3f27c71e17faaa17ba911fca94942976ac9e7f03e3c8e809be721aa547bd2a33

Analysis

user interaction
yes
max time kernel
4s
max time network
24s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 02:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https___cdn.discordapp.com_attachments_1530747946574811166_1540914610981445742_b.zip_ex=6a8bb010&is=.url
Size 203B
Sample260823-c8yrmssbmd
SHA256 3f27c71e17faaa17ba911fca94942976ac9e7f03e3c8e809be721aa547bd2a33
MD5 d6ee2cdbcc6ddcbc65de82cba3ae4400
SHA1 e53e873cb509b97c091a6aeb066b59af60b4b809
SHA512 0e8099d63b9e0ea5009d9672a8228ac448f73bcc8b6fe8679e8de59243a650edfd31ebc9b6e5e7c1ed5e16ef87be35cec98e4f5bee69dd6437069c6ff4e10ee0
TLSH
T167D023F2650344B3CC0B4C0D52D31D97411009E945C1C9416468D7D8054257B7189C05
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1712	msedge.exe
856	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 912 wrote to memory of 4272	912	rundll32.exe	89
PID 4272 wrote to memory of 4508	4272	msedge.exe	90
PID 4272 wrote to memory of 1328	4272	msedge.exe	91
PID 4272 wrote to memory of 1712	4272	msedge.exe	92
PID 4272 wrote to memory of 1328	4272	msedge.exe	91
PID 4272 wrote to memory of 1328	4272	msedge.exe	91
PID 4272 wrote to memory of 2480	4272	msedge.exe	93
PID 4272 wrote to memory of 2480	4272	msedge.exe	93
PID 4272 wrote to memory of 3168	4272	msedge.exe	94
PID 4272 wrote to memory of 6036	4272	msedge.exe	95
PID 4272 wrote to memory of 3168	4272	msedge.exe	94
PID 4272 wrote to memory of 3168	4272	msedge.exe	94
PID 4272 wrote to memory of 6036	4272	msedge.exe	95
PID 4272 wrote to memory of 6036	4272	msedge.exe	95
PID 4272 wrote to memory of 5760	4272	msedge.exe	98
PID 4272 wrote to memory of 4028	4272	msedge.exe	97
PID 4272 wrote to memory of 5760	4272	msedge.exe	98
PID 4272 wrote to memory of 5760	4272	msedge.exe	98
PID 4272 wrote to memory of 4028	4272	msedge.exe	97
PID 4272 wrote to memory of 4028	4272	msedge.exe	97
PID 4272 wrote to memory of 5212	4272	msedge.exe	99
PID 4272 wrote to memory of 5212	4272	msedge.exe	99
PID 4272 wrote to memory of 6000	4272	msedge.exe	100
PID 4272 wrote to memory of 6000	4272	msedge.exe	100
PID 4272 wrote to memory of 5308	4272	msedge.exe	101
PID 4272 wrote to memory of 5308	4272	msedge.exe	101
PID 4272 wrote to memory of 5920	4272	msedge.exe	103
PID 4272 wrote to memory of 2596	4272	msedge.exe	104
PID 4272 wrote to memory of 5920	4272	msedge.exe	103
PID 4272 wrote to memory of 2596	4272	msedge.exe	104
PID 4272 wrote to memory of 2596	4272	msedge.exe	104
PID 4272 wrote to memory of 5888	4272	msedge.exe	105

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\https___cdn.discordapp.com_attachments_1530747946574811166_1540914610981445742_b.zip_ex=6a8bb010&is=.url
1⤵
- Suspicious use of WriteProcessMemory
PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cdn.discordapp.com/attachments/1530747946574811166/1540914610981445742/b.zip?ex=6a8bb010&is=6a8a5e90&hm=d2fc0209e45dd5d40011911478e2ccf64b4faf620f0e6c7d30346e00f7d97a17&
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x310,0x7ffcfe5ac188,0x7ffcfe5ac194,0x7ffcfe5ac1a0
    3⤵
    PID:4508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,17224466609691402822,7742597449393720251,262144 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
    3⤵
    PID:1328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,11623108246279854850,16198271381281812870,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,10107824444555177045,2883862966191822908,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:13
    3⤵
    PID:2480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,17376228811966298289,1720562272815718950,2097152 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
    3⤵
    PID:3168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,13773800186579094024,11005834923259299979,2097152 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
    3⤵
    PID:6036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,17093880599215255938,7827032703640151401,2097152 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
    3⤵
    PID:4028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,9839071258960826105,8750127289757472405,2097152 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:9
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,1444860352718116539,15143995141082835467,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
    3⤵
    PID:5212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,9818450813127418885,17076067905145446526,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
    3⤵
    PID:6000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,2605532210685646902,12169193275316415702,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,567756849844787643,945058207365586915,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
    3⤵
    PID:5920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5476,i,2587570882785390729,11315159453815583040,2097152 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:1
    3⤵
    PID:2596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,5839906296802823176,11143587872376195612,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:14
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6964,i,11675916041631630868,15360695327767381710,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:14
    3⤵
    PID:2684
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6964,i,11675916041631630868,15360695327767381710,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:14
    3⤵
    PID:2648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,930702911849414889,9087013730367961073,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:14
    3⤵
    PID:2844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,15980511341194343052,13751623014002560980,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:14
    3⤵
    PID:2408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,9283040563222521951,11885736788734365557,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
    3⤵
    PID:3444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7260,i,17637240799973265770,5895150682894782170,524288 --field-trial-handle=2320,i,16391226728956606112,3439552988552904944,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
    3⤵
    PID:4200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    PID:4616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffcfe5ac188,0x7ffcfe5ac194,0x7ffcfe5ac1a0
      4⤵
      PID:4992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,8111744478674955694,9938364994514151116,262144 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:2
      4⤵
      PID:5348
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2056,i,12500534787739840392,11297652574800717521,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:11
      4⤵
      System Time Discovery
      PID:856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,8336437889532568100,2102885300022736124,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:13
      4⤵
      PID:5456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,15591217366958704154,13214742007338286432,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
      4⤵
      PID:2620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,15591217366958704154,13214742007338286432,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
      4⤵
      PID:3028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1404,i,2899342895461797111,3517168735079389166,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=1364 /prefetch:14
      4⤵
      PID:4548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1412,i,10721866049195836116,14437619133923363954,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=1260 /prefetch:14
      4⤵
      PID:1852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1420,i,8276849841363658961,4789055206979185830,524288 --field-trial-handle=2904,i,1353479151510081766,9793058096481208128,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
      4⤵
      PID:4772

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1648

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2844

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2bc7f3a4024d9673a2f7a098d546fe1f592a8aa0477eb259121fe80954c2f99d
MD5 403039b77d88ae3c8e79a108e60c95e6
SHA1 478b6a90cbd5967be9b36c911b5a2135e0b7199c
SHA512 fbec8c6863e6042041cea05b5efa69ca53b0340f3bee0900ef55602e442dca5b20c736b16589ad755fc44c45bb2c920ed0e29957fb7ab74fe05e101f104c82fb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7I:fwUQC5VwBIiElEd2K57P7I
TLSH
T1EEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4696ad9d35bfcd902f7085aac9b8acae9725499dbf58eb10f141b2bc90e60c96
MD5 80abdce154ec49c5a57aaf8835dfc856
SHA1 bf985efd0c592e9dc683ecbc862dc9d4569b5139
SHA512 22622ef64dcea7aaad9c78007c9263a6b51f977a37c496375e7bfd03586e6800c846e7b6800367c67ee672489ae613d9652b5a14c38335a4d22976d83da9792c
TLSH
T1E3D09720791CFAC0D216103942244600314D8642BC831207E950180D8C3E84293906B3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c973b6a0ab6d2e8d04bd7ccbaf4fe6fdc38211c1a5e6f7a2bf678f6b5324aa77
MD5 7a47b889c3c9d56ad7eb02025998bd1a
SHA1 1836913ebf75b13ecb4757a148385f97dbc4d69d
SHA512 b2d2733de14c05c793999f02e59651d0a8d56571061b8ced526c3f990b4bc9cd05f57f81895c75ec473a8da75a2a4bbf90c083a1496432e5edc0bdcb00549b82
TLSH
T14BD02374775DFD04C6070136C524AB15325F9655BC535217D991260D4C2FD41F7D4177
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 59e7cdbac47bb4e23a668d0063c7bf8cc7af1b74cb49e146076f17da9e020abd
MD5 fca4a9af495d1998e5412af122fceb62
SHA1 3ddd957b5afb3ee7db39f1b29bb4c4093de72b0d
SHA512 c0e43c805c74476e35e56f11ebe869cf29f2ced4e0483661362f51c856498f963098ca0347615273d701c12618d97cb583de816694f4e24c152a54051f941ec9
TLSH
T157E0ABA6C921EC2B0CFD031850540346EB51135B1A40494B3E3C800D4FF963B0699C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 64fb24623609feca327636b5edd792d27ce5a401d82696c451425320cf8324ff
MD5 38ac50659285b9dbc487f89e0cdd96c9
SHA1 45113412b405110580da2142fb13a8842365e4da
SHA512 152e105d56730030f90b2a9a1b33ea2b6140a0fe7ce2880f10aeed823835aa2616465f95be5697ef7cd3f6cb6cf63fa8926422f9b2f7218d6234f0e2746fc4b2
SSDEEP 192:4JPiC1ATBpoBp4MK88lb0zAvTILHHcI8YAhhfybA:qNs3o3HH8KAvTCHcI8rhh
TLSH
T1CB13F93CEF122D59EBE3463DD2175B3A53B0C0AAE6C1482B88B2B11021A5F013EDF50B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ea6b047c1b8a65e3b2c7b26966be2ce2db3e1b8ce42e734c9c68b666ef680b4e
MD5 d6697b12741069407c8fefefed92d000
SHA1 069b12f86aec1a3f0b1720a20ed44077c558ae9c
SHA512 011d3699f8834a76d3fbd2e08a7244c498df87bf0b4f8c4a036a34d6f35492d2f70d25a1ad22942502fc417389856935da6dfa492676c3802dde18fd5d23dee2
SSDEEP 1536:60K2L/aXL/eLuGLcPgznibrPiVmc7wut:c2L/AL/wIJgb77
TLSH
T138444EF71D51601BCFA842F5E2033E3EC27B851E7CD1E9A9E1784C852825F21B6F9A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 b5dbeca08760ea7b1e40578de3e67148ccd08b71a81717471d29e63ce9838daa
MD5 7dcaaefaa2abf83423e8ffef804642a8
SHA1 6b93418e420e9c3c21cd61fb8e8236d88774dd5d
SHA512 f3455d078d106a107197a6c53bc19e7f168a830238f5f11a3dfcca2a96448ea5da2719ab9f78d6a36060641aec087022afba5afce27b87a844479f3064114640
SSDEEP 1536:qi49G+PNaMuA0N7W7j7Ug7W47j79mg747DHu7l7n777C7aPDz+7+7dr7H7uw7KnV:qv9G+HqlYmfH4vJ/WshPHIAJDkM
TLSH
T1C92529EECB682C42CF6B8670B4E0E9077E712183B64CD0D39944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 bff8c19d58a6d5e06eee634d2039aa9c899426bd2e524c3f69b72a1906dccb85
MD5 22b47985923fa4e99574cb189684531a
SHA1 ee82baff17700e7c7be0aec4721b2e953fce2fb7
SHA512 ad8f1f4fd39920f1d3f4cb628c33808903e6f60359824140fac9345117a8d4d3ba7038d308d0b404b99b8be7fd9911f3163394f90367ad9e1d62d7017f60435b
SSDEEP 24576:YHcoZFjzxt3bB7SSlDRkZlFsZx9V6qJw9L:Y8oXXnL3RIs376qu9L
TLSH
T111167DEDC96858C3CD639A30B5F0E9877C7413C3F994C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 697be35b389f1e841327d65067d134df190c576cfbcdf5b5ebf3dae1175f284b
MD5 d1894d759c81c8ce612c72e3f2cf4c63
SHA1 0d78ca12af28dbacbc9151888adfc3083efdf768
SHA512 eba30fa95e77a601cb8296562b400c045c13c2839ca7f13e0208bac712c45f2f6eab7020a5264e44baad0282acce362dd436c8c7b926106a32617dabeb86f625
TLSH
T19B513D00CB7318B2DF39C8F9F1D252983EF6A45422072ED024606D77B80AF9CB4D2093
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595ac8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595ac8.TMP
Size 3KB
SHA256 7c337dd9bd325a4f43e334b396699778b5ff1fab5d8f87d183ac98ad42c3475a
MD5 d7931ad740f0e5548d9f4efb2960a8f4
SHA1 a28eb2024a42c227de037ff5f9ca5a9c9713f946
SHA512 408e039faca7ab7e70e42a7a29c5d6e7d185a7441e2da206e18d416b1de22916457fb52b538440d6b23109acaf3c08d4fa72f9ebc68bfb7262bd89fbcc81275c
TLSH
T131513D00CB7318B1DF79C8F9F5D152883EFAA45422072ED024645D77780AF9CB4D2093
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 0e2a303507687157430215c00ed4fb87410d6ee06c13827dacac75e554ea3457
MD5 3f4a07874da248bc3a975be9c01c25db
SHA1 0a9967d234081b7696c2560d7ac3eb57bed8c83a
SHA512 cd876dba879c144e01903342b37e1ddccb620805051c60bd95ad489d53448cd100a42e439a8af831fd0fdfc7bbec38d79a33735b725efd77f04f533f44f1236c
TLSH
T138E0209556C6D19F599434C767245B0C82D07472E696EDC32B00CCC87A82145F355646
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 5ac8465c83508ccfccd0dc4a0bdf02c95cd1c2832c07401de553df2476204d22
MD5 6f46d77f8cc64c16b335991b80e541ef
SHA1 ca559936848bad5f1e789a932efa8404a03af713
SHA512 9441445915ab912e4caedfc9c21470c09384bef737074c42f6409cdaf05eb77145f2e56f53845bf5534119bd4401f489b1cb6afae629e46ab9708e3246186939
TLSH
T107E07D2805DCC16BF75878978F68470C83E03593F388BD4277088C46714728BF287280
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.109.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 c262a76bee3b17dbc4bb49143c3e0e528bf2cb0112b8674152fe1b42875eebb9
MD5 2e6100dc6e66f2d69ed0448f1a786966
SHA1 b5e819b8fc74162e75951c2723888fd4abfd878a
SHA512 b207381cbdecaba0b7c7a4bcc559fd98488329aef534d6b0ea4588bbc32491ff4686dbfd90567e871fd94c3ad6b0d0f0386b443adb6339d13cf046a3e57ca58d
SSDEEP 192:rDychXUhX4H+bF+UI3iWGVoWN3qL/9VVV63:r2cBUB4IkUI3ijVoWN3qL/9A
TLSH
T12824105F5F212722CDBD813668E744A35C7CF03F8B5366CA6C6114B4CEE2656A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 6369aa58341ee97779929f0852aa994ef51916ebacdb1e97903fb018b7681d04
MD5 d0c4dad422d09d2c0f7c16d646848654
SHA1 72f623cc1221fb35174310a22b64c8d11d421af0
SHA512 695ee9bd0ffe9ca9714b15d09d4711405beaf1e12d635a61a33033f3d766b7ebc1ea160de794e5d03ac3e56a772bccfa60ce90c94bc23e86f75bb7800debf45a
TLSH
T12FE0206455DDC1EF598430575754670CC3B03427F7897E017B049C46B4C204CB7831C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 ce5c7649aba2c8e323a5264726c689ea62c0db5589221bcf22a66570edcbdf91
MD5 8b3d38f069e9547e68e747756ce3d20a
SHA1 4e57f4c9e2485a0cb34a6ab69b117e3c27f3ba59
SHA512 0110d1657152004859955fcedeb7d8d022387dd0251c816edbb2499bfac47f6045d995a37c238d8aa7119a7f49d68b8b98cd502ef0f096f8014fe975a3d329ec
SSDEEP 48:Txk/LopFMaty423w/a9NUuT1PwIodEp7iMsRghZr5oxwd9AaF2cqd:qDeMatha9TRAMagYmAO4
TLSH
T1BFB2654E1F306222C1F48B7BDDE184633F3C101DD3732A999D58A4B2DDE26ABF505466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 842ff92c1f47125ca8a38f80734658ce5d4635ac745d72261ae285278ffe96e8
MD5 2026764c11ddc8c15d4ff3b0e51fb5ca
SHA1 875709257eaa612fa8e5c7d353a50cc72491f491
SHA512 2ec5051443a7c4baf4ec4417a585d59ea16f714f2532a77527f0bd84731f4b8061aff0ed95d0239e894107f09512a2828ec20830ecf6075c87154ef12b423cdc
TLSH
T1AD51ABF3C2E4862EC91156F4AB146E2BCE2D0914432C3D1A88E4EF6B93E3472E14198F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 445745c2c0153a9449b4b99bd879fe517823fc43818840c92b7bbaf041884a9b
MD5 8f38cf69fd5dacdb30ca25554f324542
SHA1 6a05103421101cd8be3324b9932cc77276ad8866
SHA512 91c001e7d32d8ec214538f9053559dccbb7bc4093efa6c195a67a72899baa85a614aa4f9b3ec400e25eb63d26c1694a02cec7c59cd38dd3c4fdde27b3843cdc5
TLSH
T1F0C0229680FAF43200350A3D0A80A880B634C030000064A1CEF8C23CA0840F77E120BD
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 306e37352a79c57fa4c1c49b5e175b6288d0e993b9070d49d5dd43fcd771a3b3
MD5 c0011479a6a6fefb622a694b66ee1de9
SHA1 238b9ffe94f8bf17381f52a15acca018e38f5d57
SHA512 b9cb41d1b023cab0ab4a9b59543cf0a7c35323d8495ca08098e8d3ac0a02958ae4019910bb235650c74f049ef5a992288b76b26180226c9f1e647dd8384582c1
SSDEEP 192:sxR5RyTQ/fpsAWpV76GZPUzoD8pi/g6+WNIYGjbQkhgtUIgVplKJ:sxR5OQ/fpsAWv76wP8i/5IfVw
TLSH
T13842B7166928A93B9CC7E21DFB657F53D6F95032A1901E58E6FC8A1C00FB6DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 63a85c217b7c5cea4c17ddd63a223d571c5e6fdd88eb941f5107571af6d931ba
MD5 d2c719859d253a418e527bb2a1ac2b3d
SHA1 9a38c6afcd37f5fdc738d05dac0f5bcd2181b709
SHA512 7759adda49a4999096cd2b20735cf6af5f5f9f71c1d2327affa27adea9fd9f110123a5584f1a962d038b8fea4edb81e1aaf0ee037d7e587b35406ad216ee6456
SSDEEP 192:sxR+RyTQ/fpsGWpV2mGZAqUzoD8pi/g6+WNIYGjbQkWGtUIgVplKJ:sxR+OQ/fpsGWv2mwAq8i/5If0w
TLSH
T13852B716A9299D3B9CC7E21DFB597F53D3F95032A1901A54EAFC8A1C00EB6DD221780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 91e3c830068b514333c07353f72567e72bfbf24624e3bd34a125cf51df362faf
MD5 12abf2c94d9d950b7cd2613e0be93577
SHA1 f8e014be19d6a9c1b4205e688c4e372f8dae9230
SHA512 411bd38d0bf18aea6e6bad78753f80d75555dc2a0b88ae8ee4297fb9c98d3b636a1753cd27aca86462a8aab1825ad5e886a8a0c29e3bcc9c76ddcc96a402170b
SSDEEP 192:sxR5RyTQ/fpssWpV2mGZAqUzoD8pi/g6+WNIYGjbQkWGtUIgVplKJ:sxR5OQ/fpssWv2mwAq8i/5If0w
TLSH
T1B942B716A9299D3B9CC7E21DFB597F53D3FD5032A1901A54EAFC8A1C00EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 6bfd6bcb317fc9c193d84a87b79e1eb07cac3caece5d48c3bdeab861d4bceaef
MD5 f7272e994133e1d06ef674fa4dcf9981
SHA1 6f15d2513d8355d4b5ccb4da506e90ab3cdd676f
SHA512 a652efc2a34dc8cfe845594fd0b75d4a824acf0f18bdc32bb051b7ad97d5f73587eea8dc028d5003f3a806c4fcc2b867e9062b664b0605d4804f9a7b111e7f1e
SSDEEP 768:UQYigh7pLuLzONWgv7fxJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVER5pNKrroGf:UQYigXEzONWgv7fxJu1ja/R5fKY6
TLSH
T109D2DA7B640DCB7E4F804A9DEC197ADF6DA802CB9698CD8047FE941C02C6BEB51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 3eea9bf0c05571b8ca6e8cb6487fc267da209cacab46f98cee676d64fe8f6002
MD5 cb679f3a9fae7f4d50d7f134b2b7f438
SHA1 e3c06cd3b868c431059513f8c219d66f1a5de4c4
SHA512 f43e0aab99769714457ed03bc1de56bf64b26f62c8487a2664acfaf503184728a1f954587a31e851688143dbacdc8027c1b5826b46f9f97aca5af7ff8b9a0731
TLSH
T173E0DF5406CCC1FB619530870F268308D3E47427E3CA39022F008D8D619358AB2B2180
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 bdbe36d2c7505113a66922adc3a6d98f1f72e61cbd4c266679f250f0f7fc8137
MD5 6cf60847cac4fc578252d62c4a4a70b8
SHA1 ae5de2cafff51cd3a6533e35b59cbf014959437b
SHA512 52e4b357175a06bf7692f0d14d696e5adf8705411ff62daf1b4a91463262ca2d41f80d53a76f62373c75da495aa0cce189107187655ba9186c2b7fa3e4757e36
TLSH
T1F2E0D87416D9C3AB758534875724E30C83A27553F7CEAD553F08DC44B24B1847663540
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 0d535ef4300ac45313481e2404ff8c219783052b935c5428ebe2380d4d85a64b
MD5 5031f243792b3c542b74d0db3590ba9b
SHA1 e1a9edbed9715d7fa569f5312377bd49d8b22f20
SHA512 9f82e4f1aad2746074cedfd6bb051734bf641d11433fe387b5033c801abc8614e81196545c404bfc82016d3a69b4f795f7df106c4d732b1e824856c847ceab67
TLSH
T12DE0867486DDC3FB694870834B68970D87F07857B7C97A4A6B084C49F142299B6B6580
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c819ff1147cae0b8b1b3510404f883a9a91fee1367a722bd61047b402ea6f82d
MD5 549b54d064d959761e125de83cc0c803
SHA1 22ecc5f1fffd207e7e14bc5b2fbf376469f8c2e8
SHA512 ebed627501693f17005a5d07c55ff042dcab04c3ae2a588ab0e9e78fbe150898333bc9296ba3c3554cc1733d694be8742e366bca0d9d8d8d0684e6a7cfc96ce3
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGl7p2KqoqKEwK5azQ:Cm7KmgIIJ4tWGm7g09OGly5X7
TLSH
T1FA91300533BF06823C7F750894B6855AA68131A3351DA43B7BAC50A31BABE435DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f18e2dce4ca5510f7b6e56c2f44625cd45c510940fbd2b9a2e91ca7b5965d9f7
MD5 eb49f438cf1ffdb0e25b95424b36c840
SHA1 d05bc8d9a998dd6da384d99c06b65c369e616342
SHA512 1ff0d83e52eded8918070b12068a7857d2e905b2e31d72e6d123f9710d2454ee86e4cbec25d6a4a01530514fb186136965b39866e583f1635e4bbd64f6f51b18
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGl7p2KqoqKEwK5azDs:Cm7KmgIIJ4tWGm7g09OGly5Xt
TLSH
T175915F0433BF06823C7F650C94B6855AA68131A3351DA43B7BAC10A31BABE435DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 bb6c7a6903af94cb4b820fc22d3f3aa416a163343d7bbc211d7f0ebe9057e9ce
MD5 47aca3c68779bd9ef3b28993ba3d7a4f
SHA1 5d80d4b8c1a84ee0e6afe87074e2099c271daee2
SHA512 81371c1d8e6c83fa411fd6a09aacd253bb73d4f4410f68a01b7c101d15011e9815a61f70adf7cacf278cc39cbcfe9656c1b432d635220dbf6376d4981b79adf8
SSDEEP 384:DNrRZyCSDnxTICLMEhIKyll7svbFKfk7:xFZJSDniVyI1l7svbF9
TLSH
T16D44740A7B747001EDE6D9725CF080771E3CB16E8F22A6915DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 15KB
SHA256 2964d0074cd73a57f9c46dc1221eb317f873057d49fa325a05847fa1c2c3b473
MD5 51ff57f04a42392d6341e82beea886e7
SHA1 c4e0ae8e6098ff4094bf9210b4958180cec48369
SHA512 d99039f174ab528ccff6176f9ff1d91672f0879833fdcaa209b4194ef8e20c362f8ec38ce49e30cea866651e3c3b7383a3b679da9210dac94f56fb91c9d81fce
SSDEEP 384:YBwBtBwBBbBwBCBwBrQXIIIWbmMIMyBNHZis3yWsRIIp:YBwBtBwBBbBwBCBwBrQe573yXR
TLSH
T18872C5AA27021BB3D86F7E3613E74A8067F04CC20551162D746678CE4FF3AAB86D45F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 98b4ba064e6791c465146c848ab3ed34684665c34d9177c8d20bc89d3ae39f23
MD5 78e765dbaa71c602b2fd11847050cdb0
SHA1 9d78ef48a0094fcb88394a2a4470ac6c414df26c
SHA512 af9a36870744f115fd541ff262f379f997313f3fe8cab6bdf75cc3eade0c468e34d6d206b2922291402237997033f21309090a453516c298ba219ef879088e97
TLSH
T1ECE026A4EACEC1AFA55830C72A34538C83823813FB9839863F00C888F552289F786181
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 886c42a10697f2d9defaa48e997f6d59602a47212e337756d4f8bb279ce146db
MD5 523127c8c29d1551bc365965aa584643
SHA1 454f752df23300f0615721a0f3bec960d36c941b
SHA512 8622f2cd8f308309a71f4d2d1f95db7a661dd85236331e66854303e4c24801f2752bc53a46f27e1a363f8670b72d4932691c188ba78a7df3d318f4ad7fc6e2d2
TLSH
T11721F995F330C149E15D8679543E9B361739D8468FB8EC0F447920346E72B040E4B6E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 af03f91a3974ecdd96b7a041b281f3ab69cf72e6690ef024f1f26d802d722607
MD5 ad21fb4f9219a91ba4f42c951df91156
SHA1 d74917f76ba79f4af28fc9e5c3e6a915452c1ea6
SHA512 c0a9b374a71b9bd4171b01bd06a95cedf368d4516a5d9515db6874207ac662000ea1a70d50427710038fb2d3b02bf64327f9811eedde92809d43dfc07a0160f6
TLSH
T1AAE02669AEDAC2EF945878C30B76D38C83923813FB883F022F00CC4CB553189B68B581
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f0e4108833c0333b828de3878fc651d69b8e3d3afcb126eba4f6bc1fff0414
MD5 1f708d796e62b593e340148008f3d2f4
SHA1 bb90475a782f85aa32b582c926a0bd36207e4289
SHA512 777640b89ba316db50944d29dcf9a2ae7a11ebb118958b2829c3e68044e34c9661047cec954b7874296bcdfcb77210435d6a5d21a4fc5d9c9a14954e247f498a
SSDEEP 3:MsEllllkEthXllkl2zEfl4hqlt:/M/xT02zVhql
TLSH
T1364404147FC0040DD5003030F055C3501371D410051157C334D744335CDFD504F10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aef8800d1ebd44f3ee83c011666936eca065db1bfa65a6f307c4d122f08d37d1
MD5 c84ec50a8bc41a3ee5060e79ca6ad202
SHA1 e0f0bd1132db957568889821668c492e7de83fa2
SHA512 1b94b543754f5990367dfb4d8947c978e7fc880e97030805119fe75aebc44a3ceca35465dea31e2df2487ef76163edb370d840b2f9b5cb509cd7fa2dc46d68a1
SSDEEP 3:MsEllllkEthXllkl2zEflEUt:/M/xT02zM
TLSH
T1704404147FC0040DD54010304051C3701370D410057157C73CD154335CC7D404D04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 32491487ff696efd5922faeb35451ade5825f86cddaf64f4a72c3e0c92360da5
MD5 442fb003c510a9cd47a16a82352075f8
SHA1 84c7b1be619c1baf5266a2598cbfd730a8cd81fe
SHA512 53e2b53c0aeef67b8b2cf5c9650500847f7d9a45825a5c0507154639e6a8a102ddbfadbe686610b76808779b7e4d1ffaac94abe66f4defc9cf1e2250a8747073
SSDEEP 768:xGrv+4UNbdS3G1hlYyj7Hucys6BRvi82oP4/z6himo+r2bwn+h:xGbsbw3G63imOz6Imo40w+
TLSH
T18E03CF35E4149972DCF7C288B54A7A933FF4526346C91AC0E6DE6B0D02CBA9E130BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3c45f82a070451f8af915ad48b089576abcae54bf9bfba797460516bddc0cd13
MD5 d1b286ddaa4720b82c33381c5cc2c7fa
SHA1 17bc1f9dd011723790cf769b95ca7dac7dcdca11
SHA512 d8e3c332a73a9677acb7e51226ae5aa4ef2a34a61cb77c1ae284a741c44e6226ad04efb720ee10401be768ecc8af188b54e031f541db62f17af2ba2d44f8dbea
SSDEEP 768:153QalYyp7Hucys6BRvi82oP4/z6himo6/hKRrupfIlK5:153q3imOz6Imo+hK1upfwK5
TLSH
T10E03AE3CDC518C3E9CAEB348A50E3A266EA44237C1BC5894DBD96F0CD1B7A59F31B811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c6065e934d1c8a96aa59827dce11d2176ce7830274374768c16230b56a52a00d
MD5 3dab58fe709aa5d66b1a3988f25ef092
SHA1 f159a545ff037fb9c1656a98d5c2563e72c75c62
SHA512 2687c5ddafbd81ba89c3925e73c753d3a6e8ec38ae7c2034ca55d904fa3d914b7536f30e977c01a59a58e4da687a7c54f898407b95f6435be00bc3ff948d2628
SSDEEP 768:9p3NalYyi7Hucys6BRvi82oP4/z6himo6PVfIlK5:9p363imOz6Imo6fwK5
TLSH
T154F2AE30E8558D72ECABC288F5463B927FE45233898C5D80D9DAEF1D1597B9E131B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 59bcc17ca59fea5ddba5a447206325492c7b7e5861bcdca526c550d3c99bd4a7
MD5 3ba112ad63df5d2a01e97cea794e9b2c
SHA1 7a8d488253ea9924c805da36240a7478b23f83ad
SHA512 befd35c103ded41c2bebd438cc2aa5bb157482188b29a7efe4b590c4db7f5185740a079d543634e4b55809ce8f8afe2b23c1734ede094d9bf082cc8400353b04
SSDEEP 768:Crv+4UNbdS3h8lYyp7Hucys6BRvi82oP4/z6himofPV2bwn+h:Cbsbw313imOz6ImoV0w+
TLSH
T1AA03BF31E4149D72EDEBD188B44A7B937FF4126385894E80E9DA9F4E0187A5F231F863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e561e7ff03ca49ef502e29b6a598c362477aff611277c244960345e3d0ffa07
MD5 cfe8314e7c99e8dbd2263f7db00b3917
SHA1 d578dc07b9957a3d692767faba32db0024333db6
SHA512 73d45a21d14bfff4ca105f46e34598850a9646d0ec1d5a8e4266c6adb3425092fef909e2778a6e4f09ad0174e3205875afd8c4a867ed505bf8dcb492768f420e
SSDEEP 3:MsEllllkEthXllkl2zEfl3eWKll/:/M/xT02zT/
TLSH
T1F84404147FC00C0DD51030344071C3D01371D4100511774335D104335CD7D400C05440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 a0b1a35a86cbd2e671521525fc6903162d450e3b301948d913d05ef458794c20
MD5 22215f69c4a5231b8c568620e783d7fe
SHA1 c64663b6efe0023ca5978374d785f1202d924d1b
SHA512 9e38513132672de4a65c01a6eca3c8c3a878cc6e11e2c0d2235798b78e3338c9a13a15d261c4b4fc6c60657f42407b98c8435aa4352366d1809843ddda068e22
TLSH
T1A5C02B79481924CC2B00043C6004012B19B0560023C413F48C1B8D80007537CD30817F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json~RFe595a99.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe595a99.TMP
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

7cbaa64c-9270-468f-9ee7-82264489bc1c.tmp

Path C:\Users\Admin\AppData\Local\Temp\7cbaa64c-9270-468f-9ee7-82264489bc1c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4272_1972729737\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b.zip

Path C:\Users\Admin\Downloads\b.zip
Size 23KB
SHA256 5995bd119b45cd27575b38083bcfb5f22482bbda72eaa8513af64ab526d710e5
MD5 99037e17406745650aee45676b8a34b6
SHA1 8e9865e484b9339de8d2cb8c1d4e88963a07bcce
SHA512 d4d97a2e4b48dc9875c44f1f3b3f9c7b07b77cd7f76a6305857023adceffb66d15fdbca065965ddba9398573122baa398dd14edd4dbe856563424d0cb9ce1eb1
SSDEEP 384:n78w0WBZ6vc4Fe+awm5dpHeDxzRieqWo9zNcht3d8TQPyMjHiUb8+QMeh0GQi:nYwzzmep57ox4Wo9eht+Q6YHiUQ+CQi
TLSH
T184B2E06CA6EE9840C8715A7D24C4DDAB781C228F1EC2989FDC9112E25BFD524263CB5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads