hxxps://xqc-stream[.]netlify[.]app/

Analysis

user interaction
yes
max time kernel
59s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 21:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://xqc-stream.netlify.app/
Sample260907-zzdfnstycw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3240	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332889555996172"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{3F55A979-1079-416B-9AF8-243086D3089B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe
2120	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 1864	2120	msedge.exe	86
PID 2120 wrote to memory of 3240	2120	msedge.exe	87
PID 2120 wrote to memory of 1056	2120	msedge.exe	88
PID 2120 wrote to memory of 1056	2120	msedge.exe	88
PID 2120 wrote to memory of 1056	2120	msedge.exe	88
PID 2120 wrote to memory of 1908	2120	msedge.exe	90
PID 2120 wrote to memory of 1908	2120	msedge.exe	90
PID 2120 wrote to memory of 1644	2120	msedge.exe	91
PID 2120 wrote to memory of 1644	2120	msedge.exe	91
PID 2120 wrote to memory of 1644	2120	msedge.exe	91
PID 2120 wrote to memory of 4816	2120	msedge.exe	92
PID 2120 wrote to memory of 4816	2120	msedge.exe	92
PID 2120 wrote to memory of 4816	2120	msedge.exe	92
PID 2120 wrote to memory of 3780	2120	msedge.exe	93
PID 2120 wrote to memory of 3780	2120	msedge.exe	93
PID 2120 wrote to memory of 3780	2120	msedge.exe	93
PID 2120 wrote to memory of 5056	2120	msedge.exe	94
PID 2120 wrote to memory of 5056	2120	msedge.exe	94
PID 2120 wrote to memory of 5056	2120	msedge.exe	94
PID 2120 wrote to memory of 3612	2120	msedge.exe	98
PID 2120 wrote to memory of 2620	2120	msedge.exe	99
PID 2120 wrote to memory of 3612	2120	msedge.exe	98
PID 2120 wrote to memory of 2620	2120	msedge.exe	99
PID 2120 wrote to memory of 4892	2120	msedge.exe	100
PID 2120 wrote to memory of 4892	2120	msedge.exe	100
PID 2120 wrote to memory of 4892	2120	msedge.exe	100
PID 2120 wrote to memory of 4980	2120	msedge.exe	103
PID 2120 wrote to memory of 4268	2120	msedge.exe	104
PID 2120 wrote to memory of 4268	2120	msedge.exe	104
PID 2120 wrote to memory of 2024	2120	msedge.exe	108
PID 2120 wrote to memory of 4000	2120	msedge.exe	109
PID 2120 wrote to memory of 116	2120	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://xqc-stream.netlify.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff967a6c188,0x7ff967a6c194,0x7ff967a6c1a0
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,765659558912610286,9083843408634011044,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,10849050947513216662,12465240359262288971,262144 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,544439972872344888,2386912362183524290,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,4029800305715032256,11873649355918548879,2097152 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,4009168166765710668,11940881627014510111,2097152 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,878758482336646883,12394919618388797567,2097152 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,11164017965647082183,10552846671965903136,2097152 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,10567674665215177832,16116217918083379075,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,1034786239888344454,14802099332865688774,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5916,i,878104363749170757,17159812221437486710,2097152 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,10139255308792407849,10516944101653819120,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,10139255308792407849,10516944101653819120,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,11617110162046507771,5114874664257576008,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,7124588078394350288,1792851662931465989,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6716,i,18362968311768593165,14773331749742371147,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,14063496628680167553,206291635291187329,524288 --field-trial-handle=2236,i,9312620945876516726,18370168451325386744,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:8
  2⤵
  PID:116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2004

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x150 0x300
1⤵
PID:208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2b697eddcb2b07f8539bfb3652953b0a60b5fe79caaa7bafd3e57283f337ae14
MD5 941e2ecafe7396f8e97c401afcc3b3af
SHA1 31446a30ef45517406a817809c058cb4d0f8977b
SHA512 222c47ab976196c3e2f6ff28796c492c670705750f2050ae0b523f8bda0f71b8f87e5338b508def4ce9eccd960b940f81d1f8e67bc05678f8080d5f069521c97
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 409KB
SHA256 7481b444adbaae4f7a79174b175946fa4336f6baf026ccd4df590112712f6b60
MD5 66037a123614fcddbadbff1c63f466b8
SHA1 3566e363b0cd701ae364e4a6727ba57d619ad4db
SHA512 f9906e983519b12ef3da4d544c3ceab9695215cb7ea0a1c7486cc16c9e075526bf63558a31ffaf1d8e5176cee9902535975ea8f1ac897b56e19abdb847b228ff
SSDEEP 6144:G2T5/P8VpjUC5Hor5v1Y6jxnMcYdVCUUBWOLDIE2anufvM+txgpf3ra7fpoEhO7s:G2T5Mm1Y6GwdBWi25fvM+7wf3rGfWKs+
TLSH
T1D394233DBB1A3C5430523C72A9816A9F483563B3579D3E66A918CCE428F5F37582533E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 72KB
SHA256 d7badf0bdda03df48eaaa50db3618e4e5b9acb6dcafaadef31eddcaa200fcf69
MD5 0407dea5217f688b95f298d73e75e6d8
SHA1 d11e6d4015965f7fa3a81da9df4d9db41f80dd26
SHA512 d5de8d6e6e9ab4a7a4b0b63f2394822781f9143fabb2f0e4df5764fc0b0eaa89d5f57762854f710335078a9af817b9748bcd19259291aa304df5345e79037832
SSDEEP 1536:5hV2BMScgqnf7CB4xit8dCsCEfVDf4JNwZbIhULqQWABPJXviXzIIk9+22me:5+3fqnqaWYN/VJbRq2BPJXviXz7k8p
TLSH
T14E73123981659A058F0BCD1803DC3C91A0FF636A6D5ADA78EECF467DF7893A1011E41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 27KB
SHA256 64e79147a82c808d8a3daae687c53b872bd0f3990445a7d146f16d0a5bcf5148
MD5 f1d6ac69d6247fd7d5a820b1d6b5112a
SHA1 26f6a525b97b7f2a9c008e8e4fa6a193091e071a
SHA512 3a2cb9a7defda2b8d3479cee40457053e50b41974ec090737e3c8a77b3d6b697a3b49f446d02422f6ae9a98c50ebbecb2a739670fbb0bd70825344a5a874458c
SSDEEP 768:itNT5p0OyEHO9J1EMdzwfKgbcNHC1lgET:QNTf0FEYNdY9bcNiIC
TLSH
T107D2E106CA539FE6238354A5473364DE5FBE12211123EC108421672EFADB59B7BCD0F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 77KB
SHA256 4a5474b8eb5183875feb79c3f2ca10f145311acb585d1df9d28cc692fbeb8c22
MD5 952d54373c7fdba41d9e99c9619adafa
SHA1 996fe4d75f2da8b9c64e6b5000abbfc4ba66e900
SHA512 cb40c731d0e19118527d19d33f0611c7d5d59027a57d6a45b82ec65b42f459e8b084010608873eb84e1acc1cc6ed371475c4c5ac50a30fb0e779926ebbc50c6e
SSDEEP 1536:gKON7OxmpmanKc106awC8RwzopLPNJZcxoG4fgR5nx2+fZX5I7AbRaRf07:TU7/mGKc15x1wzGLPNJZg4fw/rZIxB07
TLSH
T18F730202AE24F136F89B835B9B8F351313B53BA2064C22D2E130B07F6E6445C79679AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c459b6af40e6ab431126597c12bb6586338afd2d03dab51dea0e00e8b3556a74
MD5 8d8ba4ed7b3a9e2ba913e36cd2231d39
SHA1 fceaafefa9b5be73ed1373705345b2dbba524765
SHA512 f51e53716abe7d5167784119d5641c987e4e7c1b372c1e52331899ee112f126dd473b5aa53e3c043b65d6d129ad7ba422f5928c5eefb7190445a6e5492920ef8
TLSH
T104717D350D710F92EBD401BF15E3F210747A84D4FA131E79C9606B3E2B1CB9802ABD46
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5880a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5880a5.TMP
Size 3KB
SHA256 32ff16c5b41a8a8e4b54d13b626ba41f0eb7bae121ae84e2bee8cb542a5d0d5a
MD5 d4f0d72d49077724e5fddc20867e01f3
SHA1 a0b9914019a352867a45c5814ffeb2a575892843
SHA512 c275ca48b963117d57cfb1da6dfbf2e0ed18755cedccd5763b9b55223d3fad76da2ea485c9ce961e9d0dc550be18efbda0699ed4f518d1f0d255510e16eb5414
TLSH
T19D717C350D314F42EBD401BF64E3F210717A85E8FA131E79C9606B3E2B1C79802ABD56
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 704d399abedfcbdcff40fe63a1834c79c210cf66bd2a8c241fd1df6cac504309
MD5 dccc9b2d71998d8e23ff44916d0a6f80
SHA1 b461f26111c5096ac27f8a7cef0f7b267ad97431
SHA512 9f8ef1463fb63a3af65eb530b5517f0ff0b7934238116e5fa181a3dfaa97999cb9a9a4a586ac9e5559d2150085db2484a2dc32928d9a3d577ef5885089d447f4
SSDEEP 192:sxZZRkyM/jK1Ml8MkZ/fQFs3dETFdpmY1wHW6+WNB7Q0rg/YCfMrgkIgrJ:sxZZ2MZ/f8sNEdHWHb+P/aH9
TLSH
T15952F9116A389A77CCDBD209F955BF53D6F9447392940E44AAFCCA1C04E6AEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9dc1628a8154029c2175833abfce165890c5364ea86fb569b2a561a1cf743361
MD5 0a5575e9a5d288ba72f2ed7428da7317
SHA1 77a5a7b1e393da90805939827ab7a84bddbbf079
SHA512 691f189194cc82c07cf226250fc5a69f7f9c2942ef806dcac6f673ff703eb1c55108ad7ac71aefae8c51996df8adda6b398c1421c74cf415cdda9e8ea345c778
SSDEEP 192:sxZZRkyM/jK1Ml8MWOZ/fQFsFdET/dpmS1wHW6+WNB7Q0rg/YCfMrgkIg52J:sxZZ2uOZ/f8sDE/9WHb+P/aHs
TLSH
T138520911AA385A77CCDBD209F955BF53D6F9447292940E44AAFCCA1C04E6BEC321782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3f3ceaef1909a27c332b354dbb82ee2f1bc743ce366b3731e6b37a8f024ed1c7
MD5 159b8a46624166f5cdace21687d8cf2a
SHA1 2d34f9a75a07d040e4bedbfd1de4a29a61ac2485
SHA512 06eab587d8fc2a72d3c1a6f0a40f1bfa952792b8ae0132c83428496dbfa8f522be60c490e4a3a6532454819c796e9b1a9166eeb9db37544f44005b5b7740f2a0
SSDEEP 768:gh8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVHroQ9:gh8bqn+WvSCt6u1jaCZLbWVUS
TLSH
T163D20A3B280CCB7E4F845E5CEC266F962DD801CB6B988D4447FA894C03C76EA512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
Size 1KB
SHA256 94562ab9c1142b724b14466b86ab2fce32d7e19f914d077ecd99a932ddcc0ec4
MD5 be82e04a695cb35b8c0d7f0fa2711247
SHA1 1da220f7626bf3fc955f6f74d02af66f27d707c1
SHA512 919a53d49d7268dca928b7403fe9372c1971c9b43a53871e17e29b58f363c485c2530a721796ffa5af34e9a4ff2a831eda8c84acbe5197eb8345eba03c261498
TLSH
T12331779E8D51955BEDA448B2147230B837B0C9CC171193534C3C23377C2636A0B5B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b4f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe58b4f3.TMP
Size 1KB
SHA256 0445b02bf5df290a0c7b41bc424c93d16a13299f42b3bd0c6b99fc4a5b84dab5
MD5 2902a657e643ea2e8caa015448a698b8
SHA1 a7df9a0a180af3e87ffd19ea1e87f386c57d62a6
SHA512 2cb05be42efcb4838410a3fb4db7f2bc652e796be3454aeb6341467f6afd29217744f0890a0102a53a55adcf2cc866e5299a9305a0d772674320ff9df08e54d2
TLSH
T19731938A8A418A0FE8E444B20593A4B8337AC84053227387987C633DB8757BD1F5F0C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b5f09bf3a1c0eae0e2a22067b9d8d281ffcecabc\0e21b1c2-7521-4dc0-abeb-bb23067257a0\index-dir\the-real-index
Size 168B
SHA256 d2b9b52817ba47e6da6a2e0259c294f89aa90c7038c136a3108a3f38514565fd
MD5 d08d274812d92430cc0374dea699aa5e
SHA1 7e764220e634b3db5e786a499ca48ae06f7e7cc4
SHA512 17685bb2b310d8875a7928008e5d33f28fced0b47bcca877318246380c8c4e833b5343fcf5a53967e28127394461e0a064cb6462d2811b3e517ccfb4e81fb3a3
TLSH
T1BDC02B3174B14243CB9046701D411C31F039048C4312A509D02C14B4C043B4499F11E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589843.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b5f09bf3a1c0eae0e2a22067b9d8d281ffcecabc\0e21b1c2-7521-4dc0-abeb-bb23067257a0\index-dir\the-real-index~RFe589843.TMP
Size 48B
SHA256 1d46487d506d4f6aa8a44cccbb2a59771d1441cd237d513e12b22699383a377f
MD5 79122348e980952c635c44a65cf8cff8
SHA1 11472c757af5fd92b1c07916420ef11329c09bb9
SHA512 cdf580ada9b0863707aadefdf0053e2299325972ce7ab3d5526134f753ef75ecf060340d47b34cadf537545ecd6549ba5ad7269b0d584ae60cd0a0c29c48cfb9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b5f09bf3a1c0eae0e2a22067b9d8d281ffcecabc\index.txt
Size 162B
SHA256 b6d7d584965998fe862d32cea4baf60efd408af388dc8541e6193ce4401b7f16
MD5 eb585087d2382140bf7f57755d7f83d5
SHA1 2e762f867c3e584e8f0da99ea186be882a519fbf
SHA512 aed8bd73a95ccf61327f825f9eba3ac8f50353018177e466b006080fd4616346947666e285f9e73a35173fe7b2caf12bd8c2a908fc7283b8d814d70dfcf1d3f0
TLSH
T1E9C08C52C9AC858021A7EEAE002C2314D682EA4F0C8E0814B0CEC878E5364697F7CCB0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe589882.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b5f09bf3a1c0eae0e2a22067b9d8d281ffcecabc\index.txt~RFe589882.TMP
Size 166B
SHA256 b4c6b319beeb99dcbddc2c20363b3aff496302a63d2ca08ed1a883228b75a998
MD5 d10be76a3c31c70fa001c7099ae04d8c
SHA1 fab0d0f807119c54c4df8abff37385c8ec222fd5
SHA512 42d736723e169bcbbabc0aa30e4ecf3d616e950518125dc9ba88d5152b2fde005a9d54f9627c980d45771c4e329856bee4095b779b8a114acad19c003c30e279
TLSH
T166C08C52CCAC898022A7AEAE402C2714D652ED0F0C8E0814A0CEF438E03602ABB7CCF0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 82990855393c90c4bfc13a602b451637cb0c02409ec3c4c763f8ed89df042692
MD5 2019e30683c60ff0b33b70dae2d7edb1
SHA1 7f9a7029aca1988414359989e521b9dffc84c113
SHA512 f7c626991c92bca9f153ee3d04de7ee2a903507dd6175eaca033f771f495ffb4384eab22639ec968b0abbca38589925b0cbfd9a2f93f54da2d64f16a018e2b60
TLSH
T106A0025A15591095CC240B74D542028623284C20530B575180A4C4D4CB50251431342D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586fdc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586fdc.TMP
Size 48B
SHA256 18600dc0f35a03ce4fb443f6150cf0626f085c94597a21375ea2cff3c0f55536
MD5 b46d2fd6be227812605e3681626cda38
SHA1 ac73e8de0bb45c493fd30284e66b00d5aa09ab2a
SHA512 81b141b773a3c56a9a0026025f9a1e585406c8afe8dddaedc23c3ded1fd4a275c185918e8b61b6fd09471105293bdac26fa97c6918b58d18e7c64b960322fddb
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9ca9f332a3ea5fd3a60cd780140df461eeb997ecae891347be4bbc66fa439a67
MD5 3413d62632fea03fba23034e679b816a
SHA1 4c142b2c4b50cc66b67beff86f8e8b091a4c8a9b
SHA512 87ab75ffa8a74e80f212c38592bb5858116b8dedb3486a4f79e9261df9d70e36ef0a25bc0e845e9688e6079025ca1a42a30cd338cce2b845c62e306dd8d2e4ec
SSDEEP 96:KcOUKnqCKAwKxqmhZsLfZb7xG/2sEnxK84E5xoBJenMc:invrhZsLfZb7o/2Ln94E5OBJen3
TLSH
T14E9144027137228138FE2908929786778E4272633918A46F7FB944970E7AF615EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 72a02189126eacb13ec8a0b6f6e22821a4d6dd9f4d6ce34ac8ecbca2a18b30e3
MD5 2b2d5d7e5d0387aec1b16a11ab563ecf
SHA1 ce32f03d792cba8fd94b34e3e0a676767a597ce0
SHA512 9ea86fefde5c9cb40c082e71d1abe0e1e8791eb6ca6028edbfd7360edc8e21ab4a19026eff833ef8f1166ff8fd1ba4eda0f7d6e2e63cd7a10b1fcc35f91c2d10
SSDEEP 192:vONm6Db6QmiUyTsoHBa+j9OmaftmH+Rg1O6U6:vONm6uiHBa+5OHfaljU6
TLSH
T1E102E93569786CB79EB2AE49F48B3B279F94107BDA562F84DAD81F0C00D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 37c3fe9e5bfdab828ab1656232d7ee676067d7b0f42d02c8b87e983c377bb65a
MD5 94f3bd179aaeff56993886f535957324
SHA1 5603429d6116ae520b36ba801d704affd75ff5fc
SHA512 a8b97b9c0f7db3de2a788229a19e881caa7f66b06274e698ab89f04a5ec68f5d2f392bfbf930186bc1790122ad124bcb097609536b951ba64f798a68dcab9fa6
SSDEEP 384:fZcIhsNUyTwobTg2Ea+5OHfaXFjQ135joj:3hEglaYOH89Q135js
TLSH
T165727D726D789C7619F69285F4863A039FF88063D7CD6E84C5DDAF1E00DA6A8131FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 fa4c237450507cc52a3e309e7468f7dee04ade34915e833cc08a508aa78cf45f
MD5 ac9bfde2bce400268efbbe898901660d
SHA1 f54d87adc4d878089b5ce602535f5b527262ce53
SHA512 f1e8d6e4a83df5bfdce40b560ef6bfa6dbf72e223a487cf1b7c96c3e69a1aa87bbc4d2174bfdc8412528b9ef9d775a4666aed0500e217ed7e9a35cda5de797ef
SSDEEP 192:uBLsNUdTj6YbbiBKdQmiU1TWOg8BEa+j9OmaftmHXFgEIam1MqVjqC5+I:OsNUdTwobTg2Ea+5OHfaXFjQ135+I
TLSH
T1AD523A367D789C765EA29285F44A3A139FF840A386C92E94D6DD6F1D00DB69C230FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fbbd17ff8810cebb43b7b75402d70efd7013a95785003a5f6a6c69835b953534
MD5 01d5230f840e95efa06419253c33d057
SHA1 109d09dd823ba2f07f303fc9da134d1c9404f9e4
SHA512 46f03aa5c9e1cffd3c9bb796708e56e2530c2db07e5c8ccd83daa27445c703d48ccb8c72b6be7ef560a88853f4c84b85b2a8b7a2383b8636fe5b30935bc82b46
SSDEEP 192:hONV6DbiQmiUyTAo9Ba+j9OmaftmHXFgEpNz1MqVU6:hONV6Gw9Ba+5OHfaXFjf1U6
TLSH
T182122A327978AC775EA2A584F48B36179FA44167DA8A7F81D5DC2F1C00DB69C230F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5618c022-ab35-43f8-ac9d-485a1e38a867.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5618c022-ab35-43f8-ac9d-485a1e38a867.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fd834243d8410ac30ea846537801e79b6a2cc96a029f7472bcda5c651e404cda
MD5 8f513c25b224ccce2b2fade218965d9d
SHA1 bc7614de34bdb2f2afdb82d579221ebf1c80be68
SHA512 a3324fef176bb2a1ed14d646eb17fae6701793f62dd973b5e5f065f9e824c7ab736c10c303482b502eb9c4fa850ae4ea1583177d8c76266bca1b5e6bbb92493f
TLSH
T12841185CA6ED1148B3B3BF5A9BF6A96E487BBC772E06D49D10110E4F0622A45C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads