hxxp://Slitheriogameplay[.]com

Analysis

user interaction
yes
max time kernel
88s
max time network
73s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Slitheriogameplay.com
Sample260816-e3bq2azzcw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5024	msedge.exe
5592	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313280965979947"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{4591A07D-F180-438F-83DF-96DA05F02C24}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{7FC4523D-B5FE-4A5B-A4A2-584AFF7C0989}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 5768 wrote to memory of 5504	5768	msedge.exe	84
PID 5768 wrote to memory of 5024	5768	msedge.exe	85
PID 5768 wrote to memory of 4936	5768	msedge.exe	86
PID 5768 wrote to memory of 4936	5768	msedge.exe	86
PID 5768 wrote to memory of 4936	5768	msedge.exe	86
PID 5768 wrote to memory of 2448	5768	msedge.exe	87
PID 5768 wrote to memory of 2448	5768	msedge.exe	87
PID 5768 wrote to memory of 5576	5768	msedge.exe	88
PID 5768 wrote to memory of 5576	5768	msedge.exe	88
PID 5768 wrote to memory of 5576	5768	msedge.exe	88
PID 5768 wrote to memory of 5748	5768	msedge.exe	89
PID 5768 wrote to memory of 5748	5768	msedge.exe	89
PID 5768 wrote to memory of 5748	5768	msedge.exe	89
PID 5768 wrote to memory of 1108	5768	msedge.exe	95
PID 5768 wrote to memory of 1108	5768	msedge.exe	95
PID 5768 wrote to memory of 1108	5768	msedge.exe	95
PID 5768 wrote to memory of 3224	5768	msedge.exe	99
PID 5768 wrote to memory of 5680	5768	msedge.exe	100
PID 5768 wrote to memory of 4044	5768	msedge.exe	101
PID 5768 wrote to memory of 5200	5768	msedge.exe	102
PID 5768 wrote to memory of 5200	5768	msedge.exe	102
PID 5768 wrote to memory of 5200	5768	msedge.exe	102
PID 5768 wrote to memory of 4000	5768	msedge.exe	103
PID 5768 wrote to memory of 992	5768	msedge.exe	104
PID 5768 wrote to memory of 4000	5768	msedge.exe	103
PID 5768 wrote to memory of 992	5768	msedge.exe	104
PID 5768 wrote to memory of 4228	5768	msedge.exe	106
PID 5768 wrote to memory of 5740	5768	msedge.exe	109
PID 5768 wrote to memory of 5740	5768	msedge.exe	109
PID 5768 wrote to memory of 5740	5768	msedge.exe	109
PID 5768 wrote to memory of 464	5768	msedge.exe	118
PID 5768 wrote to memory of 464	5768	msedge.exe	118
PID 5768 wrote to memory of 464	5768	msedge.exe	118
PID 5768 wrote to memory of 732	5768	msedge.exe	120
PID 5768 wrote to memory of 732	5768	msedge.exe	120
PID 5768 wrote to memory of 3236	5768	msedge.exe	121
PID 3236 wrote to memory of 2488	3236	msedge.exe	122
PID 3236 wrote to memory of 3736	3236	msedge.exe	124
PID 3236 wrote to memory of 5592	3236	msedge.exe	123
PID 3236 wrote to memory of 3736	3236	msedge.exe	124
PID 3236 wrote to memory of 3736	3236	msedge.exe	124
PID 3236 wrote to memory of 6052	3236	msedge.exe	125
PID 3236 wrote to memory of 6052	3236	msedge.exe	125
PID 3236 wrote to memory of 3776	3236	msedge.exe	129
PID 3236 wrote to memory of 1264	3236	msedge.exe	130
PID 3236 wrote to memory of 1264	3236	msedge.exe	130
PID 3236 wrote to memory of 212	3236	msedge.exe	131
PID 3236 wrote to memory of 212	3236	msedge.exe	131
PID 3236 wrote to memory of 436	3236	msedge.exe	132
PID 3236 wrote to memory of 436	3236	msedge.exe	132
PID 3236 wrote to memory of 5208	3236	msedge.exe	133
PID 3236 wrote to memory of 5208	3236	msedge.exe	133
PID 3236 wrote to memory of 4448	3236	msedge.exe	134
PID 3236 wrote to memory of 4448	3236	msedge.exe	134
PID 3236 wrote to memory of 5792	3236	msedge.exe	135
PID 3236 wrote to memory of 5792	3236	msedge.exe	135
PID 3236 wrote to memory of 3220	3236	msedge.exe	136
PID 3236 wrote to memory of 3220	3236	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Slitheriogameplay.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffbc85dc188,0x7ffbc85dc194,0x7ffbc85dc1a0
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,4996537747014921731,6935050116003161202,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,4707573618410713618,8439273243514755369,262144 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,18160545546947301515,6032465911460274111,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,11496155827311972346,4423025222797413346,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,15646254169175079754,9127007618391591710,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5168,i,6539864772230785421,7643643868174474140,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,7285715506455321291,13022703413694519518,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,2941184106760707409,6916367301942777246,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,5796823833922043600,13777992590112398845,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3020,i,1950764950273732332,1853599388424929341,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,430628205392732844,1421520404562124278,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,17094403578263766838,335587561534979067,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,4952768843851492304,13872577427700331756,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,4952768843851492304,13872577427700331756,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5400,i,7392747870026938623,18314697599295125727,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5264,i,13857535509373024651,13768871626493694850,2097152 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,13778035672964934695,6056539987337287274,524288 --field-trial-handle=2212,i,13665664337612185112,15614668632090788265,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:3236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbc85dc188,0x7ffbc85dc194,0x7ffbc85dc1a0
    3⤵
    PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,8021413467976083598,17739852882238050823,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,15223936937109620763,8821301659638894271,262144 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
    3⤵
    PID:3736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,4913834585275370746,15802265296397535542,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
    3⤵
    PID:6052
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,15610106915360440974,1602285710535279163,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
    3⤵
    PID:3996
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,15610106915360440974,1602285710535279163,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,14713424760702321304,17852406796080177778,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:8
    3⤵
    PID:1264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,12461038471074121710,17707885618088032290,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:8
    3⤵
    PID:212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,6564477785137659192,14083817301635836275,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
    3⤵
    PID:436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,15395419238104588744,13155175621432134549,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
    3⤵
    PID:5208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,4295960456126756720,12600347247057497555,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,1415740003935745494,9321892758519483212,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,5815302983960734731,11629760823148128856,524288 --field-trial-handle=2412,i,13104102739332991535,7642296694949476746,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
    3⤵
    PID:3220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 110d3f52d5ee708e756475c42c9d7696a9f600de79d860a23196205019c54e9e
MD5 91d4e9de75d02eed75be1e704645d7f0
SHA1 d2e4f69a97b4cf6daaa2b363bfbcd0264f01b808
SHA512 469a7fd01e674783f481c9ad0d98d20f9afdc148ecb0a22e7831f840a2bf0931adb051c36568c96641584525b796852be513a5fb749693d1f60dee1ea4ac60a7
TLSH
T131D097F8691AB2A0E03D083260204600B22C06A228A3A306E1AD180CDDB800062CAAC9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 205f111cf82421998e0b95768dfa51372f1c88d78b5bc3eb1181f3b1f812c371
MD5 93a112a8655c76b26e1b418e54b0e55a
SHA1 3e16084581b853f70505f9b4f9d95d12b32ca2f6
SHA512 a02b0745643720c154e0bf89fcb40ea6611018b26ea7449e5e33ab735566626199c987220a13a07a66ef1b4cb10007138ce9cc3f00340df1bf63cbb5feb82bf0
TLSH
T1A0D0A7FD754B6211D59A0832B4545640732A05703CAAEB26D1FE6409AA9902477DE19D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 31d98e6214f21abd6adecd08549d62a2a0176cfaab4eabddcc47f7f2a0a53c6f
MD5 98994352364f677edaa92dd2e6c71c21
SHA1 fa338d4a81fae5e87511e41bda4b17388e75b38b
SHA512 0b7c2f4389a7c12f2df911ddf047970fbdd894862e19d41eb266a3e2aba0d44efd920fc5aac1c92747a5c38a1f17bb3e48480ff823b0f257668aec9f994bc91d
TLSH
T181E02B6AC821FC3708FD1758A01D8746E71013173640894F3B3C810C8FB0A2645D5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3591952492cd0ec999da3174142470bb86ea5df3769f4c11da91b1800459f4e5
MD5 b239dc2e8d841f1261b4ef547026d3fd
SHA1 00325762f505d9ebdac369be55145f6b6c36e33b
SHA512 c23ac3dd4480043cf25c69882d8642a2be750dc65a8462c5aa325e12c2100d92994f477f06fcc12129c0a7ed2e1138c5a286dea6254f64ee4aba72bd3eb35d17
SSDEEP 768:jIt6TAE0lBVxrJYl1dzp8rtT6SOl/iqwW:8tvVxtYtirtGBl/iqw
TLSH
T13F13A33E3A541CE2CAD7557D299F5E3AE33CE931FBC2134763353012472AB0A6A4E994
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 dffb77b513b0f12fa471edb99db418ae8abacf195170d875538455cad25e02e9
MD5 741da4e2935e74a5118be646b5ba73d2
SHA1 2da5f467a5f71da1977bece6ceb7ce52c1e51598
SHA512 1c21af9f80dd98a4357de23ad8a23043f70d11a5b1c3573a8c8c25ed5292f4d0c49ce16881528ed982576b98916f0f2521eaeb653d8b51857ffd23dc93559a8c
SSDEEP 3072:aL/uL/EiOSqR7L/PL/4L/hqp5BnKSHGV3Uqi:aL/uL/t7qJL/PL/4L/h0HXq
TLSH
T1A0447FF70D51A05BCBA802F5E2133A3DD177416D3DE1E8EAE5780CD52825B22B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 304421139df512364409b2d9c832e40e4de4433313a20f3e49e7eb0dbd9474e0
MD5 be1f17f1c7765598f586ced1346b33d6
SHA1 306c75406fb243fdb442d0029da0f36aca910c36
SHA512 b707413093139d34f753b3d81c251bd2e700999795889a4aa9e1f000cfb9f955bede34c65f79331fa9ef6f5e5a267cca8693dbe7349deb2b28905b4d1e45a989
SSDEEP 3072:PDf9y+HI5/uCBLv2b6aJN3QnlcZcvqxl7acrZG95mi:rf0v52gKhN3IcG87a0ZG95
TLSH
T1CC2508EECB682C82CE6B877470E0D9077E712183B69CC0D39944C5D897D6B8176E92BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 421f7cd4bcacbf74b57bef3b94f19263aa8b720016449521f73fc1095c0d97a0
MD5 110a4cf97b39435c6e8e165641b84d33
SHA1 b731997f2af2f5a3e5b422ea1b6e3a2d8eedc2cd
SHA512 cd8c2f0f15ad06f9f73ef1a992a4e8d73ec2378542aaf66c47f255714355ec328da5ec6cd7e5612b3d17f15a99b4dd58721115c5565e780a440c0ae00d42f0c8
SSDEEP 24576:NYIolGXIYmkVoA59FSLlPygYWAM9PJhe49JVs6uYYh7+0Oq+6c5J+ZrLLPaDoN28:NYeLmkYLlPTY+Py493sIYl+Lzn45O
TLSH
T170868DEDCA6898C3CD639930B4F0ED477CB413C3F595C1D68898C684026B7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 659a923c424f01783bf4660232fc02ec01fab84635013dd18919c6c3c7fd202b
MD5 ada802dff7d7a7d03eb05cf22b262a7b
SHA1 1cd5ed95bea1a131d5ca3397faef08297909bfe8
SHA512 1a2bf70ab8dd02525b6849db9ec424d7c4daa7d61c63a4626bc311896fc4dcbff637156a9e3fe5f24080c22158f1c872ba2e1df579dca2efaf6a37b7642aa30f
TLSH
T12181D83148D35299F3A1023385DF094CB977CDF9FF276F916890A8B1232B7B140ADA25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d9f0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d9f0.TMP
Size 3KB
SHA256 02e345b923cdc7ae691edc5dc85964b15cb2dc5ca2b5ff0d5899cef72be18895
MD5 e880820fb66bd62da08726a942fc6d96
SHA1 57d0b1200298a8c5cf091eaecbf9d0175c9acf4a
SHA512 ec58d1a3d79836392195bb6dc98fc42e02c2c212caa234d59ce3f7e4af7c67b008aa92a24e8c9c019dce320e2b6775f469c48f53c7435323f2c7e72989aaa482
TLSH
T18781C57049D352A9F360013381DF054CB8B7CEF9FF276E906890A8B1272B37180ADA21
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 0c8e24900c9e8f7c441873e64b67469da8dd03d2db83c95ed2be751dcabd6f16
MD5 87d1c6639d1de3972289a9665e790e14
SHA1 12c35d3cbe11b144384e081349a021cebf9c6b07
SHA512 e5e61fe194e44af6ea2079fa7995bad19aee4fc54e55b787321cf9382326251bb265bc7534194134d0aaf6c2a9f869a37056259ad7c57c53b159f8823c8c6ef2
SSDEEP 3:MsEllllkEthXllkl2zE/l9q5t/:/M/xT02zH5t/
TLSH
T1964404047FC00507C54011304051C7741771DD500717574334510C375CC5F500C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 ecb5fd518b5fb4707d62be0e19acabb0c6a2891fd08bd05b383af1f20b7f6cc7
MD5 66a1fb6069ec1b825a03ea7652f3ecb6
SHA1 08d1b82d1acb3288cb0a9de9e73af569a8934a43
SHA512 33a8a0da556f01f9ce551053856c03c94cb4c6d9c31ec23eb208787e1fd89ce53b8745e1fd2be9e71b28dea24d1fbf544d47ebfe7a6e6033dc65550418481f9e
TLSH
T13AE0D8D459D7C11D5D9534C7A3345B08E1C03586E7C5BE835B44D8C47747415B283547
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 92fd0b4ee7d129727f2f5d1bc3c2d11545fa54b8c1511f192fef20ad1ee6600d
MD5 476ab6b3dbb54baf13201a33ac830610
SHA1 33e3188046107103f8ad82abf0128303bea98998
SHA512 dcebfc436ca7c93b3ee45d798bf5840fa9eef380548b49ec8c3e13343af8a71f97af317382488c47f1a1c753cafb628a4d0b1092678686a4e48c87da582c897a
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jLjW5LheK5fKFtIqYaXqYpr:Tyi+7f+UZD4jJ/BbWxICKFOqYaXTpr
TLSH
T184E2028D3F11F612C8ED733DA0C2C6F0DEBC686C8B4DB171523898768C52A61F09E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 e3ff918010561198cdcfb169445a7be33b6b93d64c257a659068962c3b45d56f
MD5 f8941958fe49a97d9549773a7c59d5f0
SHA1 3af60e5aae56ff8edff410b0d578ff3ce7c7666c
SHA512 c02c4d5fb3ccf761f35336a553b2a1af8568095266209b970e4ba9625f797e9b792870f12aa6fc1b17116412fe3a66eac6d35a9b5cbc04d71008eab971037a79
TLSH
T12AE026049CC8C12D9958B8E3D378530CC6EA35A3F2CC3D4217CAC844A207642E6C7380
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 44efd1cf1be451b4356afa4b0b8144a1ea49e514f1e3bd70c5ed88a1f4193b27
MD5 f65fdf262eb6df6bbd1d9da42b3907d1
SHA1 47184736257d302b3dd2bd10e81b629632c2f992
SHA512 41999fe4a96082bfb5ed8376688da3c43319319138406bfcbb23721c7bb01d974778e2d801ad2f25fb549b73b684925b0dbb1f56dade97743a411249596efdba
SSDEEP 96:SfPIU+bGz83uy3+u4tgp4DLjGQLBze9z31iwjBHMsDEuspU0wbtqrOQpPfR4J+MA:SXf+G83uy3Ct7XBBKZ/H7DXspU3if
TLSH
T10B14225E5F343712CDBD417669EB44F35D7CF03F8B1266DA686104B4CEE2A52A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 556B
SHA256 961bcfa10d9a7dfcb12491378b1501fc1bede101367b849e62da30ae3f3bfb55
MD5 da6fda77380ff95ab56fdd5ddf0df729
SHA1 f3eedce8b915121a68ce48468a2bc8704bfa9832
SHA512 324fcf40d17953e60d105d3adc54758891718ba8c87c2396143602cacfe6901ed06001ab28a8d3e1e36e5d9efb1d265a2a3b3e4c3148c1644a1bda68544be328
TLSH
T106F0E9FB8D18F092C1278DF411BE65B5B7D690EB01C9E3D2D1C3A8C61E07060A285F46
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 9583a8bb3a8e371ac52eadcdc4aea80591560018721d54b64a1f1820a03a1605
MD5 82a54e607e8dc5c5f1128d0f9b874f0a
SHA1 d2519c2fd3b0bbc5b6676c011d4fbd5e969e6ec3
SHA512 a04c691abbba7c45d428f483ab67c755a35d5af98fcd7ad9151cfb40ce4e81d91ae37dd50e53f9c44024ba38addc21dd0ba067676b3bff4570feec01bb10556c
TLSH
T1F2E0D86098CDC21D9A4430D7D364674CCBA13597F6D87F411B84DC48B107004BEC21C1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 70f41b9bdf9ce7467eb0211f90a9e52e830419965702759ea74c766ee0e20549
MD5 0f6fefadb8838f5f8d38be27d02ee17f
SHA1 32e8aa91053518cb06d3f9636d6c620ae82fbd48
SHA512 f827333db9712777085cd1a58201b5afce8191eb74fc1712594c2095689bb89ec9dee78ac2dc54393a2a084e9d12a9bb4b8f80a8f037588ab20b960c866927f6
TLSH
T13931A0F783E8856E8A1195F0BA18AE2FDE1D0510436C3D9AC5E4AF1B93E2471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 723ccf395c38c1de03a0110500a6537690a676f62bc8695be6e1137253dfeaf1
MD5 8d3b40c4d007a475153f07a2c2d76406
SHA1 274f9f27c68eef338aac0846cc04e4f295f921f0
SHA512 7cb55205bd7b3d68c33c43ab6b1605d3deb162037bfd51609ad1d95d2a9e5f29b96ee96ed46badfe3853b411377e72313d428eadd434d4f6c95feaf1c33709f0
TLSH
T1BB31C0F783F4856E8A1196F0AA18AE2BCF1D0511432C7D9AC5E4AE2793F3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f41aa64d5f82535acdea5bfe4266daebbd32dc60a7e3a5a5847300b28dee058d
MD5 7e4cba498a1e34979abaec1cbbf66fe5
SHA1 0ded8ca8972fe9a07ca3f17661ec0e8fb2b92b56
SHA512 0471cd32a304d2e1b8a7b746f48f66d19b7fc0fa6f5d41b5647d093e20ac489615411a02ac91a0a565c67e73129e8dca61e24be5a66ab7196859eb54d77c929a
TLSH
T1A831C0F783F4856E8A1196F0AA18AE2FCF1D0511432C7D9AC5E4AE2793F3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 60d0cc72e16952d23aa26d2189e4435d85714ae0993c80dfeaa858d91a292dfe
MD5 c5c92946cdb7809ff3ccf16ad5825602
SHA1 67df1c3a051225e2a14689d47d30d2f632a0d933
SHA512 4f9ea2c8416ae44aae02645b77ead42a833d77dcaebc63c7b1735ad3ff31ee27f5ed775cdcdf53e4b9fc116dc0d82b8e1d8dced930b4d6e8d63024a8fb6e35bd
TLSH
T1DBE0D8568EBAB177103E1A7B1944A8452579D43542819CE4DEB6C23CB0950EB6B5F025
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 e29403b58625d89cdc0214bff3d5cc45fd20d16442ade8f2961399f41291179d
MD5 0a8cad517e2c3524bd7b2b4ae51968db
SHA1 2d7ac8875b76faa0d0bf8044f7842d78d7876170
SHA512 8eb714a86799fce96eeafcf8899babfd6aef5f90bd79c99227a4485e097ef3aecbb77f9dffeb686036b3556b87394b15558584165e77a82c7158e5315b52670a
SSDEEP 192:sxZORsyMqZjK1Ml8MkD/fusYFrbxZd0zodpc0H6v6+WNCeVXYvE+iMbIg5j0HUJ:sxZOzMD/fusArbxzHtHNhXc9WHY
TLSH
T1AD620A066A38997BDCDBE219F645BF53D7F9116391904E44AAFC8A0C04E7BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6000fb3a1b0de50e88517a5b9b324e4911ae0db28136c2023b66710cb97de086
MD5 7d8a65848d4d3b0b6e4aad8e9a4d1736
SHA1 60f7f0ba68242b8a0f5c08c9568e9b1d1a0d5fc7
SHA512 2534edc31118dc1bc03cabfb8b87c9793a0daa429f4da1b13f9bd1381917c90702a3fd69629365ff6b365fa24d5950db6a02fa366d30c6a439798a0ae47dc0b1
SSDEEP 192:sxZh2RsyMqZjK1Ml8MkD/fusYFrbxZd0zodpc0H6v6+WNCBeZYvbtqiMbIg5j0HY:sxZh29MD/fusArbxzHtHNDZ39WHY
TLSH
T182620A066A38997BDCDBE219F585BB53D7F9112391904E44AAFC8E0C04E7BDD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c3efeb3ae48dd87ab0a1b2b2b00379d7a2332fce5ba7663ad0015e4ee4e32f38
MD5 d6bb93285c6ff0851f5f64f383b72548
SHA1 6223e3179829ba27ddeeeed8119395c53beb526e
SHA512 a386e65b3d47e7e0b4f4efbe36acc413566cc19efbca6df95604c62ebe317ec2cb7b72a5fd3749d67d7833c8e4cdcda32d8e7c52b6bbf5ef7947f31b75cf4788
SSDEEP 192:sxZDRsyMqZjK1Ml8MkD/fussSrbTaZdEzodpc0H6v6+WNCBK/YvRC+iMbIgjUJ:sxZDzMD/fussSrbTaz3tHNP/q9jY
TLSH
T11462FA166A38997BCCDBE219F6457F53D7F91163A2904E44A9FCCA0C04E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 5fd1fc6655f93ccf56ab3690315a2db48d21d8edcdc2e1c4ec44576d41c9f772
MD5 b05491ae7c102c1b98f86e76d9a0e0a8
SHA1 c569cd3a30d9e1590c891238822d5fa6158c3fee
SHA512 c563ea3236c4578d3f10f15ea39a952d60fef473c089ef3b4d293d5704d9374990884d11eca754c71f6ec89532d1e26a5f52a751dec98b96a5364f6f9f5b95ad
SSDEEP 384:sxZh29KD/fusQWvKrbxzstHNoZy+rm8HY:s4QD/fmYK5zSHNwLrl4
TLSH
T17972F8066934997BDCD7E219F6557B63D7F9102391905E44AAFC8E1C00E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 656d62f20261144209fcf4b90dfb43b2ba84b837cc15c048f096beab3b592b54
MD5 7b8f0dd80dd0b51640551a95887889e4
SHA1 f8bb38781e022db10c6aa7520d644bace18253b4
SHA512 d4e94c6643acf0ffbcb749de9a87ba429084eee00bb0850c55da6a8a1616635c9c15e228da59258b9b5ac74d3567417130ac0916eece37c20a975ee443c88569
TLSH
T193E07D143EC8D17DA86530D343248308E3E8F967EBCC3D822FC1C88562C7504B1D3582
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 71727d2efc029518927ada3973d702a85a6120250a9646ca80fc6d2fe82e6618
MD5 d0058d1eff95de17833a162980e0d274
SHA1 38a8bed538ce57a30d40ab434b2ab54a0165aecc
SHA512 67e10e481d53a88b3db552f739077ea81e7dc41480b25029ecaff80dd7f59eb6e8f2abb4be1b00736aab4de834864238e28bdec9b46a3777f167d4bafcc2826d
TLSH
T1B9B0122C3704951ACB4505360DE8E7C16332FD2335400483AC186F204E036FC3C410E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 c16046e10912c994b1c2ee996db3121fcd9c3cc01da50f7d6aa56443f2436ed6
MD5 b7102ecce2554675e137db37770943e9
SHA1 018c967edd961101a9b7841bd68bf6106c70caa9
SHA512 d9d26dc9dc87fe54f112539f226d24c9bd28a934e2bc1510b92b5a39d8324b664b21cf857cf5dcd9946acc82273421b0e1e85dba5ebe2588cdd44a13fe4a20b4
TLSH
T1C8E0D82429C9C62EE6D630DB9314D708D2E2F953EAD879A52B88D444634B140B283551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 691e8170cf95e9ec38ea1e12852245fec41c3c92fc997e38dd31ecdc7f949de8
MD5 5a84164dd0e3f898773302da5608b596
SHA1 7d742b9efd396ffd84e006b1ced683cc4f3ffcb4
SHA512 e68ecf54474a71dfa972cd9daa6a1f99723abf15e8ab5df55b3c766d0a09667e6ad4b4c096dddac4c97055e528457a1ea6eef968b42ce922aa48b489b2b2f280
TLSH
T12AE0267459C8CA3D588070D793749B1CD2F0BD57A3E8BAC25F4C9444A202120FAE7981
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 b8eeb7ef95daed56b430c1070a4ebf8ae435157efd3d4cfeab12dab9fb23bc9c
MD5 fd7884162a63ab265da425331a43d566
SHA1 f250303431879115835aa921794c4a8aae47e8e6
SHA512 316587fe021957fdd7316847ea0e72fdc93c9e46a3910a1eb473ffcf66b83c4c5d6c79d04888495c3b21fbadb3d795bf70826ca086a25e3b0fc4f58d2ac1b93c
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbG5:05ppxnY753RNBvRJJdt7p5J9VlfV
TLSH
T175B29C1A713E0212397E2948B39696364F4235A37058E4BF7FB814A54F67E224CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 06c7c8772144cca3c94ff84d2d4bfb4e12abf3c0d03bb064bf039689f9ce6102
MD5 e6a799411c94d1fe74a050139035b54f
SHA1 299d79502161b8e33047c4c9273432bf550ad4f5
SHA512 6516c129dd3e575c94f485dcce9a9788b8af4f39f4f34ca41e52173b3a0b2c82f66f694f790b159aef8a17bd8e3a7a70f83bf233fc57370a8dc69159f9e1d7f5
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J9VlfYBRFzg:0LppY93PBZJPtN53VNYjFs
TLSH
T1BDC27756703A02513D7E2858B39696364F4235A33058E8BF7FB814A18F67E124CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 89bf1d384ffb7504f497b0c4165543bfdd404ee95b2a41fb6bcbb9cd12636fea
MD5 f152578213deffe9dc7ac0cf39e46733
SHA1 3e6733468bc4d5b7253182684c173e4b94ce01c2
SHA512 ce866f422ae0f2ac0588ecc2434a8f4b6b32b565d777075d5d0ff735166788850c16672ef6a82bed416077438f37785d1595b1286163d4622a2d65acb7d87457
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBgCOb/xipQ5ZjOxVW:DEtSyGhp22iSwx55ZoI
TLSH
T19052DDEBA92131C9C99647759ADA02E0BEB950BE9FC19BC3C5E600103BA5541A30B74D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 f4e56334adae7f1ee84c72421720cf70f77035692306cb6e3555dc45a90d6fcd
MD5 16b322aeedc3ca0257c09aeca2ce57da
SHA1 82ff9880dbcccb51394b67e343dbcd11f78d05c1
SHA512 d3183b39a6b12a84c94c69803e0c74e2a126511521678992eb728c38e18032aeb8096edb2db06ecb431ac825813720e6b175f05cc24b667344cf27943eb65bac
TLSH
T15D51A6C1A3A924D9BF8AA981D31E5913ADE53F57320E58B1332D44F48F85C260E6FD35
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 6216b2a109a368065d3a777c0f7bb662774b7cd7da5b19ae49bfce8e7284ee6e
MD5 d461ca62f291ea1de0819536fcfe739f
SHA1 f5f495bcb8439b72c651271db2de83c88f7cf001
SHA512 3921d2635097e9cc70f019c3bdf6587c769b2813b2be1a545e2ec01ec792689fb53911ebc967b1b3bd1b5ed2dc41d05d614de6e4a400e3005510114580f6f8c0
SSDEEP 192:mQOA4AsBDl9HNCsMFP4flmQeIIIdb9MIMPWYcYq9WV:GAhsBJGscPQeIIIdb9MIMeBZ9W
TLSH
T1A052732D67057B3BC05E2F7713564A599BD9E8430277222D31621C4F8EF3A5386C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 dc745d316cf5519cd56a1a082ab84578da145d8bc881eb6b27998dc2a64a6493
MD5 c1d72e9cd190a052e1480dd3af7727aa
SHA1 8784215a3656ddc5f4a60eec6b102fbd917f8440
SHA512 967ab96a0103c01e33516ee61fd7c32729d15d9ca41ee19cf962dfef01e47200e3d54db6ee4fbc9b6e206c6e8b96454b2ff033be282fa87f28a3a4a9c88245ca
TLSH
T1A8E02010FED4C19F6DA630E752154708D3843953FAC439491F44C48D610710177D7141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 5b4268c39dab094dd6a957fc3f400b86454386e905b4f44eec3e6c633ccab610
MD5 26cdf98bdab16d2de838990009e93fc0
SHA1 d3d5405d434b5c69478f2c021113a3239cd4078b
SHA512 111b4496966a925356c1f8fbd501e03e18d4d4bf3b3aacea508ab818c10c06d558b8336bf73e6e34a39cdd694080f612608a3853578f3a840514233857a6b353
TLSH
T1A1E0D850FDC4C59FA55231FB42698748D2953993FAC43F451F44CC895207145779B141
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 a9faa0306e5112e2b9e3e7e8f23ba7ce6462fd0c0b54ffc4cf393381fe43653f
MD5 1b528779b2a478f480dbb28fb0eabaf4
SHA1 6c9ed854a6112c406851cfd11ee4662332faf9f3
SHA512 2086e8ef8e4cf0f43654022d8375fcb55902ffe31e39767e4711c76f20175f3810c74624990058758a0a2d3b6637a853e72ef90536fccb5d3459903389c6b53d
SSDEEP 3:MsEllllkEthXllkl2zEy/:/M/xT02z9/
TLSH
T1AF440214AB900645C54010344051C76003E1D89147116787245308267C85AA01E00404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b7c17f94badafcbcbfd0978910bd2b9d04114d5d40561cf0348b164f29fae5d3
MD5 8cc3c69b69a6a6cb8ec98074d3ded246
SHA1 d644cbbd68092e56e7382dd5f21cec3bbc6b2cee
SHA512 988de8c6b106b4b12c18e4228300ad1a321e08815c12cd887d405970d03b4bdc04753b34a5a89ec834a68fad30f2c6e1eea6fe070db3736a864c0714a8c7ba31
SSDEEP 384:npNiF9CcmyWCs3sNj8TUNTUlIm2QckCr9ljKphBftGnIFpae4KV8p0mHpty/7IgI:pEFccps3mwgbkUJk1GISI8p0wd
TLSH
T1F1B25C36DC58C9BBECE74F99BB4A7A03DFE41267869899D4DAD81D0D10871DC070B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 6de9c07f306e045e81f85f6fed4498644233540ad4fa37062d6bb5c77f3330af
MD5 68364afb079f6df6fac3adedb0f01734
SHA1 ed099296067d558677b0540662141e8fbf952496
SHA512 49b3cfd7314296d74f98c26d819026870cd5997cae863c9aead94cfa0d835be693acccbb92df3899ed5eb63025a6b18728c21f4c12d8158b497e43558adb3718
SSDEEP 384:nsiF9CcmyWCs3sNt8TUNTUlI4MQckCr1fn2phBftGnvR5v9kwuty/7Igu:XFccps30wgjksno1GvR5v9Pg
TLSH
T196B24B32DC68C9BBECE75B99E74A3643DFE44167868C9AD4DAD81D0C10CB1DD030B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 57debac69564eb128a988758ed8f23268e085028a30fda8b77035901209e1d15
MD5 09484a19c0658ce23e6c89b95b82fa91
SHA1 d7a18e4c75700168075a17a2f0933a80149dc39e
SHA512 80fd03d3f7822e2f08caa8ef3f84130d4453babcecdcea873a35ec9c59bdc196506bbed5af5bf9a73d5a6668b1d67d55aebe53eef377f22b42438c9f14b555c1
SSDEEP 384:nsiFiZcId3sNt8TUNTUlI4cQckCr1fn2phBftGnvR5vOOPrXLpe8C/Fty/7IgN1:XFQd30wgZksno1GvR5vOi9Pj1
TLSH
T175D24A72D868D9ABFCE79F85A74A3603AFF44163D6C89AD8D9D89D0D00C759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a8bdce85a40340331645013111ec49875ff1ce5eae1fd836494c319bfa5fd8b9
MD5 a0e463ea9eed522435c860a9602bdc9f
SHA1 fe14b1b9a2259b3927333e43d25d57621389c33d
SHA512 0ac7756c24be096898e522b3b1557ab0dfa3af2e35cb2cddc11acdf8ae3530d8785fb4442133ddfb18c7b58f76a932f0eaaa6e2c86fdba486939be093c019069
SSDEEP 384:nriFtZcIcsNt8TUNTUlI4cQckCrAqn2phBftGnvEji2ASe/s1DCukIWO1OOPrXLf:GF1c0wgZk0no1GvEjCSb1DCxO1Oi9Pj1
TLSH
T1A3F23B71D8949DEBA8E6DAC55789F602AEF40133958C56DCE6F8BC2D309F4F84307825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 7756de845efe05da26dd3e6d3c388f7da8fad7bb4ba2be5cf8c9248bf961d917
MD5 1696affc7d72189f7e92d09d1b151d22
SHA1 39f36b8cbb8f9c2ae6a6b369e513d81f0a131d85
SHA512 313c5aac50730eb18a235ff1cdb7edec52a689938979d6156d1230cd72b77a596e936a91709f5f272b997a05fdfe3ba559bbfbedaa62e04f118f16b7c9c5d270
SSDEEP 384:npoiF9CcmyWCs3sNt8TUNTUlI4MQckCr1tmphBftGnvR5v9kwuty/7Igu:pzFccps30wgjkaY1GvR5v9Pg
TLSH
T12EB23A36DC68C9BBECE75B99E74A3643DFE44167868C9AD4DAD81D0C10CB1DD030B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 51d343050896080f71d1a346f7467280dc2f1fcb76d159bfc7cb386d9a6bd223
MD5 93db2afe4f829cdffc16a85bebd82f22
SHA1 5281a3fb0c2a3d196b0dbe0fcf8940c9e3b8e8b8
SHA512 812d7add6f67de8650c5f7e03b2735ddaf456f743887ca9e8b05fa2083d282e64c738ed893b882deb7d3d7434840760e506830e2117190b6c8d0f3970c73d380
SSDEEP 384:npCiF9CcmyWCs3sNJ8TUNTUlIm2QckCr9/wHphBftGnvl5ve4KV8p0mHpty/7IgI:pJFccps3EwgbkUoJ1Gvl5vI8p0wd
TLSH
T1A5C26C32DC58C9BBECD74B99B74A3603EEE45267868CAAD4DADC1D0D10D71ED430B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 19a5258e972dc1810ac27de3ead436837332c7812cbdac1a64a4540ed8109360
MD5 6c37db20a00fa0496d80a15f281c5a4f
SHA1 6e3cf90b969998d286c60011915eeb7d7c381820
SHA512 4f16a13cf03e1623a04940d951d7dbe7abfd1091d0be0fd03791fbef6367a40d49192265b026f1b41dff42e5340585839812d4ceb4ecc1ca6ecf84dbc148d6dc
SSDEEP 384:nriFtZcIcsNt8TUNTUlI4cQckCrApn2phBftGnvEji2ASe/s1DCukIWO1OOPrXLf:GF1c0wgZk3no1GvEjCSb1DCxO1Oi9Pj1
TLSH
T1A4F23B71D8949DEBA8E6DAC55789F602AEF40133958C56DCE6F8BC2D309F4F84307825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 3f26e9f339c1449c175273bfecf7a73f42a500b650509317455c4c65545ead11
MD5 6295663a0c4421b8b98402a7c50210d7
SHA1 822f5dfc803972be4a76001cce2b59aef781e695
SHA512 064b6e5adb97ef9e12bfc7bc80ccb762e5d9d5bf62d3423745e6bf06c9c0d3986e91bbae8b54c77a5b3f2a9f3531f2ebdf7efd218bbc8c79036347e5eb69fb9c
SSDEEP 12:TLpOPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isnJazbdAnR2dmQQtudV:TL85UOl0afDdWec9sJyR1RApejB5fc
TLSH
T13C92DF236D352033E8DA4B36BC8349910EB8135EC9A7B8549ED049621DB1BC1A2995F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 551341d2cea591277062c7654e3226f83d4390141b329419942254d8417e8dfd
MD5 880ddc63fa80129f715ff82d58a2956f
SHA1 f26add6d892ca6c3752c7e317179bb55a96e17f1
SHA512 c4bade9de3e092d2487b5bc1f662d42e5475afe7ce3a233bcbf68c0816a57c968a9a23c4c4cb5e00443318f13d54a2cf41b88b5b22db26918b94e8c6d8bd9fa5
SSDEEP 3:MsEllllkEthXllkl2zESSal/:/M/xT02zv/
TLSH
T1564402046B800505CA802131416187510361D8510611974725511822BC85A600C0000C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f84ab674f7c648c9a6ccdd3502e9f8dfca3a873316984eb50d1ffc826f3f04d7
MD5 246fea04d8c773995ecbbb7543f7f29f
SHA1 b753057a7956d43d9a4945e357c3c9d1b98c7109
SHA512 89c5d4b95ffca64598c4327bbdf4bba8060f8aae96b15ff0ac3ba14253b33f7f06b94fd890032f800a92309c0e7b94bb21fce51567758ff9968c53d74105c479
TLSH
T127411A5CA6E91148B3B76E969BF6689D487FB8372E46C49D00110D4F0663F00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

3be1d073-08bd-499e-a355-447ddabb29e9.tmp

Path C:\Users\Admin\AppData\Local\Temp\3be1d073-08bd-499e-a355-447ddabb29e9.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ffd1a97-d253-4799-a191-218f331566b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\4ffd1a97-d253-4799-a191-218f331566b7.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

d8f9c998-a319-432c-89d7-daf584dff235.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3236_119943437\d8f9c998-a319-432c-89d7-daf584dff235.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3236_96298134\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads