0ec896956ec647629a79f1312c2d54274353ebe087eaec9403cd3f0c8da50d69

Analysis

user interaction
yes
max time kernel
40s
max time network
44s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/06/2026, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 25KB
Sample260622-ypnm8agt21
SHA256 0ec896956ec647629a79f1312c2d54274353ebe087eaec9403cd3f0c8da50d69
MD5 228901fdee4aaa0b6f4d7bd4b1d5d4c0
SHA1 8bfac9ee923a362ff658fc748b4eb9fe7c5dfa28
SHA512 081185a7f89dc33ce88de6daf60b6959ed53c258dcf774bb90361a7eaffe09fcd43d4b05a206760e177009b6c6fe6ad027e411dd94be5e50f0fa8026b5182585
SSDEEP 768:HCISTO6XA3OJpQPWaZEy/UlfiXQYMm32MhLbWOXIitymsJAQqiL:iRJKrLsViXwq5WH
TLSH
T123B2B873B45CD937155BAECC223F5F26E0DBC227C2194694A1BCC5984BDBC316A8B583
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1880	msedge.exe
2032	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266318971631106"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{C66535BD-CA35-4BAB-8C39-E90B83899065}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe
4832	msedge.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4832 wrote to memory of 3884	4832	msedge.exe	88
PID 4832 wrote to memory of 4632	4832	msedge.exe	89
PID 4832 wrote to memory of 1880	4832	msedge.exe	90
PID 4832 wrote to memory of 4632	4832	msedge.exe	89
PID 4832 wrote to memory of 4632	4832	msedge.exe	89
PID 4832 wrote to memory of 4548	4832	msedge.exe	92
PID 4832 wrote to memory of 4548	4832	msedge.exe	92
PID 4832 wrote to memory of 5312	4832	msedge.exe	93
PID 4832 wrote to memory of 5312	4832	msedge.exe	93
PID 4832 wrote to memory of 5312	4832	msedge.exe	93
PID 4832 wrote to memory of 4784	4832	msedge.exe	94
PID 4832 wrote to memory of 4784	4832	msedge.exe	94
PID 4832 wrote to memory of 4784	4832	msedge.exe	94
PID 4832 wrote to memory of 2008	4832	msedge.exe	95
PID 4832 wrote to memory of 2912	4832	msedge.exe	96
PID 4832 wrote to memory of 2008	4832	msedge.exe	95
PID 4832 wrote to memory of 2008	4832	msedge.exe	95
PID 4832 wrote to memory of 2912	4832	msedge.exe	96
PID 4832 wrote to memory of 2912	4832	msedge.exe	96
PID 4832 wrote to memory of 2028	4832	msedge.exe	98
PID 4832 wrote to memory of 5640	4832	msedge.exe	99
PID 4832 wrote to memory of 2028	4832	msedge.exe	98
PID 4832 wrote to memory of 5640	4832	msedge.exe	99
PID 4832 wrote to memory of 3880	4832	msedge.exe	101
PID 4832 wrote to memory of 2580	4832	msedge.exe	105
PID 4832 wrote to memory of 4244	4832	msedge.exe	106
PID 4832 wrote to memory of 2892	4832	msedge.exe	107
PID 4832 wrote to memory of 2608	4832	msedge.exe	108
PID 2608 wrote to memory of 816	2608	msedge.exe	109

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffd4f5ec188,0x7ffd4f5ec194,0x7ffd4f5ec1a0
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7569723862235828047,16241342780112018402,262144 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,5560585278568870599,4152161022141248791,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,13334818497965236478,7341084222109584803,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:13
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,1257676846299234849,1377962611379466797,2097152 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16540581962016000701,7899822924479752372,2097152 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,17472522806227776120,9436325803462559599,2097152 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,16579310182997459568,4263278005220388584,2097152 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:9
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,17813023552038252555,626690429828703467,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,8321950187729873341,11446640102446328187,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,17672312734298262593,15771312089307517149,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,17672312734298262593,15771312089307517149,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,6445190064533074578,14081462427982254024,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,6537599887377505123,13336693478864528088,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,17554047342845607721,8918337697656001366,524288 --field-trial-handle=3016,i,3487017845233709713,15509748975467321804,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:2608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffd4f5ec188,0x7ffd4f5ec194,0x7ffd4f5ec1a0
    3⤵
    PID:816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,2859702440810034217,10025281276893821641,262144 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
    3⤵
    PID:2528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,16113718864785495212,6319688111769242772,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,16484553622964737765,10729887758234742757,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:13
    3⤵
    PID:5672
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,3293190789766792081,15130304467024858901,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
    3⤵
    PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,3293190789766792081,15130304467024858901,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:14
    3⤵
    PID:2984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,14086577300281910903,7672983712989017905,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:2580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,4054690159118574904,9230989480437703735,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,9124616512082575505,8558066714955621086,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
    3⤵
    PID:620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,6704902387344312883,5705013104525262759,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
    3⤵
    PID:1692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,17720567351432361983,12433210225717850474,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
    3⤵
    PID:1396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,13417786089956050808,4549828751816663818,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
    3⤵
    PID:3744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,11078078691225424784,8317643247416742612,524288 --field-trial-handle=2452,i,5549343208725320489,13402243122123248190,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
    3⤵
    PID:804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6104

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10812c5a-5af8-4fc1-bd6f-fbcae2af4114.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10812c5a-5af8-4fc1-bd6f-fbcae2af4114.tmp
Size 35KB
SHA256 9430250fccbf09904717219543769a1406dabe231aaf32e322686abf12fcfcd0
MD5 f9c41fc0b90cd3f4562f006a7954ef00
SHA1 9175904a40f234a9832b12079c99ee1fa5052cb1
SHA512 658bdc7fa9c43a8e3ff11418be71e49fce317deacc58e8cb49835e3c62121e1ef97acd1a308154cbf4c6dd30ea66fa9ee32848cfcd46755d4c1ac48399d4cc4c
SSDEEP 768:+j+9n3hiPfcO1fBfoV5R4HTytYYqgHvPw8dxPDvp:99n3ofBfBfGWTwJpHDvp
TLSH
T161F2BF71E8A49C671DE1C2997212374B6EF89227D3C42A50D9DC6F0D0ACBADE174BC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35a098a6875f10e14e08bfb595d517cd7953bdedb921bfc380276e769daf61d8
MD5 35991f3c52f2815322e52e8cfd2b691b
SHA1 f76c5d8e4bcc176fb368fc3551f808c6f1303285
SHA512 07d664648fa09dcc174e2a59810d9ac038decd9234074ca6d32c340888a31964d5731a720f290756e7af52670186004965e3fb9e88447055c8b4161d5596bc29
TLSH
T183D023323D2A79D1D12520B595104274572F49937752D20F7555480EDC75490A3C6ED7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ed7705b6a42af248d127d5d4533d0801b2e299b4debe734b06a7d1f5d8ce58d
MD5 411d5bb111c19cdc1b73534a2e98ef3a
SHA1 00b5d245e8235091b1b76bb4a70773f1d2a8bfe9
SHA512 5c78f6cc8e04237eb31e20c749eacb7823dc5df3d710d78d8f379b0d6a5457a867bb9edde082cec24a0a3a6cba7b2f5af7c6a03112a82aede3dc71c40304fe7c
TLSH
T1FDD0A7623D197C00C50130B4681042645727C94BB651D14B7665840AEC064A0E7C9593
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bb892863c122beffe9b5d6c71de8e65e198e013a09b95df08d7e2d067608ca5b
MD5 e70df1faa5f012ff2ddbc022dbec065b
SHA1 bb7242cf31b4a18d01ebc4d4a49b6f814abe969c
SHA512 8e22afcefa5f23dcd5c13cc7e837276be06b35f2753f0e85c1b2d58a219b16ca96bf110b7707417178531689b391967989e466bce6ca55f257f00358386729a1
TLSH
T12DD0A7623D197C00C51130B4681042745717C94B6651D14B7665840AEC064A0E7C95C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 70ec5ee3a3537070d59658773f87ba5d45257c1ffef3b75c52f462882bf7fd3b
MD5 61ba56b430af0a438ffab258ed7aebc8
SHA1 9f8ba8e21b103703320a2fb2eacf017ea5d065f6
SHA512 1b3340b045dbd3ce696ec7f3a85a48ab967bdceaf9054193b24f3a10382194c242a85338617427500440c0b3ddf4837afb1fe1a90a07620f34b0e5c378ab7f27
TLSH
T105E02BBACD219C3709FE0B1C6060074AEB501367AB50491F3A3C85088FF06BB428196D
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3e4585c2009333a5dfb5e3126ce36e7b7e91062f12c6e3b9ea15408cfb19c1cc
MD5 02fdc5cb48311396c3af76e5010c24a9
SHA1 cff76c46947a7b3191b65def784fbd9c587c087f
SHA512 d0bdf341d2f7c7dd7664ffa416d6865ffc95840d0ed5ae7bb8210aae48d90df8a196fe3ebcdd7f232866d7c9cf7fdc32e4d8f715a196ccde8419b66297bb2a82
SSDEEP 192:4aY5AU/gaezqlrCcvfF/2CFJsgrRozEepm4Q7jYMtQQ+ZIqEz:4aY5TjeorvfF3FJsgr6wIQ7j9KZg
TLSH
T1F613E77E32C15D5AC3EA853E911F9F326B7BC3E4CDC116A71B3976AA4A51B112E0F600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1b77854bd98be4cdf1842435f9dfe1e644368458317e5c39294a90733016990c
MD5 914780d4fb31bc6c683df5ee0c5e9639
SHA1 5923371ee1303c15a56ce6c749b4d5be977f1954
SHA512 de7b4e1b9fd788973b01f29b13618f3c899823a6aca22110d51884a0c6240a0ee00d6a5712f09de52cb122125221077b48305161b0e48f48a1a660ea4062c308
SSDEEP 1536:spHfqL/OaL/Y+rfT7zna7vEIa3ErfI0MIoR8OL/PL/sL/T:sliL/RL//KLp8PSOL/PL/sL/T
TLSH
T19F444FF71951A00BCBA852F5E2133A3DE17B425E6CD1F8E9E57C4C852829F31B6BCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 ec225e578ec7e868b164fcb2e7d73524cdb5cf29d55feecb812c3a88fb14aa38
MD5 6cc7781461f13e8a41395191d2f26fe5
SHA1 f77acb63ec77e2109e1165118f18775cb8ddc092
SHA512 5fdc070fe7076b3189bc60ccff8cf9324f1a2bb2be18a7a3f9987cf0aac63b2a55ac30ea474bd967bb70e66d23d7a0431c6d044261cef339c872a73be469b59a
SSDEEP 24576:Bp0mnODd9jnOBCZNWMZ2G1bSLDO56h8FJ8:BKmOh9jnt2mSLi560
TLSH
T1EE167DEDCA6858C3CD639A30B4F0E9477C7413C3F995C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 526a3b0a6bcf338914f7ffe5591aac075b036e3c88265637f05760ea91920ed3
MD5 f86fdf0f9fd34501923d7fed923043bd
SHA1 0f9bfbfab79b63f4c316d36f9939ff220a8f4fef
SHA512 ff6c669f77ffa8debd1a97eed191a6b9ad6063da34d15c00d5a24e66ce19cc4b15689d34b6e982aefb094a0d06ff49fb030ddc360ebf94ed159e74bf4b37514c
TLSH
T18361F52841A03827FB25853821EE34BA37F3F894DDC32D52589058BA493AFE6DC5DC03
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59012f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59012f.TMP
Size 3KB
SHA256 7276dcafa7350685618845dcbcb9d9d434ad0edb38c81516925e12c2b1560208
MD5 90304f3e4bb5075ee3796c98920a100a
SHA1 94b56274ee3450b66fe21d3b6519dbc2ef02cb2a
SHA512 45b279d13ece83e06d922109825245fd43ca66989fd8b697383b8ee41d8128b2397a1c45f4dd133015643af3ac042a6d6978557ab85e954d235fa70a836c9c0a
TLSH
T1CD61E52841A03527FB25853821EE347A33F3F894DDC31D52589418BA493AFE6DC5DC03
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 9408ec5eba027b1305099a499fa7b0f072c9dcc9c8e9f3cb268d686f9c0f9c0f
MD5 a0383877becb5035fba12a475acfbde3
SHA1 9a1339769196a13891da2e98b58565e691d4c100
SHA512 b1e6e480ce6a74334dcb7ed71c3d742b5bbd47b7b94dcddfee950f77ef6c288f2d299c2da0926b1d397f0d4b86506f192ae309f3bb39b4990d6d4eb78b335c45
SSDEEP 3:MsEllllkEthXllkl2zEklGs:/M/xT02znP
TLSH
T114440444FFC05445CD003430D011C3501370D510151157D3345104337CD77400C00007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 d8028c700dfec40e829e381e97d2cdf6a019598bd06f0119ea06a5dc5a0a4610
MD5 539ddfcb2c2d7059e1c49fdb693225c3
SHA1 2fba4ce66573a74b9028c6c0a44d50068a639689
SHA512 af8a5ba9c6d004693b51b288ea15978fadaacc5a7b81a304c6a456a9a36266b76495614a46470a4270994a54b4c38a182012d02b2bd28c2c038cc54e42e877d9
TLSH
T109E0DFA4A4CAE36E693138E681345B4DE2C0364AE7CA7E275780CCC47A43211F6C66A6
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 f634af3eda1503b4e80eb26a6a9307f47db7b25e815cea5795b2499ebfdfae24
MD5 c8e4335240af4bc835bc588400e7cd9d
SHA1 f8902b67dd6615ec726fb7b4a56b92bb4b4b5b0d
SHA512 3147836a5f5d3866b2ea13f3e7fd8b066336d571fe2ca0b8dde75657fc9eb7a64a4ff7e8667fb8c5346d6bdcc53f7506dd56ecacbfbc89a68e8f9d8c116cabba
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjLfS6W5LCDiSFFtI8ZNVqYp81:TtD4jJ/0UC+lf5DWxCDtFO8nVTp81
TLSH
T1C7E2E08C7B11F511C4ED733DA0C2C5E05ABC782C4A4DB5B0A63C9C768D535A1F49E21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 22d0967f3b0d3d09ea0a519de3da743f2b5062c028dba149915023d634bc4675
MD5 48d0afcc58765bdc6595bf42a7529bbf
SHA1 3d6d86e0c9a3941efdc6cf8c4fee2f06c0e0364d
SHA512 bcdcc60dc12f8f138de8fdf2d4ebe428aad0551395762422724765d67518070bd04d61b1d63d7490b2c0b87ac3a81c239f67c673cfa05e6fdedd57c9ad7d918d
TLSH
T1E2E07D24C4CEE369955469B3837C430CC3D0350BF3C83D76170898647201B8DB2872A0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 cf0439cc57bed1319e07b00a43cebd298eaed583b9f63391b84d87c4e6a86926
MD5 c240cf57457c278dabe7a3e3537502f8
SHA1 6b5172c8baf31182fa018c3dedf0a8ea090d92fe
SHA512 a6320bfafc7fa87d3e9b8b53d17aa7ce872252c524be95f5a0ca1668938f0d09f77b7ab9785799fbb5b554a8921b16d255adf8b7328169aa7529bcddf5577a35
SSDEEP 192:rhAlWe1H+bF+UI3iWGVoWN3qL/ML8p888jVVV63:r6IkUI3ijVoWN3qL/MBA
TLSH
T1DE24104E5F342722CDBD913668E744A35C7DF03F8B5366DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 141c78fd8f9a2edf5a8378c157b46bfbfb626cd2670868ac180922623cbc98af
MD5 46669b1f5202595d17c9a03c289b0e23
SHA1 ed187b229a616430185010c68a47ab0a013064b4
SHA512 af58b4e1e2787bc1477e9100e4bc5a5ef56354f1a1cad838bba6c676b931f9f1f03d3bb49f1764a28c5c70aea913089577cad837ce52e64c767fb535b5171b7a
TLSH
T1E2E020B4C9DED35DB50824975234774DC3B0364AF7C93E1A1F04A944B645144B7931E1
MD5 SHA1 SHA512 TLSH

Submit Download

335706d9-67d7-48b0-8d84-62db168471d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\335706d9-67d7-48b0-8d84-62db168471d2.tmp
Size 1KB
SHA256 e13b0524ed1ae6553cdc8c579c0f285be61251af831fe30a342721d395fb94f2
MD5 e2329e7ac8022b2afe4a82b34d25909c
SHA1 8ead5737869be30688728fc8567ffe2d6c281e39
SHA512 3bd45de88d0d421eb9e104c09cf760bd28768220494b3d2f985380406b1bdf74f1fbe0b30f5bab2ed65810d31c5c878d49acb6ebd8c1ca7e7ff56957877ed480
TLSH
T1CB316AF3C2E8C66D890156F4BF146E2BCE2D0915832C3D5AC9E4AF1B93E28B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 3eb487f475eb43c14b0ce268317254fbdef22fd174b4b470f0d51844e4cece6b
MD5 2b83416642158c5f96cd0426d5839585
SHA1 f539bf9ec1731cebd14c236a7a40e17b02455725
SHA512 e5378c4170455690637e56067d82bc425b2c309bbeb89692a0812dd7bdb060fbf67056047badb6509cc62e7ef4703cd00a3ef1a691aa7850d08755c9a25a6e0e
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oQwyx3rY2Ua:qDeMatha9RAER3EC
TLSH
T1F7B2EC8E5F346211D0F44B77EDD184632F7C211DD3636699EA1820F3CDA2A6FF50A46A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 21a50a40b41fc1f84cc475aebaf6132f9daf0b1a99439c10502e8052bb8662bf
MD5 75e835d39be1135c89c0508a7d201894
SHA1 0ce712754a99cb2031c67a3b082aa32dc183ccad
SHA512 1a737ec67fcd9b30431be39e7a046170a7beb67a2d36b2ddb474824c9ba5fa0d33f05bc8cb1b9072e02d428fa7a246e340b817c3efecd6473a7e2101a08a499f
SSDEEP 96:OIEumQv8m1ccnvS6tnRkacf6CnF9o8I4g:OIEumQv8m1ccnvS6ttQk
TLSH
T160F2CCFE07376205D98444B0E4019F8EAF1A010B47B2B6DC7AD447E3F7A21E2B179796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 4d87f80512dd0b5943049ebe72f08715c1f8a49cfc650894e29991259e8ad2c2
MD5 0b713fb149b98230a5623d981af557cf
SHA1 2d10f142572323e2757e970b3e7e1fb2c298565d
SHA512 daf5747266cfa83c1982c20cbf91a7e8d8616eea37e5834181461e8de6d6838aaaf762c0caf072632b174f1b074106429a67421467a3ce16e1e87ccde557371e
TLSH
T19BC02266C0F8E4320036887D0A806A81B639D038028294E0C8E5837CB0800B79F0612B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 00fe9d442819735e714bbced57e12f799ed6d6801b518d64823af36fde0f9e4d
MD5 e0444d156fde348433691e0119cd1f89
SHA1 ddf6e1ceceee1ebfe330e53f095c2645edc3603f
SHA512 5d776ff63c3de933ac0057b915277a7d71454d9a1d947548ec192e8eb03f6279bc680a0a962ac0cae16eaee940f8554a02d09a7ff202b112f5978b3c1c990dd5
SSDEEP 192:sxRFR2yM/jK1Ml8wFw/fus5CNkU4RzoA8p4k/g6+WNIYZjdjGgIgIJ:sxRFIbw/fus5C7Jt/5I+s
TLSH
T1AA52D715AA24997BCCDBD21DFA517F53D6F81533A2941E44AAFCDA0C00E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 8a36053774436497a9edbf2ae3c379898e8bf8fbc8e84401481240070174a3f6
MD5 fa8d190371519f69fc7121b3255d9554
SHA1 0f81f4e5315dc07555feac90d6a6e64eb52e2fd0
SHA512 665ef39adf3f3c5d525e9c91c46e8a3a36431c56bc1d71c757ec55c08372ad7dd9c491b02b45f47e1e0a8975471fdacbbde3ee29928a45399020daa3addd3a0f
SSDEEP 192:sxRKR2yM/jK1Ml8IFw/fus5WpVCmNkUeRzoA8p4k/g6+WNIY9YdfggIgDrJ:sxRKI9w/fus5WvCm7jt/5IZZ
TLSH
T15462B615A524997BDCDBD21DFA517F63D6F81523A2941E44AAFCCA0C00E7BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8078665c11fe31f78c052dbe9e3f8839bc6fb87db4471840a90947e8f1f69dab
MD5 63967459d2816a86823f925a297e0a4c
SHA1 fd4654ef295f632fa928f19f86a885f36a6527c8
SHA512 07e3efed3391be5b06713a42a3f0ad0112424d1d361955cf55aac0fc6954cd22b73fb3fbbe826183c9e740c11a7f42aedf36776e3c57eee7066598aab35aa8d2
SSDEEP 192:sxRKR2yM/jK1Ml8wFw/fushCNkU4RzoA8p4k/g6+WNIYZjdjGgIgDlJ:sxRKIbw/fushC7Jt/5I+r
TLSH
T1A152D716AA24997BCCDBD21DFA517F53D6F81473B2941E44AAFC9A0C00E6BDD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f30d9201e7c183eaae16b1f8ca583dc96af7386f0b942bcb0aa91d3361545ff8
MD5 9c5e5b4e8bcae20243eb20acb7f0bebf
SHA1 a3366d4f6f3953380708785911a27415aabe2e02
SHA512 07d09dec253362c0cc57f7eda32c897cbd97f5233cef7530e17f1a07f4446bbad9e4c4a8f74a87e8a9d6860068428794a8edc180bac8c604d37b1bafaf739353
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQbro7ov8nW6:eOEt7IWgKgf16u1jaZ/Qo88W6
TLSH
T15BC2FB2B240CC77E4F844E6DEC2A6E976DD801CB9A988D5447EE890C03C77EF521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 b9e62e92c769615a813c1978ff7779c4be2c72f51f402becb04e182906f85024
MD5 477b301de872de5f63f426eae117111c
SHA1 0821cb5d953dc0f3cf21e9630e509ccaf3074702
SHA512 2f8cc4a463f33113aa2701837d40ec2d8d9e31c97ab5f5c33631a955212965c17f5adad6dfec15fc3ba13a36e6ed2d97dcb4b30e0081ccaf2b20b69b8c81c738
TLSH
T122E0262445C8E37D6016B09302358309C2E4B90BE2C83D362F88DE446A83784B1972B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 b932df5318f02f66a0410e39e4933e1a879dc62d5e767ce527b6f2d4aed67e71
MD5 39022710326605314f5dec5fd4571c29
SHA1 242ae2bdf2f5c978a7c70f47add09404b4051579
SHA512 2a07450762f31d2efc6ccacc809b83cc09a8261756229e0c114f1b0ae14f304f1fd9e02a03b77be059b2e925077001056f649eb872d71e10061e7be7570063f4
TLSH
T1ACE0207456CAD32F714BB09B4264EB0CD2E2F50EF6C939752F0CED447606340B283661
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 23bd63aa83c977183baa2a8c839b4811541e8a8d57077d3a1d6970e7a9d58f82
MD5 1aad303afed6108c9497df81a99c70be
SHA1 d73aa17143ba2b965e09fda0ef23af0a725c914f
SHA512 c462a053ef7610f7f5c21bb175b9c0126097b93e240bcb7fda17cb3f5cc5078ce3bc7cc1e3aafbb6e3544f2d4b567e5b9f67d64a1db56c900da41ccfc39efe77
TLSH
T1E2E0267885DCE339A954E1A34268D75DC2F0BB0AE3C93A2A570C9844B901304B2A79A0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e7c0e03f52f8e35ba2ee6e21372ee3be4eff6a71fcdd4bb410d05784b297491d
MD5 a9e90bb9e72bb3b5f6b7843f6ba7cb19
SHA1 b3d232f4647cc46b733e5de875734340e2a6ddb6
SHA512 9cf7423aa0fe4531cf0cfc0726a57aca10dea48808aebbebeeebe98607e35def8cc8fb789d4fc5088d4558764ca269b24ce487e4b2e582597da6ba9180db3298
SSDEEP 96:KgnKK40e+FeKe8AmHC2EoUgIQdz++gK21+8gyO+NcGtk:UZJDmHC2EoUpQdC+q1+8BO+NcGtk
TLSH
T12091F010317B231A38BE6D889455951E068170E731A7E92B3BA974E12A6FF001EFF9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 43c35d4debd4396ddc339d858e13651c5fecba306e40636468ecf6052615058a
MD5 55444a1044ea52bf2eece3d0e82571cd
SHA1 3182b3733dad91a16811ceecb943cdda5604e944
SHA512 ab928a3b3ccb89882851d2ad1c5327cd3a525a1b17392386fbc004d44801f7e3d42aaa96ec344b31f6b01175790d818a6e4d488af173c6e16a0e597b47d43fc3
SSDEEP 96:KgnKK40e+FeKe8AmHC2EoUgIQdz++gK21+8gyO+NcGtGNSKeQp:UZJDmHC2EoUpQdC+q1+8BO+NcGtls
TLSH
T14EB10310717B235A387E69889455851E0281B0E731A6F92B3B6970E12F6FF405EFF9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 6b34fc5c2a3681241590f9f0e37fcd15821b8729fad7a80494f81a8fe52bdd3d
MD5 4d0d6df0e476b6a785628eb966711b45
SHA1 62badf472632ca2bb4ac191a1df30963adf66258
SHA512 0a852298f597fcbea71805b255d027d227d0ebd3573dcba5387136da60f39b01045460785aa753816e5ea9f1099cb9c56d9bbbc774d5de62304d241b603bc05b
SSDEEP 384:DNrRZyCSDnxTICLbMEhIKyll7svbFKfk7:xFZJSDniZyI1l7svbF9
TLSH
T1A144850A7B747001EDE6DD721CB080771E3C716E8F22A6916DA254694EB3853A63D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 bce24f9b697597568b2bdaa267035b99eb3f1bfc7184f0bfc5bb193a46d89e29
MD5 976a9277779af9e40631b99dab72e6e3
SHA1 32c45a817d1a0d39a5541a0f60c4fc7507158096
SHA512 88e040ac734f3cfbd34a18c640453117fa34528b23c6ce777cce10b09e19c0b570736fa49c5e2dd44881c9255d4b69a9f7d3d5178b2a05964b0448d9d64e6d4e
TLSH
T172F05BC0537B35957EEC9980D105180760947D96269F9977331DB5E85B488081F6FF37
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 a8685558933091dac0a6ab46628b2634b88947920bf5ef3a779d1339d6856547
MD5 b1a07d9ee7eff3e74fa68607fc4c9011
SHA1 a8507a0636a67907dfbc8b9bfc320617d5df1260
SHA512 85d17ca86d5592dfff4faa085ba6db60b078bf8fcdb6be01abfd12e5ade99f575a9ec35bd473a93f5cd9420f1773104c84c2b0678607feb26f6f252e18e6470b
SSDEEP 192:xXQMcIIIcbsMIMm3YcYnCOtxAscli0TsscDe:xXQMcIIIcbsMIM6B4tysG4sc
TLSH
T11C42A75A16052F77C09F9F77236682445BD8C9828132252E31932C0FADF3FA786D52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 dd66618a6e5235199d840e4c9fb19113290f14f6907421a1d5cec6b63eeb8ae7
MD5 616ea49da1e82061887f793ef54cd0c0
SHA1 70bff17ec28edd8143a65591f39a167bf1dcb768
SHA512 303640d3090f4517dc4c1149cdf76711ff07b09b48bb1000680c9b8c246f53b8fc335f32dc64d3d86d061caf5f4b552e9c22da4703006f09019fddd81188f3d3
TLSH
T12AE0C870D5D5D35F745420D74174534DD3913507FAC53D593F05D45967013447657162
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 85b7733eb4a7b4da0c85752f25531fc4caaabed1141aa7f8cc01a27c6d2b9e2b
MD5 028c0ea3bb6e38e88e49ebef86dcfd13
SHA1 98121950af85764e858155d8da267fb4fe6b2950
SHA512 e3717c742a66e832e9f8083a65a0263a1b6abbc5c2c772e4b54810eab89f72ce519cc188cf4a1d8957ad233f931c74abfd9d2e063c19f4e687085cbcba6b0366
TLSH
T154212659F330C009E14A827E647F9B390338E8168FBCEC0F947A20356EB2A440E4B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 c18c764b8d2810453d0792cd9fdb32cf650f64a16c801e233859071965a7a23c
MD5 056183ea785fd34976f5de6f6d971d01
SHA1 dcdaba753c281fc056e912b0d5a403dd51a0a760
SHA512 048c3f43ae023ec349edd844425b623760b2dc88a7ea99a863b86529fdeb2337317a58e57b0883df6e5d5bda793cde5f8e369a09b0810308b8b6a3592bb64f6c
TLSH
T1AFE02020E4D5D35F505020D34274938DC3A53907FAC53F352F04CD4857012857647261
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 232f5a3e42fd233bb20a069284cac8025b1afe11f3b0ed6b0f877cb4b53e1fe8
MD5 89263c266cea9b5d2ee6362cf3c621cc
SHA1 e3873e1e76f0120e0c4f17242723b0e686fc6c0a
SHA512 a5e4ce5880e7fa0faf7b402912bdca57f8a49b391bef3df3548a273c3cb368a8fbdb5543ec9b8451c55a3a5f52f8ce2ee975a77262b4991a7a22e708a01b1bda
SSDEEP 3:MsEllllkEthXllkl2zEelaUWKX:/M/xT02zNPX
TLSH
T16044040C7FC73C05C51510314511C3D003F0FD100D11D747345345135CC75500C44040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e94210d1240bcb091cbf602d1ad63b4bfa42dae03a764c6234cdd32fc0ba3913
MD5 2a7c080c9fcabc786ef8ce88747a0f38
SHA1 b8c8639da9328621e678d68f0e3f850831392ce2
SHA512 3ee5c66928cf555bda143b6f8ba7955159843f603269643c8d511c4540b61f925cf6ba36bd199abad6604b3b4fad09caf9a445b1611a376f90901c5bbc97811c
SSDEEP 3:MsEllllkEthXllkl2zEelRyPKX:/M/xT02zN1X
TLSH
T17544040C7FC53405C55410304411C37013F1DD100D115753F45104135DCF5400C4C041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 1ce80e2d5cd860afdfde172091fd8863465b2e9d7417c71d46f6ff6db30f013f
MD5 85c6544492604658658db748a62c8824
SHA1 9e57631306146eff145b3a5989ae288820f16470
SHA512 5152c17c7dd74be0c4c50147850f281cb712d83d9d32f5ec61836ae749c52c176245599a5aa3f33c65776a55f5fd518c9d63f2d2ce50afcf7cf2cc870329adc9
SSDEEP 768:wj+9n32iPfcO1fBfoV5R4HTytYYqgHvPwCfXatdxPDvp:P9n3LfBfBfGWTwJB/atHDvp
TLSH
T16B138C7CDC645C7F08ADB748320E2A1B6DA84237D2E41654E7C81B0DD9B7A9DFB87809
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4652cb7351798a157be45be984cd984f126d49ba675128f4dc721b6fdbc8d6ea
MD5 3305cc029b91570edd8d4a2777f12ed5
SHA1 ab839ff2a5c52f7b282bec589d580b6236c887e2
SHA512 bcc1e4b5428d4bd24d5faab6ea40a19883d4765b4b3894106339806a50944fe2cf20d88311653340209a5391d4292b38109d31bb885ce83bbdba67b413dfed47
SSDEEP 768:EjaeqD4MlshiLdMma3FePfcO1fGV5R4HTytYYqgHvPgORyjWtxjTo:EqcjhIdMh3EfBfwWTwJ/yj2y
TLSH
T1AD03CF76ECB85CB78CB29684761377976EB842A7C3C12B64D9DC5A0D019B6CF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 978867d834dbc115f7c0d15fe76a633205d262ae2bfc19ea2ef21e87f3b0b059
MD5 2e283d7785a2f49fd965c095f465b223
SHA1 20d91666c6d9d79751649b3bb40e1eb1212b6394
SHA512 11d71fff55b337ec19570064e74af1f0995a3307144f64bb6f0c39dc2ad0133a172fe877b43c9c290060c3b7ac56ef048fc3b7ba07d3ca2eabb67650e37bb12c
SSDEEP 3:MsEllllkEthXllkl2zEel0ZKlt:/M/xT02zN0Zq
TLSH
T1B444040C7FD43C05CD1410304413C3501370DD104D1157C334510513DCC75405D4C044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ebb7821-5c78-4b68-b46c-49c0fbd1acfa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4ebb7821-5c78-4b68-b46c-49c0fbd1acfa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 f35a4f569a8d6e9a53c7abbb2fdca981cdaaf4108e2934925648d90000b72a42
MD5 29f0806ef1eab44a9cac51d6178104b2
SHA1 da9a041647bf896631ff9a3a1470aec96da1eeb0
SHA512 02d7f20c525765b0a77f7738b19fedba3472edd6c259dff60db5beb1f82ebbef1c72f48fa68ede5aaf452b953f8d1b959494e48c37cde60ada7cef9e322eec56
SSDEEP 24:TLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/sufL:To/IHRH34kWqB1kQnjhHmr6ITmUuL
TLSH
T14C23896EDA2CB9A1FEE40B3DD7D1D4127B36AA0EC2E4D9F1099B406746C540405EB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94c7e1d7-c8f5-4f50-a8e7-0e9cf89d379a.tmp

Path C:\Users\Admin\AppData\Local\Temp\94c7e1d7-c8f5-4f50-a8e7-0e9cf89d379a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 d5499a3ea156ef4b9203807fe4eeb9cca88e3fa7c95c96dbf95242ec7f8fc73b
MD5 b1f050e0513b93cd5fa3a7d108808b7f
SHA1 699431f0808132b26d5363a93d5d5dbfd9cd9a8f
SHA512 220ec7b11b57c6c526e37eb248c844165678d76406687f29d2ff37b481c330a81cfe417621299051311a0fc12f31c4062b7121f7f7dfdfdc08680cc4ed7a7fe3
TLSH
T1B82128E13527633F63874BC8A1350C885B50F185032B665CEE564834ED4CEE16B2EBC9
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2608_548267136\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads