hxxps://llaun[.]ch/en

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
20s
max time network
22s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
22/08/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://llaun.ch/en
Sample260822-pyf53avanc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2304	msedge.exe
5928	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318762672926957"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4045429996-2364296335-1634900306-1000\{D3E0ABA1-795D-41AF-8EA0-D86408D4E3BB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4045429996-2364296335-1634900306-1000\{7FD12004-A957-4743-BFE8-D34B1C99B585}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 4580	4776	msedge.exe	82
PID 4776 wrote to memory of 2304	4776	msedge.exe	85
PID 4776 wrote to memory of 772	4776	msedge.exe	86
PID 4776 wrote to memory of 476	4776	msedge.exe	87
PID 4776 wrote to memory of 772	4776	msedge.exe	86
PID 4776 wrote to memory of 4668	4776	msedge.exe	88
PID 4776 wrote to memory of 772	4776	msedge.exe	86
PID 4776 wrote to memory of 3112	4776	msedge.exe	89
PID 4776 wrote to memory of 476	4776	msedge.exe	87
PID 4776 wrote to memory of 4668	4776	msedge.exe	88
PID 4776 wrote to memory of 4668	4776	msedge.exe	88
PID 4776 wrote to memory of 3112	4776	msedge.exe	89
PID 4776 wrote to memory of 3112	4776	msedge.exe	89
PID 4776 wrote to memory of 5056	4776	msedge.exe	92
PID 4776 wrote to memory of 1304	4776	msedge.exe	93
PID 4776 wrote to memory of 5056	4776	msedge.exe	92
PID 4776 wrote to memory of 1304	4776	msedge.exe	93
PID 4776 wrote to memory of 5188	4776	msedge.exe	95
PID 4776 wrote to memory of 4996	4776	msedge.exe	105
PID 4996 wrote to memory of 4520	4996	msedge.exe	106
PID 4996 wrote to memory of 5928	4996	msedge.exe	107
PID 4996 wrote to memory of 2468	4996	msedge.exe	108
PID 4996 wrote to memory of 2468	4996	msedge.exe	108
PID 4996 wrote to memory of 2468	4996	msedge.exe	108
PID 4996 wrote to memory of 4560	4996	msedge.exe	109
PID 4996 wrote to memory of 4560	4996	msedge.exe	109
PID 4996 wrote to memory of 1528	4996	msedge.exe	111
PID 4996 wrote to memory of 1528	4996	msedge.exe	111
PID 4996 wrote to memory of 4832	4996	msedge.exe	113
PID 4996 wrote to memory of 1856	4996	msedge.exe	114
PID 4996 wrote to memory of 1856	4996	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://llaun.ch/en
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffe6f16c188,0x7ffe6f16c194,0x7ffe6f16c1a0
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,7161545978826635335,3993646859669689128,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1491709188021087837,1070912997030177353,262144 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:2
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,5552310906760258369,17447748481122085419,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3060,i,18053136297404444461,17507531454397897103,2097152 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3040,i,7203061259617545692,4875044810130495368,2097152 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,2623876969347676281,11217709563090212849,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,3567942049882018399,2910248936996640250,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,6201195054726687351,12839129619590124163,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,6201195054726687351,12839129619590124163,524288 --field-trial-handle=3836,i,6621089831308651093,15682126342934501064,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffe6f16c188,0x7ffe6f16c194,0x7ffe6f16c1a0
    3⤵
    PID:4520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,8722902229357366047,1560892391655923746,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,5987343190666059525,11555708662784036706,262144 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:2
    3⤵
    PID:2468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,12719760197107506491,2875076795988012671,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:8
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,14633083134505275679,14815910335404884994,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
    3⤵
    PID:1528
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,13633100408039542017,6075551893946840612,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
    3⤵
    PID:4480
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,13633100408039542017,6075551893946840612,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,15785359562649391640,9607307458597839390,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
    3⤵
    PID:1856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,11887626823339049416,12410825797584806398,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:8
    3⤵
    PID:3060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,9455898705881439314,3482076467491257779,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
    3⤵
    PID:3424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,3296997223284250397,6111952326932566111,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
    3⤵
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,3224197954914299149,12375016372991184493,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
    3⤵
    PID:5300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,5399773759530879620,11922365359670899454,524288 --field-trial-handle=2656,i,375597448360650570,11930212809047524988,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
    3⤵
    PID:4924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc69248227d1b80ff41106426895bcd599abcddfbfe7fdbeabc0fcc2aca903ae
MD5 be6741080fa256162cf6b0264133ca7c
SHA1 4914334b0edd1e4c3a470920450bdee63ee2f5b6
SHA512 8d42ac6412ff316aaa68e317e92c2167dbcac331381aec8d8be8410c5bfab4657127a0601dfc90f771660e393667d62af5e917155d6fcc5c7aa6a8ca1e03f903
TLSH
T149D08037394D7015E35D5175A463C7152B664C611497DF01F166CA7CD9B61C462C71C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92d3e64f8d7d488e0cc1e99bb1fc37ad06de2cf091b2bb1940cb0476b7200060
MD5 1522ccbb7dcb1fdaf35d97a6558496cc
SHA1 2a7556782d5783c84e4d54dd2ebd2f593c58d185
SHA512 9da0234d9c7c7620c711a6400886ee5d45a04a2bd4d26fcfe7b29e8a1e8f842b5e38a41c1fb71353547f0bdbabc3608fe3c129c9976dc9750fb2f5198e475db5
TLSH
T16CD09720688CB4E0E029203C01300200358C4C822253A202F0200A688D621C222D58E2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d275eb7e12538cff49d50ab9897edbca2a71561adf0f1459531b0f5ce31518e
MD5 f73b74e93ec2e03ce3a2471f3e848f18
SHA1 ace0a479859d3ec9d8d82072631a81ffa998dfe4
SHA512 3839b7e041a22f21447585da1fae733a4b19fee2ff1185de445eed5de66a80de31a893d119fd160e000fb9850269a08515467dbee9a217b0579e2d82045b4abc
TLSH
T15DD0233838CCF014C23324BC5032030937884C403097F102D424066CD94B3C852C40B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 44e095af7ccad1927602b4b935aae3524939df30218011b877b59c782e6c6106
MD5 3c1bf221dd0438f719ae47a265c3e436
SHA1 b382689171539f473d331bdcef3739b0fa0b1062
SHA512 b7f8bf66ea12f9b37e5f8d1af222c106c1dfa377331d2153d9380edcc3af7381e9c3490378c0b160e05f5c4fd2e1590d5cb8ed07cdeb7b74fb7b38b0e8e1e57f
TLSH
T18ED080333D4D7015E35D5175A463C7153B7648611497DF01F166CA7CD9F61C466C71C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2a14aaa69d5297132329e9f38730e57a25ecc983c65aaf1e669f3934d28c2fb2
MD5 16d222f16f4d919bc5b541e110e715c1
SHA1 a2ab59068f10a13f3ebc5fb4aa6b3844b6d4c5ba
SHA512 32891925c2d19eeb0bc46727150fd0d22e7855f706223d683814ae36c7a979b76483098e4443ee77b40aa6e010597c5a7d4bef7dc0e6dbd1b5702ec0da949da5
TLSH
T15BE022E9CC31A87708FD0B1890A10746E745236B2B80484B3A3CC51C8FB1637498682C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 861db309a4659211bb5572ba1e00c3d0f6cf4703ed143a830b138f84344033b7
MD5 d682338ea313dd4521f7480acf9b28a0
SHA1 f5594d526a834eba6a8e92069f2dd0f3ba8def75
SHA512 44fee78bc3de2278b2eb82e4eb8a0cd9731fb1a51b669a04465cb140634c76f41d165ea7b732b0c0062356e8fc7842e9a643261699c17293b5f515f4f617abf0
SSDEEP 768:yVOXALTkmm6kIql+EyZbrlkNQs+LqVn6xUoUp:y5LTkmm6olfoOTn0UoUp
TLSH
T15813A23D3A053C46CACB593D4A8F0AF5A778C9A9FAE1276B37313181132E75E5C0E859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 33943e968fb50a2ad5970ac816a4417e1bbf4cca01b591ad22003ae9663dc9bf
MD5 a9cfe44b25b1352125fd6863abbb9eed
SHA1 c47106d9bcffe6b74db17c608cdd140ed9e37c40
SHA512 e7d53d6292f63b64808e0969d5f79e160294c079415f304e6bb3baa165e4b0312c3d162df1e8b6bde9686854193df5526c888a785d9604c4b800c5a7e349cac6
SSDEEP 1536:wk4E7NHo4dL/BnYL/ltO3agg1wi1HIL/wiL/NblC4S10yW8Wuecrzk2mwYg:JdL/eL/dggPHIL/9L/NER0qv0j
TLSH
T19D4460F34950A01BCFA802F5E2033A3DD17B455E7DE1F9E9E5784CD11829B22B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 424cd8b952e70fe6dfb34af424506a8f883112eab0c90ce2ae562286ed79cae4
MD5 e68c697a9c392e8d79fde4f3b117ac29
SHA1 e8d5e08e94e168b1226aeb3dc54735c255a03a78
SHA512 e6b0d4c0d768a28d012a8627e7f68d34cce907b089e843ce8ccae7f4a25e637e8a00db4b4c0d01128a68f887e4292e065173f60f2526d10324056113717b31e9
SSDEEP 6144:PX5vWetmVB58XGD4T4w4x4D4F4amr6ZJyb:PX5vxm/5ks4T4w4x4D4F4/+ZJ
TLSH
T119252AEECB282C82CF6B8A74B1E0D8077E702183B69DD0D39945C5D857D6B8175E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 5b30ae9563e6c94e82583515ae6bcccd50d2c45018e048462d1cee99238f3669
MD5 50d968999fcf33b964667a7d44b9147a
SHA1 a87506e6fa36d11d458735d3eb3812fe1f18a89f
SHA512 00bf652e5c6524e6eb91541775679a7d9ddcee803ef6b6702b337f419cf6695e19b0d5869ed19d538c57776f85f59fffb24416ba432d852dd9ce75d60c8e7466
SSDEEP 49152:yxYfRh7F3FulBn0NB4ja4vjL28CG/kyfXaXt:yxm7FQ/0NB4ja4vjXe
TLSH
T1C0868DEDCA6898C3CD639970B0F0E9477C7413C3F5A5C1D6889CC588026B7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8710020b0e0cf5f271040740538d4ece686690ca6fb62c14a62c872c9de63dda
MD5 881ae26582bf56877d7aa683bc3eaf07
SHA1 abbffec8861532ed27e215e8a6418305b117ec32
SHA512 a23a5dd135a0c942d6db327cd7e0c735e07d3f01a9c3d89c9ed726769818bcf89cd77d24f39bbd7e2001bb5a5402844f1068299923ca7a22d419d1e0b14eaf50
TLSH
T16B71FA5A0202745FE36C027096E105F070B789C9BDD3CD95B31469B9330FF6F5857924
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58213f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58213f.TMP
Size 3KB
SHA256 a92d0aa5b1817942d4e877da533eb59d414e0b756df3d5535ecef07eb9408618
MD5 652833affef572b99f5c0f9fde925fc1
SHA1 f51df9578dc7e5d241c1866f0437d4945d0fe1e5
SHA512 0956498fcc0526ad95f20fbc6f297c3b0765dd0e56da2586ad5410135ce38048f1e29ccc8065df7730bffbc71a4526e7ab68ccb702b441000008a8e90a6464cf
TLSH
T1B5613D9A0302749FE35D027094E106F074B385C5BED3CD41332469B9330EF6F485B920
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 ff785d4f3138294886faeeb2dc996226373f006f7d4f86259862a7a6f26ff299
MD5 d9376bc12274f72e7eaa9bab65524bf6
SHA1 75a62eef70230ced1757f64c625dc005fa2629e4
SHA512 1715cf9bbc6cef8c8548b7fd65eba011fe62fdf466ebe18299f7507646335b175a849a0f167dcf50f676b87ee1b49ccfc23bddc36de780a496ed8a5d7be08e7e
TLSH
T187E0DF94B5CBC26EAE2038D3A23C7B1CD281349AD6C9EF832B10CCC0760A411B292687
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 de713787f034d868f4559efea8cfe5d3d23948941acb4519b422395050cc3491
MD5 e6ddfb667c6e537ff518b09393c25a80
SHA1 876753e4ff1453a892a4195369ac261e98b0613d
SHA512 4f9acbff46406413470f9ee8dc8105e6788e8c44bddf3143e39051324103d442f04dea717113e75e531bd1b88e22d2c73b8020f035c106a3b1e4bcb69db525fc
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+j31MW5LF1PK5fKFtI6ODcqYp6Q:Tyi+7f+UZD4jJ/BKWxXCKFOxDcTp7
TLSH
T162E2F18C3F11F911C8ED773EA1C2C6F05EBC686C4A4EB1B05578A876CC536A1F49E60A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 4a35848ebda5118cf409b70f2ac5df8cc6c75c2a681629e7c6a2ab54a47a22c4
MD5 0b78568404101a5a75395b4dc1e250e7
SHA1 62730840e5df32c41e598bce8a16ea49b2a4c617
SHA512 aad4f24c8bc8f5edcb1746fd1a4d11079bc6a79d039e1ea133824a654b80920a4da3c113dbba30701d2365a724564ae13fad2a8638924c035d04cfff31045006
TLSH
T182E0268545CAC229B426B897877D7B2C82D3340AEEC8BAC32708CC407141B41A28B285
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 d97ec07d55c8740e774c76ef3c202349108cff19ca3f7606c546b147092a80a3
MD5 bd47ca7179c7b755be821a4cf85c8bfa
SHA1 024ee26e1a75a09515b82eb0fc45ae43ca86fe12
SHA512 932231d643b0bee5cd5daf67a1a4bc000c19aeed794808d81f178dd9c2ca8a78c7b266c903405bf49855f0f9a5c2786f5abf6731b9042af761483d70d8c8a2a6
SSDEEP 48:uzBmw6QU1PzXp17eT8DOQI76l4Rl4jTP5ootsXMDdJC:6BCx5N48OrcPVsXMXC
TLSH
T17E92B58B1A397813DB450D3A266A5572CCBFE02C6F6ADC983C64A0354DF8582D0391BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 fe87aba03fa9442a101f9003a8bdad7cfc750843c38f2070b4273dde75948ba0
MD5 49095d3ccafb035ffa8b068354c708e7
SHA1 2f33696430f1f591e68b9b74e749ddf260b828ce
SHA512 a83e5d793213a358ba88234e95453458c9d26437bd561da4196a09dadfc0b95a1d20f6a3694c7739801d18cdc3952cb2fd004d62ca64e35e07a6b4c13d40dc0c
SSDEEP 96:nDiIU+bGz83uy3+u4tgp4DLjGQLBze9z3OjBHMsDEuspU0wbtqrOQpPfR4J+MCXD:nDif+G83uy3Ct7XBBKeH7DXspU3iV
TLSH
T16D140F0E4F243721CDBD917669E744B35D6CF03F8B5266DA686114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 715B
SHA256 39b4b61a5f72c6ad2539ba62c5106c6edd0d0f5140690fb69df013ccfbb40053
MD5 4f161ef90311e18501f0f3de7a4dd768
SHA1 3d61ce43dbcb6cae5a6459c182da4c208022bf77
SHA512 d588ae905c516ad5a8666d058cee3e9e5acf6c8d0886fc6e11a640379a1c781d28e6e8d341f69dd8bfb2b98f4d030de6c43874e4014c07779642e969bc61abbb
TLSH
T1F1014BB741551041FB8B28F21B82777BE7EFF4288DCC31BCED41B494AA91A706682083
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7da26e417bf8317635dae2dc0eb6eaf851ec76ae6a6ec2889032312c5f0c6b40
MD5 b9554f4cd01007fc53a5edb44519938a
SHA1 4998341499f11af1122fbb3f4a78537559b6460b
SHA512 bb0e2f94bedfa4cf0b2e95e736a730d2074cca0205b5a149098e72908f1c0e0a68e60e90300bfa2d26e604d35c3b4590e247b68eab791120e57378b45089f109
TLSH
T140E0D86188DFC129552430C7A338770CC7A23406DEC8AB423F04D840B086145E6895C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 c415b7de792eb039deb73c098d981e1b449fab1286e92b2c5c80518807e9772c
MD5 043b82f668165f33133328b199e3f2ff
SHA1 94bbfc4b21d1a75498946474b440e70c1eb5ee2f
SHA512 789ca42f88c56ff46d9ba58e82bfc6b2343555aad38241a1af49786d62eb22373ee945b7c39115975438288ebb3b5ffa7e9f1db6817eed411dee0798e6ff593c
SSDEEP 96:reMatUaA1CwpyaPDHBWyvQwOGiT3AZU9G0GBS/zC5bupV3CL8zkSqAUqPTGU:rLaSaaBHZOGG9Gzgu5kc8wHqPTGU
TLSH
T19BD2B60F3654F146CD9A7A32D8691DA139290075F393A47A7C90F1B24DF3BAAB81B033
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5bda23bf9f42350175b3a8001ad1cabee7f385aaaec4756ff20969a77cbd2607
MD5 150584fec1ae58222e36d4b7d48ddefc
SHA1 581cae8448a7b09773a0ff9ced54a470088ba2f1
SHA512 3afe9f917ada9f52708f539818997d3c87a77da63ba6509c29a740cd4a57a8e2b2e25a4cfed7f62b8d1d4693063b4aaaedce3b9663646fcef5ac931596c4664c
TLSH
T14C51BEF383B4866ECA11A2F0EA187E2FCE1D0515436C3D6AC5E4AF1793E2470E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 ee831ede86d9f9f1676fc9b943238bca287f6b1f4ffa3f582ce6b238e2739bbd
MD5 4d11e8272a16e8d80fdc6db54be5e658
SHA1 6efaf671cdcfd7a2f249bfa588d836a1f2a65ca4
SHA512 dbe42687be864e3715c3cd0920d970f618f42613de81e9280d6958fbc7aa5d49275fedb9f3600a7f4881f015491b3fbd5c21379734d542ea4e51ca79bb0910ed
SSDEEP 96:OIEumQv8m1ccnvS6+2NxHDKm4TD+BfKdTD+6nFq37Xrmu4g:OIEumQv8m1ccnvS6hNF2bvXvArbB
TLSH
T184F2EFFB17236506D99444B0E0046FCEAF16010B47B6B2ED7AC44BE3F3920E2B5B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 143a91393debdf75c769bdfa6e06485f6038dc68973ef90885b9e787b3dadd52
MD5 731f6440425290c04dd97f8caa966313
SHA1 6586744c6a86c45275d29259e136711c9f0e97d1
SHA512 db5c07789f020ad90091e2556254a5388c1429e4d6eeec689d62ed522d56de2503c042334c7ee589a6a681ba5b835431345cd0247ca77d4be7d1e2a26fb2133f
TLSH
T1EA012B97C57DB4B720B5197F2ECABC0117B5A434124098F4EE9AD16DE1D08FB2F29055
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 369ac80b8a7d2bce2601936e379f16c9b9de0643d7087403a076de1875338d65
MD5 82c0f0656603b9fedf3b5668e548cfc2
SHA1 9f662908f082ba4c163bef8ce2585eafc239e211
SHA512 2f262b86b4c969b3713f7aacbb513b8e4bebb555f1e5f5724003ea367a3ffff4a5f9e5d23663f19e052e5981215b40bc9742ab2b6dacea200b711dbde786b511
SSDEEP 192:sxZkRvyMqZjK1Ml8WkB/fJspJWpVXuYZZyOzodpAyHW6+WNDL9wXXYlt/q1xhhI0:sxZkIAB/fJspJWvXumZYXHbPCXPn5tV
TLSH
T13872D7156A38997BDCDBD609FA457F63E7FC152292914E4499FC8A0C05EBAEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 838dbe4875faa2db1018e5b2ed97006ab7ad3c52c2982d32a9d3ced2c3f3c2ca
MD5 4ecf690d867e19252d610afcadaf4439
SHA1 e3566d61057497e977135390118fce1fb4b3d3bf
SHA512 86c60f259abceb4f536089c814841c6c427ab29df9f8e84ca2e7792019ec1a8be4c3706ca80776d9d4aa74f3511172b317e5edbc13b65066f9e9f5db8a65e046
SSDEEP 192:sxZkRvyMqZjK1Ml8MkB/fJsMAuYZZyBzodpAyHW6+WNB12/YBcuq1xjvIgjtjJ:sxZkIMB/fJsMAumZvXHbe/5/jtV
TLSH
T14162E7156A389977DCDBD609FA457B53D7FD153292904E48A9FCCA0C04EBAEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4a5db2156eb4fef5daa5096bff3f90657bd3e3f7e4afca552041515b3bb00ef9
MD5 d8fc0d9ea27f21fb344721ee644926d8
SHA1 13d74fb1b76636436ea648ef0842d2db1c86ea2f
SHA512 6e20274faa19d10d87a4ce06ab63f89516038cb2f97b7aac380d044960e3c29640ac920260a09b885f4ab19ece0927ab3c06e980b145b56014170d5af7d4cccd
SSDEEP 768:P4E/aX6WvCuFO8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDVLlFX6BaroVNm5Pa:P4E/aX6WvCuFOu1jayVLfqBRVMha
TLSH
T18FD20A3B280CCB7E4F844E9CEC266F976DD801C796988D5447EA884C03CB7EE511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 0c1c11ab273d6a290e5abe9403c55019b45d00ded99023045b08906949716fbf
MD5 e004caa03f518502ce6351cd793a7169
SHA1 8cb331c8b2b7d216e24cc462b537087daeee8b0f
SHA512 90b1a67eb6c326db1f670cf2b62c1a06ab8f174d4779f2d430ebfb42ea1cf36bb57eac1c5d841847396ff8c26875605152497b395aec785374332f54416c90e0
TLSH
T17DE0DF5025DAC179642B20C34228B76CC2A6B41BD3C8BA426F04C880A55A508B1969C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 1d05ee7897c9e4a4ab96a41ff4ee43b1ae52af856d910bb06b0c19a0326cb54e
MD5 cd6376ce46b42e3294264044f1c8ce14
SHA1 59ee29f91e1794ceec828731f53c18e12b5280ac
SHA512 05dfa70b9095d6be21fed819cb57a84e3d5b941b30cda33b066a95edf0bd4ca7beb92d8ea305b86eb0a7c8e32409e15924eeebe09799197875047ce49353010e
TLSH
T150B09225BB00B601C0961A785A848748E200A0622480C41288696FA94F183A43A43880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 41b6d3268eb689acc61fe5e807535967d88c9963cfd942788bb77a9a197eed83
MD5 fe8ecefa1ce549bae5c156823a4f644f
SHA1 d5be8228fe47f8e5533dffcfc589de8cbb02d4f3
SHA512 3d89810e824b7c876fca1cb36f04c96c9f39c90c1e16f08757391c335e2ac4c25ffbfba312e2407ee24aa9cf637adb83508ed325a0b9b3cd954a633425eacddb
TLSH
T1B9E0D82035DEC22A616720C7933CF74C81B3B502D7C8BA527B08D880E20A1447247990
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 c6e41847b073ed1f43135d154bde58c871842e582e5d15889841e05853c52c61
MD5 d13c00d38bdc9d4e035162f5b014533a
SHA1 386b03b1e4510550bd08627a0aeefc3cc8e2904c
SHA512 53f08aa4e79aeb64721334c5df3e1f8f4e5e5adad577f0d514978e721400c1fbb6dddbde8a529762d43f8bbe0a45a93ee71936d7c2db3ec91e2345e8d6ec027c
TLSH
T1DCE0867455EBC2395826E0C387B8F71CC2F1B807ABC8BB87E7488490A145544B2EE9C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 c79886939af7fa67b50903e5f98d16b25a5ffd4f9668f21120492c01dfdf953b
MD5 ee5cb7c53132a50bc1189908b0414345
SHA1 e24b77f8552c96e8f8dc39b5fdc51d6c7c749731
SHA512 eeea988cdfab0893da6c1550aa0308661f3118131a779dd5136cf6e543dbda4616f477b9ebbe403c674732ca771f21c6c06cb596c3a444abca5f7554486d9f9c
SSDEEP 192:OotE42aG3iLEAs1AOvQA7uItfg1MhlfznKzO5tZBBHaFlufF5XYP7cNBv3dR5LAg:8ptDYDcfvNR1ANAJ/XH
TLSH
T102B26916717B065238BF250CA69399378E4231A33418E4EF7BB914A21F67E225DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 4913f87486c61bf49d7fc8fc26567e6081a0747e75618c355534dd54090f73d4
MD5 c97c853fb2e7eca9d78064e917e58935
SHA1 a6d37bb3383a9f0474421b3b2184bf27afafc190
SHA512 8961a6ca0b8388a8ec5d08147ccefdf15765b5b610c394384945a21170e1ea4d12618469c811da836080b965669ed2b4ff83ad9c177ecaa3953122a63bc14701
SSDEEP 192:OotE42aG3iLEAs1AOvQA7uItfg1MhlfznKzO5tZBBHaFlufF5XYP7cNBv3dR5LAl:8ptDYDcfvNR1ANAJ/XvlE
TLSH
T16AC26706717B065138BF250CA693993B9E4231A33818E4AF7BB914A20F6BE115DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 0c4b19e0e5109d3d06bf2585f65c7d443170d0e70f69d80f32089749afa07fae
MD5 baacdf637a5f48a05806e509fc94b876
SHA1 a577cb3e1712c4253f7209525d7d8dc42c68dd55
SHA512 60c9a297a16369374abd89c0982a905b32b17616e420a0910f5e202a9c1d5d15bb3e6149c4489db65483ec56a1f70ae18908fd756e02cac3435c87cc37a2ac4c
SSDEEP 192:P+xWz/Fb3fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxodb3fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1EE24730A7B747001EDE6D9725CB080771E3CB16DCF22A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 341858e6f74072fddc80b24d87ec8de6e4a7127592366434e655b6cc853dc207
MD5 76c529520a7ee0c35f4b72ed2111aa2c
SHA1 79301dd9ccc255636188361e0c052c3dec7136a9
SHA512 7eba1ad1881eb771ca03f2bb1791e8e02f4f1abc91a22259a23273009a52982f2a9e9bda8a819c09a53c4cd148406b6dc79ed5feb70c26b07ca60b7204518366
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgkVMs9IMsY2UAGt:DEK3tjkSI5IUltGhp22iSBg4kGAW
TLSH
T15E52AF5FEA343212ECDA87758BC402D2FD7A913E8E84EA021CE520115BF8691571B4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 3fa21e1a42831cb74a1ec2fd7e719ffc4cfa77be0bc45722f131298cf60c54ad
MD5 6ae3824b15b42621edeb53e94c2be316
SHA1 b74071a8f7b60a2e230df23e7c1bce71b50b3c5c
SHA512 b162750810980618689c0f0f1098c3e8480ebc330a9d8d8fe800a3d2e450beb2f955cc1652ead02b359f3426e5e32dbada73a82573566eb2c97e5f485993c693
TLSH
T1155186C2D3F9A4857E8AA945C31A5417FCE53E5A2A0E58B1332E44F44F88C250E6FE25
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 30f1ac144d438841c0afcf40910864c5ba7166c9cb7c3a5df4c4fcf15f291cf1
MD5 b28b3c2cc955f460f374eebff8954c9d
SHA1 03eacccac1db2bc759e926664ccc6ae6a129d29a
SHA512 3bde94d69d70f1267b90fd806fce92527046e8df7b1794768518330c0cccacb1a036160a6a7a4a5eb9e6a75efb41685411679b946b12b37093ccbd39519dd169
SSDEEP 192:k2OEZAs7l8++rsEx/2AlKQwIII3bnMIMRAYcYo:aE6sh+sAgQwIII3bnMIMeB9
TLSH
T18E52731A27251F3BC15E5FBF13564AA51BE888820173222D35621CCF9DF3A6786C57F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 f5c36c6eee74c09627a59ea577169021171c32cdc08789ee6f5ab5818a263c5b
MD5 0ec10e93ae44d95b5b0971f22ed162e3
SHA1 a78984568fc71876217402416b234e51e987b715
SHA512 805a79390786ecd406bc943d9aa61f3a7fa0b94b260b6edaa2d16c8e2b3e05bebebafe24cd953cef108825420dfd4396e0356bb7bc3fae1896442159df580040
TLSH
T1CCE02051D5CDC15E652930871739737CC3833403EED47A472F00C444F8496007249141
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 dc0424c8ccf0b6fd0380844b1903c7665470b7ed9b976b04c160d9e260136019
MD5 a68e5c48d0868c601292ee6f87da47fb
SHA1 b3076efdff31372a9d49dfa9a0effefacf276c1f
SHA512 ab8835f09c9e847ab0490cf13141a952ad4701440ded00415215bc709948098ff7c2d0d4f5ab24edde3e8ec924b65afbd6e9f81df7bcb74920d92f6026ab01e1
TLSH
T17B21BF45F334C249D14E8A7DA02B97351338E8069FFCED1F947820392E76A041E8BBE6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 b5f13049c79db3f380abaa1b152af435e5e379f00693c373976bdad146412960
MD5 f341b84d1ec0c267089c756711d5a5ab
SHA1 6293db58dcbb3eb32ff6e604da138be14a55a702
SHA512 668f003b3c1ae61159432e0b6acd00599cc9a9d4cd16330dca3f85006d88a4b89780b4fcdaab9bbddd72bdfb398f8e0474dbe2e095e8f436af7209657005d3fc
TLSH
T118E02051E5C5C25F70227087037DBB5C82933807EED46FC32F00CC447545641724F142
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 b11b05e2fdd632c1c65adb16c1c4e9f7c7f0c9724f49bb7c9a02bb6aeb4f0f1d
MD5 ad2d7ca1197640a4620c516f9afd02d7
SHA1 8b5387e871af1a15e8c95b4d905c642701498b55
SHA512 c4d74a7a925e30903359b5e6cf7f62c35c1d6b56f5c41b434bd551e696a3bd4e83d2ff7b5c8f593aad203a73ebc2d7eb7da9b6842bc70d72f459314c5008ef1d
SSDEEP 3:MsEllllkEthXllkl2zEflFg:/M/xT02zKg
TLSH
T1544404447FC04405C50011344051C3503370D4103571574734D50C335CDF5400DD0000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 bb99fe0f63aefe5760fe09449c9834a9fd119877cabaeeaede3269245a2bc21f
MD5 e81511c9e06eaa45c29412b58f30ee11
SHA1 d7f495652a035f2a446ed91d23529292cca59cfb
SHA512 e9e4baa52c7ab08d41b073fbdf6975112f0b1d896a7cc08b68fa6f4fa988c395abf23097d1daf32575d97a512bbbd355eb41cb9823eead8b4edbccf89ed7d330
SSDEEP 384:nxiFsZcIpsNA8TUNTUlI4kbDcYxtrJBfpGR/vMsXKIBQ7cwX9+cmQrhNDWfqZMkv:YF6pfwgjdtGJvZWhX99tXGpY
TLSH
T194E24B38DC54897FE8EEBF89674E29129EE80173C5B88998EBD44F0D807649DF707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 e564637e7f87e95c6833187bd15ae0fd014a1a4839b965f57600555f2017820e
MD5 2255fa6e28da49b664e8f40f84a24049
SHA1 cad9f9e25f3dda0224d5e71817fc2b5dd4c0acd5
SHA512 a74657795425b737dbd20d3d15624068859d86af89651f5c111e8babc02fa367b9e1c54d1cfba2fd6f18dd12aad585523e1c8501e6cc70598916e3ad21ea2d34
SSDEEP 384:nxiFsZcIpsNA8TUNTUlI4kbDcYx6rJBfpGR/vMsXKIBQ7cwX9+cmQrhNDWfqZMkv:YF6pfwgjKtGJvZWhX99tXGpY
TLSH
T1E3E24B38DC54897FE8EEBF89674E29129EE80173C5B88998EBD40F0D807649DF707816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9caca941a2deaf9ed25af815d17eef6063e68cc89c85cc9e897c84193e645a7c
MD5 f5aeea0fc8a1997efa8d706b0fe5b3e3
SHA1 0f1ba6f17334df49948d55c66ba54d2e54a1e0ba
SHA512 a5eaa30e713ef048edf2f949cdf0cf284ef4d7d0321ae15cb0ae1eb8d0e2f371d93d33111b8cf77ae6e920ae327c2fbd7f4d37d3754bb8772851c19a962d20e5
SSDEEP 384:npiF9CcmyWCs3sNMt8TUNTUlImkrDcYh59JBfpGR/vMz0hkP+lFYS/QfIHy/7Igp:AFccps3twgx1fGJv80hkoFYS/wiy
TLSH
T187B25B35ECA4CABBEDE68FD9E74E7A17DEE0016385985AD4EAD81D0D00C719D0347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 291219a0b56e158849f0956929df07b39f8d035fc3d5d10c7f907f904cf6e218
MD5 a50f735879f378ff72ae25ac18f5349b
SHA1 e6e5ab56904ce333ba5c38d8488ee4dacf5cbdc0
SHA512 cbbba567494a26c1146e07ee75d0c42cae39528b90287ffe0b38ef89c786cc7b66ef2c33fcc7628d60fbe743f28f6e8f08c53f70e40ec520dd57cd1cb0254d43
SSDEEP 384:n4iF9CcmyWCs3sNk8TUNTUlImkrDcYDsIJBfpGR/vMsXKIBpVhkP+lFYS/QfIHyL:DFccps3vwgxmGGJvZPVhkoFYS/wiy
TLSH
T13BC24B36E894CABBFDD65BD9A74E3A43DEE04163C6889AD4EAD81D1D00CB1DD034BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b63423f601dcc1330537f8adca8e4d4f62ef6219a5e1e75841e5bd3b7f1c2373
MD5 a513b8a4317c82d64d02adffbd504c89
SHA1 8311332518689cc19876677d141713c0295ef925
SHA512 5c475fbb428ba1b3709a0ca5879dd26102a5426a5743fabeff62301c42e1c59802ecb4b3de33d67c37fb0303727520bc38fae836018b7d0dfe3bfbc5ef8fd267
SSDEEP 384:nxiFiZcIn3sNA8TUNTUlI4kbDcYedrJBfpGR/vMsXKIBQVrhNDWfqZMkHy/7IgHY:YFQn3fwgjQtGJvZWVXGpY
TLSH
T115C24B31ECA4CABBFDE69AD5A74A7603EFE4416396CC9AC4E9D85D0D00871DD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 75d740684d54e9c5539d57496272f2ad13eab445505c47e72b23ba15d1306220
MD5 a2ef2a2305eddc0846b3ae752a2029b1
SHA1 2579397ce990bc06d7d87d9e8b3523da0d773ee8
SHA512 6b740b732d690b223eea75526b4c837f99db4b66a054cc435668b4b0a6a438ea97eb0b47f59604ed8607888ba910f13207cb8e0762fb0b1a709cfe8b6834c954
SSDEEP 3:MsEllllkEthXllkl2zEflVce:/M/xT02zje
TLSH
T19A4404047FD00407CD011034D053C3503370D4113551574334D104375CCF7400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2e1d4ec818a0c6aab03fc685569f06029a91cf671ee00e2d3eb3b5c4d94ef530
MD5 b2c24b521235c63361ea513c21c69267
SHA1 63780726cce5e09dfd6abc8f59a8e4f9c321e784
SHA512 4613bb553e49c6810f5fdf607d2d0b2205009e144ce0a6a7fada330db838a97191cc2340013f60260a197637daa1a2eca6935faa7656b5a3d80e58426edd1299
TLSH
T11241485DA6FA1148B3777E1A9FF7A86E447B7D332E0AE09D10010E4E0A22E00D861737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 5d16e196cb2cfe6d9b8eec591657a76d792472af85807ad15e652c9f79ded2a9
MD5 7e59208457d82e5c492c8f161d6af291
SHA1 2117b6a031d98702d5d44bc06462f2ef670b2229
SHA512 1310614fef3b994c0ea9d1c00859f7185d60bf871bb899aa20f4f8ffff21ec25016b53be1f32aa78dd8e1feecb7f123f558a1086237167581b9d6f7ac35f23a8
TLSH
T16451185876E91019B377AF5A9BF6B86E847FB9332F06D15D10110E8F0A23A41C871737
MD5 SHA1 SHA512 TLSH

Submit Download

20eccbda-1efb-480d-892d-b6e4a8111db7.tmp

Path C:\Users\Admin\AppData\Local\Temp\20eccbda-1efb-480d-892d-b6e4a8111db7.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 5a7a9e090d38798c5297147252f8628d19bc5dd4993607e9528ea4618daef9c7
MD5 02a4f3b91a1ed245f36300bdbba7802a
SHA1 d4f1ac3df51dc75920e80d832d0fb0e7acbd9f57
SHA512 1d0cfc818a1589b2e1b76a3654873440b4ada80a23218b9570989dd527fb215d9021af06827348878753f104791247eb19da1b42a90752bad0d0cc168e804c5e
TLSH
T1E4514AE13936A23F2BC387C560764C84A561F181132F5A5CEE16C474BE6CEB1A72E7C6
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_2002144603\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5188-267-0x0000017DB0D40000-0x0000017DB1D40000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads