01bd2e3d6d198557e1bd1b98d384f4c0ba9df830c26dae8d6f986d86a36af571

Analysis

user interaction
yes
max time kernel
43s
max time network
64s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 01:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyDockFinder.zip
Size 36.5MB
Sample260623-b3mlraas4s
SHA256 01bd2e3d6d198557e1bd1b98d384f4c0ba9df830c26dae8d6f986d86a36af571
MD5 26c54a37e1a61115d177e4a3cda714ef
SHA1 df6a493f5eeee008cfcac748cde824e0d3dc1480
SHA512 156ba7893e54767d0bebdc06263f7d15de6c7e982f372280aab58395fc519ea64e263e2c7f117fb41b1eb64ef848634317632eb3f4bde2f5a2824f4bda394d4f
SSDEEP 786432:OEsTlPLVIkBUGfGcREN9MIwWo+tNbN9MIqWo+6f:O3PLVz5mjMIwd+/bjMIqd+6f
TLSH
T1E187336A5CB7A59BC07DC0799CAEF5B8095C9013CA3C61D69FE8334CA5924BC8F0E51E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5260	msedge.exe
1468	msedge.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	WINWORD.EXE

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	WINWORD.EXE

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
1472	WINWORD.EXE
1472	WINWORD.EXE

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
1472	WINWORD.EXE
1472	WINWORD.EXE
1472	WINWORD.EXE
1472	WINWORD.EXE
1472	WINWORD.EXE
1472	WINWORD.EXE
1472	WINWORD.EXE

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\MyDockFinder.zip
1⤵
PID:940

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2924

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2960

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Downloads\ConvertToSave.docx" /o ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\LimitClear.xml
1⤵
PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2cc,0x2f4,0x2f8,0x2c8,0x304,0x7ffa490ec188,0x7ffa490ec194,0x7ffa490ec1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,15349170153916481789,4344857740795725981,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1980,i,9283713157268851463,3269341196452522559,262144 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,10292614517479180188,8780666511446523703,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:13
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,13098046765704888958,1486946928843198008,2097152 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,7369098802294305951,4767798519501698907,2097152 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,16910348517912016502,10837939596752693854,2097152 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,6887235882533783575,5201582985259222761,2097152 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:9
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,7478689150442451848,16504151536867537047,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,4571326460931669067,16009523664373058916,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,4107705045296918912,1193091275238359871,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,7154466326292048891,9898774087878196153,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,7154466326292048891,9898774087878196153,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,13867683297687584158,14659104994300078632,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,5523222599883794906,5138814048021512362,524288 --field-trial-handle=2380,i,3881853313069573189,7010411020049545679,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ffa490ec188,0x7ffa490ec194,0x7ffa490ec1a0
    3⤵
    PID:4336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,7505727679719951345,2458084900144221569,524288 --field-trial-handle=2424,i,17495588938134911132,5462387031919285586,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,6806242995306984646,5205274538110697267,524288 --field-trial-handle=2424,i,17495588938134911132,5462387031919285586,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:13
    3⤵
    PID:920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,11190820238311346370,743310039405933870,262144 --field-trial-handle=2424,i,17495588938134911132,5462387031919285586,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
    3⤵
    PID:3484
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,904904473799783080,76154640034637038,524288 --field-trial-handle=2424,i,17495588938134911132,5462387031919285586,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
    3⤵
    PID:1212
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,904904473799783080,76154640034637038,524288 --field-trial-handle=2424,i,17495588938134911132,5462387031919285586,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
    3⤵
    PID:5520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35a098a6875f10e14e08bfb595d517cd7953bdedb921bfc380276e769daf61d8
MD5 35991f3c52f2815322e52e8cfd2b691b
SHA1 f76c5d8e4bcc176fb368fc3551f808c6f1303285
SHA512 07d664648fa09dcc174e2a59810d9ac038decd9234074ca6d32c340888a31964d5731a720f290756e7af52670186004965e3fb9e88447055c8b4161d5596bc29
TLSH
T183D023323D2A79D1D12520B595104274572F49937752D20F7555480EDC75490A3C6ED7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ed7705b6a42af248d127d5d4533d0801b2e299b4debe734b06a7d1f5d8ce58d
MD5 411d5bb111c19cdc1b73534a2e98ef3a
SHA1 00b5d245e8235091b1b76bb4a70773f1d2a8bfe9
SHA512 5c78f6cc8e04237eb31e20c749eacb7823dc5df3d710d78d8f379b0d6a5457a867bb9edde082cec24a0a3a6cba7b2f5af7c6a03112a82aede3dc71c40304fe7c
TLSH
T1FDD0A7623D197C00C50130B4681042645727C94BB651D14B7665840AEC064A0E7C9593
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

70ae662b-6c83-468a-871e-7bd1aab4bd01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70ae662b-6c83-468a-871e-7bd1aab4bd01.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3b9a8261b40c07ac98f927ab8d2034768df3477ee6972ea82d315bbc156b2d9f
MD5 c609610aaf011c88b4bca6f86e887f4e
SHA1 203032e56ae659fa91b1d03d98bffd2f23b77b9e
SHA512 5ee831073e8098f678e05ffc05b03651987bd6a08891df96b4dc796c1bdfaef4252dd80280dd769343a82df52b73ad59054cb6f48c7d839955d85eefc3748829
TLSH
T119E02BAAC931ED2B08FD1759A1514746F780135A2780580F3A3D910DCFB167A15C68DC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 1f059163e5ab9a7776e0c975e04072033b79938f3fae0969a1d2d36b7c5a2752
MD5 2f23d9098effba69524e811e55015ad7
SHA1 106afe6651e848374aec787b04fd902f74dd2061
SHA512 3aac3c77f66a00dabef51d709ba49eb7a5fed595645e6764aa3380643332aaf6bb5e4e809c874d3682752c7f1685f8f0647cf777aee2572e3e08f0ed748a5434
SSDEEP 384:1zutoclHOuHrOuS06wcfJsNrBrX3RdYvlsbC:1zaZHOuHyuFbcfJsN973XYv7
TLSH
T1A913A07EB7025C72C6D3587C84AB4BB67B38EBA0DDC016870B7D75A48A20B478C6E4C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 6269fa195b238fc3ec45c5b8ac492da4e1a65ea10b04486419c0da6d6e69d7f8
MD5 13b626fc4fc503016d35ec03b37d3a63
SHA1 03a4b041040265761b21662c91abf070bd795286
SHA512 18728c1039cc0669fbbe9b24e88c1bc114d4bf28d1d6ebb2fc8c4b285218f2f8e2f7c3f1004279e824cd50b3c4075a01638a7d4aad7044cc22bb901a5a94c218
SSDEEP 1536:hFjxfqL/OaL/YNQhTswnxevLsbwUumaolxCYL/jL/RL/:T1iL/RL/8sGU75L/jL/RL/
TLSH
T12C443EF71911A01BCBA852F5D2033E39E17B025E7CD1F8E9E53C4C952925B32B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 a8dab26fd34d033f96e6bd2375cd98bed5b03e0be2492cd894a7b1a9b94de6a5
MD5 0d38073368e62b531d82e115323e8097
SHA1 92e42d406ede960e7d2166a9e900cca1fa276123
SHA512 b3de41d9f03f15ac8ef92b3f52fcee9e4d7644d60de6fe31e6fd105c6de84dab81bebccd0e84525b2f14330c37f7bd31a213ba8b04f243a57404e5912878095f
SSDEEP 24576:/p0mnODd9jnOBCZNWMZ2JbtujrApyaTl+e:/KmOh9jnt2ujriyaTl+
TLSH
T13B167DEDCA6858C3CD639A30B4F0E9577C7413C3F994C1D6889CC584026BBC5BBAA66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e37b27ccb796f823639ed488ece71870aaa07e8be483ab4d23bb3964cff0ec29
MD5 d631226d8912b099e6b0d3fe16a2b2e3
SHA1 8262cdb8adf2a5725fad16db070fdef4fe448a32
SHA512 665462674e0187d8ce6eec4ce60bfc75c18e49fffce7fefb927c700b4d3e386a64832e8ad65988841ff1585e1a18cc3453837c3a8eb5f4184d808609a1a0c04b
TLSH
T14C614C31C1B02875DB5E74B560DDA7BA7370C81F1D2B2E9A0489B93B4D13F175391053
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a06a8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a06a8.TMP
Size 3KB
SHA256 fdb0a2106510073eac998f10fca06a61f3a07e933c873ac8133edab561eb084d
MD5 93ada36ac0fe4485a90a93c8f0008c32
SHA1 b8bf5d1598f3fc4f72e4ad716005e5299855cfac
SHA512 f8c55def2838e2e14546d21fc8f6c9ce1410d49687d821de8782d10db0560357e963586ae0737d83a972b82a8ed5f3eae0052664598c8881f2184fe424301748
TLSH
T138615C31D1B02875CB5E34B160DCA7BA7370C80F1D2B2E9A044978374D13F075381043
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 aa950bc0f74653f0d5a08b3ebab4c66c9e84c4ca15746413c54208015f0dadeb
MD5 9e28d1f42c87b247df6171d08ae96ea0
SHA1 20fc06405b706b6d765f0c8b342ee80ab7d76256
SHA512 b51d5045c0c8e7671d26f5e9fadf428d878dab383605c2c8fa00bbfa6163e6f7aae113eceb83a49df29547970cdbe894df497867bf5d29373ef7b13b281c9ff8
TLSH
T16BE020E5F7C6C21D559C74C74264A718F2C03887DB87EE0F2B44CCC4BA42141BA41746
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 5e05a462c97e63dc3575753e70a898474e0351505fe079e0e8eb3ba8899a550b
MD5 36cd5a15e5374e113d89bd100bc9e7a3
SHA1 c26f7da3db8d056ea727905ce6c3b9540c1cfefd
SHA512 0dff0ab1cda7e250bfcf5ff0238cdf8680b90ca923a9f029471385dce74611b71da2899b57761160c99bd6d19b7f323b8a1453598ba417ea37ebd481dd2139fc
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjbLPowW5LxPYFtIR+NVqYpRS:TtD4jJ/0UC+lf5r3WxxAFOQVTpk
TLSH
T113E2C08D3B11F511C4EDB33DA0D2C5E09EBC693C464DB5B1923C98B68C52562F49E15B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 40c851f53dbec85c5679b96996c27f924c3726eca0d6aa2d11c92947c6c82e87
MD5 9370799097feb28676819addb864e4ec
SHA1 342bd6a428b19fc407894774045d618b64a45444
SHA512 7d04df931b44abf6621031d7511cf083e364e3a5df240bb3cfcdd5a21ee205c158c2e094c1fc88fe6d50306527ce3c8af59e087ec755711f5ff7669d553534a5
TLSH
T197E0268446C8C33A96D46CA786BC730C96E03C2AAA8B390B974C9C4461C138DA2AE381
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 71ed1f0145bc8dad4adb7ff85aa7649ef41ea42ee8cdeff031638302762347ef
MD5 1f6d8702afb2a48135a3d83de8ab3fdc
SHA1 907cf2fd3856c629f4bf8e93dc058735d55d12b7
SHA512 67763036ec69e4a346e06a9c6290fd4db11995487e450fb6a193d336b30f4b4937506fa16edd4c59f5df861e31a3eaab1e57a7a647daba17e0a74dffe18585a3
SSDEEP 192:r7lJ8e9H+bF+UI3iWGVoWN3qL/FXyWVVV63:r7pIkUI3ijVoWN3qL/xA
TLSH
T14924111E5F253722CDBD913668E744A35C7DF03F8B1366DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 132305cb26a40cf7407c9a6d9cc6f46be1ff7ff9804ae9daeb8a599961607a2f
MD5 defebb3934026e9f68847058f9bd2d41
SHA1 9fc4f37ce24b026dad022fff9efe2dba4a3fb33a
SHA512 49206446a46648e440f311fac71984f7741e718d96e2772a18a2812eeacc9fc42ac0882f2439515110dda4da048344c37f56c4be5ef933d1cb09babf155ee0e3
TLSH
T193E0D8A087CDC65E658820DB42A4770DD7A0340EDE8B2E091B4CA844B042148E6822C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 b08e8a8ce161b3104e5832c89448c16728b9daffdfabc667af9948801f55d10c
MD5 540deadc6c3487f4b2b5595fd0b4cc9a
SHA1 0ec99b0f0b45fedf333b468ac1ef329acf7d872c
SHA512 3a1e920dde9113143567273d84145996eba075b3ad877af69e261d846969f68cd22219dfc96961627127c8d6f4423355f4628e069642c0e6404afef32894d12b
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oAwPhKhjM6L/7MvH7:qDeMatha9RAMYOLC7
TLSH
T1E9B21F4E5F306211C0F85B77EDD189532F7C211DD3B326499E5860B2CDA3ABBF606166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 faf0664f37038c3ad57ad33c8c42790757454127d9f01b8ac4fe86254f4a02ea
MD5 3215e5bbc9b1cb0dfaadf5a1c207d600
SHA1 689c5220c3da707c54664f884ffebf7ba1ae6a18
SHA512 4230ed2bfe783432529da3fdeb29836d7bf5665591b7f903debeac5cbbdc618a8e442c805ce3b5de3e713dd66922f32f2362350712cad905cd3f71cdfb3f13dd
TLSH
T17F31BDF7C2E8857D890146F4BF146F2BCE2D0955832C3D5AC4E4AF1B93E2871E24094E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 741c937ac3de4b866659c3362f8198f7f0f4feeb052fa797b6e25cf2d80476a6
MD5 74f47be6b5660c449030efef1696c6f8
SHA1 163c3beef4f9d78175899f408d9608bc9ae9615f
SHA512 d7fd256d51af95c9dd39351b72a3f3d4cca42f1a6569cef2f1288b5009245ed0d5372850e26553e75e4846908fdcf2d5206c4ef8f7827ffb277026977e0b468f
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBj2F:OIEumQv8m1ccnvS6t6kacf6CnF9o8a4g
TLSH
T1F6F2CCFE07276206D98444B0E4009FCEAF1A010B47B6B6DC76D447E3F7A21E2B179796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 1cf7da4fc396f084bfc2b3a8368b27a90c1840aaedae7f5e8266a8e6358c29dd
MD5 a922f0938b177fc922f618b4974225a8
SHA1 25397db8689eed4ee34a3d87221c95fd87a545c4
SHA512 b712582c76f9a50629a292c1108582d1b5796032c35c0812c6af1bd679c210cc59971c507691714d5a9db03437fb9afe811978eb7c3a703779f5ffae4654ba17
TLSH
T1D8C0225780F9E07A002548792D846880A7B5C838000098E0E8E4833CA0800B7AA0302B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d209c3ca9d9f216870540807bf6d2f080962ca60ab8b55626ab528020e3d4497
MD5 25dc99807059d0fe5404d3ba3a41fc5a
SHA1 86b5ecc775ee68a63199a6e572acefd37aee3673
SHA512 2c8dfa8ef60a046bd15a01abbff1222a7a3553ef2c3afcfb5d4e0c9757e37d733bde7e4934c6a9b02bc2a71cf55f1c9214f5511873704842365ba18b9a853f9f
SSDEEP 192:sxRrR7yM/jK1Ml8kcK/f/sSFWpVJ8M7ZrH9rzoA8p4n/g6+WNIY9B1gaIgtJ:sxRrBMK/f/sSWvJ8M14y/5IM3
TLSH
T12962E915A528997BCCCBD21DFA967F53D6F81533B1901E44A9FCCA0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 91fe06cd1e3404f77a6ad7f174cb312a35496cb3a61eb5f1fcb507de14b7f8f0
MD5 efcc002c7183471565c7c18e4cc0fdaf
SHA1 8f413c216f4a4ccc47bfd315999f0aa30642f8ce
SHA512 ecf028221e36e0bd331ae502509c6f554ddd7a6653e771da4498437288b6639b2e477c04ba69e4b2f4645981852f35540b04fd99bc535c61ce8b958651e648c9
SSDEEP 768:eOEtpf7pLuL7ZIWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV61REkTqQZro7oR:eOEtpZE7ZIWgKgf16u1ja512/QS88IwS
TLSH
T185E2EC3B680CCB7E4F804A9CED2A7E9F6DE801CB96D8C95447EA840C03C67EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 046f11795bc6a91fd02b331f9154d849aecf3067c2ac9782490bab1f983eb02f
MD5 b3931c4c2e12ccc1ab5b661b330d58b2
SHA1 3ecda4abdaffa85de38289f21da1ba0231479b2e
SHA512 ce26a1c63a1629f035496d37a4309228d6c7fde3d7593fd5f6de06facc7b2e313be9496d7621a11693a8605a387b19f119d5480ca4ed279acdba442d13152f51
TLSH
T1B8E0201047C4D2BE62B920A745749309D2D4F40BD7DB3E095F4CDD445582A4C71532C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 e84cc7af75d8251b92da8b87c8ab53c00dccccb5b31ad36b320ac9b13ff7c3e5
MD5 4281514a91d800da22eac0d16c7d0579
SHA1 166e243f1aaf5f6d47e207f9fffb102391aba55a
SHA512 533dea14ff1d4d2a52ee717deff56e4de2b9acbdb66ba58ec34857c4da10fb769dc4b13cfcc49c2443c4598e0c8deb667f28dfa166ee7f4dc5c053a9ccf6e06f
TLSH
T154E0D82097C9C72F76D928DF4664F30991B27446DBDB2A1A6B0CA884624A2807293240
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 3ec6aa1692c33da9e0bc1591c14044af8366da8a0ec3cf30ff3e6bdddd4effae
MD5 1ecd93a2189f1b70a3b34e4da69dfdd1
SHA1 f4bf7326b0518f7489663d3886744a03b8369959
SHA512 6f68d319e50253897ea34028fe7af99b217efc63c385a5afb361a46aa815adde1e8fee69879e49d2cd283e7506367a8c685ded31b2e248a3f970998431ac6397
TLSH
T115E0207187C4C73A569060D782B4E70D96F0780A97DB390D970C58447541240F665280
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 78a0463ae9f53393d33807d514fff9399c818c1213f00f11436ea04e25d5e65d
MD5 b1962bc92a3043d8b808a4542a6c750a
SHA1 ce90f98c29fd410b7c94ab15b3e92696e790b4b8
SHA512 1802ff24a4d3034d435b392eb61d7df582989c06f536e7e2b35492ff0908cc1a3d6ca0a4fe9fbffd9784bebdc2d329cca455040cde1a506bb2457d9a3e3020fb
SSDEEP 24:KF4mf4Z4A47g4oF4a4u4k+4a4os4PI74s4kK44Hhg4O4k1S4k40Sk4aq4r64k45P:KU2IPKDC4DydzINK88QENIhKmUMTy6
TLSH
T17491670531B76316297D3AD8A1E2B55F524230A3322AE52B7BA824D30F6FD410EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fe75407c0ea44be90e1b7d728140e45f20dd8446954632bec6ca1fd3f7c745cd
MD5 9510887c0090821d128477ce9776b404
SHA1 182a5f45f1afdb82b6edcf98edbd64378dbb7e42
SHA512 45873ece54f7c701dc8385d819af94b6ee5a96a79a9a74416106d68195171528e95090af5efddb43a92edacfee0f079b88404e37a94416f19a16205528202ddb
SSDEEP 48:KU2IPKDC4DydzINK88QENIhKmUMTyVBI9KqIgKE:KU2EKDCWGzCK88nNuKmUieBmKqI5E
TLSH
T15FC17A1532BB3306287D2998E1F2B55F124630A33129E52B7BA424E31F6FD410EFD5E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 bd321c9481b9b531b4a337935cf6f3597b0dc4385dc2e95cef858928ab8560ec
MD5 4582dfd2a3fff6e703010875d96e5b14
SHA1 4821949f8de65ff3492ed43c0d0d3b2c6cb16e09
SHA512 a15bcc3d7db9e1ba83cacebac57b8c18aed76acbf49ebd76cbbcb56100f3610a521ca6600cea8905162e2872ad9790ef664b580c98678e73028c81498f1ba1f0
SSDEEP 384:DNrRZyCSDnxTICjhMEhIKyll7svbFKfk7:xFZJSDniiWyI1l7svbF9
TLSH
T1FD44740A7B747001EDE6D9725CB080771E3CB16ECF22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbd2ff15-7cdb-4dfa-98a4-879de83df0b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bbd2ff15-7cdb-4dfa-98a4-879de83df0b1.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 4c5844389a1f23914e3d01f62a939adb50a928004b24f70573f9f9fa0ac83723
MD5 a0e5ebba962120948c1142d5f83b5034
SHA1 2f7818e942a9d4c63032e188b6c82ed799b4e6d0
SHA512 87e76c0f409e8b1515f086e9e7b48f5cab8018afc970778d8f2775749f1bc0ef1c2b23db680c068d9a9d77166f4372558e3f15b248ccbbdd1a1b21911d5f4dcc
TLSH
T124F0B48113EA71566E8CA9D0E1663803609939A6220F9871339D28E45B888090FBFA32
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 7ab4473f08ffcadf760f909c4f9fc42b48f77ba2b1597f4cf8560853539d4b98
MD5 cd1f60c7817d913d9a03699fe246bc7f
SHA1 1f800ea01f80778904d2186a988335d021453f76
SHA512 31a7091640422cc05e12611dde7ef6b9e9c78b8143f0c5855eeb1913a528c720e4b2d13c9ff166912dfbb1dc1bb31504edb285b525cdf3a66524bb4c7d641fd0
SSDEEP 192:XQ0IIIrb7MIM9cYcYfZSOJRAsslrzyQ2s9J:XQ0IIIrb7MIMWBQHJSs2Z2s
TLSH
T17742645A16091BB7C09F5FF6136A86445BDC88824032253E32A72C1F8DF3FA786C56F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 4891aff432cfe38aa6fdfa2c269452bd29928881f017bde10428519f27d4829a
MD5 2db23104827e3ccc5fa9e9e68be795d3
SHA1 56692cf31e233e53e951bae8c21dfafef6fddd79
SHA512 2daadb69380e6655aa58d3490a2346a02b3c95ac5e61178cc73202fcd088d88cfa9df83c2979d9624b1d7d5dfbcd7b23eed8c1eef19560d53b9caa6b789e9c72
TLSH
T163E02050D7C4C27E6A94209B0178530992B13417FF9F2D0F9F05C44CE0412407259241
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 85b7733eb4a7b4da0c85752f25531fc4caaabed1141aa7f8cc01a27c6d2b9e2b
MD5 028c0ea3bb6e38e88e49ebef86dcfd13
SHA1 98121950af85764e858155d8da267fb4fe6b2950
SHA512 e3717c742a66e832e9f8083a65a0263a1b6abbc5c2c772e4b54810eab89f72ce519cc188cf4a1d8957ad233f931c74abfd9d2e063c19f4e687085cbcba6b0366
TLSH
T154212659F330C009E14A827E647F9B390338E8168FBCEC0F947A20356EB2A440E4B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 85cf0968bc372422201928c3b63e152007cae453baf43c897832df3438f67f13
MD5 e20be107700a062d36401888d116f856
SHA1 d367985d61f62588039acfd7ba1053069dc4c6ad
SHA512 58e5dfaba11a48327d57b2d9f7983b9cb0966ba82486d1bc06913c6cec0d397c8ffaae39932e1f0950b321fb6376e2d71ef88d2d3bfc8550f342a0cb9667019c
TLSH
T1E7E02050E6CCC2FF5290249701B8934992B5381FFF972E4F5F04CC4C5141281725E641
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 76e895dc42f47bd75c7dbf1ca81c6d480627af733f29a87de867c2bb6c5eec8b
MD5 f2edfa14112cf2274ce1b57fa24e83be
SHA1 b7611d315b29bee91b1fb14970f67553d6a182da
SHA512 4841c7165341b03f5d7ea78c407fb26c981d617aacae9b2a31d2463e3a6193bef40e8f38bc45debb49b9b47fbfba7d223cc9785c5a35566fd6ca5fbfd3f92241
SSDEEP 3:MsEllllkEthXllkl2zEfliUWKX:/M/xT02z4X
TLSH
T1A94404047FC31C05C50110314551C3D013F0F5100D11D74734D345335CC75500C44040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 2329b69b9b7e680a38842f5b4ac8d08aef619405408143f70ec53358e299071b
MD5 c1c2ad19b000d21d2cbe0ff792617fa9
SHA1 07db156cd771e1ce6b8ec9aec19605caf30aeb2c
SHA512 6bfb8046670c9fb0cda5ba79f452e6d9235d002dff76a1c3ba321948c09cf3cf3ca5ac4a9ca32cd3996c82ec621eaaf65a65df84ccd31d236d541f058ce5ee0e
SSDEEP 3:MsEllllkEthXllkl2zEflZyPKX:/M/xT02z+X
TLSH
T1804404047FC11405C54010304451C37033F1D5100D115753F4D104335DCF5400C4C041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 474cb4bc28b02027fb2804ff5d033461a49baa689697a11cabd3772ab7031a99
MD5 7c5cf5cb7c5e1e79e51eb11819ee6e9d
SHA1 68e13b944efa5fef61e2e08749d68c8572e9f9bd
SHA512 f853ec72cc58ed2ea32a484b77cfc23840d12aac531074ca951a3ea47be60d07032df44cab061af7b485cbf711993cc5fa3bfdb093bb088f100ab1e9547c3373
SSDEEP 768:8jaeqD4MlshiLdMme3K5PfcOKf/5ffV5R4HTytYYqgHvPwrKAfTx:8qcjhIdMZ3MfOfxfbWTwJyKAF
TLSH
T19A13CF71EDB84C775CA29645B2133BC36EF802B7D2C52B58E9D4560D098BADE230B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6e6b0fc19c3f94d0163bb2f86854223a15db4353f3411a198140d3a23607b43e
MD5 0da3167e909b454e61e9bdc94e773ccc
SHA1 8cbe7ee36c9bf24d25a9059d8291e5621cc6d5c9
SHA512 33e98fd56d7b3c40f4d23951555b57de242c3bc0a268189557e050606f3481fe57c74e16b9d20260cd80c5a84cf748df11b8c1e4b189d2257397fdc4a2d67cd1
SSDEEP 768:EjaeqD4MlshiLdMma3p0PfcOKf/eV5R4HTytYYqgHvPgWyjWtxjTo:EqcjhIdMh3ufOfgWTwJjyj2y
TLSH
T17B03D07AECB85CB79CB28685730277976EB842A3C3C52B64D9DC5A0D019B6DF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 7015276ae728656e66c7b36c1dbf2ece2ab66f230c4d8fa1b9939685559a54c9
MD5 12140c365ac319f5b433502f6541c54e
SHA1 f26d8e84be13090605026a350f6e53b17dfe1d36
SHA512 ec6c779dcfc5eecc268756f437915c025e0bfb82768a57ac6db70c1504836bde687975049161d20ffbce1f5fd60be37933bb444a0602b7df830c54725fd7bd4b
SSDEEP 768:hj+9k3So5PfcOKf/5fIV5R4HTytYYqgHvPw6vIXs4hSoKAevL:89k3tfOfxfmWTwJFvyx0oKAevL
TLSH
T1C0139B3DDD685C7F099EBB48221E2A572DE84237D2F45658EBC40B0C9977A8CF343919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 5838e7a9e05be7ff68af7eb1fd9f9288593e675be6c520ae08c0fde0d86627b0
MD5 8fdbcfbe81c02eb60c8339342a1b3253
SHA1 dfc6792a24d0c77b2f2cafeb17f9989773502105
SHA512 aeca5a8a4d7e1cf0b387d0b0d45e7ad422d2675f509f4e2cc666eada4460a99848602865d1cd4e6a1b2f934f2018f6562c76ffed9767c5f35ba9c5314b589817
SSDEEP 3:MsEllllkEthXllkl2zEflMZKlt:/M/xT02zNZq
TLSH
T12B4404047FD01C05CD0010304453C3503370D5104D1157C334D10533DCC75405D4C044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

68357521-35c2-4e55-8d32-b0b39e1c6dde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\68357521-35c2-4e55-8d32-b0b39e1c6dde.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 f35a4f569a8d6e9a53c7abbb2fdca981cdaaf4108e2934925648d90000b72a42
MD5 29f0806ef1eab44a9cac51d6178104b2
SHA1 da9a041647bf896631ff9a3a1470aec96da1eeb0
SHA512 02d7f20c525765b0a77f7738b19fedba3472edd6c259dff60db5beb1f82ebbef1c72f48fa68ede5aaf452b953f8d1b959494e48c37cde60ada7cef9e322eec56
SSDEEP 24:TLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/sufL:To/IHRH34kWqB1kQnjhHmr6ITmUuL
TLSH
T14C23896EDA2CB9A1FEE40B3DD7D1D4127B36AA0EC2E4D9F1099B406746C540405EB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 241d098ff0113bb8140d64a74e17581afc3d873347f993a000a91bc909ba5912
MD5 b399f7939db235249b769bdbe0bcfd8e
SHA1 f6deabec11bc0e239f8195c27c599d002b9908de
SHA512 3fbade5fd13270f31dbfb23ce748a79ba65f5c23b129bddcc84f9632a50be5734ac9c480135d1a830fe148b39c642f7be65a0756933ef5ccd7c7854fb06f6e44
TLSH
T15A21F8A43623733F57874BC8A1764C946760F189032B6A5CED1A4434BE4CEE2976EBC9
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6140_1236009841\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1472-13-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-10-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-32-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-31-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-20-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-14-0x00007FFA2BD10000-0x00007FFA2BD20000-memory.dmp

Download

memory/1472-11-0x00007FFA2BD10000-0x00007FFA2BD20000-memory.dmp

Download

memory/1472-33-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-12-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-8-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-9-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-34-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-5-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-6-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-7-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-3-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-1-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-4-0x00007FFA6E5FF000-0x00007FFA6E600000-memory.dmp

Download

memory/1472-2-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

memory/1472-35-0x00007FFA6E4A0000-0x00007FFA6E703000-memory.dmp

Download

memory/1472-0-0x00007FFA2E5E0000-0x00007FFA2E5F0000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads