089750309daa3e20b31ca40748311cf02e
MD5 5430e6eaed4a06a616734a61eb081281
SHA1 afb8763411f895772648c05385a3c3d66fe642e0
SHA512 a98e30635aa07d06237a1dec24e4e2d62cc0ef23194bd4dbc7ed3e8f943ddc08f754710beeb542ef57e570c63ef5e8d3e8aa54dae327061ffa4820323ed70a2a
TLSH
T171E0DF9489CAD17A61ED26830238930882A4794FDBC83D867F898884658370AB292282
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 570d82169b13e02b0b0659ce1c019f15137da88a020233689c6a044541f61dda
MD5 ae0ee7b06cde3048a00e3d95470fc904
SHA1 88f4b143ae90f57046bf68e2b81c95fb4820aa00
SHA512 2a51d49f333155d94175994ac969f6f5cacd6ef8caff336c560327500cf8dcff69745b05148b3b3788afdefbc4dfb78cc53391f34c3024e3f0a7755121497652
TLSH
T16DB01244BF01561DD4C508314DF647A8A600F01238404903DC08BF109D095B92F81DD8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 29fb917baa7ec1721fe7a5b5629217558ee15d5897d2763725bf819134928ecf
MD5 db4c0253f1579ebad92af8f3a0166946
SHA1 6f543f664ad651c6f55e13c8352c03e4b9164d1e
SHA512 aee4af0888680c8caa753383e5bebb3f9126f11e9b9c1a9d10ece48832f975efebdf237eb3ef932ad7d523e5dd79f98c17ceafb5306ddd214c8e251cdb503a95
TLSH
T11DE0686849CEC62AE0CA34CB0334E30881A23806DBC92D423B089588B2022487387141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 178109dcd6bc31c65a7f073b518e22d7ccf6b1cd71cee1027789545908761f50
MD5 297dd16c683105cb06f608044afcc2d1
SHA1 95edeb4735b554460399bb2dc641e08b8820c70e
SHA512 56b0e294838a05ee2ac134838a3687e7b1b2e5fde35d75013dba6b8d49572044f82e80da7879368ed2ce90964346c5101853744a959f0077a48e4c15232ad719
TLSH
T1C7E026B489CACB39548865C74374AF4C83F0BC4F9BC93E8BB7094484B501219F3EA2C1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 467f11c95008207b19a3a2e0e6ff7bbf660274657236a61edacb2c437e437a93
MD5 b836452a6512441c00d6cb8f9a27ba11
SHA1 7e980b29b898b92e9bb6fd062148f02736b840fb
SHA512 03beba4c39a5852e7d5cf59b131424cbf1c28c2b73ad717103e57b35bc8c59fe4afb04614ab6b059fcff1107e8caa62b4f3a48f22c4caa7e39f3ff00659b669a
SSDEEP 24:KLLp0/IsNLPvx+jBgsIdLxKEOhsNx1q1hSYTiWyvSyXpqFKAQI5Kuho16SvILHEN:KcGIHKTK4jyNLI5KYo8EUInKtWM3yJR
TLSH
T141A10611343A2385387D2A4591A59A1FC241B0E3746AE43BFBFA70D61E7AE105EFC6CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 412e3c03929f02f28cededeb96f3ae00b853718c3e949cb400f7d059c040c3df
MD5 3bfdff89b82632334305f422f14f9d45
SHA1 8315b86f0b6adff8f02733fb22e1c2cdb8faf282
SHA512 8afa6d3e52635f0fd3dc0d168cb06c666b86a5b1f3393e2f0a02d585d4125efa18a2cbe6845ffbea0514621af8409408421614642cd57957e2f96b2ada44c856
SSDEEP 384:DNrRZyCSDnxTICYvMEhIKyll7svbFKfk7:xFZJSDnivkyI1l7svbF9
TLSH
T14844740A7B747001EDE6DD721CB080771E3C716E8F62A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 b657fc527a7d2089bf75d41a8c6b7bae394d109d9cc7b8200654abb1a1ff0cc6
MD5 9539a7aa509135d6bba8cb595861bfd0
SHA1 ff34425aeb554c519381c34dab792216a1fb7467
SHA512 77820a07dc26a43629ee33574f114d7e192c9b61ee6d6e4486edbbdf77cb10f08898a56d1a38462be6ae0ce6e4a3caf394bbb0c3d5b8b34c5df1bf87cd42e55f
SSDEEP 192:aQhIIIobYMIMyFFYcY4BOylAs0l8TEusSu/:aQhIIIobYMIMqBmyWseCs
TLSH
T12E42865A2E021B77C18E5BB7136286655BDA8C850176222D325A2C0F8FF3FA747C52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 f4273b3028b52fb472cde8ea709f814704109c8939ab43c9040e24feffb96920
MD5 996a3db05264d388eef00712b106484c
SHA1 fbe9e210fed757a0931c299d9eeb09b9e76c9cff
SHA512 5ceadd9288425217adf8f6653279f32c41a50a254ed9f2a9133c88ff0acb19f315d4cc349bab3d23addbaab3c1b52e00d106246e6b5cf119cb29a172c9bf997c
TLSH
T183E02694FCCAC16EA49924E712347708C3823C4FEF882D8B7F01C4C8B402329B3C6282
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9bc66727282dbe036b630308e95b8dbbddbdf2353539b4147c038c18ee8c5947
MD5 d53f9cf07aa211f2a7b676e6798be1bd
SHA1 c5bc900c6ddf1938f47e038838d2452c7140f30f
SHA512 9e3d0d14bb2df648890b1e4cfcf3e6937d7e7d2e5d6153df019a8c23f920670f868c70812d6c740aa3218d3f2282470d2ac5ead7f36bf73a4a51c18d3a29b2d2
TLSH
T1CE212659F330C508D54A823E50BE87660338E8538FBCED0F54BA20393E75B451E8B6E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 1e5a925161111b3a82439def9af1352663f95a16d578a10463ecd5b3309cb6d7
MD5 63f4958953b16e245263153ca06cd66b
SHA1 02f2965c3fae7d5880b46022a7e16ce7cb1195cf
SHA512 ae87eb3362a523b9161f7cf95b0ca4928f338dcd7eb2320c9f1dd2aea7d8436f8e4d9f100c0e32bfea05501953852b06da6601e9f303caa2e206c2f39898a7ec
TLSH
T192E04858ACC6D55FA4A525E30274D348D2933C4BEF952E4A7F458888794135B739A142
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a88e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a88e8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 1bf326f1199e10d5518a9d8f935ce7462dfefe1a45efe52171f893663ac911f3
MD5 397b3f9c8342a3de92adfa370ef48389
SHA1 430e162fffdf7cc669e0a8efec0c9da4272bfdeb
SHA512 664b6b159b74e8dbe8e1df8dce1f82218a76649ba00ef65d9a2e0c708e8b20196d791364223de492de477aa71e6f8230c2e0602a9f077dc946385922e0884c01
SSDEEP 3:MsEllllkEthXllkl2zEflWKlll:/M/xT02zm
TLSH
T13A4404447FC00515C54010704073C37013F0D5104511575334D10C375CC75400C14414
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 e2c3ad53edfeb74421f2ead40eb2e4f9d28391cfe99d7185e0f70d25b8f8b047
MD5 737d66e534b093f4fccd54ced8aa71e3
SHA1 30d280522390bde97a78a162ce9789e0a266aa0e
SHA512 2fcc0c48ec56b8f3a039fffee64e014c286ec963c1bd4f0a4ebe205954d307dcff53874bc7e646c554a2e7db9037c32edc2e09458303a6a96c4f5bf090099688
SSDEEP 768:Rj+9e3qRfygf+eIf+Da6A7NpespIRM0UmkTziwjgzSpEKsQgw8+0pvG:M9e3UfHfQfqiQsZ0UmYJEKfgw8dvG
TLSH
T1DB139E7EDC219E7F48EDB7482A0E361A1DA00233C1F46A48DBE95F0DC1B659CF74A51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 13c3c1b30f8e128121f3481e409a08f079ac891aa198f1d2fc3e1b350a1a465d
MD5 32bf347c8e0bdaf37d5451c07ce21230
SHA1 a8cefb629ecf6590438d497d72d724444ec199e3
SHA512 c43e6687d72a1b1b71f7b0b21aecc6ffc771d89911142144103dd22ae8f866c45d81788e09cca15d3ca1fe306cfe147e3e5edb3c474e6fdc3010f9b9ed60f3c1
SSDEEP 768:vj+9e3lRfygf+eIf+Da2A7NpespIRM0UmkTziwjgzSX8+0pvG:C9e37fHfQfqIQsZ0UmY38dvG
TLSH
T1C2F2AF3294219EA74DF9E6893507378B6EF0126394C42F84DDE99F0D44876AC2B4FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 afb30faba82f97fc33d7b1c350ac767a550391c0cd12e0a28bb1c0ad5fdda11f
MD5 94f62029ab7472dbe9452868746c9871
SHA1 3372c11c284a468e47f4a637eb0a5810c651fa57
SHA512 a47126aa123d33da5a1a9764cc3c11c018669bcabe9aee44704f7067ad677c38da497dd3b4b4ce6db031b7c2c1703fe734432ee4dc243d5e9cec8f71e2653a0e
SSDEEP 768:3jaeqD4MlshiLdMmf3bUfygf+eAA7NpespIRM0UmkTziwjgzGUnApXLPQTU:3qcjhIdMo3QfHf9QsZ0UmYMnKXD
TLSH
T13D03BF3698604EB78CB6E68A364776576FB00253C2C43BC8CCEE6E0D42875DD570796B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 866fbdf8284c45696d37cd1f1943f73ee121bfaf3813d7a070f21040dabd2f00
MD5 70ed7f45782932c00f75faf9e09fa978
SHA1 a8bb80c7f1c89ce7dcc08c8a8bfc70e36192e38f
SHA512 4b15828deef48fdfa6f1ac964bff9fb7153adfb8363a01666e9ef4843751b34ff953a776773f88181189e186bbc4b5bdecfa34026a25e6f3cf9d035505e78ed3
SSDEEP 768:wFej+9dgwg+Vcfygf+eIf+Da1A7NpespIRM0UmkTziwjgz5eC97E8+0EvX:K9dyfHfQfqhQsZ0UmYdOE8QvX
TLSH
T160237D3ADC10CE7F58EEB789660D3A0A5DE00233C1A8A9C8DBD81F4C80A659CF74BD55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 232df291ac8b9da8fca4dcb8490f84a1a4b6ebd97a3a7bdb2c79365c47cd45ed
MD5 6d04577a7b16d3960011ec397d603c83
SHA1 9d1565e9422008a5962b71b9d8933b28d617403e
SHA512 373d1833fb4ac915e21aa864759032a16970d236998606a48cab1ec7b4781089975bd77e5705de3ec067452f7aaaea780707883c98dc99f084c78ba7f1da2a7c
SSDEEP 3:MsEllllkEthXllkl2zEflpu:/M/xT02z
TLSH
T10A4402047F820819C5441030406283601370D5100512974324920C2A5CC69440C10004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

846bad08-bcec-44de-9b52-12ada60d40ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\846bad08-bcec-44de-9b52-12ada60d40ad.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1216_983982405\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads