hxxp://your_ip[:]8080/c2rlhtvh

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
43s
max time network
44s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/06/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://your_ip:8080/c2rlhtvh
Sample260621-sshcqady7q

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2028	msedge.exe
1696	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265290106422578"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-958335860-2021930596-4099878453-1000\{A8E50704-275E-43D2-BB4E-6AC1A14591EB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-958335860-2021930596-4099878453-1000\{B9CB1755-0B19-41E2-AA2F-75F95412A6A6}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 6112 wrote to memory of 6116	6112	msedge.exe	89
PID 6112 wrote to memory of 2028	6112	msedge.exe	90
PID 6112 wrote to memory of 5928	6112	msedge.exe	92
PID 6112 wrote to memory of 5928	6112	msedge.exe	92
PID 6112 wrote to memory of 1876	6112	msedge.exe	91
PID 6112 wrote to memory of 1876	6112	msedge.exe	91
PID 6112 wrote to memory of 1876	6112	msedge.exe	91
PID 6112 wrote to memory of 2092	6112	msedge.exe	93
PID 6112 wrote to memory of 2092	6112	msedge.exe	93
PID 6112 wrote to memory of 2092	6112	msedge.exe	93
PID 6112 wrote to memory of 2072	6112	msedge.exe	94
PID 6112 wrote to memory of 2072	6112	msedge.exe	94
PID 6112 wrote to memory of 2072	6112	msedge.exe	94
PID 6112 wrote to memory of 2396	6112	msedge.exe	96
PID 6112 wrote to memory of 2396	6112	msedge.exe	96
PID 6112 wrote to memory of 2396	6112	msedge.exe	96
PID 6112 wrote to memory of 6476	6112	msedge.exe	97
PID 6112 wrote to memory of 6476	6112	msedge.exe	97
PID 6112 wrote to memory of 6476	6112	msedge.exe	97
PID 6112 wrote to memory of 1880	6112	msedge.exe	99
PID 6112 wrote to memory of 1168	6112	msedge.exe	100
PID 6112 wrote to memory of 1056	6112	msedge.exe	101
PID 6112 wrote to memory of 4588	6112	msedge.exe	102
PID 6112 wrote to memory of 1168	6112	msedge.exe	100
PID 6112 wrote to memory of 1056	6112	msedge.exe	101
PID 6112 wrote to memory of 4588	6112	msedge.exe	102
PID 6112 wrote to memory of 4588	6112	msedge.exe	102
PID 6112 wrote to memory of 4820	6112	msedge.exe	105
PID 6112 wrote to memory of 4820	6112	msedge.exe	105
PID 6112 wrote to memory of 4820	6112	msedge.exe	105
PID 6112 wrote to memory of 6560	6112	msedge.exe	107
PID 6112 wrote to memory of 6876	6112	msedge.exe	108
PID 6112 wrote to memory of 5864	6112	msedge.exe	109
PID 6112 wrote to memory of 2908	6112	msedge.exe	110
PID 6112 wrote to memory of 2908	6112	msedge.exe	110
PID 6112 wrote to memory of 2908	6112	msedge.exe	110
PID 6112 wrote to memory of 6180	6112	msedge.exe	111
PID 6180 wrote to memory of 1732	6180	msedge.exe	112
PID 6180 wrote to memory of 6404	6180	msedge.exe	113
PID 6180 wrote to memory of 1696	6180	msedge.exe	114
PID 6180 wrote to memory of 6404	6180	msedge.exe	113
PID 6180 wrote to memory of 6404	6180	msedge.exe	113
PID 6180 wrote to memory of 3012	6180	msedge.exe	115
PID 6180 wrote to memory of 3012	6180	msedge.exe	115
PID 6180 wrote to memory of 1248	6180	msedge.exe	118
PID 6180 wrote to memory of 6604	6180	msedge.exe	119
PID 6180 wrote to memory of 6604	6180	msedge.exe	119
PID 6180 wrote to memory of 4816	6180	msedge.exe	120
PID 6180 wrote to memory of 4816	6180	msedge.exe	120
PID 6180 wrote to memory of 4808	6180	msedge.exe	121
PID 6180 wrote to memory of 4808	6180	msedge.exe	121
PID 6180 wrote to memory of 6744	6180	msedge.exe	122
PID 6180 wrote to memory of 6744	6180	msedge.exe	122
PID 6180 wrote to memory of 5128	6180	msedge.exe	123
PID 6180 wrote to memory of 5128	6180	msedge.exe	123
PID 6180 wrote to memory of 3864	6180	msedge.exe	124
PID 6180 wrote to memory of 3864	6180	msedge.exe	124
PID 6180 wrote to memory of 1564	6180	msedge.exe	125
PID 6180 wrote to memory of 1564	6180	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://your_ip:8080/c2rlhtvh
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffcf549c188,0x7ffcf549c194,0x7ffcf549c1a0
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,16761904196913952586,18325860434411498295,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,7643290996664794559,1927874623727559799,262144 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,4461917233405172126,5124940839507251895,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:13
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,3441565259277669745,3170661067972790041,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,49712028010416124,6027303438404333223,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5080,i,17801745272882492921,12180150154829447821,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5276,i,11424668377753487486,1819878163252143508,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,16164762840364027730,10856607389781635035,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,16164762840364027730,10856607389781635035,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5129575175470635661,17616663189159913899,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,11752209850422276692,6786140100418661990,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5976,i,17993318854338484304,4665625245474771697,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4780,i,4840289608693742463,11010669177620499374,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,10424786367098060547,3075206394952835475,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:6560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,14455293477309435991,7842018264676387641,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
  2⤵
  PID:6876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15041560427795768776,10490475702560020682,524288 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=2808,i,10541981187254586905,16595732454832705281,2097152 --field-trial-handle=2424,i,3525325009457160384,7864868179377586638,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:6180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffcf549c188,0x7ffcf549c194,0x7ffcf549c1a0
    3⤵
    PID:1732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,12379779457031757242,14813609166595275498,262144 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
    3⤵
    PID:6404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,5217870878397506795,5091339123717793703,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,18172193190333475734,81106081159998209,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:13
    3⤵
    PID:3012
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,3162371795841677595,1101805115888211670,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:2152
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,3162371795841677595,1101805115888211670,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
    3⤵
    PID:1248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,10830335285706101035,9169157958759618157,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
    3⤵
    PID:6604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,2390855358843283337,2206845131998211490,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
    3⤵
    PID:4816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,8835894308852640124,16728653067749268475,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:14
    3⤵
    PID:4808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,17148295674557153242,14369693759739972649,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
    3⤵
    PID:6744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,9492833351170503875,2714487628426313186,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,2044593840747847456,8140971384267816546,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:14
    3⤵
    PID:3864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,5205859412873180162,14978168218127494703,524288 --field-trial-handle=2260,i,7476756670837097742,18135467519041330155,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
    3⤵
    PID:1564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:52

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 19509664097c265b613b84702dd83a5bf5de055759de5b566057524c40ef7e6a
MD5 21b7bb74a7a973f055e2b6a521d9b7cb
SHA1 3d70b3b2cde84afbf3f8734366a34038d4e9a9d8
SHA512 c0e322927c0dd573b4065c0af844b7689ba9ed346bc20367531c7f58dfc0db9d330f64bb479ece7c9e93e6ef8165c09293c33482618cb351288c8e942ef968f0
TLSH
T109D0C03136146102C21A22B06C00631C605D82123192C10774E1E00ECC9FA60B7C6503
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2716a587c42031ec82a73eb3d7f0f50e7c82031bce419117cf765d67d60b7918
MD5 ba92cc3dc6e30f49cb7b6847b1168a78
SHA1 9c1194708cfd371f13a1d3188a3812a051a94a4d
SHA512 7871ecbb565c232c7a673fdb48f85d2a48440550faf506a23033bf742b10e250bc19be3f77e250c16ed32d0c412eb760c9fabed82cf68cabbf53b5afa1f7d53c
TLSH
T106D02331393575D2C23D22B15C105318655D43537392C20B75D1D40ECCBF590BAC6ED3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bf138cde5ad5a665ba69561b11c0c0e4b84b343290532581a491f8cd19dd70c3
MD5 70984f17e2aaca85e5879e8659b48f77
SHA1 cbc156e7f3c51363e06e038652aff2ca85ce5a04
SHA512 d9c0d52bee502d1e584ca5fa8217d16c67b57af51849c642364225afe3f61a36e1590faadf4e0b229d18a0fb0c5912f2780db058b0dc8bb9f2f712e5343a92a5
TLSH
T1F7D0233032149441C30E31F21C00634C714A43423462D32B75D0D04DCCABA90B7C5653
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67917adecc7edb921c8b870c4048ad1a9e3d9c6e537afb5daf4a2ce9ad298033
MD5 6d14c9c070dab9f0a59c968366ca257f
SHA1 f37a703910ebdac58d3b75010e9fedf167c4139e
SHA512 e8e5194a7798ba370b8aef738f3d9c0a183316d14d986e5290742ba90be0e022eb08c834546359128a22e82c61c2a41874e46760d7ec543e87bb91906be704b4
TLSH
T1C8D0233032149441C30E31B25C00638C714A43423461D32B71D0804DCCABA9077C5653
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 746bc37bae33425abb5bc7da5e2507e1e5202ec8666be82b7cee831339c7071c
MD5 58705de883a96fd5d96ded9cdfe67fc6
SHA1 3d2f01d4e926df5bebf6755636b301693cc763a0
SHA512 2e6b1cb6804cd9c21af96003c1bd298031c1a29df01873076a5b84d226d8b02e906f63bf163a448ada1bc7d729e5e5db240131416828fbac45b6390917277cea
TLSH
T1D4E02BB5CC65EC3708FD175814540B86D65403477650958B763ED2084FB153A5645C2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 b3a344d12b82677c8fece3cda64a53101de86a0b1cd830f9c10c2d9d57b0781f
MD5 4a47e285cd72a09ac669dddf222c415a
SHA1 c58807733ae340bad3b8b33029c4359d79161e82
SHA512 b04b09f37a2606d45ed4ddb4d6e8d1cb4b89051cb24f41b410790518e9d5cca3370125ebb6e0826547f42493d4193537d20a4cd65377a3d9b982f1cdbeddca8d
SSDEEP 384:2oX4WPX4Jn/ty30OceVtG8JI6MTgV6Fde0nE0+jwHj7UPfncfT:2oXtvulyEXeVtNt+dxEn+UPq
TLSH
T17A13D8BDB6606D93CACA063C191F5A35BB71CF20C1DA4923437A31BDF78ABCA495E504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 58b450b49eb195ae8070599d653c53e049e33e6a5abde42379249d917a09883b
MD5 8ae9ed001ca73966e0f4e8baca4e122a
SHA1 38e17dda96749d822babdd7038452fbb3b4f3857
SHA512 91e0769c718573b49e6b4cd9fa2c34d12dc1daf89671957410ad1fbf47acf95f4057b13909dfcfb2459962b3aeb39396bd046ce12bfa6485a3b8935d72536605
SSDEEP 3072:7QL/jL/bm3cL/1L/xL//CgDtx80zr5HxaQ7aF6eaqTUGp:7QL/jL/UcL/1L/xL//CgDLzr5YaKUU
TLSH
T158B4C6F71911A00ACFAC42F696173E3DD17B424D6CD1F9EAD5380C852929F33A6B9E84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 351ce227f0597e2bc07be415d896fce23026633abdf97df216eaf1d91a9e070b
MD5 83684ee3e77583f4def0807c67f1bf30
SHA1 9aed801e9d02e46c91e6f9ac1fa3a7d8ba05fded
SHA512 df93eed9e5cea44c9ea12be95fa3eead2f6a3a281cb20d5a7eb62c10a2364e0619a767ac06af94dae6ccc329e5b03d502f46a86bef9a8f507a3fcdd5e10bd3cc
SSDEEP 6144:pQcdCvGvVRQqg5rpuQZmWbOXScr/lsPa:pQBvSG5MQZjm/lMa
TLSH
T1C0255AEECB281C92CA6B8B74B0E0D9077E712083FA4CD0D39944C5D997D6B8575E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 9d3ac91b20f9c7726a9d2c969e411e9ba7013bc5852f503ee0183a655e108856
MD5 47a9ba29e231253d5e7ed718686cadc9
SHA1 5d8dec52b465504f06d232e540c5e5fa3a6baccd
SHA512 d3b63b7dd0c3258fe815d3323272808270bc248e2f057f737093849f90315a263441125fcef597b1cb9773bf095d513418305ba3afbcf621bf77348cbfba6cf2
SSDEEP 24576:06YwGqqYSY0OkZVZtJQuDtbpz1yvTbsKnJ+rmSViN:06d1rSe0QuDtVzc7dwiyi
TLSH
T1E7865CEECA785883CD63AA30B4F0E8577C7413D3F994C1D6C858C584027B7C5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0e23d84e98d2a4f66341854746152debd55feb4b8ccf199517b80330737499f4
MD5 eb062a4027df09c342af70cceede78f6
SHA1 5901fdba4d0eb95b4483eb5fe341073563520550
SHA512 75e5bc46a0fd543b4ba3c4ab233c9ccde4be2e03b8f8b95668aa1eb1f4b98591642c5abf8b12bba701fa77f2239d1427daa34aadc181bfc442852e85cb970a87
SSDEEP 96:f/BJgjMQmM7MvfWmXgocHtuc1vA/zEV6pkEucqaOA3lnNiDpw/126NmpddhJPslf:f/BJgjMlMYvfXXgocHtuc1vA/zEcpkEp
TLSH
T195912CA4C405C96DCB3608BA82D0F8A13374D803550BEF3EDC9054BEFD5AB74709165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe591013.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591013.TMP
Size 3KB
SHA256 d274ea43bfcc5ae8a9d16d73207140eb4f157f319b9eedb08727756aff581748
MD5 ac421225debaa8a259e70f1ef56a03c2
SHA1 a03cae8dd03a6429a189818e9d6927d6837bbaba
SHA512 a8837ee296af5fc08219a3c63beff76b33ae23f9782ee653e6cdaffa8562f14759e3397f1b0dcc7ffac19ca37d48a1e521aa63221b0a1639e370a63d77363fa5
TLSH
T1E3613B61C845C96ECB36093C50E0E4B63774E913464BEF2EEC90547EBE4ABB170E194C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b634823b02cb659ee74cbeddde4affe800af37c1a735192e49da7d3603974f41
MD5 a32c38b9809a7cfbf74ed3ce12f529ce
SHA1 0bd83cdabad3be369ca19a81f9d8334222bfdf93
SHA512 d121dc8742b5dbfb8e645bff81cfa89ab454f89c1eb3d0170e670a56b40de1a89af91cc1d4b92f1cb701aeeb8243f03e73528e9e40ee1b4280a97544687efc09
SSDEEP 3:MsEllllkEthXllkl2zEklD:/M/xT02zn
TLSH
T1344404047FC05405D51511314473D3500370D5100D11574334510413DCC75401C40100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 a136763cb76a33e1d09c465255774d888765b16a40ff8be5272d60ad83f325db
MD5 2b3aa8557128e5f21254d8dc645db996
SHA1 80f306159bd4f1f468990bee70dea758a43d0ad3
SHA512 909196419513506f9f19e6409f78a35b24cb4c33b8f7a82bbf8928fb731f71a851f6c97834454ac04232ed8138b0ab5d9c39773679232c8103b86e87b9541126
TLSH
T10CE0D8A494C6C35D5F10F4C642F46748D284384BE6D76D071704DCC07A03501B355666
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 14f3882f3a84462c4c05fdd225cfccf723b35af5ecb9a9b50bffa6acf087e719
MD5 009f161b22f600c9296f60761521533a
SHA1 87cb6f6f3a92054ac1ad3f4253ceddb80747dd6b
SHA512 35b8d4c45f787d6be07fe1a01babf33e77fc336df1b79d14ab04ef73c4466ec82e799ed7036fa2d3ca34f59abb1f08bcddf164c7e247ef68ab88de9d6898f4b2
SSDEEP 48:TtD4jJ/0UC+lf5mWxApWx6m+tp+/it+/pp:hD4jJ/JIP1m+tpl+/pp
TLSH
T1F3E21E883E12F921C4ED737EA1C3C2E05EAC652D4A4871309638D977CC63562B88E28F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 3817c84bfd258af9a9abb3501c042ef7f7e5c57152e5802ebbd299fea57c00d4
MD5 8126f0085acdbe219b6e3f9d0e8f6b59
SHA1 f051420bd97e1e94267927f8c6e34f077b48ac70
SHA512 6ef148d0505c0ca4a02678d6dadeeb9ee1a39003871c06ff00c29016073204ff7835083b4775e6c5a976334c78a27d34cd75a430619ed35b6c3c369bcb95ce2d
TLSH
T1A5E0866444C9E339D5546DD38BF9738CC3DD344FAB8939161B0D98906505B46A69A2A0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 c2266b944fd25043a884db4e3ef37b9cdab7ff26944d94196e9d05fb877b4e81
MD5 030ad80363761b241761052b572c2757
SHA1 63db1d758e0b7c47c0e4307b617b72abafb26618
SHA512 630e42aa628ce85ed507ee0b6553c234d52aa8cf629343d84154e7a3a0de2d35329c8c29e35daca0c46c3637561f513f7c7054a7c7eda7a41dbccd8221191bc8
SSDEEP 48:uzBmw6QU1PzCVxFSNILRNdGN94V6KdaVxUK:6BCxaLRy4w4Cr
TLSH
T1E89282574F38B812E7951DBB366E2C31CD3FE05C6FA6DC96382054262CB884394715ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 6cbd4627221a9ff509a1ddb04254302c81db7cdb8d16ee754ea7c27803766a4a
MD5 0f3e9ffebf67c61c9648a36953363698
SHA1 af24ab67935f9fa683f9c567cbc1b21dc372301c
SHA512 20bdf82fc4bb13e61f6eb80944a395f555c95fb6d3f77e12c53a60145769496a5cd7c5ac996935e5037c73f4b5b143410995f35d00993cea5237f7cce2018537
SSDEEP 96:rig2tejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/ABcbbEOVpZf24JkMfXSFR+CFq:rigJH+bF+UI3iWGVoWN3qL/AkVVV63
TLSH
T17624100E5F342712CDBD917668EB45A35C6DF03FCB1366DA6C6114B4CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 12KB
SHA256 fbacd719c337a4bc50a837f8961349ee1a9b561ed524dd13001c60e1d890dc65
MD5 dc2a578e34c7ce085809af845f704e1c
SHA1 13a624e4b7bedda54e42a466535d2a02554be395
SHA512 bc18d907d1a0df3c1cfa54a987bb32c32ed396ef98dff2617a7b300d2a36f64b2334319cf7af83fe04d7f7cc0c7f5f85bd925a43cfbc4afd38d87d6cd4c820b2
SSDEEP 96:PohN8x6TBgQEMwDCeTNaoy/wa6I2+1BWirnlnsU8CNx5wk9cUP5Ur5md7WEMtW4/:Kyx2a/1OekHYAtY+TDJcgIAd6Vtv
TLSH
T189429116241EC41EC987E7B3136ABDA8DBB91C6B09985CC6D45C2F0878ED64B343DCAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 aa372e6e313e02740caeaf1d2d2a4a61df51c9f8be8322b236008f0608c2d5ec
MD5 e928e563c8d3d64b99584507cf8559c1
SHA1 d349e9cea73144f98444f5554e7195764b62b566
SHA512 ae6a23d6e39ffff29f5b0d1767c3263a8a1485bdc2d78c6e7d58a39e1fa8836b05d1326c8424296297938c7c6d9b9b9a003a1e285afa50b01537619c9a91d188
TLSH
T120E0D871C4CDC35A671420CB43F8770CC3A4340ED7896E159F58A854B805548AA812E2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 ae45366aace9c6c64e083c27fcddb405e3c07717ef1a4d26d392a1fb093fbf1d
MD5 2f83afcb06e9dcd70a96e37a0532b77f
SHA1 836b5713f37ccb9c1bb95fe187b30d0be6f3d2c0
SHA512 639ab2773996705ee92a8a58b93c1bb702a567599e9750182870b5710b2b942f47eec564232c89a9fc375256be3e6ca4edbcfd63ce971553e158f3f8aefb2135
SSDEEP 96:aDeMatha9LwmmGKkO627BzreKjxoXvxwlYCsEFRRZr5SVujpo8:aDLaTagGKvJx96nE5VIVu9d
TLSH
T15BB20A0D2B226001C7AEDB739CE99CA53CE48019A763E277154C31B94E796C7FE130E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f4c0c9204092c778df87f3718e493ce0ba3ab75d7eb7bff46343c3ec21d0704f
MD5 5609bc4b1e7f487fec99d721a03a6274
SHA1 5623448d4a0aafd29eb11394dddea166d154fc5a
SHA512 c7c965befb139ca6f33ee2f3bc88f12ca1e40d4bba03d7ffcdcdbe90d9aaad66c35d12814c9ecf3b7ef851af08f84a8811663497b18848f4fef5007a5ef3bae8
TLSH
T17941ADF3C3E4866D891196F0BB187E2BCE1D0914832C3D5AC9E4AF5B93E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 8f0705b54fa8ccf466c09654efae2fcdb4cf541476894c87e3a0ab313953e819
MD5 b46cdc349d1ab2115f3a4171a901cccd
SHA1 01ef455a5e5e6d765914c4367ef59dece37806f0
SHA512 f8838c5d1e1230d475f0654d61f1fdc95ac65356ea2a3174eac12c9d826ac1212a00751d4621d9ee235f15305a8403004b59957819f4b1b7b1febd76ce13d871
TLSH
T108E068D780BEF0B31029687A0B84FC86DE7DE832024094F0CBA983BCB0854B32A16026
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 bdea07ed67adda2855c2620a2d6c8be444a5fbee9bc99e9d44ec12fddc99b76c
MD5 195c1a189f1ed6f9a598f288dde3960e
SHA1 79bc7114d18da8d6c86f3616f7a717a5395b8bd7
SHA512 660304e98e78c9257acdbc68a287bfad7d88817f13587a308e7f57effc639c3a86f9dcce3c032a1e404312225cb6ff35ece844b42f01538fb23fc1435c24771d
SSDEEP 192:sxRWRRyMqZjK1Ml8wFx/fGsjUcZaczoA8p4K/g6+WN1how/Y/6pKYGzIgjRJ:sxRWCbx/fGsjUimj/5bd/B8jb
TLSH
T13C62D9166A38597BCCDBD219F6957F93D6F81573F2805E04AAFC8A0C04E6ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d9968486df35d33a9a82b1f1dc7efe7c80e12c8bd40bb43e3bd455bed1f4cbc2
MD5 b203b541c9a231da824069926423d455
SHA1 214de9dde44640b2ff2b73555a46872a16ac02ed
SHA512 253a80704fdd01e8f74dffe647d960fee9b7f9165cbbb71dfff28ad69407aad9c330b476f6f35c1fadbbc04c89cb2299334354c9a4c1390ce87a16908ec2a04c
SSDEEP 192:sxRWRRyMqZjK1Ml8wFx/fGsLUcZaczoA8p4K/g6+WN1how/Y/6pKYGzIgD0RJ:sxRWqbx/fGsLUimj/5bd/B8Qb
TLSH
T16862E91A6A345D7BCCDBD219F6957F93D6F81573A2845E04AAFC8A0C04E6ADC211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 a869cb65e8035466ff68e4155e28edaabf160526754137ff3f9311678b6c7794
MD5 e5cee7c48e8d49ad520817457212b248
SHA1 465156753f6baef5ca874c6fa4b28184571f8564
SHA512 04dab4c042098ad23b7093d86b4fa72e9831ca3155c86a041918795464ed222f6206095d5ef6553ad9d76f7db44d84fa4214f3dcb6a91e1e4b1e4416f30745c2
SSDEEP 192:sxRWRRyMqZjK1Ml8/5cB1x/fGstWpVkvcZa3oA8pgZJ5/g6+WNqlnspLll/Y/m6z:sxRWqym1x/fGstWvkvi30/5qR2/FyTu4
TLSH
T1BC82E9166524897BCCDBD609FA957F53D7F91423A6455F48AAFCCA0C04EBAEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 4688f92c2295627dd9696809af7049f5b937f1f18e001b34e0f3954de26bcb36
MD5 d10e9e9fe0ce5c6e16a0ea5a67382ee6
SHA1 8b1c9367d605db04ec4b43f01174e6ccd18ce6df
SHA512 02d8f5692f48d03aef1baf15a281adade336915f6cf3ba2aa37e6ecaad7a19f01d6ddde550485c4c8aa1a3d14a781cc5b1fa258b2580222b37499faee12fed88
SSDEEP 768:zEX1O9WgLLfzE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVrZwD/rooUvQ:zEX1O9WgLLfzEu1jaS2DsoUI
TLSH
T155C2FB2B640CCB7E4F840E9CEC29BED76DD802CB97984D5447EA894C03C67EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 3110e93e10ef43da06b871af8f376dad2cc5daf7a64139a84055400f0133ce21
MD5 ecfad83b3981548ec040761eec0d1fe9
SHA1 5595481132355f0ef4635f8f8aeb7bb4de2b5f66
SHA512 0f2e00c2fc47c1c6829c9dbcda61a135ded6911ec674a4af65905fd1ff5dc8aeef312a51c4944cede2a583fd6cdef78bb3822a2ec28b0389e7f6b739b72ad9c0
TLSH
T18BE0DFB585C8D37A629A60C302F5E30CD3A8B80FDAC87A062F18C8806E42B08B5931A1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 100B
SHA256 7710c07b49bad4cb35c11f31586561e1f46e6392674d24d87a50daa4a19ba32a
MD5 24d59511d0b76dd453d286db45fa3d62
SHA1 275cd289362482f01d62f5d295b46c23aa5627d1
SHA512 bdf04e04b1957b28e95e71704c45f51483b287cbc041e2af0ae21e13cd8ec662afbbea9d0c269ba1f41c6f99025fe32a02f70f77119c931ed3ed2182d41ce117
TLSH
T10AB012017705E05BC0044AF28594DF407B24F0010800070F8CD49F304E403A4EF942AD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 744d2004502a3eb366761dce376ce5a64fa3a9355a3758c4b36dffd199e578bd
MD5 b17fa372d1a224f9868adb0eab7bb0b0
SHA1 f1acd930b299dc0bcb0179364cdb04da01ef509f
SHA512 e3b493c7481ece39ec6204296d3d1763e6d1f2f3a91a53203dd4669cfd18d3a2bf09935a8147fdf3e57fe164446b3322345f181474de80d70f88586a70280a7a
TLSH
T1E8E0D870E5CAC72A678660E753F9F308C1B2F40EDADD29252F189C80A6067407283262
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 f841d6a8ef192ee2f96f3dc38affb3c5f5ce7f6e97dc051be515b7beaf04645c
MD5 2990f188c35b96c2cd5b1c70ffca699d
SHA1 cba783241b5be407b98eb38fa4777a1e7f3197db
SHA512 53c397addf1928411f2c2181a488aaace5f37098b6cdbd597a7a7d5ed3ec1117effd64637921dcad4eaeb0f8bf587db2f390880b4c9d046d003e98ac449fb10f
TLSH
T144E048B5C5C5D3796646A0C783F4AF0CC2A4F80EE7853A965B084C406901745B6655A2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 7741767f44dc5036ada25a374788868f1dfb7482eb9244091ec20d22855e32ed
MD5 950a22f15cb04683e64a98e41f254418
SHA1 ca078c72ceb2f26efefcd0ae088c431f7c92895f
SHA512 ce0ae19fe9250eb6442310919cc80b82226324454abc323eeea10d7ec8388d89a6dff88039e09ba9bc892348b81a3c6ff1bc26ecbf3c6f78d6908e0dad68f1ce
SSDEEP 768:83lTzBt/l8joMOimxiVwEQhoGhsM1OsBcxGNwqcj/J76:83lTzBt/l8joMOimxiVwEQhoGhsM1OsP
TLSH
T1C9C24451767E220038BE290CE1A5956F674230B3305AB63B7FBD60E51EA7E004EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9ac59ea0853c3a7906740d8cdda9ef9f44a5a198901fd6cea615e0a344f72b2e
MD5 c3406d79af8a44dddeab64ef69a6972f
SHA1 07f045b2437200b98d7c3351baeea931377739f5
SHA512 fe7b40b4660bf51e6eb2bbdfed1f18a1a407340d080b9c8257d6709ea585a0fa5fbf93826b92470d9441aea538dbf759f56ca86314ba0c2f5c3645ed8108c94e
SSDEEP 384:83lTzBt/l8joMOimxiVwEQhoGhsM1OsBcxGNwqcjZ:83lTzBt/l8joMOimxiVwEQhoGhsM1OsC
TLSH
T18FB256107A7E264038BE290CE1A5952F674130B3301AB63F7BBD60E51EA7E005EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 45b70bac52596ef682246247c541e155b55f6935c8d11d0834dae5f59302524d
MD5 9669446005b2069cfa2381da6b9b71b4
SHA1 7b55b5dfb8a52afea351a7cb71356d2a6385d43b
SHA512 de2d65367c3a880c9f199e5fe76e4942fb4e15ff59cdd77d408b92e17a02cb685f1c2834f21ab9eadced5fa9b3fdbc3df744c8b73e72468e659fd8d80966560f
SSDEEP 384:DNrRZyCSDnxTIC5L6hMEhIKyll7svbFKfk7:xFZJSDnimRyI1l7svbF9
TLSH
T10844740A7B747001EDE6D9725CB080771E3CB16D8F22A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 e8fc7191c5bbe770678dfd40cbb950eebebdcedf48e9a382b70cf134ac314315
MD5 fb1d8be7a929269fd580e9937d77d686
SHA1 8d0eea3ece6114b7a8c391f0447d089949776397
SHA512 eb3b670c6a3d596f64a05b01bf0b0fb4f6333a21ceb9bf42c24a0b3c9fbd2d177f9bf92338957daef799301ac10d6963d3f2ecb5c10b9b222980430d9f150d95
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBguVxvDEVxrW:DEtSyGhp22iS/FDYQ
TLSH
T1A952E09BAE343212DCF987715AD40AE1BE3A803D8FC1EA4354D610111FF4951931E5DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 2336b3c57557900292461bc3cb526439c7fcec6aaf17c1d7142a1fc4bfab3842
MD5 9c63542fc994fe474a934b8ed13ffe09
SHA1 52ae8fee2d7e26253a1a365ea40f28334ccd0541
SHA512 f9fa5b643330a6d0e7890a826a244b3c637c386a8308875d11fe287ca15e7cf595193ee3d6ac190b6757a661552c03905440d1edb4b0c1e91725cbec0ade1a33
SSDEEP 192:4QhIIIobYMIMyFFYcYSGO49Asqli0BCsYB7br:4QhIIIobYMIMqBN4OsAksu
TLSH
T16252831A2E051F3BC14E5FF7036687505BD9C886123B216E357A294F8DF3AA38AC51F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 053427c449656970b05e5ffac7ab686bbbcc6a42e790a8dac07e542dcf139af7
MD5 a82708835714af00674778539e5fec21
SHA1 bdd8a9615d1c004dfbd52753e0b5a9cfdaeb876a
SHA512 2900d38d1afa2805bbbfc11e6e161a2f39e7b4e2d66e92fec4805c7c8ff13babe73e391452fe6d7b88652201aad6eddb89bfc255b2da7717960e761bd512f8b2
TLSH
T16CE02660EAC8C36EA55470C702F49308C388784FEA9B294A1F01C488A803600B6871E1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 559ee9d8f2b88347e3434860aa1999bde2a2a280cbb7a17f17f1e5dcbbb5a207
MD5 187857ff5d4949104f3684ac4c355be5
SHA1 5f13894f42bbf46bd59eafb139f2efc02081d511
SHA512 cd8facbdd4399d016d0c0b007f92baddc7884b7b370535ee01dc7e9f7f8e69dc9362f716adc4eed47030155bca438a490a2658302f72b662d9cfdcaf4ca7dc11
TLSH
T1C731BB16F320C159E14AC77D946A9B350738E856DFBCEC0F847924366EA1B440E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 5d6ca1490c2c2809d5410f0debc9c618bfd69c4bc104ba871c955266bcfd5645
MD5 236254fabc7862955982f77a74b86258
SHA1 e50df53faca1ba2523b0d9b8a557b5e251515c04
SHA512 954b82c379e73549eb2a982564dfd9f0caac33679b9c704e53eebdc6a81a0c8e1e0b82a585878c3fcfaac0c8dbf122c968788cba52639aa8360215042a09d941
TLSH
T159E02625E8C8C3AF915434D703F4B34CC399380FEA992E1B1F04CC48B901A45BA9A5A1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 39d36f29be555b6a877e662cbaa4491811d2569cd8599966e9eb43e36d1df0ed
MD5 8c2240e9a3dd39487ecfbe5aaf0915ca
SHA1 5334255704531c79a26a608f12deb559a85a90bf
SHA512 2aaf1756d5a19e116945fd3018cdb7809a972087d49b00cff90b6699602018c2397366628ffe75a98508e69da47434f892ec91a727f0a62873b0f9109b12a204
SSDEEP 3:MsEllllkEthXllkl2zEBp+/:/M/xT02zg+
TLSH
T1AD4404057FC0C415C7013070C031C3500375D7103511D747747304537CC7D551C10041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 b3fd0ed40739731748f3d37a8a926079096af1e4e064cc1382756c2190a6b0cf
MD5 e00f40a29c7101792fa84a6aaa082d70
SHA1 48329d01804f743b968a281ff8d2cb4fdeb984cc
SHA512 c5d28902830f8ed5922a5c6c3f12345f9f7c36928905cf4981f471880e58ae1f1b90a536a6ad795267992f7a7d8575e291869242a7984d5f0a0f5a39c269ddab
SSDEEP 3:MsEllllkEthXllkl2zEfP:/M/xT02z
TLSH
T1A54404077FC0041DCF0010744131C3500775D71035115747745104537CC5D440C10041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9771215b22b1e7d10607b80d2dfe304f9cedc46f599bb3300de1297ce81bed74
MD5 5f37a2d1bbdf80b708b5a15110f63d5a
SHA1 38eac63a6df7728b6aa75baa4a97d6f7e731d771
SHA512 ea0b5bc356973cbbd60100382c53649997ba641960c1066ce614f5ce7f9063d5fb5efc5d7805822a12c7f8190b172de9fe8e0105dc072e075a4ca62e74b0a08b
SSDEEP 768:DF1j+9+jwg+qaVquGV0mzUUyrpofT4iB8v/:S9+Ae0SUfryfkPv/
TLSH
T1D9C22A36D864D96BADE78BD9B70976079EF001A3C5C86AD4DADC2E4C00DB1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 da0f358754d2648a6fffd07c3a3589af912517df587b8f9a4e510be899413a6c
MD5 0dd1d7a15f0a961d3e420ab3f1a0787e
SHA1 9a6fb62aa8c9b657a63f22e72792e04f2ee2bc17
SHA512 9d069906c2cc08132560d72c07b097865760d1b4a5eedbeb4796d62c988d40e64c2f88334ace25f9a52b449cdc96e3ccfb6d7982e56a729edd52f19583fc8847
SSDEEP 768:aF1j+9IZwgdq0xquGV0mzUUyrp9Ni+0ha4vr:/9IRe0SUfr9ig4vr
TLSH
T132C23A32DC64DAABADF65FC9B709765BAEE001A3C5D85AD8DAD82D4C00871DD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c2d49be9713d052d6d19f2c838c96b3800840f982474ed0b6f21390fa8e9e2ab
MD5 fe3554ba522eb015fc75f5425440cd39
SHA1 f6fb7d2f7851ed17a11571b4ec80e12e68549c5c
SHA512 a789b7fa311cedf4cee1669f721f8134aad8b4571caa3858df653ef3f1375aa6c1ba27937fa15a2618e255a67a930c786d866e48f257210c6d26472186b6ca4e
SSDEEP 768:OFcj+9cjwg+q2VquGV0mzUUyrpofT7j969iB8v/:e9c8e0SUfryfH09Pv/
TLSH
T125E2273ECC64CD7F98EEBB88A70D262699E40273C5B49998D7D81F0D80B659DF707806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 cdb5161769bb331ce65db54bc3079ce8128c434e84de8959022d728426302e44
MD5 b12f37351db599fafd40d65d544298bd
SHA1 6feef549f218c4d3c8ef6ca3b35f00fb6ff92430
SHA512 45ec82302048fdd32577579ea385d82b748eae2ad65c82ca8a4046fd4f5aac728ef1bb70459946a471f5853362b45b9c3a7b593a5285bef85daa745e4860138d
SSDEEP 3:MsEllllkEthXllkl2zEMl:/M/xT02z
TLSH
T14B4402057B800405C64051304021836503A6DA2055115747685104126CC96480C21042
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

7dfb1069-f93b-468d-bb52-7aa615371d89.tmp

Path C:\Users\Admin\AppData\Local\Temp\7dfb1069-f93b-468d-bb52-7aa615371d89.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 8edae242ee2110a4999bd7ee14e570d908a99f9bf7fa56e3387af04e5d5c9c2f
MD5 4868c797e11ba1c26b9a3d30abecdc79
SHA1 5a5221a5dd978fac1189f95f04c3f2e13ef349fb
SHA512 ca9748f62d30247d89d92dc9c9d96abd5e1e2d21c3e4fbdaa43bcd992e3400d7518c1d4a1a2055a0232a7c65a2258bb93c05eb08f914cbc8988ce64618085ac6
TLSH
T1685135E03576723F67C747C8A0664C842B61F184432EAB4CEE4A5834BD5CEE2A76E7C5
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6180_1378064630\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads