c041dfb3dc7474dff1648692ab96e37399878c63fc5b538ff0aa9e99d8c87d22

Analysis

user interaction
yes
max time kernel
26s
max time network
27s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 19:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fastflag_injector_gui_enhanced.exe
Size 277KB
Sample260629-xrjavaet4n
SHA256 c041dfb3dc7474dff1648692ab96e37399878c63fc5b538ff0aa9e99d8c87d22
MD5 3037d9bcdc1ab93e0df1bf430d6edf6c
SHA1 30cc5ef77b1a9fbeb7863cfeda8b4d25d4e11bd6
SHA512 9d8e7fddb86048af10f800b686a6ed0ff1379f3f1519d6469500ce9ace858c019da584f5db97f5d48c488d13686fbfb4b8291232cd536c78887b5a4fcc759dfa
SSDEEP 3072:GZ/BEIveCga2pvj2AG8CI95a1zEd9erY71uzJg0efbeF6Pi+n0fhhpd+6aJ2oofB:gBE+R2h6YgrY71uQnAhpdjm3FLa5X
TLSH
T1AA54B61FEAA614E1D4BAC038D153B13BFCB174A68331A7D797815A4B1B61BE4E93E700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4236	msedge.exe
5452	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3865087520-2734723108-1233268525-1000\{6FF720C7-065F-4A51-A579-BC988B2A87F1}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3865087520-2734723108-1233268525-1000\{2CD88715-75B2-4D0B-A154-7FABF80F884F}	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5916	fastflag_injector_gui_enhanced.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
816	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1892	msedge.exe
1892	msedge.exe
1892	msedge.exe
1892	msedge.exe
1892	msedge.exe
1892	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1892	msedge.exe
1892	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 5916 wrote to memory of 1892	5916	fastflag_injector_gui_enhanced.exe	87
PID 1892 wrote to memory of 3776	1892	msedge.exe	88
PID 1892 wrote to memory of 5732	1892	msedge.exe	90
PID 1892 wrote to memory of 4236	1892	msedge.exe	91
PID 1892 wrote to memory of 5732	1892	msedge.exe	90
PID 1892 wrote to memory of 5732	1892	msedge.exe	90
PID 1892 wrote to memory of 4944	1892	msedge.exe	92
PID 1892 wrote to memory of 4944	1892	msedge.exe	92
PID 1892 wrote to memory of 4560	1892	msedge.exe	93
PID 1892 wrote to memory of 3368	1892	msedge.exe	94
PID 1892 wrote to memory of 4560	1892	msedge.exe	93
PID 1892 wrote to memory of 4560	1892	msedge.exe	93
PID 1892 wrote to memory of 3368	1892	msedge.exe	94
PID 1892 wrote to memory of 3368	1892	msedge.exe	94
PID 1892 wrote to memory of 1292	1892	msedge.exe	95
PID 1892 wrote to memory of 2804	1892	msedge.exe	96
PID 1892 wrote to memory of 1292	1892	msedge.exe	95
PID 1892 wrote to memory of 1292	1892	msedge.exe	95
PID 1892 wrote to memory of 2804	1892	msedge.exe	96
PID 1892 wrote to memory of 2804	1892	msedge.exe	96
PID 1892 wrote to memory of 4104	1892	msedge.exe	97
PID 1892 wrote to memory of 4104	1892	msedge.exe	97
PID 1892 wrote to memory of 5476	1892	msedge.exe	99
PID 1892 wrote to memory of 5476	1892	msedge.exe	99
PID 1892 wrote to memory of 5476	1892	msedge.exe	99
PID 1892 wrote to memory of 3756	1892	msedge.exe	100
PID 1892 wrote to memory of 3756	1892	msedge.exe	100
PID 1892 wrote to memory of 2664	1892	msedge.exe	101
PID 1892 wrote to memory of 2664	1892	msedge.exe	101
PID 1892 wrote to memory of 2664	1892	msedge.exe	101
PID 1892 wrote to memory of 4644	1892	msedge.exe	102
PID 1892 wrote to memory of 4644	1892	msedge.exe	102
PID 1892 wrote to memory of 1996	1892	msedge.exe	103
PID 1892 wrote to memory of 1996	1892	msedge.exe	103
PID 1892 wrote to memory of 5348	1892	msedge.exe	105
PID 1892 wrote to memory of 2904	1892	msedge.exe	106
PID 1892 wrote to memory of 2904	1892	msedge.exe	106
PID 1892 wrote to memory of 1244	1892	msedge.exe	110
PID 1892 wrote to memory of 1244	1892	msedge.exe	110
PID 1892 wrote to memory of 2400	1892	msedge.exe	111
PID 2400 wrote to memory of 2928	2400	msedge.exe	112
PID 2400 wrote to memory of 4856	2400	msedge.exe	113
PID 2400 wrote to memory of 5452	2400	msedge.exe	114
PID 2400 wrote to memory of 4856	2400	msedge.exe	113
PID 2400 wrote to memory of 4856	2400	msedge.exe	113
PID 2400 wrote to memory of 2780	2400	msedge.exe	116
PID 2400 wrote to memory of 2780	2400	msedge.exe	116
PID 2400 wrote to memory of 3560	2400	msedge.exe	118

C:\Users\Admin\AppData\Local\Temp\fastflag_injector_gui_enhanced.exe
"C:\Users\Admin\AppData\Local\Temp\fastflag_injector_gui_enhanced.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://guns.lol/davedown
  2⤵
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2f0,0x31c,0x7ff803c1c188,0x7ff803c1c194,0x7ff803c1c1a0
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,5000944912871034413,9658391665171457598,262144 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,6383150434479172831,9314346391760619015,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,8963257417210446650,4129913534948689063,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:13
    3⤵
    PID:4944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,12713365413899020393,13249976290245344580,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,5175047335834376230,6747956585245467262,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
    3⤵
    PID:3368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,17876539355416119764,8714855477197797132,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:1
    3⤵
    PID:1292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,13114307051385385931,12171515043966149575,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:9
    3⤵
    PID:2804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,765945278385878229,17798184414482105289,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5380,i,8313454069283326412,17324863787432323277,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
    3⤵
    PID:5476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,4721612364823057245,3774723951429348516,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:12
    3⤵
    PID:3756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5636,i,15478334485805666990,3280671297212669799,2097152 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
    3⤵
    PID:2664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7849177424832456777,11832086367764602832,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
    3⤵
    PID:4644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,12436380679747002081,17684715518481974922,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
    3⤵
    PID:1996
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,4072987679070170053,16961300246048059739,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,4072987679070170053,16961300246048059739,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
    3⤵
    PID:5348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,7346607145804879954,10232937916117943963,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:14
    3⤵
    PID:2904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7264,i,12825067505883561216,2013767077734092141,524288 --field-trial-handle=2424,i,6341304649097762801,8859751407971628041,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:14
    3⤵
    PID:1244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:2400
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff803c1c188,0x7ff803c1c194,0x7ff803c1c1a0
      4⤵
      PID:2928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,3496981762586921840,15496523517498662864,262144 --field-trial-handle=2244,i,17335600236474548269,15698981295290808267,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
      4⤵
      PID:4856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,13358663766981231622,7927126734703637822,524288 --field-trial-handle=2244,i,17335600236474548269,15698981295290808267,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
      4⤵
      System Time Discovery
      PID:5452
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,2258239794057956358,15328050828469819219,524288 --field-trial-handle=2244,i,17335600236474548269,15698981295290808267,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
      4⤵
      PID:2780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,11513262419895928291,14892348334773040762,524288 --field-trial-handle=2244,i,17335600236474548269,15698981295290808267,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
      4⤵
      PID:3548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,11513262419895928291,14892348334773040762,524288 --field-trial-handle=2244,i,17335600236474548269,15698981295290808267,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
      4⤵
      PID:3560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4864

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:5492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 37abd39218624bea608ed1c31cedc29697ad7dcee756e85d36f477bc96d5d79e
MD5 02d5d30f7a50d6501cf8e28620d036a8
SHA1 7b35285f7d86d5c3e0211627a1949eba907bccc2
SHA512 75c5013e8f146add9f0df252bb7669ce045b68d4f02b1aa7609d01a9ab18fda0f9b2e387ce15f36d76b8019dce58f4ed010f4a4528819164adeaf356a9fdc485
TLSH
T1FFD0C02D3D44FC02C1891070760033D0756001F03056C3C59002E01DDC3814083DB0AF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d9e7818ed96fa339be0a8faaf5046a0938b994dae150e9def3a71a2082d5584
MD5 4b5a2dc4c941126ce3fdd36c7ec33463
SHA1 d283044bc5f590c933c5c5f4a8f1b4cc990ae3df
SHA512 e4c14acc2ece7fd19c657bd10e793db78b86497d476f15197a1caee9729a44b9b5c5fdadf17381c970a3c24709a9dd24d6ab995df504a937befcde12e2c8ab45
TLSH
T10CD097283925BDE3C22C10709220030079A402E23256C2C2A001C40D4C380808A83292
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b1fe4569ce4f2879537cc56128151ad5f97b07c2956999a69e231d8b4bd9a564
MD5 c615aab3bbfc54c56d40e254ad600037
SHA1 1a4ea304aa5f46bc7fba1770f5ea7f6b59c9df12
SHA512 26a28f9743c7f95ca39fbde912d643fe30da807cdc8b830c249f97660a755ddfb22fd88628478fc81bd0f39e9aa8a76fca56414a7aa1119d67149f91eb6daafd
TLSH
T1C4D0236C31067D03C20D00B0A00363103BF001F2778AC1C2A001D00C1C7C49083C3072
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b4b91e2c6408056d62e9ab108c4a1bc3372697cc673aea50cc1ab639cb36d31
MD5 31627e295d41c3cf43475c41d5522c43
SHA1 03580db0a47167f6acdfbb28d1db3e5fd631377d
SHA512 b71b6edd012c155ef24382afc691d07b436ca311747e424ecd928e1ae50b54eb9c2cef7113ea3e73a4f92dfa3cafacd84c0410c0f05a6860d79a46a87ba532f3
TLSH
T192D0C0293D44FC02C1891070760133D0755001F03056C3C59002E02DDC3814083DB09B
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c7cdb1920b8cb4b953aeb3363dc0a13da1304a7206035f12fa730bdcb07efaad
MD5 1031e92fc0853665a1ddb60459fea4f3
SHA1 277b2aa40434d38f1eef59f2182f43643b0dbc02
SHA512 e13aaa156e90138c698126a701615969a814fda84875fe52ae839f545d0aca89c1c966a1d98b941336465723641f59f4f38d9ccc69401ef3b68a8c57c5c658ea
TLSH
T11CE061AACD71DC374CFD475DA0544349D61517672B90491F373C520C8FF16360546D2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 fd56076835e1b3f6fb67513c1a00287978cef69daf6fa73113030563c3081c83
MD5 3c54988aa12f3941e6744860b530b3a1
SHA1 72188212c962ef789ccc29a152a955ee8d95bee9
SHA512 6af9d3be3805508b1a4bef6a7dce308d1a00cf4e32d499278906534fe72204e6e7c60921dc3cd230d9db68f2ec4cf3503443748bf70fcf555c95c6f37dae0055
SSDEEP 192:oiELtv4ezYYNqS67/bnR3uNikM7wKVKmKHKVKqKJRsO/HDRsHUyrtCvDvRxZLJ6f:oiiCesVV7DR3uNs7wKpOGDrt+xNJ6OY
TLSH
T10313B3BD7E751C66CADAC63CC50B6B3AEB31D761E0D911CB4BB1F0A24A523764D8E002
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 706e2d8210fa20664fbfd6afee555461e8da21c926802f679357acfc1e19febc
MD5 e2ab12f3a1f1cd95a81900ee8a8d44ee
SHA1 e81e8821500a6c7e7364f3b7d3f75a4dc485029d
SHA512 7ae9fd357e0e6041fcfa873ec2f7f1e564b9252bb92d07f1c9e234e157463b3b24f2ea8a56d1a1ce98dbeb6111346d2fad2ab29ee198d38f501a64ed61de6738
SSDEEP 1536:QXL/WIL/mObo+YeGHRNsdkD2s/rwhfxsrp4IeiL/1L/rL/mPFY:QXL/bL/KH7kfxsrp4IeiL/1L/rL/
TLSH
T1294462F71911A00BCB9842F5E6033A3ED5774A0D7CE1E9A9EA386C852C35B7176FCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 6acb76ec08207753a4cd9b3a801fa9d7cfbb955668c8a42a5132f39c60dccac4
MD5 3ca68f826b24714f81b248362b500039
SHA1 3d9563b9b885e5639c0b3106c334f650d0a676c3
SHA512 8367b3e32756b8bda68d9abd68eacf5af3847b3708df85f5d4d2efd826ac62192d1d72f6c9cb3112d3dc8614d24c0d401f0117b6b6bf521d4b86d21d6931a52b
SSDEEP 3072:kv9G+HN4mD+HfU2XJTHmz0WOADk9p3SDCod/azu3PCr9rfR4tZfrMrcVcr3rurLr:kQ8umDEDhGlhw3a8cP8VqZTq77of
TLSH
T10E255EDECB381D83CFA7CA70B5D0C80B7E742183B599E0C36941C5A946D2BC57AE926D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 8a14b65915a5920338b78f1e67ba88fc60a65da7dd9c88ebcea24a51c4d23390
MD5 f11d956a78ae9d03d9fc215bad55c896
SHA1 c67412057c3b950ba4bc2afc06c6321d599ff89e
SHA512 b0fdec3e0eebd99176244e6da9d021abf1418d20707148a50482f35247a7255858e6029abd0822304b41598798fcf3667030c75939ebebb0d39606a7610f9589
SSDEEP 24576:IHCd1nQBxAoxH3EgCZ5K6JCJVyFQ5L7JfwXM833Y6FVcVAAg:IAQBiQtl6UJVFJwXJ/l
TLSH
T144168DEDCA7858C3CD639A30B5F0E9477C7413C3F994C1D68C98C584026BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 1024KB
SHA256 001e050d228355a47cc4a585dc06049b0e4a453a4cc6cc4f61f7f0cc01f5651a
MD5 1c0d6e1bdbbaf53b44725457fff9eedb
SHA1 196ed8d8383d32a146a2b079c4d6d30a5fe584bd
SHA512 95659e49feff5ec3e7d2f5ef47849bf1d53538fece05e3d724b370eb381074b20f7638ca7ba1ed535749986d4e792beda08f9ba6dfbb13074f2bc80ace9b9090
SSDEEP 24576:kv7+28eVAuiPCdI9GB4/OlBKMx8eGUIZ4TyAW9F7r:kv/iuiqRlBKMkLt7f
TLSH
T18F25231747300859D10F8271ACD75A94FBA72E6F1A0BB2FDA22AB7C2DC7A221D1DF505
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 712b24d07d8e178c4a4b7798d56c144c0859b4d0f3c11ed8784130e3c15519d5
MD5 9c709645f05ada9b3db270dab1aa6dfd
SHA1 4161560ba4d6c1908f08504d193864357ac5496b
SHA512 1a3225efcd6145fb76d24fcfbb78c8d3e1192cdf8501511a309e5c01baec3ea9bfd175d1e6009e3787b04661051c9915aba28c634e419ed0d747492303e27b4e
SSDEEP 96:6RzymPkHR1M3EOeQ/p5rykvk1s/hz/LKEHVivTUB/KYsoVE/Z7kb6O97zR96P2rZ:6Rzym8x23EU/p5ukvk1s/BLKkVivTUBt
TLSH
T13281C4140C344A31DB29C775D2FE1087377CB0A64A276EE6625EF1FCCC667B66895023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 48077a10bc5ba1ca08c3e21c08da1d5ef5498fa3e14ad502f63c274f5b779f9f
MD5 d10916027e434ed0861a1616a6c82b61
SHA1 da00d6ed46bbe3a576b44ea22c40cb754587c46c
SHA512 8ab7e948f00515ea0142fac44f8766258e9d7f7d2dd1f57ad02c870ca68cde0d09876789b216753b29e8d82e0b06740031a16e1938639762f7da009f4f35ca28
TLSH
T15AE0D8A8D8C6C36D9911348B42285B588194344BD6C66D4B370888C47A47212F787567
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 8434e2482a7b01155926530124c9d42b6158aa65dd91cef1b5861463297a36d2
MD5 94d3c43c10491862880cea9fdeb06638
SHA1 8557d6ccc16a6565343c849d482f3d090810af37
SHA512 3698c7522a2e2361edde89dcfb6a4f55eba265a599319796f8e83f431f3eda9f6c8d86e32a7c3348ae3405ba558566cd8a686091fa3376a923bb941fd602944d
SSDEEP 48:T9D4jJ/0UC+lf5LItWxjLnWx3ZVLCm+KROQit++2py:xD4jJ/JGcLnAVLCm+TJ++2py
TLSH
T1DDE2014D7A12F611C4FE773EA0C1C5E08AFC656C5A9CB070A63C99768D62576F48F20E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 ea73aeb21c79f945d2fad0a2d4ed39f86a5d5e922b6cf2ae262e2569ecdf6350
MD5 9a54e6ed264c800d5d5d2f17f8fc5b86
SHA1 0f92af1836901a57a18270c57c377e7100b24c71
SHA512 84b6f65b77c14be98f2571601ce76c9556936bb3c51033755599d5386ad061939d8cd46c21c16541952a1b1081623a2c24795ee31eb84be1b83d74f35fcc4638
TLSH
T10CE0264889EAC36DD41468D3C37D578E83F0340EA2CC3B07370D98807101741E2C62A5
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 d00344a3f905078c7dfb478bed559a393ac8eab71f43a93fa1536594aed986aa
MD5 271cd62e4cc3d5323e37a9f46eb3ecca
SHA1 7eba83e2b430e0ec94baeef09397e1ec6ce707f9
SHA512 16892ae5b4bfb319594fcc32e9b8b79c2e66f6b3b5155962a3ac50322c648e8c37a8970e13c6b01ff81aab5f8f25306bee28a9d6e27b7bcf3d7f8930579325a6
SSDEEP 48:IzBmw6QU1PzI2oV/olFXv/lsz4UCLXezhNqMVMcEGFkGlRPjcsO:UBCxI2oVwlH4nqMECRhO
TLSH
T16DB208472F347413EF412E3F7A1A54B9E93BA32C5FA9AE09346028558CF840695791FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 dfc50b68ec503f58c3ff2b08b3d7c0e6319b8e199209f9976c721cd8e30d7c8f
MD5 dd381e8a20a1ca9c8e87a6ef035dadef
SHA1 344a9aacb501749fd3bacad1ac2af826b27e8b26
SHA512 3fb56c56c9918212cf743b8d60f192e243c5af8310c2c60f6bfe7889688e41bb3df3b2b2742c2bc28392064ad780018cb7c0e3d8c4d0d9b8f76e4157ee7a036a
SSDEEP 96:r1PKMHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/6OBbbEOVpZf24JkMfXSFR+B:rlKLH+bF+UI3iWGVoWN3qL/nVVV63
TLSH
T1C824101E5F343722CDBD913668E744A35C7DF03F8B5366DA686114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 400B
SHA256 9401a2c67e80438f4c09fe716495cfc79090b47547201be071daf62799233d4b
MD5 743462e2f9152965cbab6d99391ee4a5
SHA1 b7f3674427e25ae873bf82b37ec2abf99edcbe56
SHA512 39ec201bfd7a41482ce138cdf1560cb6960e45ab876af6e7250bc691383b99f6624cc27612c50fa67fbaf617889ddd16d4f4729f2702413bc9a013e0b646c444
TLSH
T159E0ABFFAC770942AF2062F03CE9727CE912170C4CC0A2E69F53741B89B21B19074E54
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 3a04a4cede1adfb7bde747028baa1f1a92bcda90471f2b1b8f171190f0d40bfe
MD5 09163fc1dde5f1016cc0899a4f2325a7
SHA1 958608f30ebc672b9fee5645748e5c9e86651e78
SHA512 4f28aff815b6ac89b9799be742edca0bce304edfb5996ddf41341e1a132c6353b286e47832d31f43ff6e17dfc45c4bca422db26db1b8c05858d50120cf1df6fb
TLSH
T178E0D864C9EED7196604205B423C6749C3F0344AE6C92E563B04A842B445204E3D11E7
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 43094ec9ab61cdbbbc28a73d8dd5d347d55db3c06bd2d8949db7b3cf48ed460c
MD5 aebb802d8bbf43c39816c3b4917e9ec2
SHA1 b78a3afc1af02f4229b46ebe4c32ed720e8814e4
SHA512 7ca750d2c2702a83b587f1fe694bf7e7015446d70787531554effe6ac974956223c1295f4fec44c0816acfdbfa4aaec76e2e81e6ce3d0a126c4d6ad85cdc8723
SSDEEP 48:Txk/LopFMaty423w/a9NUuTJLEcwG5ycw+HN0w+sL3r7owOlDMfpHtoRwrPnzFl8:qDeMatha97LL65VsL3QlDaI2nzKOo
TLSH
T184B2C88E3F2C6002C2FB5A3DDEC140123D7C206D9BB37515AE0565B68CB3393B56A076
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3c5263deef008951f6df33d950c086d7aa583596c2a5eee3808db283fe608594
MD5 b86377c892c2a9d7eacccf7de13a8bfc
SHA1 b7a78030fb39f8a301ba4a5a6312cc1394038800
SHA512 62f2695e68a2def81ee3dc60f4b4d355da83894153f8a8e2d191409b16789661afa0d60c93a5127d1708d0af67e21f88dbcadd79d4b76e051f148d0c3bfb8bc1
TLSH
T1F9218EF7C2F8467D8A4146F877142E2BCE2D4854832C3D56C8D4AF9F93E14B1E28095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 082ea0517709d8f4d5c983707233238a96f1aca9e5eff5db5fc6df331c942084
MD5 2bf8310e8d3471fba6b9435831352f4a
SHA1 54fedcd860f9c631e57458171fe8f174d0799e74
SHA512 3f698599344ef11918772bdbc955eb78407d7193725ddd6ce438fe2f035da796fe6423131c391faa5ff6ce09bd1ee1dd23ac10d273b525341f7148de77a62417
SSDEEP 96:DJOULxpP0I6Ga4jhyaRzB2cLrVmRLlotIm49mwxBZkAmCp:DMULxpP0I6Ga4jhyaR12cLrVmRLlotID
TLSH
T1C7B1AEF3C7E9866ED90152F1AA143E2BCE1D0915832C3C1AC9E49F1BA7E24B1E141B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 087aff3c8adaadcec553557a68bc5fd2ddcd4e5cf0a98f43f97a44601d57d63f
MD5 846fdbbde213e9540b1dae531a557261
SHA1 e77ff5871f0e8c488208046887c504c67cb6eadf
SHA512 19b0a6cafc67400878274e44b1d0c59d503157907d294430d597c28cec45e60f2b476712362897ace45974826bb8dd5a006c36536906cd91af9151ced45d44df
TLSH
T1D1F024DB81BAB8AB2028197F5E407C15E97AA835010058F1DDE281BCB0C34B71E161AB
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8ce3a796182170d45cdf22d0046144a38bd5685b7a9c71fe014ff169670e5cac
MD5 c1aba21c1c5673308b73a88602e4f174
SHA1 07832dc33a40d3348989955361ee4ebdadc54f44
SHA512 e8359099dc723e02cc60d1d4cfc17b3ac33e6f27a50d6ea02123c69f0108ecbc9980c443d6357e37ee102672d0ca8e2fb0ba6277a28fc6380e2023a144d190f0
SSDEEP 192:sxRyzRqyM/jK1Ml8wcB/fJsgwWl3p6OSzoA8py+/g6+WNIGhZ/eB6dHiR9GtJIg3:sxRyzACB/fJsgwWh0UV/53Z/eN813
TLSH
T10A62DA06A63459778CDBD309FA557F53D2F81563A2905E44AEFC9A0C01E76ED221383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 8c5ed1c35066b27fc7df54ca5077069a6ea7a7759cbb8eb9b51f954d5b3f7bcb
MD5 a74e494e35d3fe6348036b7b584517e3
SHA1 f52086c36864cb4a4a954220ad0035508e784f90
SHA512 4a24c2a5107aedbf6a37eaa092ddf9847b180a7ad2830687a3d4baea08032b228182584e37436deb7078d84e300e5d0ed5106e8ad986969cee84794f5dfa027a
SSDEEP 192:sxRygRqyM/jK1Ml85cB/fJsW6WpVQWlZrAHzoA8py+/g6+WNYh2cXeB6dnDRqgt4:sxRygwlB/fJsW6WvQWLrDV/5+XeKh1u
TLSH
T13572D916A5345D7B8CDBD21DFA51BF63D6F80563A2905E44AEFC8A0C01E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 f2173558488ce433bce8af599d57fa4ffa315a3d2a04a81b7d9cbbb3198ba7c2
MD5 a96e65e379a99fbd73624a6a8339d057
SHA1 79fcb1d94221c6fb17fe9d0cba3f8d72809fc6eb
SHA512 4ceb8bf019e1206b40f5306d5c8a60527fab6be1fe362a18cd370bf88427abb4fd071f4c2511df6f290974e8ce2804e26a26c20c0a4006b2d13d23144e6fa195
SSDEEP 768:6laYfO7pLuL7mjWgRNfMb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVGkDAzwdro3Jxl:6laYfOE7mjWgRNfMbu1jadkDUwW5xl
TLSH
T18BE2EC7B680CCB7E4F40499CEC297E9EAD9C02CF5698CD9447EA880C03C67EB55165EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 00ac504d9098040a84d28add7b1a14df419107dc73b6e7cb3c3713aa46c94950
MD5 b09a276c3707ba1554a2b9fb216a76de
SHA1 5a194a8da58cafa47f4cebf7746d8bf2e4fa928a
SHA512 e6009e7fc2bacb279ab115323ec2f51d04299a30bb0261e8e12cdd50ad6b14b5b82be1ee4de40b4ffcacb9b226fff165609895449799ab1c4d8b887705703039
TLSH
T18BE026B489CAD37D68273447062C974DA2F4B42BD3C83D06BF00E8447543704F1D21A2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 98db8679fd14ec16a6732c010b546558872257784bc13ca414c1c49b0336a7c4
MD5 d2e6642284df47b8da5e4c352bce1471
SHA1 43b52c12f10237a3b83e477c8a7ba38db2a6edd7
SHA512 05e45ef97209b4d27655d47cc4023a14377cb666bf93bd334479ddb5e9e6e1f35fff769ca57313064c5c7ccc55cdb88b4bb9dd94950f66f00371c35ad03f6ad3
TLSH
T14DB0126C7F006501C5D84A3031A04F54A610E0451086F52758A97F311D8596A3F04CD9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 b885b224e2379bfd947a195cb3dd5cde75856a3bc735fbf8a4ab82c42100bfcb
MD5 39a5855221783dce3c8fe97e1db73d9a
SHA1 5a8bcc4a7b132504f5075a8affb92d82ea2e40a4
SHA512 f4ec858d256adcc3e5e468e64416d1f15a848d24d2c0526cd9c185d284e84f383f31f62aa4f8e9afacc96a571145ea44bfee24cb9d83c2d100fd61683de237ec
TLSH
T1A5E0D8A499CBC32B725A74875218D34DD3B27416D6DA2D267F08F8816307240F283161
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 c85f78261d5b7787239b662be838c418c7b37038608d2a4ba5c597fc067c5573
MD5 7f0f1a5dbbe5ddf6b8af82cd81186467
SHA1 9dfdee0d5cbb8c7a76d5d4a68e6811176b50ba50
SHA512 1214da43eaf90a9a5f7dbe1fccf41115b5f80da6d8b1a2419f71afd4008789f48ce02eba84a8e37c1acaafd3ae110ae4f0d69768f8b7ec662771ac9db28e0695
TLSH
T116E02674C9EBC339A51865838368975ED2F0781BD3CA3E0ABB08E481A901200F2E79A1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 197e9ee89fc7833772540403f3f70f2de6c94b50974a56302e7ed74e458ce363
MD5 3011d028cbf32e488df3591755e2192d
SHA1 aad912506f3ee77b9a78f888a7d9e94d347b6278
SHA512 a074c75c6e5550d0b67216d2b25e92ced91865af6ecd02121b6271cacb3d09e6bd08b92b3fdd4944da484a0a41b2b75b043540ddca720a1d5b0e442cb5e5df23
SSDEEP 96:KOf2DvFB1Qx5kD3HQKfF3NQDXHUtf9+X6Ko0mSacK3KICGMKvKQPUTf5T:9f2DvFB1I5kjHbF3NQXHUtf9hBHdf7PY
TLSH
T1B8C11400B3FA2B50387D781692F9A45B5141346532EEE83B3F6835E36B26E401EFD6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 5c027f71450eb12925483c7a16c9580e584cb7dab61a074be0e81e40c180e80a
MD5 91003ef49d045e1e10c902e7d93755d0
SHA1 c9e56af724c93a6c8b77944225e6b3c88842bea1
SHA512 fe56855f4572a8c65be699a9adea05698476a0c53e74998808f25d2cf4b96bee0665bbe1fe802aec7437c8e8b2de7b216086bc433fca4f23b7e9b7c6fe94b45e
SSDEEP 192:9f2DvFB1I5kjHbF3NQXHUtf9hBHdf7PUTf5lJKtGTnb1nRC3n2xvtFh:9f2DvFB1I5kjHbF3NQXHUtfPpV7PUTf/
TLSH
T18DF12800B7FA2B50387E6816A2F9A41F5141346532D9E83B3B6834E36F26E005EFD7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 ce0eaca280f298444799556b8e58b5ba55d27f81ca7c35b8701470083f81a30b
MD5 fc4fe3d92d07102e914eb09bc3a6e919
SHA1 eb6ae83f8be2131d6956ff58351ed40b66128131
SHA512 b8fd535c0b279fb61eaf0379abcbd5df5157b334f94f663a145b3a92006df6442ebcff05f41ac5eb5603b5ab982eb5d807cdda6e975efcc5dcf65df62e6298bf
SSDEEP 384:DNrRZyCSDnxTICfSMEhIKyll7svbFKfk7:xFZJSDniyyI1l7svbF9
TLSH
T1BE44730A7B747001EDE7D9721CB080771E3CB16E8F22A6916DA254694DB3853A63D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 d18ee0e3dda9fff71656c66f028987111cb465d8e2fc7dcb56570f586dd0b268
MD5 265f378ad3554913b17bd11ec057a21f
SHA1 f54340b815fe138e0cf9cb9c1eefbd1959bc9cb3
SHA512 059bfdb0e83107d792ed8a26c7ea195018fa92aed0175be0fb5e2018af2711fb2fed90c89c8b2bd2e367943ad9adacd594b4593b9620c943578f2eac61178be9
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgTM6tT3MMGt:DEK3tjkSI5IUltGhp22iSBgo6t4MW
TLSH
T14E52AF9FFE343212CDD583319EC002E1BE7B513D8FC1D70254D910515EB5551631E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef1562b5-9c2a-4b3a-a1d9-e604a934c13b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ef1562b5-9c2a-4b3a-a1d9-e604a934c13b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 47787e507c4b29a46beb1cf5403722a2b0908de5b0a1cdb1faf427e9bd3014d5
MD5 e6e44b51496f0b3e41b6ac3aeefab35b
SHA1 b278b26485ea1176bb9049aca6ed96d557cae09b
SHA512 26cee0a7a0ef7a5b4572d4fee9fa525e93543a5f5aa440de418046a1ed2b3a99328aec6e0786fe2dc3c83e4cd660cdfb956ff4df040450dc4160ac75600948f0
SSDEEP 192:hpeQOIIINbNMIM/mYcYSrUOw9AsIl9wuus+9:hYQOIIINbNMIM+BfwOsqQs
TLSH
T16042636E16062B77E5DE6B76536687416BD888C11072232D72522D0F8EF3F9782C92F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 1b9f8f053e1907b34000b26a53c28fb137aa888e573bd8c385db0266c49bdb0d
MD5 60ca8b69ada6c66d1e1f4663b27eedb3
SHA1 c282ee25af89aa3e911617eb4c1920dbc9351c43
SHA512 0ba58a0c0e4c1251a8d5d3ab70830e59227c2719cd8c0e10373dc132c3c0e4ccc80fcb8092ea06d4b5bbfa87903775320f710003241e3f07efdbd2b3df8ee688
TLSH
T116E02614FCEAC3AEA41421874138438AC3A4385BEAD8390A3F00C889B805200F2E71AA
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 7b3f8fe676cfe1862814d1eeed77b250c6ae51ee18481a6d698ae5df2ac9c5d4
MD5 b81329e4653aaa65ca2b2a4f26c775e8
SHA1 ee5262543e8a332339c3054ff5b46c065a5ab0ef
SHA512 9827a1d21d9d07e7187250ed62c9f0ec292531c40b1474b0b73ade0d284ae350daf9a9441f1c8c97ee3abb6bc0205d81d375d02cd8f9371a5762e651db1b4117
TLSH
T15621E186F330C108E149863E947B9B3A1334E8268FBCDC0F557934746E76B040E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 dd45ac143da8df20e5aa5160ea713ee9e25930d1742cf271e8937fda0c784bee
MD5 936b6bd07b0931a68cdce5f24190eecd
SHA1 dce7c1cb00123c790baf3271385ab8ae191ceb6c
SHA512 487885094c134ce926fe6d05c7906eaba3aa44fe3a0f1676871331ab08654928b52bda8128f0d56d741dee2fb19a6f9dc0503f0ca29bdcb1cfb828af7bd1ebb2
TLSH
T1A1E02064FCD9C39F6010318381788389C3E13847FAC43E063F04DC466505241F2DA16B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 457ca33261a93826eeb18e155ca07ee1b472c88ce32fbdb1ff86b61610354bde
MD5 6898cf7d50abcc261d5109aa862b7163
SHA1 20854ca5ce8e95b3893b6fcf308f386e7ec5bbe6
SHA512 4e4aeeebd3855d7ad76593241a42c340dbc4743cd633699f3af27029783501d8a380e3c32ccc4f1349fadec9d64b40fccadc2ad459b7ae07e6fe20c965a0ffc9
SSDEEP 3:MsEllllkEthXllkl2zEflgQl/:/M/xT02ztQ
TLSH
T1BB44045C7FC0040FD500303040D1D3D0137CDD500511575334D705335CC75C00C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 939e32f834f6d079642b6c785a707353f39ff2ceb607627af69f7965e6a860de
MD5 8a1f03b149fffd110106b33634ac7592
SHA1 e87405e9bc00804b8978663057220765835eabf2
SHA512 a724467b8a59f384a69aed1a6f216108baa592cbe272be94fc822d2cc597effc05eb4c882ed7980db10abea4eb4076e059995714c2e1a1faf09a5d4564b19354
SSDEEP 3:MsEllllkEthXllkl2zEflvlKt:/M/xT02za
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5cce282226a6317c786fbef96eec5bbd22bda641a0a0ab52591f21d8a15a09f8
MD5 6d357e8845e88684af7bb684b3daba67
SHA1 4a13e57304b3d659bde6f5c0eb51e19cddfcdc51
SHA512 95b0740d641b4bc8a27bd28700d33bd43cecd2714b65492d7fd5b6bfe60cbf0b1154128d194e17afd746f45b36445071cbf8471ed3e7db8eec122b11117270fe
SSDEEP 768:Ej+9n3OQlC9x+Tf/O1bf1NfWvuWyvPIINRzWnhIoQOGKE4kHzn12bfJl:T9n3OKTfObf1NfWvMgyROIopGKDkHBy/
TLSH
T1D9138B3CDC650E7E5CEEB7886B0E26266CA84237C2F50A98D7C80B0DC2B755DF306456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 8627b5668653b0712d588e8b0d9946c5c3b4c74fb88b3fccd3fe0a6d1ec8aab6
MD5 65d88b32ad6bc74355746ad656fa002a
SHA1 8836612767c9e0030faea32ba95af6ed4eb3ab0d
SHA512 3e4cb15bddf09c21dca165baa611000faba0491c0c9cb5d67d33421eb03c5e6c444435e6dafbfb4f1acf0c08932fb9d1a0c017915d38b4c9bd82b7c78bc00756
SSDEEP 768:tj+9n3OGlC9x+Tf/O1bf1NfWvuWyvPIINRzWnhIoQuzn12bfJl:I9n3OcTfObf1NfWvMgyROIo3ByJl
TLSH
T1D9F2BE34E9654EA3ACEBD288BB4B379BAEE4467395C60F94D5CC0B4C05C73AD130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c06634624f91cc80c81ac2d4860f4b718393b9f57827a5dba4f2dbed95819235
MD5 da24c772b468b713ee997e6c9549cc46
SHA1 56bda8c07cd786650cba3835dbef2c7e21284e0b
SHA512 02a9b8546d9629880354df2b63b652dcde02d40a996d14ba52502e8c705b8bbb8c7d4e82a9f060d245404f89cfd48ace999a1803b8cea9721f3e28f33a88d816
SSDEEP 768:arv+4UNbdB3RjC9x+Tf/O1bf1vWyvPIINRzWnhIoAWY+8r7W:absbT3JTfObf1fgyROIoxYDra
TLSH
T19C03CF31E5685A63ECFAC6C8BB4B77577EF4426396C60B90C5CD1B4C418F6AE130B892
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 010cb77fe76ae6f158e0f5293527bcbfab8cc6f518d4e36eb065f691df44ceda
MD5 ccf2c6503852fa94adda44ffeea96cee
SHA1 3715d249c756ae687b2ec005dc1126f7dea737f2
SHA512 6e30838695294f8f2f04390a7fbd079a537aa3c5d82421cd160fcbeafc749bbf5b17b02e0c4b064ea74e66a840762284caedd3bef1f5022fe2312b9a0d231df5
SSDEEP 3:MsEllllkEthXllkl2zEfl6Wal:/M/xT02zI
TLSH
T1954404047FC0040DD500303040D1C3501374D5100D5157433DD1057F5DC7D440C41001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

1a7461fa-8b7e-4955-a2d3-c0686aebaccd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1a7461fa-8b7e-4955-a2d3-c0686aebaccd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1892_1073231510\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads