8909c4bdda3a8e782ff69fc1e75e7b58ebf5fa00d9f778d9d34af0b81b7324b4

Analysis

user interaction
yes
max time kernel
70s
max time network
73s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
yakuza0_dc.exe
Size 24.4MB
Sample260824-txxtmswxez
SHA256 8909c4bdda3a8e782ff69fc1e75e7b58ebf5fa00d9f778d9d34af0b81b7324b4
MD5 5a82a1449d04a4a80c2545fdb5948f53
SHA1 67536dbe3209cef1532904e3b421f9a9a680652a
SHA512 413e9071bcffd6a8a6e75e670d3ebfd57274830792be387ae9f11b700595ae51b9498caa97e7ef76e047e52095c67ed64106732f084c6acc81fd0c81fbf5fb79
SSDEEP 393216:0NE8ns+ALdrxJnSSk7cR2TlUeiJkK1X9L4k:0jsRrbelPiJkeyk
TLSH
T1D9479EA773B50CC9F056C0B9C36BD902DAB174B05F215BDBB440A6659F6FAD09E3E220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4552	msedge.exe
1056	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320624792283473"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{292390A3-F9C2-4AEA-9FE8-7EF768E3AAF8}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{38C631C5-2EA2-48DF-B4A7-3909567D1441}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
2664	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe
3088	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2664	msedge.exe
2664	msedge.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 5296 wrote to memory of 2664	5296	iexplore.exe	90
PID 2664 wrote to memory of 1852	2664	msedge.exe	91
PID 2664 wrote to memory of 4072	2664	msedge.exe	92
PID 2664 wrote to memory of 4552	2664	msedge.exe	93
PID 2664 wrote to memory of 4072	2664	msedge.exe	92
PID 2664 wrote to memory of 4072	2664	msedge.exe	92
PID 2664 wrote to memory of 2420	2664	msedge.exe	95
PID 2664 wrote to memory of 2420	2664	msedge.exe	95
PID 2664 wrote to memory of 6040	2664	msedge.exe	96
PID 2664 wrote to memory of 6040	2664	msedge.exe	96
PID 2664 wrote to memory of 6040	2664	msedge.exe	96
PID 2664 wrote to memory of 52	2664	msedge.exe	97
PID 2664 wrote to memory of 52	2664	msedge.exe	97
PID 2664 wrote to memory of 52	2664	msedge.exe	97
PID 2664 wrote to memory of 3924	2664	msedge.exe	98
PID 2664 wrote to memory of 4752	2664	msedge.exe	99
PID 2664 wrote to memory of 3924	2664	msedge.exe	98
PID 2664 wrote to memory of 3924	2664	msedge.exe	98
PID 2664 wrote to memory of 4752	2664	msedge.exe	99
PID 2664 wrote to memory of 4752	2664	msedge.exe	99
PID 2664 wrote to memory of 4312	2664	msedge.exe	101
PID 2664 wrote to memory of 4312	2664	msedge.exe	101
PID 2664 wrote to memory of 1480	2664	msedge.exe	102
PID 2664 wrote to memory of 1480	2664	msedge.exe	102
PID 2664 wrote to memory of 2004	2664	msedge.exe	104
PID 2664 wrote to memory of 3088	2664	msedge.exe	107
PID 3088 wrote to memory of 4280	3088	msedge.exe	108
PID 3088 wrote to memory of 1860	3088	msedge.exe	109
PID 3088 wrote to memory of 1056	3088	msedge.exe	110
PID 3088 wrote to memory of 1860	3088	msedge.exe	109
PID 3088 wrote to memory of 1860	3088	msedge.exe	109
PID 3088 wrote to memory of 1268	3088	msedge.exe	111
PID 3088 wrote to memory of 1268	3088	msedge.exe	111
PID 3088 wrote to memory of 1656	3088	msedge.exe	114
PID 3088 wrote to memory of 3032	3088	msedge.exe	115
PID 3088 wrote to memory of 3032	3088	msedge.exe	115
PID 3088 wrote to memory of 3032	3088	msedge.exe	115
PID 3088 wrote to memory of 704	3088	msedge.exe	116
PID 3088 wrote to memory of 704	3088	msedge.exe	116
PID 3088 wrote to memory of 5848	3088	msedge.exe	117
PID 3088 wrote to memory of 5848	3088	msedge.exe	117
PID 3088 wrote to memory of 5428	3088	msedge.exe	120
PID 3088 wrote to memory of 5428	3088	msedge.exe	120
PID 3088 wrote to memory of 5428	3088	msedge.exe	120
PID 3088 wrote to memory of 5820	3088	msedge.exe	121
PID 3088 wrote to memory of 2800	3088	msedge.exe	122
PID 3088 wrote to memory of 5820	3088	msedge.exe	121
PID 3088 wrote to memory of 5820	3088	msedge.exe	121
PID 3088 wrote to memory of 2800	3088	msedge.exe	122
PID 3088 wrote to memory of 2800	3088	msedge.exe	122
PID 3088 wrote to memory of 2508	3088	msedge.exe	123
PID 3088 wrote to memory of 3844	3088	msedge.exe	124
PID 3088 wrote to memory of 4156	3088	msedge.exe	125

C:\Users\Admin\AppData\Local\Temp\yakuza0_dc.exe
"C:\Users\Admin\AppData\Local\Temp\yakuza0_dc.exe"
1⤵
PID:1300

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "about:tabs"
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffd6c62c188,0x7ffd6c62c194,0x7ffd6c62c1a0
    3⤵
    PID:1852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,12083585064616562786,1598910215977271807,262144 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:2
    3⤵
    PID:4072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,803615760843641781,9910527591332409372,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,3322468849389870012,16768515825038789476,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:13
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,5306754728744982695,7814910762051962062,2097152 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
    3⤵
    PID:6040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,16691030096229517534,15053212630700462872,2097152 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
    3⤵
    PID:52
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,10524864852561727291,6857088924278198691,2097152 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,10355467606124874709,2117211791932794454,2097152 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
    3⤵
    PID:4752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,3333719891477669919,1897326716039313292,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:4312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,4846051107563054514,9697217404651741029,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
    3⤵
    PID:1480
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,14081459325216296132,13635182831712263191,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
    3⤵
    PID:3060
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,14081459325216296132,13635182831712263191,524288 --field-trial-handle=2996,i,930226793517749214,4976135817320134777,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffd6c62c188,0x7ffd6c62c194,0x7ffd6c62c1a0
      4⤵
      PID:4280
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,14010952951789463611,14665308386891699686,262144 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
      4⤵
      PID:1860
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,9048508151204570385,3270451926228008007,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:11
      4⤵
      System Time Discovery
      PID:1056
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,14773899535979057659,10186556954380926329,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:13
      4⤵
      PID:1268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,5909616919672429348,13389445551626239805,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
      4⤵
      PID:2556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,5909616919672429348,13389445551626239805,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
      4⤵
      PID:1656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,12779269561480481035,17889909975118448906,2097152 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
      4⤵
      PID:3032
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,3713849125099514989,16408930349770709783,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
      4⤵
      PID:704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,15508653916761773032,7010449525421489957,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
      4⤵
      PID:5848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5284,i,12412548822560371135,3450235041549353081,2097152 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:1
      4⤵
      PID:5428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5640,i,17852474412078510742,13057149447628937216,2097152 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:1
      4⤵
      PID:5820
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5688,i,4654695280145512051,7368348414319197784,2097152 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
      4⤵
      PID:2800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,7985880312226703751,10245570851861800298,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
      4⤵
      PID:2508
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,15933844049579761152,13543969015879511872,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:14
      4⤵
      PID:3844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,6847688389651853534,13856738370017295184,524288 --field-trial-handle=2280,i,1545412581073586276,976647510507942124,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
      4⤵
      PID:4156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 dc53ffc26f6875de797bf4c08a9cbe94603ba179ad55991a53b661055d3fb069
MD5 c793985dea01bdcd977871f2a801cbf4
SHA1 f80449165c7dd376e33f11cba3a9ffc216f20d99
SHA512 9471f847f0f89a2e97de1d7ed7dadead61fe97df433d004c871080e6de2f55db9f77bec4cc489d7c1c41cad8f401c61721f9ddbd60c241995d9ac9a10e6c04f9
TLSH
T183E026C525CBC3BFA618A4C7557EA34C8380370E92C8AAEA6B05C4847103841AE92AD8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 714cf40a4a65ea9102da1b9675a4958832a6bb727641384f1a38eb0c30cb0c7b
MD5 b4f0b709508c2a9f181c51593d3c1890
SHA1 87396cfef25f6b12882d54beed03614cbcedde3c
SHA512 86ea677487c4961e4108824523ff62624514095d7e66ca2f0a833dc6ac9a58b597e7b3a8b9ee9fae5ca58c95d596986d5a9e598f872f461a7e79afc691c602a8
TLSH
T1D7E02BBAC921EC2718FD871890940646E759031717E0550F7A3D890C8FB433A069AC2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 1e481df5f0b908f364d5560873761cc4c85547f11d6fa1df172c9ef57f6b60bf
MD5 ab3cce2d76682253b971b7d558bfcb94
SHA1 9445dfa37ae2ec2a4b359181ee18030f8f5a4101
SHA512 fcddc5dc871c0e687f02ed229f9160305b217e6333f53dfbd21498e53cfc403efb79f86542b6a1208f3b78dce551c6a930434b5c638934fd1a6f7ca0658c5539
SSDEEP 192:kiaaCDpXm7XfCThhHiXAGQwIxXqEGXvdMM3YyFX+8OdQuntbotKBoq4+R:kiIw7XqThRGQ/xwXyMZ+8YQwjj
TLSH
T19813707D3B500E1AC3E742BC1A8B2B7057B5F868D4D04957C37331295AA9F492CDEA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 dd48c1751ee840c7cc124b1010be347158d75268588d8d9711b62860480954de
MD5 0edd3d7df34cebf76aa8528c6fb0727b
SHA1 73169509e7cfab0d02601bbd27f7ee4cae36e921
SHA512 0d8b075e04c668963c4663eb5718816691e4382b2f58e47a9c6a179a7892e88608d0fb06bd3a0f71f01d0dd84a2d863e694094b839df1b35ec310546084b98d1
SSDEEP 1536:0H/T8HEL/aAL/RM/gZ20BMHM7xtm83Io:iT5L/zL/6gltv4o
TLSH
T155442CF71951A01ACBA852F5E2033E2DD177851E7CD1E9E9E17C4C812825F22B6FCE89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 54071df7d2b5282983dc702262d69f0b549598518e29d0e0d4ba0ff51c007782
MD5 32d6c6f63dae36a264d677b97b2d59fc
SHA1 b95dfd157638f8dba0a8d534bccbc378b0aab2e5
SHA512 838aec39af32499cf59a543630fd10b44f7a5dbeec71c8a335eb09e5985ca6a07ca599ffa15990ab3f9a9eecb54d912dac347cf24c6ecc361475c618c15ef49a
SSDEEP 24576:tHgUUZe6Z/bHEAXP3l3mFkJhZXe3TR2ZA2EK/fdv:tA54kzHDXsFk1Xs+n/fdv
TLSH
T1CF166DEDC96858C3CD63AA30B5F0E9877C7413C3F594C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 908315bf91718fe8638063a35fcedf36dfa2230d6e0784791e99e31a3768c5fe
MD5 2919b6f1ea64f924f4ec958cdc5de7ea
SHA1 f5da2aadf2f4d5c3ed608a52cf347cddb71e73d0
SHA512 de929134d1437f732f61c6a84f6e7a16f930a73def77e2a7523e0e1ef516ed52fae5332183a92473d6fd3bf551755ceb106f9435128c7f27f283d44094831925
TLSH
T1E4514F07333267ACCBA155B250E8B8D636F2B56B40775F2088102D7E0966F38C4DD9D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594caf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594caf.TMP
Size 2KB
SHA256 652a96f11123001aa05602afe0645a785e8f6b4c671a7fcc8d41d121e883eca4
MD5 473d0b8e6d78993c6ac03c739aaa317f
SHA1 a48c0daee2a6ec3c47ce2005981d04ba4ffd383d
SHA512 4d50b3b9f517d3bba1e5613c06dc9e0f8f6e3e285eee057b1ee51d595e9287a34af83771a16d57cd89b5a7c6a316d7bf65a3c46c3ae70c792db294b8516c2b4a
TLSH
T187514F07333267ACCBA155B250E8B8D636F2B56B40775F2088102D7E0966F38D4DD9D3
MD5 SHA1 SHA512 TLSH

Submit Download

DIPS

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DIPS
Size 28KB
SHA256 b3dc09c0098fd0d3a52dbd4382197ffd749f38af1d687ddb62372b6552446c4c
MD5 eeb36b8ce76841e4466a10a9a0a8ad33
SHA1 ffc3841b306d1d23dad0747e71e1e8e5da37086e
SHA512 e19e1bd011980b9669303b11085153d315646657ebc0804e74b96c8dad81be9b82efb5aa4101243f658c20b9517b8867efe670b393b7a115824be1caffce5224
SSDEEP 24:TnQDFQq3qhmJz3WMYziciNW9WkZ96UwAfBI:TAQq3qhmJz3bY2LNW9WMcUtB
TLSH
T10AD29E168F717CA0E9CD837A49C68EEA0F780618975B6D7849B804614DD1A4980BB4FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DIPS-wal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DIPS-wal
Size 20KB
SHA256 8175508ea95a80c1e79544f48336ac34da3de1b0f75d8636ff7bcd76ea2fb63f
MD5 24fdc0b3d9d2d6f1f59ab66fbbe6a008
SHA1 440bf373b2779fd31d975df8f593a2fb92996ae8
SHA512 a14def4cc34f6c9e5f45d9901925055fa4eb8ca52dce73e7e8db6530436b26e48f9eadd72119037e28b4c633f3fafe15266f44bc7fd69edd3609d1047d988265
SSDEEP 48:9SIxLQq3qhmJPG44pv3tY8uaLNW9WhmcUCfBg8Kp:9SIPEmJPG4K3tLuaLNW9WhmWfu8q
TLSH
T19B92324A8F6A7CA1FBCE477788C449E60E7D8359D70B6E6854FC04225EC164A907B0FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 69e9251aa091967bee48efb652d5b5b7481b187a1f8d938f742d222a68f6f931
MD5 7e3b616b2b7ff4a93964cfa9972b4157
SHA1 90ded36b7018e58638e2c27c0613dbb058917f70
SHA512 1f2dd95204410a0756e05b5f1428da614819b85990086b25ed011b00e60b2b3c035325a03e941beda7898e9b0719689806e37eb7f8b9c5b92e7ba62a3442e800
TLSH
T132E0DFD4A5CBC27F692878C3A1296F0CC2C0344FD689ADC36B04CCC47A53805B68268E
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 0c845018cf9d7fa4720afaa4ad3f8dcc26013faeb2344f54d8db7f9afa477f5d
MD5 12d766dd7852dcb10d7091d42ea8a2ac
SHA1 c7ecd514f492a4dd155ac8743f1483ae856f3a32
SHA512 257411dee2b3d06996fa61790f00da7dec7586d7fd93ff3472f466639cb7f857c579044e7410500b8a53beef05b59490ff33b6c31d603e2c1aed00126bbb5f13
TLSH
T13EE0869428CAD17A981868D7C6BEA30CC3D1755EAAC87992A70ECC606122E45A6962C4
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 e9ec44f7ca54dbdc78810d99d3ceb4fa10d4ad4a9fe55ee40c80102d3f6b91fd
MD5 06f6294923664dfb1c35be110f0aed4f
SHA1 347737cd3e6a1ea5b17f9fe88e66822c2cc31d9a
SHA512 36ad9d4228bf981e765c99bc3e9bddb5fe39371c0a039a0a64014b9e0c7027866b46f593a9688965d0211a805b1c67cb68b2f3b54d63909ec5151cb0cf8cc357
SSDEEP 3:MsEllllkEthXllkl2zEfl+/Hall:/M/xT02zz/Hu
TLSH
T13D4404047FC0044DD70010F04071C35113F1D4340531D74334D1C4335CC77400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7f764ea59a2ce114cd9105506c663cba74cd6a5bed326c5fbad8ed583c41d394
MD5 cc4ba815a2fd1abc1cce91669a290451
SHA1 bbc925f6a9221fb894daedde976e72ede79fce64
SHA512 ff4d391fb0a18e154a66ddd75b19c191efdead36e0f64eb6ced06e507da46c5060b8c8c9dcdef89b7be9547abc28ba30e731d0e73b77b42654f9ab833a5eab3c
TLSH
T17CE020E055DEC13F550820C7967D774CC3B0340EDA897EC1FB09DC41B202844ABC12C5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Action Predictor

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor
Size 52KB
SHA256 3c16935385d306824fced81da5bd7c2935cae1f441656948614a0c412ee39037
MD5 59e9ff7fc1f9236f596e3134fe6780c5
SHA1 383559453162387163836159446c75d511e008a1
SHA512 e8fa179fb29dda4e20391b0c4b88e91c9688b9a070b7e1c9f2958e68aaec4f0c0b23cdc642ed89106c5916e6706df1cd2828598ef5335f5bfdb67f453bfe5068
SSDEEP 48:T6HYzydB+M9n+8dv/qALihje9kqL42WOT/9F:GHCydB+M9n+8d3qAuhjspnWOv
TLSH
T1A7335BB379176133F816E67CBEA819A0086636C58DE1CAE4DAF00C302FD6650E71F9D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6e7d1d00abda8fecec05270ce912868037f3ab3129b9dc3a72089b8ef0370a2d
MD5 d3704a87293cff187adf355b7affd8b0
SHA1 6d8ec44c9798a1258387f7a02c185361a9b4a950
SHA512 4285b1ff4cfc71641750c9f49f384c41bc127b76ccc43d46ff80a010f9b73c9251b68c65e0d82b6606b2870183db20e9ae63e7b7780126290c926e8974522b49
TLSH
T135116DF74774957E9B11C6F0FA086E1F8E690421436CB9EA85E05D2793F3462E084B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

ad3ccc28-f8ce-4c2b-b71b-5173c9cc4cee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ad3ccc28-f8ce-4c2b-b71b-5173c9cc4cee.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3db2d66e787c329e93c9d341fcbfe5b109dc3e11acd2a85b501cafd9ed5961f9
MD5 5879f0a8b8648edc548fb8a093eb7161
SHA1 6cb5c559a3d159807abaffc4c5d4bea61427cb1e
SHA512 7120c00fef87c8ab3a2f1d99bc97a49b449b73606da705fd09ed933d67f77278bf8a5a71005d927f9906a5829d633520551a84d56333095b180ebf0eea4a9a81
SSDEEP 192:sxRsHYCqP/fbsqWpVSDde5lScfoD8pi/g6+WNIYC79uOVgCIgVlJ:sxRIfg/fbsqWvSc5l5i/5Idt9
TLSH
T13742A616AD28A83F9CC7E21DFB657F53D6FD5032A1911E48AAFC861C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b5060cf76a8fa806bab1bae1dc271f802047052378127192613aae80678dc955
MD5 70ffce83dee060c8714996824f58a12b
SHA1 6cce38df466a6896e5ef351c9a67a79fa90b4528
SHA512 605b8abc06ddd47111b2dc2a0d461e8acc343b66a5850b2b458542fda0c4b71910a5161495f3c5a8d07d7ff102b788c5fd1b6172b83dc01856fd3a563cc1dbbc
SSDEEP 192:sxRsHYCqP/fbsGWpVSDde5lSofoD8pi/g6+WNIYC79uOMGCIgVlaXJ:sxRIfg/fbsGWvSc5ldi/5Idam
TLSH
T1C042B715AD28A93F9CC7D21DFB657F53D2FD1032A1951E48AAFC861C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c12305fc5fb490ad17833efafbb2504442c3cb883c2877e5502bc9df7fcc05a7
MD5 4305dfa111f5b3812ee4117248c38212
SHA1 af24abace48dd14ab822b5f9c5a7ce0bccaea12e
SHA512 61964dab2c0aed9d423c74f9ba481b84184fd063589e699af952a2854a9d6a72681d129b09acb6efd22f78acc5f3ae0f4200ae32dc493553a24787dca733030b
SSDEEP 192:sxRsoYCqP/fbspWpVqDde5lSofoD8pi/g6+WNIYC0PuOMGCIgvlaXJ:sxRnfg/fbspWvqc5ldi/5Iwa4
TLSH
T1DD42A515A928A93F9CC7E20DFB55BF53D2F95032A1951E48AAFC8A1C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a4b9f252abdfadee88ed685d824fa95abdbe7983b44628dba32fa85118ba92e5
MD5 3a9ab2a2e66b8cffcef50549d9324e59
SHA1 78fe1b54b45c059a3958eefd32288db1e6689d5c
SHA512 11c77d0adc828e41d89969202adfce4311243b2cc804e3d19ec4fd9100fad8f7c446c3a7abd9350ae59d8f1c7ef81ae44d90116df572c450ebbf8a8017ff6bc2
SSDEEP 192:sxRsoYCqP/fbspWpVSDde5lSofoD8pi/g6+WNIYC79uOMGCIgVlaXJ:sxRnfg/fbspWvSc5ldi/5Idam
TLSH
T10542A615AD28A93F9CC7D21DFB65BF53D2FD1032A1951E48AAFC8A1C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b70592a5798a6cec8329a2bd93633475bfa70e92ea57bd7691629d8adf3e738b
MD5 92ff5b125129ef45c1fbabdcda8f8275
SHA1 296a3550c234502a229651abead8f149630f275e
SHA512 080182a340bf21f5d27cd764ec9e8d78f8747eb08f8cb19baa7bcbd05c72522ecc534bdb65a8dc7cc64c8a6d231ce72e1ae90458c2b9a4156d6a833bb2f84ca4
SSDEEP 768:jC+vfN7pLuL7JQWgQ+f4+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmQqc+roZx:jC+vf7E7JQWgQ+f4+u1ja3VcVz
TLSH
T14BC2FA7B640CCF7F4F804ADDE8197E9B6DA802CB5698CD5047FE841C02C6BEA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 4efbabcd7a4499b621b47acb26bd6ce1875c4824d24dcb5d918fad6a553c20c2
MD5 5809ff4db0663ad8b13d65bcc099e473
SHA1 8a2b3364ccde7df275d4b3b0bcda063a1efe9908
SHA512 eb0a5a50d28367d278a93f18056f0aef14b38ea59d83d8bfe0b3f6d9f75cbf963c9732c33f6b74b814acf807aae61d8e40035829808f547fe957dc5872f6bcc8
TLSH
T1BEE026D019CAD1FE621920C3062AD38CC3F4744FDAC83D827F02CC806143D05B9A65C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 c714a0d81f3196602b64373c2cff2a3c9ded82a5d90c1e8e89e09b22578d6f8f
MD5 447838e2416cbe3ab1df940785b21830
SHA1 37923b0c8a6819f30113a0979ce838669137abb1
SHA512 51ba7fe9e07e41bee13edecb2310fe97517ab680ddd10e2d6f8c49cbedfb0b0a4b4d2ccf5c11c311e202e286345e2720203170828f2058a95e5ba9aa976988ba
TLSH
T11EE0D8A025CEC23B624A70C75319E30CC2A2B40ADAC96AE17B09D8906207E4073475C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 9d02ca3d749314b046a873e272b97e1f3dccd4caa03fc095021910ff7bad9087
MD5 21e28ce9b2418eebbd9f6300c0998f5c
SHA1 c9d976556ba282abafc0b38edbec64db4e5933e0
SHA512 ff8a4bcc5a1492f2d0b99691dcf6f3276834096890381ce1c0617c2143b9726e552706db2f9d149375ca685c433fb87155b6ad25b690228daf496ab7b38d81a7
TLSH
T122E026B056CAC23A580C74C74A6CEB0C83F0780EEBC83ACAEB0CC440A242D04F3A61D2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 5debeaadec5cf43502e3bc083a02f5c911ea6ab3ad400eb4273288ce7cb815fa
MD5 1e6c5dc05996f2e9a63492f2e905fecd
SHA1 c6ddc0baf0a0802382c498c1f57490a81fb1ea67
SHA512 61a4b0332bbe1caa419900eb60e261341c176457a23c2fa86af72221bdc47c6d88eeb124e6e7a86aa0010aac0b826d8f7aa6e8d6769eeb671b697e73c9557340
TLSH
T19681854030BB0243BD7E244CC4658A365181B06A78A9E5BB7BB9C4B60FA7E115DFE9CC
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b503cf5541f5c83a2e007adbc63a4fe34c54e15870f45695233770771bc3b59a
MD5 a02103f5f02f8e0cf13285c1f67af6bf
SHA1 c1c3368155038369a5e931e357040d92b27120ed
SHA512 e96193de700f8a6e5b7af36bd774cc94405ba4e2c97814605d8f2c494f586201cad82a074d600a6651ce6024aa6328954d210cf99c65a18d570a77ef9bfb2422
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOOf+KEMiSAQK1aLzqKIAw:CbEBVj5JAdSp9/EgTK7j6dJOhVnrb
TLSH
T13DA1624030BB0203BD7E254CC5668A365281B06A749DE5BB7BB9C4B60FA7E115DFE9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 9a666b8b28c1ae86702e18e8c71a405735615c4b7286c653923783176721fe3f
MD5 686286ea4618d8d19dd5ddae81a00e98
SHA1 182d6f33da70cb6a33a08a43488d322eee4f28ad
SHA512 095ddefca17ba7e5dad9d6f74b6d2334e1d41e92e99e1a2a3b6f5f8560a69e1e9ca9abeecfa360f44051edb97d86608e5f4f704ba2a500c90da358bb32843b70
SSDEEP 384:DNrRZyCSDnxTIC4CMEhIKyll7svbFKfk7:xFZJSDnivjyI1l7svbF9
TLSH
T1C744750A7B747001EDE6DD725CB080771E3CB16D8F22A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 09e772cbcf94099dd6fe57b94a1b434924de3c2eae2af80122a3435b9b766537
MD5 271ec19ece98d52d358e1b4e53c45923
SHA1 5216a1263535a6b5d580a8db9b77339891eeeb66
SHA512 2a8a51522b6bf4e690491054073b8c944eb5f6c0617d1e4e09901dfc03ad502d3d5888b31b572f3e572aea12ce49ac821e4985e8e8ff9e29baa9130d02765653
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:DEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T14252879BEE342212DCEA83318AC001E17E7A903E8FC1EB0254D610211FB4691A31E58E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 124B
SHA256 07c3c4a733f374a66d436c63f3ff94467a78255e42b69d683c35f4d64927036a
MD5 ac992ddf104e12b0e0f97dba3dfa0bbf
SHA1 89767dbdf05f55cea17c266d70b5d6653337b1a6
SHA512 eb6aa4c07f17ea88b5d3ad94595194874ce0be899f96e28bea5a4eb3b59296b79a4319c6dd278770ff157b7c5dec643c9eed674f9e3bf51fb0cac347e4ab0be2
TLSH
T19AB02BC021B634023F4D8844C0012B0330C83C18140E00F1721980180D05C0C0DAFE33
MD5 SHA1 SHA512 TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 80KB
SHA256 693cfd45b2a466679eb8cfa66ed465d85025484591773713ffdb2454c4c409a9
MD5 bf1f96290da3312d35d4bf61c5ae7eca
SHA1 83c15297eed6cdae50b46d7e8c029dbcac167d7e
SHA512 e0aed4c34f554fc4dc7934a83ec552e51f529a116e2aed95c52433d624d6cc5f90eca1f2956cfb26f454f3a85d6ac275732599a68823450eb0a5af3f9b9dbf72
SSDEEP 768:BJjZ/IFinVU8lm7tdWsn7VXST4nAHD6mW6a3B8KtsOZXpPGZQF:ainkdQ9ZWHsQx
TLSH
T19D83FAF7AD1A91A6CACDA1B4A80BFF8454730521C220D9E5BD7C08D33B79603BD79AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 b96d4f9fa061cad8b95fd90c56a632c702daeed0f4f4daf827d0375ef0699dc6
MD5 b79f5eb5783f49873bb6f7d2246e6f3f
SHA1 392e4c40f1a10ce5abb6a3630d4a95495ccaf263
SHA512 28c3819894645fff46ae473c15b26b3931159b9645ca87996773b231edff67d53eca79add47c8550167906c67511f9cf9ddc0e32819cc16fd8cb567a37e362ca
TLSH
T1F0F0C2C76E021977CC12547150336783FF6189CB0424B46743CD246B5A2D2F1C9CC0D2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 ade9cbdda4f2c683d0330508ddbd814e158b820b9328d836ffbd85afd01694a7
MD5 a2bc46767d25cde2d0d40544b9a167f9
SHA1 51ea365f374570a1762c40a203860d07e91407d5
SHA512 f5c8ee9ff14d817b0840b199419c8992720968e83015954dc511adfe9486bbc5a1d3ebcc536f2cd4e5ecd76fc1a10a7e1a17d7cdf9f33bfda13be168b9eae138
TLSH
T18DE02690B8CEE17FA51960CB612D670CC2823A5FEE88ADC6AF01C464A442901B6861C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 8213d620e47aa2704849c5f5bb859d0bc95ab691a5b8cd8108471d70d8e4f1c6
MD5 c2b370abfecacf011ac63ff74a28e5b8
SHA1 9151342b961e1a33e234855b6b1826d57672a96b
SHA512 e167a23833d4492d51671c92545be9d1071f4463eb2a39c674f3a7b40413bb43bf69736107ccb22ba7765ae05a8504c43d624d3e480cc5a6515a82c9c6432db3
TLSH
T1B5219256F330C004E25D867E506F9B351738E8528FBCED0F857920646E76A180E4B6E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 c987afe915eb9058a654e09149ffe673c4756c907ef138aeeee52c4271d93943
MD5 45bf5051b4d9abfd56f2fa7053e71d68
SHA1 bc906eff586ba2eb01ecc07d184e051f43402a46
SHA512 1a7425059412d1ec2fefef8880e3695eacde4e9f723603f15564b21041289e2c7be98b411ff3f04fa7630413c8ad44f9fe8c2b84cc5acc98495827ba267b2a05
TLSH
T19FE0205074C5C17F551520D7516DB74CC2A2395FEE846E83AF11CC54514394176462C1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 7267f3231e29512c53542a09b0e5b183008536f4cf51eb7512a139acc3c57776
MD5 405788aa5304d6db94eca4fda61e59eb
SHA1 08ce0d3c334e8dcc44d078889e8f2ce8822ae0df
SHA512 bd5edfd869ae1601ab644ec4bece758fbd26dbc35e6cc2a3fc2f9acedac76f97cbca24773a2158bc3170a60d59c5395d283a87a47bae10c09d77b557f1e654e8
SSDEEP 3:MsEllllkEthXllkl2zEflSQvhs/ll:/M/xT02z/Qyt
TLSH
T10B4404447FD0044DC70010744051C3501371D4110531574734D104335CC75550C000C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 02eeb911c3c068d0f50b8f737c1183049c4a6c6ae3102eb5024e8d5b8fd1f435
MD5 cdd81a86ccef94acd6df4ccb7be003e7
SHA1 16f001a774c2b1d89d710355f1e0b95efc2714e4
SHA512 a46e302cd8111111c010086f5c5aacb576ac3d4892183bbd3ecbfe8beace9df828f92b0e260a90754d7861d70f5379f482a538148e152649ed1e9b4a49efc493
SSDEEP 3:MsEllllkEthXllkl2zEflJR+/l:/M/xT02zmR+/
TLSH
T138440404FFD00C0DC50030704151C7501371F4504531575335D304337CC75510C10400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 104343ba9db018e554f845119262d202242f366295175fc74ba251ca195a414c
MD5 00a776e80690c0eb74b46406bda20997
SHA1 e1f6c6ce21d7db499d323163b81ee8298a6a888d
SHA512 f8962751114a5b1155e53b4598fb0d2eb22020b0baa4f3217792ffb6dc0ee525b19f99516a333fef943ea8d9b01ae7d90277890686cfe3f68920ec9a75e19dcc
SSDEEP 768:Drv+4UNbdEzcOm5uabp8+p3bd66j+4BRv86aLIFV2bwClz:Dbsb+gr98+p3Z6n4yi0w2
TLSH
T1AC13BF72F8A8A9739CE6D644B1467A437FB841A396C00ED0D4DD2B4E019A19E730FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 189ac80c09c6ceb39f81615cda8cc3b3b4ebab7fd41fc342f1add807ee202259
MD5 1828c9c68b83b81c7d4d0ab65c66567c
SHA1 0a6b332fa81e08248e2ffc549bcbcdd3b04bbef8
SHA512 6d1a44168310e67cf7f873e1dbc1851e7a5d02c74da31c8d8e074433d7134c95069b8959d9d0b434e62f651f55361aef2eb8e2600d8dad9958f4d45f0554e9f4
SSDEEP 768:Irv+4UNbdD3wc5VNp8+p3bd66j+4BRv86aLIiQ2bwCl1:Ibsbp37L8+p3Z6n4yK0ww
TLSH
T12903BE73F8A899739CF6C644B2467B437FF851A396C10AC0E4DD2B4E419A19E630BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 87db37990a7b9cc58f60a3e873d5abfc8f4ff6acf05feaf66a0a97c002fddbd2
MD5 4859afd75492c4de1ab921e392c69c68
SHA1 fd66f7699a35e60dcb476ee53861a37cf126f54e
SHA512 48be44ec53c0a510f532d8c0806f116bf372b76e2de8d0060de6e1df5a250bd6d6029bb15c3b064c06733b8ec3f4d9e1ee1003d8221b1b4e453aecea9eaa7799
SSDEEP 768:1rv+4UNbdD3T05uaNp8+p3bd66j+4BRv86aLITI2bwCl1:1bsbp3iL8+p3Z6n4y50ww
TLSH
T1F603BE72E469ED339CE6C644B1867B837FB811A399C10ED4E4D96B4E005A19E370F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 01f7f20372667e986f6360253b1a8d417ed81d01ca64e3007e8a7e8e6bf1df86
MD5 8df8a51fc4ca839f80237752688a54c0
SHA1 8410fbec012851f2222443624e48fea163d55599
SHA512 e1eec0015805fc1cb5e9e1f4123dd17c9a21797078fde74a9bbf9bcae744cd65eb8ca4bbe5fe9ff2b1332834abb4dab1576468c6b5adbdc169ff259575909d79
SSDEEP 768:Grv+4UNbd435cPm5uaup8+p3bd66j+4BRv86aLIWwD9No2bwClP:GbsbC3Oco8+p3Z6n4yGjo0w6
TLSH
T1B3238C7DAC58993F88EEF304714E7A636EB801B7D4A04994D7D91B4EC03619EF70B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8063e68131496501c18087750c78630f97d725ac2590d0b64d12fc229674d84d
MD5 975270d678ebff3c5589f7ebcc5292d6
SHA1 90f0529c3fabe08c0809b8785f7f16580c0c20a7
SHA512 9279b8b42925dca3fe3e6de260cd6097ed34d1f7ac59f5eb010ea3eeae30f78e2bc74b48bb0eaf9b3d3a4a5c95f0b075522a82c36924272e1a0125659950d9a8
SSDEEP 3:MsEllllkEthXllkl2zEflp5R+/l:/M/xT02z+5R+/
TLSH
T1B44404047FC4144DC5001130D053C3501771F4100571574334D114335CC75401C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 5cd2c4d9f13524923046198c92213691539407e04fa520cdae9eade1bad3d91d
MD5 e9e365607374115b92e4abe4b9628101
SHA1 d5054ea9b22317dca83801eb3586017bfcc0e2a8
SHA512 a84d65ed53e43883e5ecb7848fbd48f5305a63e6975e6af480cf85532879720061106be54f2a5888ebc3569f7123081a0e6eb48ccb8d7dba3e1da1c8a3c50401
TLSH
T151A012078473800AE4144051C49C024114A4804A0219D0015060932314A40CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 98a55546e41fe03178af27446c0389ccc2781038f0b7348d2ad50846dc33f5dc
MD5 ed12c620433363f3bae135c5d15dca2f
SHA1 5414b1db440c59cc15f8847894da1f79ac9843e7
SHA512 3da4b07665fb714d7203dfd8512ceff56b29f2a6e7cb17d602a3dee21969cfb4a20236fc1605374054268d634d1412a3887a4a76a931bda931eb469c22b04b75
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfLe:TY/IHRH34kWqB1kQnjhHmr6ITmU9Le
TLSH
T10323886EDA2CA9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 7ac492d790f5cdfd1fe981f692c16348430dc84f859bd61e343d76dea1dd2deb
MD5 239c521f1572048c981d989415fd036e
SHA1 378b0503b700d803b2ba2257af463a8d6b700424
SHA512 1c77ecab29519ae096062c88c32840d5a25d2916bdfee1e318ab92f09e990a15f8abc29ea11ac2c880b952dca20a0e98c2ef147b7d3137b69631edcd525f7ce9
SSDEEP 24:K++f7WqL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwW:w7WqY/IHRH34kWqB1kQnjhHmr6ITmUZ
TLSH
T1E742786EDA2CAEA2FEE00B3ED7D1D0127B35A60EC2E8D9F1095B505747C444405DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 26850c69dee8983fff6b322a2c1a2d757680426e42484a5f11e5a9ab4a051ad1
MD5 3cb082de8493667d350f9b84149a72af
SHA1 c22ba2a759108daf2d57dfc1b9b202bb3579c94b
SHA512 039205d5f6ae97c1d6408eca4bd839b29fc9261e52cbc8d80a32c540f3219c75e438c4c9ce8e2ada3d709833690b67e01bc11db5c4486b880b2c17a540704f05
TLSH
T1AF11B7D53932627B02C34BD4E0724CD49950B99A433F2BACE9575474FE5CEE0572E385
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads