2a540103a9413ca213dc6d2c7caa689f086b8fcb538549e65a0415b0f986bf2f

Resubmissions

30/07/2026, 10:50

260730-mxlytagb563

30/07/2026, 10:48

260730-mv5cdagb523

Analysis

user interaction
yes
max time kernel
70s
max time network
70s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 10:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ClanHelper.html
Size 11KB
Sample260730-mv5cdagb52
SHA256 2a540103a9413ca213dc6d2c7caa689f086b8fcb538549e65a0415b0f986bf2f
MD5 d102092d6705a9d54f7bbdae19b0bcf0
SHA1 ac11e88b2259c9804cba2214adecc52a36cc0813
SHA512 179de2dedf168b716784a4be0bcc825155965149b1be682cd7a386c005759504afb61d17213313322a41dcbcb0d0744f7543e7a166dfa989e13638ef9c7a190a
SSDEEP 192:xUhrqoN9j1iqiniyiPiE+Kj1KRihbi0Zi0pRp+:ahnNHiqiniyiPiTiJi0Zi0zp+
TLSH
T1A642D1903B05481E23AAA3F7FF3A3528FFB8C2836715D14139AC69993772B31875156E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5976	msedge.exe
1492	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298821114911686"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{25DAFB93-0BC6-42AB-865A-B429B78B8AD2}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{0B32405F-2A3D-4871-A79B-D3D16D14BC36}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe
4548	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 4252	4548	msedge.exe	89
PID 4548 wrote to memory of 2452	4548	msedge.exe	91
PID 4548 wrote to memory of 5976	4548	msedge.exe	92
PID 4548 wrote to memory of 2452	4548	msedge.exe	91
PID 4548 wrote to memory of 2452	4548	msedge.exe	91
PID 4548 wrote to memory of 5168	4548	msedge.exe	94
PID 4548 wrote to memory of 5168	4548	msedge.exe	94
PID 4548 wrote to memory of 5036	4548	msedge.exe	96
PID 4548 wrote to memory of 5072	4548	msedge.exe	95
PID 4548 wrote to memory of 5036	4548	msedge.exe	96
PID 4548 wrote to memory of 5036	4548	msedge.exe	96
PID 4548 wrote to memory of 5072	4548	msedge.exe	95
PID 4548 wrote to memory of 5072	4548	msedge.exe	95
PID 4548 wrote to memory of 4860	4548	msedge.exe	97
PID 4548 wrote to memory of 4860	4548	msedge.exe	97
PID 4548 wrote to memory of 4860	4548	msedge.exe	97
PID 4548 wrote to memory of 2800	4548	msedge.exe	98
PID 4548 wrote to memory of 2800	4548	msedge.exe	98
PID 4548 wrote to memory of 2800	4548	msedge.exe	98
PID 4548 wrote to memory of 5524	4548	msedge.exe	100
PID 4548 wrote to memory of 756	4548	msedge.exe	101
PID 4548 wrote to memory of 5524	4548	msedge.exe	100
PID 4548 wrote to memory of 756	4548	msedge.exe	101
PID 4548 wrote to memory of 3368	4548	msedge.exe	103
PID 4548 wrote to memory of 6068	4548	msedge.exe	107
PID 4548 wrote to memory of 3800	4548	msedge.exe	108
PID 4548 wrote to memory of 3560	4548	msedge.exe	109
PID 4548 wrote to memory of 1096	4548	msedge.exe	110
PID 1096 wrote to memory of 3460	1096	msedge.exe	111
PID 1096 wrote to memory of 1492	1096	msedge.exe	113
PID 1096 wrote to memory of 616	1096	msedge.exe	115
PID 1096 wrote to memory of 616	1096	msedge.exe	115
PID 1096 wrote to memory of 4760	1096	msedge.exe	114
PID 1096 wrote to memory of 4760	1096	msedge.exe	114
PID 1096 wrote to memory of 4760	1096	msedge.exe	114
PID 1096 wrote to memory of 3452	1096	msedge.exe	117
PID 1096 wrote to memory of 5128	1096	msedge.exe	118
PID 1096 wrote to memory of 5128	1096	msedge.exe	118
PID 1096 wrote to memory of 1700	1096	msedge.exe	125
PID 1096 wrote to memory of 1700	1096	msedge.exe	125
PID 1096 wrote to memory of 5972	1096	msedge.exe	120
PID 1096 wrote to memory of 5972	1096	msedge.exe	120
PID 1096 wrote to memory of 1704	1096	msedge.exe	121
PID 1096 wrote to memory of 1704	1096	msedge.exe	121
PID 1096 wrote to memory of 3480	1096	msedge.exe	122
PID 1096 wrote to memory of 3480	1096	msedge.exe	122
PID 1096 wrote to memory of 6000	1096	msedge.exe	123
PID 1096 wrote to memory of 6000	1096	msedge.exe	123
PID 1096 wrote to memory of 4640	1096	msedge.exe	124
PID 1096 wrote to memory of 4640	1096	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ClanHelper.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc6abdc188,0x7ffc6abdc194,0x7ffc6abdc1a0
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,3836036997687293251,17889290110904031837,262144 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:2
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1680,i,4665830479883879642,2884755682168509730,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,3555017569802982014,7348814047114955453,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:13
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,3434814467673061248,1152820295117293285,2097152 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,11543879966426316829,17799152367422954011,2097152 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,4344166987227606981,9290667796517817511,2097152 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,15082626454860946188,7230782343799478300,2097152 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:9
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,17189176291813511136,665201645809184090,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,14068732604822478690,17350442567675242459,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,15737271770981617462,6025958283125793729,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,15737271770981617462,6025958283125793729,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,8478426838644346959,17490307265413251114,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:14
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,7326582799438611445,13210248812972511768,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:14
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,10168774713584248014,14667840863672140212,524288 --field-trial-handle=2740,i,4964236198432818957,13487606445815499774,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:1096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffc6abdc188,0x7ffc6abdc194,0x7ffc6abdc1a0
    3⤵
    PID:3460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,14922526337853574820,3641117993877705354,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,11359607064018298618,5707814137366164549,262144 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
    3⤵
    PID:4760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,9060969056645165291,5193284382723188842,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:13
    3⤵
    PID:616
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,13231768220562484115,10246180830791659829,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
    3⤵
    PID:2644
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,13231768220562484115,10246180830791659829,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,3428136228179965194,18099638130377376819,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,7956222102654402502,12263436821367166506,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
    3⤵
    PID:1700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,6024320962214823968,8283576612013499289,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,5755798679287941274,5685846974432955521,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,6927036404147617983,7483972941605611761,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
    3⤵
    PID:3480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,9878575741721573185,9297676259231674711,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:6000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,8981909151560592684,7943980313417876971,524288 --field-trial-handle=2456,i,3610130096508978660,5875381408480387035,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
    3⤵
    PID:4640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5940

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1172

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1700

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2923c1222ce49db187e097dafa5245e107880e380c2d4c3c042ec4c5e21d98bb
MD5 da1d8185397a8ac0bd44a31e4155fa93
SHA1 7c2bea94dea010a070c12a44a8464f7b1c541abe
SHA512 87ca63d88bf02a3c244ee505ed09f102c1f20a53c8d7854e1a9e11961db009f99bf7a7a5380ad49ee5b98c2e3c4196c803c521d754b64bb9070c4a8694487664
TLSH
T1DCD023317929F3A0CA1C013040100A002126447171A3435138E6180CCFF40C047CBEDA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f81ad08001e04e7d561cb1fb2b29eb617ac6ea05a91aae10672c24fe7e0c8f2c
MD5 eff322162f8106168612148f1b0ab5c3
SHA1 2c9f1378b0601c0ce81e4b78fd2f592caee85c0d
SHA512 5c26f7c59185c2c2680727c25397b27b741db9d6d4a89cedbbf5d83875d4e33d489d6fcb7586d56bc6fa362b4ad0cfe5d0ac9d2fd19cd4f8f6b828c399e733ba
TLSH
T1F4D0A7757669A715CB0F25305410C65233524660B556E77154B6240CDAF41D4468E19A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1ec974d5e3dba217183755baefcfd83a6030cdd382efc8b6c59a238c49f8cc00
MD5 883912f018e71fcbbd6ab1eb8ccc69ad
SHA1 cf82f3715502b397d16ebbf358a63ec457d06f23
SHA512 ddbe88f41ded0a29092fd14cb4634d93786b9c0c7061833064fae202ac7e4b604d755fc3b0058ebd6dcc6d0d00c217b116961e843cd15bb95c952d435b6b39d0
TLSH
T145E02BE9CE25AC3708FD071A60545345D75113562B91499B363C86098FF07374645C1C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 7e5dc17ac43a096e55b1b93823d62a488e9798b9ee3f47fe4b1c47049d117a83
MD5 f35f27cd67348891bf6876452f751ee8
SHA1 bdce3e313b3efe6da0dcfaa757afb1df70a8a9ed
SHA512 7d3d5a5b998518b97da6dc2b781a50df7dda9955bca3f8016bd128249084ccd50c09818c65b796b59cf9c7deaf6069d9c84be2b881a9d41e31ab0b1e7bbea699
SSDEEP 384:hKdB13G8Y2KBo9H3+CYuoFMDeBzUnqefOsZMk7xP+R+Ky:hKI2AopoFeoBk7xP+R
TLSH
T16C13B73EA29E0C4FCACA69BC5A1B1B7B17F9D428D0C41417267B3A5C9A55F7308CE613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 905e152a76bc5d9c99c36c311029a2abe29c1e626f6267ed173c97514308f7da
MD5 a8f9941093d6fbd10a228845eee2bfc7
SHA1 331e55550a395416f48446f55ca738923791d8a6
SHA512 1e7337ec2394b3b48325f80816b03a4cae25bce788051a197d920e2b1944030597c928da2eef25b1fd641bfafa92e2d6492559559ec4f46b55237c02f79d8be5
SSDEEP 1536:Xi+9/aL/X4L/tbnuAWrGwi/S9nLQPMLB:0L/IL/xnXBmB
TLSH
T101444DF70951A00BCBA852F5E6033E3ED1B7454D6CD1F8E9E1794C852829F32B6BCA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 5844a1174ebece1ffecac8a74ed50d290a85943669c4cd629aef83385afbb459
MD5 7901cdf3917d0e688e9c1c01ba445509
SHA1 dc9ce596c9c340d303010ccba9cedd397aeb298e
SHA512 d481e887da18a984e35066b122bde37eb79f02c7f7a42f29a90a77a19e9e428843935d9994d5cd2bf94a379508df21050313aff286beb5b179faf03139d06822
SSDEEP 24576:jFH0SwOa/nWUvtl59X+JV0ftqs164UMe9Z9Scy0c:jFUxV/WUR9X+r01qz4Uq0c
TLSH
T135166CEDC97858C3CD63AA30B4F0E9977C7413C3F594C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0a1d3e592534059c8953750182a1a221f22e12878d6906b6c1b8d0eba130bbf7
MD5 bacb8a602971d01a6739699086d13e8c
SHA1 04afa7c42728188eda866e900ade5c4a204f0e8c
SHA512 705d90f5913118e0d2d8bc6182eb500322eba7d8f20dca764fe2b68d9160ebae0cf242e4049e7ca50c2f5be03bf9c2d1b2a9a6bcb17fe40828009634c7868913
TLSH
T18B512F01833A08DFE728947150E1549B37FAA4DD24EB2E1D0293AD7A6AC2F367CE8013
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595606.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595606.TMP
Size 3KB
SHA256 5c9b859345e678a1092cf729b4af559175a8d534a750a2d607d6bc4920514a87
MD5 b22d74e7444057552b5ed1f0f514c18a
SHA1 499f49b287455827ae0dc2bab2a60d1c4345dc60
SHA512 cc490ce04c03da35c3084286d39aa9e34da9d8f5a19b4e862af679bb2438abc6647d3b927f7fa7848de99518a11f022aba3883f5ce95d81952278009dd9b04a7
TLSH
T1CD512F01833A08DFE728947150E1549B37FAE4DD24AB2E1D0693AD7A6AC2F367CE9013
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 f612943db9a8660f9c514d3710cc2c7c63335ef4ed9bcaf6012b69671aaa55ae
MD5 df69e939662f821d652bdc7409c89c60
SHA1 b22e8c9411d511e793a901c5a2decc7bcd222142
SHA512 8954c84bce922bca728ecc3d799e34cd692b8ced9b67dc43cfae672d2a4a0e57eac3e30f031aa8a937c1b73b2f4bcc1df26e9a7b419a7201746399cb302115d7
SSDEEP 3:MsEllllkEthXllkl2zEkluYTq:/M/xT02znuYT
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 fa31a400e2fe1aa4795fdd4e3095736e1f7b384b3f501bc24a9fb4ccff20a77a
MD5 c47271ec3099da76774d1785ef9fccd0
SHA1 e52398ddb0f9516624941104eae14172338750db
SHA512 cd7b1b7f2373ef23c589a400c51cd70452b142e963ffb3f5f204c4c6a6f6fdfa7b8c7752f4f22e28b6ca4a83449fb8effdba92223fa59ba1e1c60e12d97fb8bb
TLSH
T150E0D894D4CAC21DA614B4CB42346B58C2A53543E6D67D5317048CED7607021B36E596
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e84ff5b4fe30df6541398a0eb75a02afe5c430681bba4be47ae5bf2b76cadf7c
MD5 82780fd5e4466d8c5d47de5ea79fa3d4
SHA1 e13f00eb965abaee9428548b6e64c2a064805d17
SHA512 2a9262f156f771538ca0d533a7e416ecf77a221d70615e8b3119c3a75b53f7f25f797e9995ea95a9ae93449f832c737e20129cf1d99382addd06c4e43f52611d
TLSH
T1C3E086549DCAC32FE22968DBC378675C83F53446E6D83912270B8C586102655E3BF7D0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 fa36603129f6d036cd16536c7eacc75ff8f10fd35c18490973e657e85337aa80
MD5 7cc78b288ae5d187dd7d896d0d87c0c8
SHA1 df646a95d9bab7c9d914a4955d872917f5ea5624
SHA512 29fda01901d9a986a0bfd9af89f361316af1c528d59404be3d9caea94821d31432f35dfe3b133c9f00163a2eda0f4244fc64ba9d66be827ad5d574456cc0bb71
SSDEEP 192:rn2WLi3H+bF+UI3iWGVoWN3qL/hVVV63:rn2kmIkUI3ijVoWN3qL/hA
TLSH
T1B9240F0E5F352722CDBD813668E744A35C7DF03F8B1366DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 2fb265d2fe01ec1f4bcf73ee1fd76378a0d3738af50f2f97deaf8b7f88b28797
MD5 bfcd33cc6c61d57417ba11f03c68b809
SHA1 7ed9667e9aa82b759b2bc930108508bd7e0a77b7
SHA512 a4e674fb3655529c718a56468baa425faec1701fbea48747c5398a28d61169b6aace09effcd71fce6165e1dcf57a14222a1182200ed765294cb7b7a874371422
TLSH
T1E3E0D860A5CDC25EB208208B4324775CC3B43447D7C93A125B099C8EB046004A7AB1D2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 fce0af0e6d8d907e80cee43b0f07612d42bf981e3c87aff29815fcfd8cfa1c9e
MD5 e83c2ce8620062f40cc3d8b240dfe641
SHA1 127d6f1550df56fb051a99e691910ec563bfaa8c
SHA512 d78aaa4472b53d66bd2f87586614a6e8518ff02417e25cd97acabf9f899a296e1d26c76f7251d41bfaf36a4cf26e8242f91eb47f0c23df94523c6fd3bf6677aa
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oCwvJaqcTISbHUSFV:qDeMatha9RAW3VTjb0a
TLSH
T1EFB2414E1F346261D0F04B77EED084673E7C111CC7A37A9ADE2460F2CDA269BB5060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 be97f396a17e7c6017840398b894575d8867141bb9bc2b3c0ab128970d88b6df
MD5 3e2f5e7f580f45aaaa13c4a7dabbbd49
SHA1 496d38e114d0393985770786dd696bbf9f2936c3
SHA512 55d29f0c5945d6025fec18fa52cbfbc95e31800c5fb19b568116235429d7b93bbfa0cee43647b7c4d8b3d79058f5e018781b44f06a28602beb5dccf59b1e7d28
TLSH
T1A531C0F7C3E4953D890146F4B7146F1BCE2C0915931C3D5AC9E4AE1BA3E2871E14095F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 c1a21a5632ba65f524e5631aaa5824d97b4e408be137836bcc7a0755f14fadb5
MD5 3bff77c26a2d8b33879a6420ed5fc7ab
SHA1 f886856b913150c83cac5f8b9c3cc4d74f7b6f64
SHA512 ca63e7670fb5d0106f1bf52d13e902ee49865823d5de7aeb8fead6967f67a2bbea70d2f893caa1091d141c9daf6c144a51ed6bd0a26187eadd3f018d7f400ab7
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB2l/:OIEumQv8m1ccnvS6O4kkacf6CnFg0k4g
TLSH
T195F2DDFA07276206D99484B0E4009FCEAF1A010B47B6B7DC76D447E3F7A20E2B17975A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 42ec1e05d24fbf330886821500458a57e31e247bc9dd94be43ef359add01155c
MD5 75edb5477b656d952ad2e86914efe9af
SHA1 7bd89aad43b6e1f9ef1a59443d35e8fa53c121ac
SHA512 7061efd4906ddb459b724af3c3bb9a5fbafc5d14d3857bbca61433d691e4027cdbfb8863599a761d35837f5592fc48ab4bfdc0f27deb2eddf74902b639840e14
TLSH
T148C0221281F8F83700A4083D2B806882BA3AC434004240A0C9A8867CA0800B76A0283E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 da8ee7dfdb2dd8797000a1a0245fdd0773c06a71189676bdf11af01e8d61050e
MD5 909122763798eceb646a5a650e065a43
SHA1 d30e75dec106af6c2b589376be3cf9232b96196e
SHA512 712830a692dab42d2d9aeeac75a3878b61003e26db41ede79d1c1fdf61539be5c2d26520d64db81271cde99903dd7f559640cc173fbf7e8a83666e5801668e6c
SSDEEP 192:sxRqRBbd/fWs+TKCA94/2zoA8p4X/g6+WNIYD986SqG9JIgIJ:sxRqjd/fWs+TZ8cy/5ISSxs
TLSH
T1D732B7166A28AD3B5CC7E21DBB55BF53D2FA5032A1D11E18B6FC960C04E76DE620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3714a8d65e820e1baaa4133ed01c93e862e0f186570de5ac938a20ef459a6474
MD5 4f00b26afd5c99aa29d14ad85bd83b61
SHA1 dcadc8958bf8f9d89ad076843c2d324a3b7640c5
SHA512 00fb31479c4898f18f8ac2213e9b5621208af7f47bbf546a4b089fa5bbacac19177363d1b0d11efa8b2b0b0c0761d9c7f9bd6836affba9ca1f5ec72cb70a786c
SSDEEP 192:sxRFRBbd/fWsHeKCA94/2zoA8p4X/g6+WNIYD9Q6SqG9JIgDnJ:sxRFjd/fWsHeZ8cy/5IwSxF
TLSH
T1C232B71A9A289D3B9CC7E21DBB55BF53D2FA5032A1911E08A7FC860C04E77DE620741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cea9756fa17534576b0e4969543d7f4b9df742c90cfbd7c3c4c053b768732ed5
MD5 7b9a07a66dc391a5a8bb83f56084f3a7
SHA1 b688b7c9e4ee260baf2848e5a933874891a93992
SHA512 737233f5eee248553211b60ba44ab6b505a9c8eb7d38556c556edc50a6ff53ba45df0bdd4528e5a93a3c94af363ce35b947246a35f8bed7565b5a5a69d9d7f62
SSDEEP 192:sxRFR0bd/fWsUWWpVXeJZKzoA8p4X/g6+WNIYD9r6SRG9JIgDeJ:sxRFUd/fWsUWWvXeHHy/5IVSIu
TLSH
T1DA42B81AAA289D3B5CC7D21DBB65BF53D6FA1032E1915E08A6FC861C00E77DE620741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d4cfdf933c8603d98c0e16b3d29008ebf2c86decda530bdc43ae42eaf32f654d
MD5 8d0001dc7d48fcf17804b2bb267a239a
SHA1 74584acb573fcebdf02e9c7fab137b653bcaf4e8
SHA512 1d4b2f85f6456493a31c50f70e28dd9b21ce6ddf1e88a6b80865c47c0dcc5a3036b6ad9f454599118bddc743525d3f51aa798f82f34f1c89f64d72891c8a9b4c
SSDEEP 192:sxRFR0bd/fWsCWpVfeKCA94/UzoA8p4X/g6+WNIYD9r6Sng9JIgDnJ:sxRFUd/fWsCWvfeZ8my/5IVSsF
TLSH
T1BF42A61AAA289D3B9CC7E21DBB55BF53D6F91032E1915E08A7FC860C04E77DE620741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9c27aada8fdfe0566b2a078722cc2fecf720c9f42a31ba9a173bdb1b58d689ea
MD5 93892f73f97144222ef1cc62f8fc8708
SHA1 4cf22744f486c4664b53731509701426a1a93575
SHA512 dcdfbff231d3776fac4384be842ced37ece46d35f14877457d59ef0556b93e4fe8ca7a3354fb883a6af563d24d82c58b3dad381458b07edc36e6b0adf2467f89
SSDEEP 192:sxRFRBbd/fWsHTKCA94/2zoA8p4X/g6+WNIYD986SqG9JIgDRJ:sxRFjd/fWsHTZ8cy/5ISSxH
TLSH
T12532B71A9A28AD3B5CC7E21DBB55BF53D2F95032A1D11E08A6FC960C04E77DE620741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f9c22bd5b1b56e7aff994c125c6f955a01809f65fee3e3efd6a92f59552a894e
MD5 43b8a47911912cce1d45b105531d322b
SHA1 7cb9eca39dd5a7b5ab80a441b7e2cad3997315e2
SHA512 d7bc956f2803ad5b9b2d8ab0575b2ceb1f9d34f893671ec1604ac381b7f1d612aeb78a8dff6aba0676c83be4b238fcfd20029f445cb631656b5a3247113e5499
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRcXropDS:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0VV
TLSH
T194B2EA2F204DCB7F5F800AADAD196FD76D9802C79B588D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 500611ec4e1100132e436970e86f9a5490c62b5172104ffe6add0e0546f6814f
MD5 12efe6c0eb13c180b0b7e2d9ccd844b0
SHA1 1e84de940d52b4800c859c6e74e2b7f4e152d3bb
SHA512 cba43e9cc5d8694f904c973022ab6ecedd881694f53f97016e1e1252e445cc6f1e044787b80cdf17a8437ef761ed6fb6986d9252988ed5f087682bb7f7306fcd
TLSH
T13AE04F9087D9C279B12930C70674A35DD2A87517DBD839222F4989E8A1C3654B6BB2D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 1220c06fd62f85fe32c9510ed3ef036ac51de0f349da990d6e8da409b46dc555
MD5 ab0e38342288f5f5c76a0e8fcf484ea4
SHA1 fb55766691cdc033869b35020bf3ad5cab7a127b
SHA512 a33d6c3476d0655b49050b442767ebdf5e5d6c97f1edb84f6dad97ad843fb8f9d6ed46377426a6709db5bd8390d70b1ca73d6169407b9ff5f0dfd56219347e5a
TLSH
T198E0926056C9C36AA14A20DB4336E34CC1F2B402D7C929256B0D9458624B14072AF2A4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 d5e0989aeb8aa3a8fe0469e33f5209a9bdd4da14f7e001accb13b053a7da71ce
MD5 7fa42986b8fe8e04ebf887c898d8a269
SHA1 ab44f198f4e875b3bda4569d78cd353933e46678
SHA512 c613146e0052e6d495a1acbe9d52839842a4e4db547ccfbc3bdc0f6f6e5885e99986983117712cd64439ae686ee9a188b189a1492ed8e9e5f6a25ec5c9afe810
TLSH
T168E0867096D9C339A048A0D783B4E79DC2F4780697C87E56970C445CA143154B3BF6D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7994271d5afd31c7f52775c15297c710dfd5fd84f3b035d3eaa2ec5038a21591
MD5 6b3ae99c5e83d5d1fff33a05d491a119
SHA1 9c224a9f6d01bcfc19f6294cf75766a921b05b43
SHA512 3bd07da05ff47cb10665675ee62d2192879170230cc8396fa94774dae5f878213877f994cf41a4a5f5d1fe1090558ba153f588913b8c98d81c45b2ebad59936a
SSDEEP 96:KRI5MYKWaAW+jTgAAK4VgiAcQATCoN+XmKwQOSYwKVuNJ:CI5MYKWaH+jMA0VgifQATCoNdNzI
TLSH
T121A14704717A06C1787E751D8AA4C89FA6E5B463301AF52B3BB945B90F67E034CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 a702d20e0ee1f6777346cd00b0b4c56f488939e71e9e010f70f2fe70974a9e7d
MD5 72b7414b1f32ce1103b073cc34e082d7
SHA1 f93b23f0ae90201b532713c95b73408bdf5b85b4
SHA512 62fc525079f91bfdca0e4f172ef7adbe2aa7cd2a7202584517679b237811a97bb71f6fee69358fcdf6dc36eef51ee0a5beeeb7a16066e6c709d156afae236268
SSDEEP 384:DNrRZyCSDnxTICfMEhIKyll7svbFKfk7:xFZJSDniRyI1l7svbF9
TLSH
T16E44740A7B747001EDE6D9725CB080771E3CB16D8F22A6916DB254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 09e772cbcf94099dd6fe57b94a1b434924de3c2eae2af80122a3435b9b766537
MD5 271ec19ece98d52d358e1b4e53c45923
SHA1 5216a1263535a6b5d580a8db9b77339891eeeb66
SHA512 2a8a51522b6bf4e690491054073b8c944eb5f6c0617d1e4e09901dfc03ad502d3d5888b31b572f3e572aea12ce49ac821e4985e8e8ff9e29baa9130d02765653
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:DEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T14252879BEE342212DCEA83318AC001E17E7A903E8FC1EB0254D610211FB4691A31E58E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 159a6147fa4a735c637b4e5a7e9bf62b6ce8f42ee8949e4ada46c048599078b3
MD5 dd7725a49b9eaab49a1ae88752bb6f92
SHA1 4d953702ed1aa9f062a9754485c077efca6e8ae5
SHA512 0405aae96e520aa6623395a3e4a256193cdde81471c4b6d864ee32786dfeec75eed2ff6479ba1a56fba81931eb11824e93ada3c508ded13d43dd7d6239ffd69c
TLSH
T1A6E04F81232A60D57A8CA952C625A847B8F8BD55260F647137694DB84B44C0A1A3F932
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 772057a3cb9496ac47dd971abba61832207026ac8f5942d1fdc5c373671cc95a
MD5 4df320fe7b815262ef8e02fa433ec259
SHA1 921413f4ea4b84f984abd9eee0abf3fdff5f512c
SHA512 0da2326c4c0a952e54f3dd44b1446ee9e7c7bbe4fa4efa9b03e23faf8f8433ea0c297fb4d0802c6ccedd54c4310c26541d736fb1f3cda6f21f33fcb17841dba8
SSDEEP 192:brnOhVAsglu/uCsxkQk05TQfIII+beMIM45YcY:bihGsC6sxkQLNQfIII+beMIMSB
TLSH
T10742836A26152BB3C0DE5B361362C255ABD98C82407221AD71763C1F8DF3FA78BD52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 e182e78eb19cba4c3123f5867a4785cfa5ea21d826c4ec2862d1c90682d51447
MD5 990b57a37b13b9730eea0809280e26f0
SHA1 8bb17834a4aae9d4716bb9f76491bf0a85b584b0
SHA512 cf4c429ee5d9f8e5d300f945bfc07e19b21feaf223f0e1616394ef2f8869a6a259362b46a6b7f701f80a3ad54b8cdf055a88116850d1fb1ddfc3a3cca5696a3d
TLSH
T1EFE04F50BECAC26FB06820CB02B4A3ACA2A53907EFD97D561F098C6CA102154B7AE191
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 b209c05fae49bbe418be6d279a1b025a2e4ee9617373c068c20d72e63c99055c
MD5 d91c72268bed47ae714153e5d6082bfb
SHA1 9a8f8587d2a1950d8b4bbe7915cce2f43788e9ec
SHA512 d10bbda6469fe505658ed555efbf29eae62bb3f045a483b7ba23317a269348dcadae2d984b46848248f79f3163492789fa3ef8b5f86b8c5c096017b99b656729
TLSH
T1C6210495F330C208E14A863EA07E9B291738E816CFBCEC0F447924256E72B400E4B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 08c602a140c497a81b6700098f8421d825548738cb5274b3aa3b4f1aab79d5a2
MD5 6e80c8bc0d449934d3e81e04cdb870d1
SHA1 3499207c7dd1c20b91f716665fba1d1b466a4187
SHA512 c83f68caa8d9e35452d87cf2636c125f08703516ef6f46970629f70775e15c18bb58754b3f35b4f7c4ec46caf09a17d388a5a5c229b977318709727e61081541
TLSH
T1DBE04850BDC9C66FA02420D702B4F39C92B53846EEC57E151F458C6C6502195B76F591
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 48857e13536cb651a4f411e8bdb10b4886e09eae8fc20dd843d15e5f277ba4a2
MD5 6224685a97cdb00f4bc9f3a72bcd8d54
SHA1 d330ee45b69495ad6452ef8acc67a7bbe3e348b4
SHA512 37644b445a84cda59e17c7864eaca0d37221d95489ddcb85815143ac084df06055fbfd4173d6d51d0c085bba4eb4f553fc4ae95c36ddd6810de54d0e1af95f84
SSDEEP 3:MsEllllkEthXllkl2zEelmbll/:/M/xT02zNm
TLSH
T17644040C7FC41405CD1450304013D3540370DC100511D7433C530473DCC7D530D10400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1906ad1e94ab40e54ded5189e3df22c8d2cc5711eac87cb129e43075a2717d34
MD5 32fd830b3c96cdfda2c018bacd2638e4
SHA1 ff1da8e4e51b6e0cfcb3ff1f86ad0841344c49d3
SHA512 8b5c680d25a026719c05b197cb5d2d5977c28a549048842d47226722cdc82176a2fc0a4ddfb88da2a825eb167d79699efcbf4de02e678ffb9267e4076211d914
SSDEEP 384:UZcIy38Nm/EHsjS9RuWZlf8hyEGcc775qN7Gy2rEoajo4cdR8eHhVODjYPNDUMbK:Sy3SFi0DMKrEnjN3Gac1Fbb9MLV
TLSH
T146F2BF357C648DB38CE7D38671433602AEF15663C2D84BA4A6DDBB0C15979BD530B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 edb84c6e25639b28011e8ff3cdd0b5cd648df6530775b81014df861ff70d0e51
MD5 8e06e79ecd8695df0936a1680b83dcf2
SHA1 bbed5ec8b2a36ff68dd73518aba6155f7d1b9070
SHA512 727668079e23cd5a14c8e02521d248ce5ce9086b9dce19cfcbb706099fa7df36f2c2e81a9b1e430cfb3ad695d4e2cbfe2f9510bd2fe26ce1ebb6a95e46c067bc
SSDEEP 384:nOZcIO38N9/EHsjSKRuWZlf8hyEGcc775qN7Gv2rEoajo4cdR8eHhVODjYPNDUP5:sO38Fi0DMtrEnjN3Gac1Wdb9ML4
TLSH
T1B0F2AE347C658DB38CEBD34672533742AEE11663C5D44FA4D6D9BB0C1583AAD170B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4f4941c13839a76f8c6eea268f93211673ef2a0c66201763a51a4acf7c56e341
MD5 83a0d321ff1a6c5b86c414da48ae1e16
SHA1 571ea2132e784438e9c05613f204129ca3291b19
SHA512 7f1e2b9ee88478929b682a30f9430bc6e1b76c25fa3b414bd7a573a16ca72f7143d1cc58070c9052f31d24e704e5df600483d0d8da66a8697a23a4c8d19d6c8c
SSDEEP 384:XZcIy38NmMEHsjW9RuWZlf8hyEGcc775qN7Gy2rEoajo4cdR8eHhVODjYPNDUMbK:fy35Fi0DMKrEnjN3Gac1Fbb9MLV
TLSH
T1D3F2BF357C648DB38CE7D78671433602AEF15663C2D84BA4A6DDBB0C15979BC530B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c7329f2fa9421903b7fbe9f61013da0df6dc9c13c4f8b5678ce469f521f49ca5
MD5 c9e4b9ba5185bc2a4ad6b548161a6584
SHA1 bfa23f21430f211d8bc5e5b1e705bffb5338a6b0
SHA512 efe21b9c193552ab9051dfa9b8d2742e703662270da88eb2a04388e7344b1f1d37a7bd7d4ad87a0157a4c2b8496045c28ddcc4c960bd300678703976634c8907
SSDEEP 384:iZcIO38Nm/EHsjSHRuWZlf8hyEGcc775qN7Gy2rEoajo4cdR8eHhVODjYPNDUMhu:QO36Fi0DMKrEnjN3Gac1FxR9NBb9MLV
TLSH
T129038D3C6C605D7F88EEFB05714E3A126EA50277C1B44AA4D7D9670CD5739A8F307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d5024dc968b9d48f21d96ff401a959dc953e809b947eeda4c25df17f06f1b9bc
MD5 451c5576a0a143d68c972dee02d7aba8
SHA1 f4d8cebf01ca1eb5add73eba84ce45e9cbe3edc3
SHA512 2edd70a3ad0fb068b4327c3beb25ac0579598e1c4115c9c9f32d9e144e9e3a4950e19f386dc57493e4aad33da6dd201325e6f3372aed8da9c0f8563326527219
SSDEEP 768:rrv+4UNbdS3Smi0DZrEnjN3Gac1ZleVH1SCz:rbsbg3JlQnjMaeEH1V
TLSH
T1F803CF3669A89EB38CEBD385714376037FB4125385940BE0CADD7B0D129B5EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8e3ba10dbbabc4b60189c9500abc2d59d49f2051ef5dd4eb42f9207be5f6a821
MD5 175b0c41cfc2f8a824fb6fd3d7055ac2
SHA1 53dbe30851f60c499f530ab68130b7204c5e9c69
SHA512 191983b494a11c1341991416d0052adf839abeb35f4f4f3dcb39b377ba03d889249fa31b0151443722e6ce4c07ec4a4a27b4f9c6969503a66ac93d3f28014220
SSDEEP 3:MsEllllkEthXllkl2zEel6Fm:/M/xT02zN6F
TLSH
T1D644041C7FD41445C51410314031D3501370DC10051177C33CD30513DCCF5504C40000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

96421bd8-cb42-4fda-894e-91f2a90461cc.tmp

Path C:\Users\Admin\AppData\Local\Temp\96421bd8-cb42-4fda-894e-91f2a90461cc.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 05435db49c6f9a82e865e5d504e883b58eb8e70e32a6d3f703045fba25a45b16
MD5 cb8ddd45fa42aedca1340a13bb383434
SHA1 f39a36c75b6e8d5dccbaee7e57bbbd6ea952fc53
SHA512 26cf32c10c16cd5308b60b3ea740d8bc4ed2d32adb0b84839b0abf7627a761a8ca459a88cd916ebc6c7cf74295d8a6c510806ba72c75e40bc38d868160d7c9f0
TLSH
T1D911D5D13435637F02C647E8D0724C846920E59A437B6B6CE95A9071FE6CED1A72E3CA
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1652528345\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads