5bbbbf327bc884b0f4bb45416afa935367c8633e2fa52de075265424797ee32e

Analysis

user interaction
yes
max time kernel
66s
max time network
78s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
arkizz lethal dash.exe
Size 811KB
Sample260710-rm9dksdt21
SHA256 5bbbbf327bc884b0f4bb45416afa935367c8633e2fa52de075265424797ee32e
MD5 44b56e63b4b4ce7bd368a83cd189eb17
SHA1 62af46cd92177bb96ca1e92e3e7e5bcccf05a00b
SHA512 6740e273daedaa95ca62d5fee4b0c227e75da4a8f2ee8aa00fffabcf32f97238c9b3913f056a6030f492b62a94078b46fc4d1f46e0e8f5d53e333a7d06ad5a9c
SSDEEP 12288:D7xAMy0R+94go5oz6hWgO1Ytz6llETexg+5EppcryzqiwmKTMTAq:Nyg+9XA1g26xFrQ0TM0q
TLSH
T132059D63AA0A8C43D67123FD4022EBBE87135FD8696A831255F9BC73F6F5B031C19291
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4956-0-0x0000000140000000-0x00000001401CD000-memory.dmp	upx
behavioral2/memory/4956-1-0x0000000140000000-0x00000001401CD000-memory.dmp	upx
behavioral2/memory/4956-3-0x0000000140000000-0x00000001401CD000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4624	msedge.exe
3956	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4956	arkizz lethal dash.exe
4956	arkizz lethal dash.exe
1244	helppane.exe
4108	msedge.exe
4108	msedge.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4956	arkizz lethal dash.exe
4956	arkizz lethal dash.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1244	helppane.exe
1244	helppane.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 1244 wrote to memory of 4108	1244	helppane.exe	89
PID 4108 wrote to memory of 124	4108	msedge.exe	90
PID 4108 wrote to memory of 1620	4108	msedge.exe	93
PID 4108 wrote to memory of 4624	4108	msedge.exe	92
PID 4108 wrote to memory of 1620	4108	msedge.exe	93
PID 4108 wrote to memory of 1620	4108	msedge.exe	93
PID 4108 wrote to memory of 4784	4108	msedge.exe	94
PID 4108 wrote to memory of 4784	4108	msedge.exe	94
PID 4108 wrote to memory of 2996	4108	msedge.exe	95
PID 4108 wrote to memory of 5732	4108	msedge.exe	96
PID 4108 wrote to memory of 2996	4108	msedge.exe	95
PID 4108 wrote to memory of 2996	4108	msedge.exe	95
PID 4108 wrote to memory of 5732	4108	msedge.exe	96
PID 4108 wrote to memory of 5732	4108	msedge.exe	96
PID 4108 wrote to memory of 2564	4108	msedge.exe	97
PID 4108 wrote to memory of 1664	4108	msedge.exe	98
PID 4108 wrote to memory of 2564	4108	msedge.exe	97
PID 4108 wrote to memory of 2564	4108	msedge.exe	97
PID 4108 wrote to memory of 1664	4108	msedge.exe	98
PID 4108 wrote to memory of 1664	4108	msedge.exe	98
PID 1244 wrote to memory of 5640	1244	helppane.exe	99
PID 4108 wrote to memory of 4540	4108	msedge.exe	100
PID 4108 wrote to memory of 4540	4108	msedge.exe	100
PID 4108 wrote to memory of 4540	4108	msedge.exe	100
PID 4108 wrote to memory of 4656	4108	msedge.exe	102
PID 4108 wrote to memory of 4656	4108	msedge.exe	102
PID 4108 wrote to memory of 5612	4108	msedge.exe	103
PID 5612 wrote to memory of 1196	5612	msedge.exe	104

C:\Users\Admin\AppData\Local\Temp\arkizz lethal dash.exe
"C:\Users\Admin\AppData\Local\Temp\arkizz lethal dash.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4956

C:\Windows\helppane.exe
C:\Windows\helppane.exe -Embedding
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=2171120
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffd019cc188,0x7ffd019cc194,0x7ffd019cc1a0
    3⤵
    PID:124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,6856117907303611879,6020328248802193264,524288 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2000,i,816412776649189581,7571646754895791221,262144 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:2
    3⤵
    PID:1620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,5893220234133061076,7494744110363020108,524288 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:13
    3⤵
    PID:4784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,18144162495358550150,13134876743801129146,2097152 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
    3⤵
    PID:2996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,7647918161643673531,11289157182368069928,2097152 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,9572201509964785805,14813074038672489561,2097152 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
    3⤵
    PID:2564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,903590235916179807,18229517069558518225,2097152 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:9
    3⤵
    PID:1664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3636,i,18206941945915685302,4467416876751472833,2097152 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,10680568277372721739,9453133786875399954,524288 --field-trial-handle=2688,i,1427235266952817094,4105093153017903588,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
    3⤵
    PID:4656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:5612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd019cc188,0x7ffd019cc194,0x7ffd019cc1a0
      4⤵
      PID:1196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1812,i,10943456652103905954,9323932638606269880,262144 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:2
      4⤵
      PID:2524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,15928018146003124653,7890143589772872775,524288 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:11
      4⤵
      System Time Discovery
      PID:3956
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,3221743077325284317,14260343914944606807,524288 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:13
      4⤵
      PID:4124
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,4956883722072171531,421654924051448973,524288 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
      4⤵
      PID:3412
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,10210865811777687101,15230665111347996414,524288 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
      4⤵
      PID:1736
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,10210865811777687101,15230665111347996414,524288 --field-trial-handle=2836,i,10695666023174561155,8996729421983241018,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
      4⤵
      PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=2171120
  2⤵
  PID:5640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4140

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b73d1269710263f89147c3df740b27dd3688500b4f89702088f2f5c5d7dc1204
MD5 5c816483e5559cb5228e88d336becbe3
SHA1 7a17ded2bda3b923dc276750c1681ea347208c58
SHA512 45993b5f4012d33839ff4c5800d7c41ae9d6bfbec17aa5a850cb8d67f6d95968858d1a5575b3f7dfcde33c9d1c510d3ee911797754f16af36423dca1441372ca
TLSH
T1C1D023703AA5F995D644213596900310A1555D736967530E6200D41DDE3D1C357DF4EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 7d5f3fc96ff3ee5b3e211d1501940d3569b9b5d5e2f4e38045db63e84a5bf605
MD5 243c2458f182988938431659930cb9e7
SHA1 9ae1ba2043efdac3242b4a20a8d22693bde19bc3
SHA512 957d5de32edecd07ddeb2a63e8d4323d9a7757450ceb22c4a190345356548caecf44aa5c20f4d4789d459232144ebe326934e0492f288ca1d17523c7928fa15f
SSDEEP 192:Ze0S+ZlAoyA6cWKmKFsSuHkT1DRNNGyPiqyg0j+Haz6Av3:ZhSOMA6FEoEhDfkyWg56z
TLSH
T1A5134E3E36101D13DAEB447EB6871B3057BEDA98C6E88E079A3571611E04F27ADEE407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 fb1997308ed6596f49cc25df708af6ecb7c005e0eabeb94d997ee40294ad1a50
MD5 4b4d8b1a5b9cd53adc39d1a3026f797c
SHA1 1b7af82138aecd15b1025089866643b179260f97
SHA512 db089335667ff50b830bb38f31faa1f8e6f3f05dc84a20f111649976fc8289ab4be6b0a66ea9ad1f2f4c5b376700a4133b2e53863367a70937c8b8c1e763959d
SSDEEP 768:q/NLA4L/76LL/oRjny915U+VbNqnaTPV1AcB64XNuDDskS+/KNLuUeKA8J4qaj7P:G5L/7QL/ou3zqaZPcDskdwaU1D4qa
TLSH
T1FD443EF71951A01BCBA842F5E2033E3ED1B7455D3CD1F8A9E5784C952829F32B6BCA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7f481e0c23c34c35810f2c89fee6be4d95b362404df278f5af94a92579c027cf
MD5 bb09d1cc9ea563a1f69f5bbbfb3571b8
SHA1 9809802c42c78fc7eadd35ecabeb50f394436a5d
SHA512 29270cdb9a78a5654e16f5d0b460c524defff12e566e51640f9a61ab2bd0e10e0ef00a1503f19fe6540e825ddcff7d8acb521d6f455a6741b9218b52cdc79196
SSDEEP 24576:lHNIZYfNbAojX3W7lB6KXxQeZEoh2CPacJlISN:ltIyFb1jWD3XxbhDPD7t
TLSH
T160167DEDCA7858C3CD639A30B5F0E9477C7413C3F994C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f3f795e32f6237e8e82f359e39222a7f44826c6360e10d004346f19dc9b3f4b1
MD5 4e8f7bd8770d85a956564ef273caccaa
SHA1 be43fc88e9591a5be6acf38c9b7d75c72b05e3fc
SHA512 27a9a0c77c654ea360ebeffed1680aff96f1804f20781334883b463e470ef57f41dc22f9565c12f6a8b89a886c44e8877b4c51e1ea6c17699b757a2ab7e1cbc6
TLSH
T19361C67203361AD3EB6988BBB9F298A4B2FFC849068F1E1A01555DB79C02F0350E1CD7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a5bae.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a5bae.TMP
Size 3KB
SHA256 c6e324cb986fcc73fe72d7e17883f42ced328efdc1e221cc4cd4a4324843bd18
MD5 791c97b388a0492f18c4afa491377d15
SHA1 eee8b94b499e99ba5f995a3c3f90896924099e71
SHA512 6d7965e8bc71c8ed9e0fda2e190b94a21c77bf703c093c34bdd9993a614dc95670fad73ba539ad2de08a26f1ee93896115e687aa2b1a38bfd6af25dbc88f6413
TLSH
T19461A57603360AD3EB6989BBB9F298A4B2FFC849468F1E1A01555DB79C02F0750E5CD3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 0fb9a2549380d85554aa7e1c38e7af8058873b4ef9e138073652380f3262bc86
MD5 5e2999d8a527e126bbb177d3da980180
SHA1 3a28cca0abddf4cede96b6ab3f97ad2e46789cca
SHA512 73e9ac324fbed4eeda3f946c636c42d23c675f6b78e0ed9796ea587cbb3a6143ec479003affa925085fd9d2d984c2036244a0031ed47989106fc17bcf61e49da
TLSH
T177E020DC58C6C17D95543CC341786B4D86D13956D78DAE431700CCD07A06501BBD1756
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 a3af6dc42671fb8f67d6fea656b531188afe3e9cc4b5982567378fad33da2044
MD5 572cd644b29ed7fa30cca53cbcabc042
SHA1 727f6229332da4d8c1bc0e0181830ad932a39a74
SHA512 a99cee5f4fb54101757d51f53c1df180ff4773a60241dbc4c4c83e3ce49df884d00fb9daa91744bbbaa6013de29a6997a71bb7b63e8974323deb0fe6dc4a6b8b
TLSH
T16DE0268809C8C16AE6546897C66C670C86E0348AB3C83E42274EC860A10E341F3C67D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 bdee76645a7f0a98147557808d6f1abf7f103754408cb417e58b00654277ad72
MD5 5ddefed0e04429573cd01a1ef0197a8d
SHA1 f95a0f075467503ad16e4a582d85aed0dab60f3b
SHA512 567cf3e7f0edce2adf28600b371d03a1f4249de1145d5524648a68b263f81e91486d7ced4f9eb13d7f1135f0cd98dca288d7f62dc70bea293a169f7d4b88b97f
TLSH
T142E0DFE454CDC1AAA684A05B822CBB0CD7B0740AEBC86B821B49D840B40A208F7C23C3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 312e50f0ef3bbb749780b4cd7c127bb7bedff03f1a28969c59554280126f3a49
MD5 b3924e0495ad67182bcb574b9a5a0aca
SHA1 b5d271527b49b41cec1979a09a1ab96e6466c5b6
SHA512 32e02c552b6ec3c764ede56c8c2478a5d19b459031a91aadc81f58ed344cc9ac9ecd216b8bf66e369ce9cb3d02bde487df2a34e6e445280b8fbb85d18310131c
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oRwMv6Hb:qDeMatha9RAtQ
TLSH
T139B22E4D1F306222D0F08B76EEE085632F3C211DD7B336559A0460F3CDA26ABF5070AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 db638ba6a36451b1e4bde5043f774cd0aeb9a2c6a2a7ac963afcc648c2663389
MD5 a93247b92e8909f28b81354a12d0b83d
SHA1 2c40d180b77768187fcb9f9cf6b6aa25039ec094
SHA512 2c1fa21ff68bec8b3edd236a7c9cadf7d4c21c06f33c57934c6ee3959ff028b191a0f46b6c220010d7f747aad09139e8d1ab43f4a5e60db389e550a8890b84af
TLSH
T1EE31ACF7C3E8857D890196F4AB186F1BCE2C0915832C3D6AC9E4AE1B93F6471E14095F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 2e46ccb3e5e2e7bb3c226e4080304278e2ee4c3c0d9c6d7aeaf9183b2886da60
MD5 c17ccc3d2f3565f4931cf1fff88a2652
SHA1 9304f8b684da70ee43567fef0003ab902395d9e7
SHA512 444359f406da419476d926c0353157c0c3322c00c865955414fb5eab04d0b93fd7c77276eecf3c1d6f43898a806867ebcf0d20d3d991fb399dfd9e982c148d48
SSDEEP 96:eIEumQv8m1ccnvS6IjXkacf6CnFfJjfm4g:eIEumQv8m1ccnvS6Mz
TLSH
T1E5F2CCFE07276205D99484B0E4009F8FAF1A010B47B6B7DC66D44BE3F7A21E2B17975A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 6aabd640d19ff3dde1d1468d87b0f8ca90f9f270b9b024447b104876c8b1c9e3
MD5 f55592077e7ffb953f4bb37f196921ab
SHA1 3d61e46879e23b3d59a784efb6547e8e7b256dc3
SHA512 52b12288a29e681879cfba3c03eecd59863427ca4c6ee1fc55ff493362801dcefb29f459ebd0a6796963fc8830897e4abe8d9e80f7a566babfc4c28b5f99878b
TLSH
T10BE0D87BD1BBE4772038487D294478827975E431458154F8E9D7C27CA0800B75E35829
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d063f0250c9ac9beca9142997dd28e558804f6275c4d5c2882a8ce80e8945d73
MD5 e13a36066d12bd6cb50ef78991419842
SHA1 41eed43765092facd1e217a8c0d895a4204e30bc
SHA512 bc726fe7efa754d1caf0d3afa28d2a5ff66823904dfb74f4273fd70e32df761b2791342cd9b92e6edf20ed4dc5c71ff9f33722974c9da13f967df1171775b5ca
SSDEEP 192:sxRWRZJCU/fsshWpVqAfwG1zoA8pi/g6+WNIYo3CYyglIgFJ:sxRWLwU/fsshWvnfpYi/5ISEv
TLSH
T18A4296166929A93B9CC6D21DFB65BF93D2F9103361D12E48A7FC871C01EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a5207ef6503c1ae58da714e81e940ea5c3131753c13630265fbeeaacf1b94dbc
MD5 23650c2c52036e4ef8063882e9bb42ab
SHA1 e9ed445b2ca8937c489006e3d81a2e52ee6b5dba
SHA512 2eb2c9ecfc1ff49a64cb44eb7aeaf431d73176674e976033241aecc041c9581f00bbdc1cf4ff4efb288892e4594cfe58048f3c8018c1bb2fb2a7dc70625df090
SSDEEP 768:j26HRo7pLuL7MRWgs2f028F1+UoAYDCx9Tuqh0VfUC9xbog/OVLVuwBro9Ne0UrJ:j26HRUE7MRWgs2f02u1jaE4w6YJ
TLSH
T1A9C2DB7B640CCEBF4F800ADDDD197E9F6D6802CB9698CD8047FE951C02C6BEA51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 d04fb0e6245cb80e95017c703955ce959dc2585b3de5d8f39585889758c11458
MD5 873d1a0568a089870bfaade2f5e74203
SHA1 9235a26ac4193fb72130f27cc188a21d97727ceb
SHA512 413344a980c5594c48b0a3e8301efbe3331e0b91a1796b8b540a8bf19b7e0946e5a01208d0535e5299ad14e9818f408a4c46d91294e060e1518148a47f7b2c6b
TLSH
T1F0E026E405C8C1FDB055248702B8A30DA3F4744BDBCCBF422F81D840618AA04F6D2290
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 beac4dfd89a6ad72b545b254c8f79c3c89cccd6051edf907c2b4f22c98923011
MD5 be3bdeebaf9313bbaa83bd84ae1abc10
SHA1 b07733d373bb65fb438a7784f3ae6c190e414e53
SHA512 eb20bfaf128153b0f15b1eebe24fde4bb2aedbb2c54c9ee6e0ecebe25b3e16b3978425848f0681caa937cbc2e61eee3adb1d3efd8e2848adb7563c758cb21d9f
TLSH
T169E0D86415D9C6AAB285208B4238F30DA1B2780AE7C86A512B0AE490624A2847B83750
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 3d6af4360fb16b8a19a2ba28247208264c44948775392eeb930bc3ce59fb5d17
MD5 3e54603afc2a01239777b24241b03aff
SHA1 2b495e3385d94d9b26d3e588fc9c69fb242da542
SHA512 875d4749e7d855693c4723066a25d996a6b0c634995de65e5e0144b95e36663655a0085b2ed753dd4a3089bc5d24b7ce6c1392e139f093244d6b11a8a581adfc
TLSH
T1E7E026F446C8C6B9B640708B8268AB0F82F0B84B93C83F82570CC864A10A200BBE63C0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 a1b02d8c39a02eaf4e327b2f9fec86c4b61be78c0ea62cf0e3a52f7e22008433
MD5 84e2f23a3cb39e21af0ea94189c78c74
SHA1 6062eba3833d8794ff62dfde70d5b1a3707644e0
SHA512 532ef2ecf241a16d5d966d66a81b58a6b2b4c6ac4d8e5233aad5776b6cf97c1bca12f2e57b7c20f70f6f240737e622bf60a768c76f0ffdf3c5fce6c5cf3e9901
SSDEEP 384:DNrRZyCSDnxTICeCsMEhIKyll7svbFKfk7:xFZJSDniT0yI1l7svbF9
TLSH
T11B44730A7B747001EDE6D9721CB080771E3C716ECF22A6916DA654694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 984a417a4e2ffa3101fcb3886105d2cdd704894ef08ac59f35784f6b022da83c
MD5 d2cd44468403a51b916a3b23a1bbe886
SHA1 4a755208eb6599b1d96fd88c0440005770eaa8f8
SHA512 c3b3a8adb5b0b8246ff88d472be982396a92411b3757a7b433ecb69770aad7856f6dcb34420085d9d32be5f87a4f1975220908a0f3bc5247a83c453773ce4625
TLSH
T1F9F0C2CBAE030977DC02503151336782FF6189CB08246867438D246A2A1E1F1CACC1D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 a83dd0e4f7984f211048536036745acea20a012842b82158d2ef8149411b718b
MD5 27f0cb98e2257a14249896a950900e44
SHA1 30a48e161bb67bca17f3f0956bb766d1d5be57dc
SHA512 80698667a74fdeb21912dc9886fbb22fb460a14439e11b8a2da87e02750d193a18ef23bf2f992e56652bfb7f7bd44049e9d1846ebb164a2a9ef773e1dedc4e64
TLSH
T143E0205455C7D69EE1542C87512C974C96903507EFC42A471F45C444740664077C52C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 97eae66f849a6e7c07efebef8b548b94cd9c2ab2b2b3ef6e60cb23540ca14695
MD5 58a6eba701d969d22b460ab15e019116
SHA1 7e91b8415e271e902b449a714abf0a003b23ea5e
SHA512 78afa03cef73b1097318a2c86f7968dc12edb40f72f108fe5e567bcc2614638a9780673dd235a29c623d9f9c8d5f0754b3f322e2bb3c2e9b213091789c27b12e
TLSH
T12F21B515F330D014E25A827A607F9B351738E8569FBCED0F857A20746E72A440D4B7E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 5cf6bfb6c1a1cbd0c62897a7e7a1cc0e1173c12510e012b5da8bee7cc20e6e08
MD5 723c964bc95f803a8b6e3576fb4bf7d2
SHA1 b4316e31ff7208970ac892cf8f99e3a439532c45
SHA512 fb6b6af1d0c368afa86c43ef363fb2da729d0ef2b2ee5bf4272b76d896a5fe3c3053090cae0e4a8c998fdf39cc613fbfea0e628de6b62115eb98623e1d3664e9
TLSH
T198E020D465C5D2DFD1502883426DD34C96A13907EFC42F431F45CC44550664177C67C1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 46f74cee5d2e47a0869c05ed5227543987aea04fa2cb0278557c79aa6762eb66
MD5 c69cda79885a1ee5c315e1e5b2ca78e3
SHA1 cc13a426325eb0d353e6b1892206df0a1b9bc857
SHA512 4494b67ea9deb837446d559ec2082956589f0fed7045a001e07cca1d2dddfda7daeefa901f469e8d40e4da389f9e31cd996362b5633e89b4bbe209a8b3b8ff81
SSDEEP 3:MsEllllkEthXllkl2zEfls/t:/M/xT02zN
TLSH
T1524404047FC0040DC500113054D1C3743370D51005155F4374F10D33FCC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 c0152b38b7f07179ca3e2ef852ba0dc646dfa78b9e3662d8d55124095d3023aa
MD5 893cdc0a0bd227277181fc1265f13ec0
SHA1 8cfc77921cae620e91fa0cad48f979b398739b61
SHA512 2497fe3a6e28fe538bbe9f0c56ffe1924db1f764f3bc082f84b336a3d7fae467a85a11466b589c07fcbd73b80c409ae02cd764bce2d0458535a8998017d48118
SSDEEP 3:MsEllllkEthXllkl2zEflmZRq:/M/xT02zXv
TLSH
T1B44404047FC41F0DC5011131C051C3703370D4101FD1775334D14433DCC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d90d27f8afee1a8021fb579d52aeea7b40d7c39996f6fabc18ca10279845af91
MD5 fd35a3861fd99dd3db7683c08997a7f1
SHA1 1498e90d94013ba5ccd08efbadafeee7ba2c79a6
SHA512 e47a32e4fb57a913d4e6c842318ec6055f6f9321093a2ec59fbcd8611319ce59f942c2d893ef95e76c73a42f7d64bdb160becc1c006b47aeff75b9d3d3080581
SSDEEP 768:hrv+4UNbdz312/TBOWRZYONXyer1IRCzniB5eVH1SK7:hbsbV3omSIqnWEH1l
TLSH
T1A703BF36A4A89E338DE2A3C5B14777437FB85057C6800B90EDEE2F4E06AB59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 aa451bf3da3d100b3e1fbbe9d526e9323f28638608151cd57ae4847e3ac84352
MD5 242897a75fe03693bda33f01f475dd4c
SHA1 56a41c5411af3819fb54e8a7bd97ceadc4562e56
SHA512 22f03e9b8692de47be3310e247220b92326d404513ec9aeb46e442743b43fb8b7ad477e3841334d0b895b3fc6d9a547dadd600ad5fe95321873774f68dbaf939
SSDEEP 768:Lrv+4UNbdx3neD/TBOWRZRNONXyer1IRCzni967MbGGoS:Lbsbf3ONSIqnH7eGG1
TLSH
T1B2139C3DED589E3F4CAEB389710E26137EB8113BC1A40690DBD91B4D817B85DF30A956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 76dd64a9c32e7e38f8b33cc9757cff3927dab3783c608e532d74457705ef5c13
MD5 b55933602f4a6ebc693c095b2a996a4d
SHA1 082f425d30dca45e929d6e6b69084935d487db7a
SHA512 0daef446261593510660de9bc2fcae8fc0e1d17d62d39ae131464378a131518b0ef0cd9fd378c81a578be018902a598af29889445277dbac29227d5af654c19b
SSDEEP 768:Yrv+4UNbdz3qG/TBOWRZRSONXyer1IRCzni9teVH1SK3:YbsbV3PSSIqnyEH1R
TLSH
T14613BE31E1A9DE334DE2A396B14773837FB8206789840B90EDDA1F4E069759E170F91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 cfb462a6c3c251e1fe923fba12da0fd74980a03c990ecfc4b79a3b1dff2e71c0
MD5 191f7ce7f4bbdcb410e615f2475bf2db
SHA1 a609cf8ca3559e750f3f9c278417e62442f6fdb7
SHA512 042c8879282280efd1d1d451ebb80a4b967c12737825e40e02b466be5541106a64fded380bd1cc021c74dde3b256088368a1440f482c080b6a7afefb6d2df0f7
SSDEEP 768:Zrv+4UNbdx3zeD/TBOWRZRqONXyer1IRCzniefoB:Zbsbf3aqSIqnlM
TLSH
T19403BE31E5999E374DE2A295B00773937FB8206789C40B90DED66F8D059B56E130F817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

ddf1803f-defa-406a-9073-3a1a1fde3569.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ddf1803f-defa-406a-9073-3a1a1fde3569.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/4956-0-0x0000000140000000-0x00000001401CD000-memory.dmp

Download

memory/4956-3-0x0000000140000000-0x00000001401CD000-memory.dmp

Download

memory/4956-1-0x0000000140000000-0x00000001401CD000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads