hxxps://sl1nk[.]com/gssf5if

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sl1nk.com/gssf5if
Sample260916-tttyksbf73

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3264	msedge.exe
3984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340493002740797"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{9AE8A22D-4BB8-4437-AE35-90E5A65D941A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3876	msedge.exe
3876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe
2560	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 2560 wrote to memory of 1196	2560	msedge.exe	85
PID 2560 wrote to memory of 3264	2560	msedge.exe	86
PID 2560 wrote to memory of 2916	2560	msedge.exe	87
PID 2560 wrote to memory of 2916	2560	msedge.exe	87
PID 2560 wrote to memory of 2916	2560	msedge.exe	87
PID 2560 wrote to memory of 1784	2560	msedge.exe	88
PID 2560 wrote to memory of 1784	2560	msedge.exe	88
PID 2560 wrote to memory of 684	2560	msedge.exe	89
PID 2560 wrote to memory of 2180	2560	msedge.exe	90
PID 2560 wrote to memory of 684	2560	msedge.exe	89
PID 2560 wrote to memory of 684	2560	msedge.exe	89
PID 2560 wrote to memory of 2180	2560	msedge.exe	90
PID 2560 wrote to memory of 2180	2560	msedge.exe	90
PID 2560 wrote to memory of 636	2560	msedge.exe	91
PID 2560 wrote to memory of 636	2560	msedge.exe	91
PID 2560 wrote to memory of 636	2560	msedge.exe	91
PID 2560 wrote to memory of 3784	2560	msedge.exe	92
PID 2560 wrote to memory of 3784	2560	msedge.exe	92
PID 2560 wrote to memory of 3784	2560	msedge.exe	92
PID 2560 wrote to memory of 2812	2560	msedge.exe	95
PID 2560 wrote to memory of 2812	2560	msedge.exe	95
PID 2560 wrote to memory of 2812	2560	msedge.exe	95
PID 2560 wrote to memory of 4528	2560	msedge.exe	98
PID 2560 wrote to memory of 4528	2560	msedge.exe	98
PID 2560 wrote to memory of 1776	2560	msedge.exe	99
PID 2560 wrote to memory of 1776	2560	msedge.exe	99
PID 2560 wrote to memory of 4888	2560	msedge.exe	101
PID 2560 wrote to memory of 4816	2560	msedge.exe	107
PID 2560 wrote to memory of 4816	2560	msedge.exe	107
PID 2560 wrote to memory of 4816	2560	msedge.exe	107
PID 2560 wrote to memory of 1896	2560	msedge.exe	108
PID 2560 wrote to memory of 1896	2560	msedge.exe	108
PID 2560 wrote to memory of 1896	2560	msedge.exe	108
PID 2560 wrote to memory of 2596	2560	msedge.exe	111
PID 2560 wrote to memory of 2608	2560	msedge.exe	112
PID 2560 wrote to memory of 4256	2560	msedge.exe	113
PID 2560 wrote to memory of 3260	2560	msedge.exe	115
PID 2560 wrote to memory of 3260	2560	msedge.exe	115
PID 2560 wrote to memory of 5064	2560	msedge.exe	116
PID 2560 wrote to memory of 5064	2560	msedge.exe	116
PID 2560 wrote to memory of 5064	2560	msedge.exe	116
PID 2560 wrote to memory of 3876	2560	msedge.exe	119
PID 2560 wrote to memory of 1612	2560	msedge.exe	121
PID 2560 wrote to memory of 1612	2560	msedge.exe	121
PID 2560 wrote to memory of 1612	2560	msedge.exe	121
PID 2560 wrote to memory of 1108	2560	msedge.exe	122
PID 1108 wrote to memory of 4552	1108	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sl1nk.com/gssf5if
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fffeabdc188,0x7fffeabdc194,0x7fffeabdc1a0
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,12401998509496549683,17491537162542107326,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,6736246642993296961,6040016391344375538,262144 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,8481426023271310912,6247165490976624718,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13436957067193498747,8785932238117264257,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,17543996422283467335,8836793897051221715,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,14382653907818073371,15511792870639204115,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,4044232423047784978,7773849353767535474,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5048,i,2357998499416854269,3865491031055717565,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,13531680339258775556,12114046381867705722,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,7005489651948581750,10382193795048609705,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4267291776959736388,8006545234975263625,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4267291776959736388,8006545234975263625,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4444,i,13401683798269081157,11067239245496848051,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6264,i,2538770944671320524,1514012179754632717,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,10339881621749550845,14575989211004980465,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,3953782400146052641,5124498518229789825,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,10306069792983118703,4300912543444474157,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,13957538825126686344,18038543917919441897,524288 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6800,i,4427139104900436321,15854312701538132055,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,6293659111153530388,6514941947212350941,262144 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6812,i,5141096562472133423,9861606943663592152,2097152 --field-trial-handle=2296,i,5364652709155500056,15384748438655434510,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:1108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fffeabdc188,0x7fffeabdc194,0x7fffeabdc1a0
    3⤵
    PID:4552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,4398208677216300184,9895684118878312033,524288 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,5924489126744077120,10842202015072117814,262144 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,12194152738509437776,7090044613178392347,524288 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
    3⤵
    PID:1888
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,15389001537130260309,12604913779176307226,524288 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
    3⤵
    PID:4076
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,15389001537130260309,12604913779176307226,524288 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,7681779108802143475,7296474667743932334,524288 --field-trial-handle=2360,i,811630568130586989,9940971007262320206,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:8
    3⤵
    PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e73b391410b47c494ee7953905a0c60fd04c6bc35617583539b46b92968689a8
MD5 c67fbef7f62bf0056c3e3f786716b78a
SHA1 45f832458a5b84f29df5280a7973ebf46d014c4b
SHA512 623599849df6e275e849b53aa15de4c0c6df018ceb72805f4afbfea2a8577410fc6f21085b8473298805a9eec11bfc75b61276472cfcad39c54461995984dd1a
TLSH
T180D0C0F0CEF896F0F031343C01344142308C274122021211B432001C0C900C34265DE8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b15691ff92d6a52415840de0974bc931b2f23b71382f79987341007b5f0c76e2
MD5 29bcc742b7f1a75aa17166f97bd24f0b
SHA1 3f5c1d259de1d0cb8277da768a29b1a3152b8964
SHA512 ab40dcb46cb99498ddb6a03af6fed2f116e6a35ea167bc7a31a110df4fe757b648e3b6e4b99f995e602df14a21845666404ce1e7d81ada755d2f3c08851ced02
TLSH
T1D4D080F4F7D4C670F5737874117D865A719DAB04551655347873218C1C445834269958
MD5 SHA1 SHA512 TLSH

Submit Download

42558f83-eb9d-449d-b469-f037663639fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42558f83-eb9d-449d-b469-f037663639fe.tmp
Size 10KB
SHA256 ed08fa7e93162e3c81ee3b97ba725ce0bcc9e4d060e939b06433c8ddbe4bad43
MD5 77ecf4af4b14bb885c78aea40607361a
SHA1 59c159dad63e323eb8bcae7f5750569aff1b6a32
SHA512 7873037fc091bdb66bd33945eb614980b0792f9f1f182df450cfd353571b5bb32a319bc74931e6b02697d188e36fffb955034d4d490ff776b8035caecea09d4c
SSDEEP 192:sxZbR/WH/fUsrCJ9PIdpNJ4HW6+WNPkLFYapBYt3Ig5aQJ:sxZbwH/fUsrCJ6gHbIFjyo0
TLSH
T12F22B7567E38A57B8CC7E21DBB15BF13E6F9103251911E48AAFC861C05E7BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e914e77d75c851350936e1e1da11fbcf171a7a4942a0aaf4c53a35fb549ff14c
MD5 8e832b09d0ec25c3041cdc0a298fdc4e
SHA1 d8cb090dc811a0fcb5c95b9b732d1e353bcf87a8
SHA512 8c37035e14420bef38861ce6805ec39b4c18a3231e6ced89f02100fad3ce848cbe4022d98593fba830eea9a5e5f632e6f2ba7a73a78b8a96a4a36347f3bdcc92
TLSH
T1B2E0E5A9D871EC271DFD1F2C50062B46E784236A2A42C94F763C812ECFF86368286C1D
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 cefd465a9fd1af0e29a4ac27d804dd97327183294a89765be17b76e0c866fc89
MD5 5715b85a2bd1912cabd0f16151c1669c
SHA1 274348118bcbf8029cf36c40abe1e03dada04a48
SHA512 acfd02d4c125b6b4391bf31581cb1fbda5e98ec9d5d2dc3ccfaccff903620e30fe3999014997175c7fcad980d51c5edfac9aee7bd7fa131b5baf73d213297a23
SSDEEP 384:b6MCARa4FagqF/wVTCpKaTam50j+maCr5UGGR:NRa4FadFzKaT5Y+m5
TLSH
T13913D97DB554AE22FAC6C13C244B4B7523B0D6ACCAD555BB3335F1A0C3B5F9A1A0E481
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1dfd91120dbc016751334d5021dcdbfad9b4981f07e50b9e1d837d54d4918282
MD5 161c54f68ff112f7a7c00ab75de41fdb
SHA1 44eed0ba5c08dccd19390b2b0b089be444285679
SHA512 bd4835a0d6f1cd4d07208b5e4e328b5649dfeef08449a7a6290da409bee3c0c2e234f5eebe18b3a333eb03445a7f5e72bfeeaa3e6da9cb0030e21d6b786f8f82
SSDEEP 3072:N1tL/pL/+ueBhA4pj4bM21TkH4V05Osgd:TtL/pL/+ueBhAcID1TT
TLSH
T14244C5F71980604BDFA892F5C3033A3DE17B014D6CD2F9A9E2384C816865F7676FAA54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 795d81b02c8965ca902a00305c6d747f70a7c78286943621475da1b1f6ebe70e
MD5 2cf46994491f1184f253884801094626
SHA1 5034e6b31ac186a9b0cd1dfbe1e46e40f3d54b3b
SHA512 461a4e7ea4e636a5b106af3d2b18b44eb6791eeaec19d06afb5efe99ed543fdf6cb190c1ed32c8c35d33df4a8e45f344fbd30e1c2cbb583ea873b4beef9c286b
SSDEEP 3072:eWD+xHXnr3soQ9IwqfouoyZSMdg52hTYnBxy5p+jUeA1X06M4B83e:/Q3soQ+w45ZSMdggF8i5p+QF1p
TLSH
T1A6255BFEC7682C82DB6B8670B0D0D90B7E712183BA99D0D39940C9D457D2B8576F92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 2.5MB
SHA256 1122a8ad4df9539134ebaf914e5012e3420c0ecefafdc912ce2a68fc73c500da
MD5 cd805f6e8ff14a697d5e3f1d15fb63f1
SHA1 0387e73bd86e949ef295062f3e34028969202e6f
SHA512 9ce1d0a4835428182116f9393745a24bda932c8659f0e872188ca7f4c5b6375645aaa671b7950784b8d898889c2d042a7f3870542f4bcf5f34f8d596f42b939c
SSDEEP 12288:+F9COBMA2m+DKzdPVA31XWV0g40P1HGeuK8qDY69yUtJxPL3Z1owDHzU8NRl8LZl:hiloM46JZZGveeN90XV7RKJomqZq
TLSH
T108C57CEDCA6858C3CD639A30B4F0E9477C7413C3F995D1D68C98C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
Size 26KB
SHA256 a2c65fdc6dda34e4f4c4c74b099e1675aaae38d3ec15b99e2e5ba16af4cad0a2
MD5 70acd306d55d3e7681030ac642724138
SHA1 19a81a2353f8eb5fe4f7887c833f90237944dd2c
SHA512 39af62704f6775bb62c3d8466caa4d0e4d5a27ea6eace92f7d0ca214aea50a96f9c902b7061e397598140ca2a7f183fa4075db45e3595c8da9d2ba5d6d797266
SSDEEP 768:HEDVtJD3WOGdPo9sFOaCOaRki5OipB9vL9rvo:kR3WxPuKtCdRd5xL9rvo
TLSH
T132C2E104FF9D3F10FEDD085612680FDCAFCBDE54D9A38A2C506DAC52AAD35249E06719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
Size 21KB
SHA256 51d851bea13c4641203d62016519c1a2248c5ab8686bf5ef4a73e1440823d944
MD5 ed49bbdc79baa7cee160d52cbf560abe
SHA1 542685ad37fcb5ed376ff75faa50c2eea4c6ea16
SHA512 68963f3147e679a138ab32c09d994a51070a4a5d142a5b11a165e5fd260c206b60d7c80e902b54b318804f9903eb0347e58f9706922985b7914fc61e49e5c636
SSDEEP 384:hyq0beAxD++IuMHNDPs8/7ASCPQJH8fa0bOnBtk4wau/YZmCzLauF5DFB0qC4OIM:hL0bvxDn78/7DZcfagOfk49GsJaKWqCv
TLSH
T1D3A2F1D9D2E63832706167B4D06A1EAE08D8D7997C720E6A907E29C109F5C756B3F402
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8f4449f44a94d671094746d4249d0de0e29f1c7f6941a6a8ec40a96940e2dfc9
MD5 ad131f23c76fdae90c5d8183f3b7b5a3
SHA1 1033daa3d6e381eed8e3bce7e909fca284280c6f
SHA512 113cc024ab97b9d28574e95e6b9aa19e158de67828885eba34d9d0e5f62a15ceba11884ad34f6b505408e111bb67d405fe133564c644a25af79a277b461918b9
TLSH
T10F61DC808EA240CCFB9EF2B186D2168F3630557897830EB7A374DDBAD87639513E7440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 215a3ca68987aa1b5a66a9fe0f7f363e8c2ebf21bf5e39c90d60ba130465a7ad
MD5 f1fc66e0ff048d2a41246b2eef514f9f
SHA1 bfe3e37001e2b556cbc8ebf5aad823e2094edfbd
SHA512 4e40689b9790fb26ffaa88394fe5b2998201c71241a3b2b0f99edac3422de3ee571c875544a595d25f4eb5db8c679aa612fc5da4f81d48c53a03f019b270d18b
TLSH
T1CB71A7818EA20198FB5EF2B486E60A8F3230567997830EB7F374CDB6D47738553E6480
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a9438f450506941820cad363a4ad9ff44b086d42e6cf4f44f0697155b1728cf
MD5 c779e8fc3339186e9ef0fb12fe4dc3e9
SHA1 3bfd32af2b0f741c264cc2c074774847997b7f10
SHA512 3633b45191abc474a00d997c416e1a0efb0a52a4d0ec34ba7056a8ea4c437ebe95d3a5963bb3e80c78eee7af5e445f1bb11fd421c5d091cba4a3b3535b25ecdc
TLSH
T10771EA818EA241D8FB5EF2B486D61A8F32705A7897434EB7E374DCB6D87738513E6440
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 7ad528812379c3aa2c056452f0aa14653860eb5f6bec1b6797409299e217acc7
MD5 ec2f3e824b8a55d152a4dcebdf0e3e0c
SHA1 c00cd3dc0ff58e7beb2823dab155933a6fafe1b4
SHA512 8c40ebb5eb40c85f93436d9c6f443ee422b70bb008f2b1f04fbf3d009614f54050f68ccd6fae6e7d8ffa46d665de7a0d922e6272cac56781c0d5cb0a5716ac0e
TLSH
T11FE0CD9C49CEC62B905DB9D783686B48C3D935CBFA8C3F565F8988807703A46B296384
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 3fcef9436eb2d2524ea4429385deb68c3b8adde06aa8442ed527b50dd44c1251
MD5 b7191eafa16fc620168cab6c4b60188c
SHA1 0008b457dc5c362e76a4076f60e2636648d38c9f
SHA512 d11534ee7e5dc24d1a8a1d1baef1e1ea55d1a0f8a1e498248c00a8673e195a7cdea350e4cb67043040678e177377a5a65951fdfca0004a63be59de4e2bc221b5
SSDEEP 192:Ha/85dwgwgntUdwgwyUWLA/SJH6peu9bz:6/PgnVyZLA/M8x9bz
TLSH
T100D23A2E56313D35D9318A3B941A7A39843A5ADFEF515C6D2B3412844D38944F0F88BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 a5c8d36c63c07e0a36696d2577e41f48e0822951d7af3fbbe176d0eb33973529
MD5 d10788e52b00d762dc302c03fcf08e27
SHA1 aa6c6196e7f096a13990a4e0d658ba11f70d8f55
SHA512 2e796ce3f25c93295f6575e40912a77fe5cf245da521f84174e0062af3e8e71942aba285d0e6f5864c4116f9bbbfee7b9ac1a2928687a5861ecda0107a7c3dab
SSDEEP 96:M6mUtpOIU+bGz83uy3+u4tgp4DLjGQLBze9z3fLgjBHMsDEuspU0wbtqrOQpPfRZ:MAOf+G83uy3Ct7XBBKoH7DXspU3it
TLSH
T15E14424E1F743312CDBD917669E744B35C6DF03F8B1366DA686104B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 2KB
SHA256 6b6b4541d3b4ec270e3e59c511eebd70b07129cfbc0a04301c9ff5f70b06714c
MD5 cdda7bbff7b788d3915c7bdd4722f6fe
SHA1 fc2faffca66b49b2d290fec6cf4c972c4bf8eb86
SHA512 12168e1f68e5941184d279f95723129c13a37050cdcc718aafa681b008062ee05700207fb1d90d4688651b54dcd05170fda50f9a8e28cf7fc8433fc721627c70
TLSH
T1A251BAFB708D8380ABB176F9E080316CF423014E4CDBA6FD9712151823DA5A772E39B9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 d696a36102ec1f32f19b0042be726aac8752e429a0b58c9f98563197eca7c6b6
MD5 8155291ef65b7c2d2d5de6ff16509f3f
SHA1 05bf8f8316cec8d0ca29010070859d7a26a94ae5
SHA512 c05ef076106cccb7399a1a62079e50d8e3b9073e1c9a2b3c7e87e4daef805f572bed822e4122e58795ceb9decc56cb303c200dc6014c2c25bfc107be118c2c33
TLSH
T1DBE0D8A489DEC1696348315B82287B48C7A0351FE6CC2BC29B059840B743404B7856C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 7308a9550898c68cd6542355341a9ddd47f85e0b354d4012d9b8baa747738f0a
MD5 f2e95461cfac21c38e1037a31c7b6933
SHA1 82c23fccd24fe0d54c7d93a82e15b7d653f1f945
SHA512 c3fe3a64f02a5cd47479cf21f24ea003ba595adb5ed525def05d36044f6b3fd07c9184d02257046b61260257c62c3c31543090237ee1674b985d07d5f370c26c
SSDEEP 96:deMatUaAKlxoA/RPL9ckiM55X0WPtNhiaiKf:dLaSaHlxPPLh5R0Wnkarf
TLSH
T1D092D74E0F3C2121D0BA6F32DCE1696B3DAC102FD3537A955A5A20F3CD6198EF956153
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 1994fd23b52fb1b906087dcf29e8accece8ca3a2a2ab1d450650cf96c1cab0d0
MD5 54a6eebcbe966220428ff68a4395eeb1
SHA1 09bd87870344cc4618cf8f6ca0c4ed22f2d31078
SHA512 7f475645867ae845515663249cdb3ad4639bf9451921a3dd773caf30b918237ebc5def78d51828a0da202f459f83279cfdeeb64da59664cc03d19c40c0cb04c5
SSDEEP 192:D0pcqUAJhGIJkV16hZJ/JMJ1lvrPiZt4Psv5NrKDeVJLWis4PXUPQid:DqcqUMs0kV16hZJ/JMJ1lvrqZt40v5No
TLSH
T12CF16FF7C3D4862ED81356F55B242F1ACD1E0A14B2293E17C6E5EE8A93E10F2E24165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 bd0a07e49520ff39cdadca99ff9ba3d8ac4c97e7fbb387cbfe7cab30dab46812
MD5 1a550f8e3ef277b1a2faac343f5516f4
SHA1 9831726f583eb1f549df014e7d84382c93a2a84b
SHA512 60b8fbfa78b0d56db11ad75d5d7c1070a7579e43d096518a1624a5b9071a7f89e10cffbdfaef1b55299a23120fd3d444b913b7cc091b3bb9746ea555d72a561b
SSDEEP 192:D0pcqUAJhGIJkV16hZJ/RJ06QZUesrdrPg8xxeLL4PXUPOXoiqT:DqcqUMs0kV16hZJ/RJ06QZUesBrY8xx+
TLSH
T160E19EF7C3E4872ED81766F15B243E1ACD1D0A18A2293D17C9D4EE8A93E10F2E24564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 7761a28ddc58dc3c1b983d27fc3ecf50e5bf9ea4aa03efa832f7daba7be801b1
MD5 357244397e693503daf7bd7ab8edb4c7
SHA1 111a137c6f9cd1c0ea13c50099ee610a126e093b
SHA512 c45a442530826528c45884fb6978f4fd6e41c66e2c24911adab0c7efe98b6589c741e86ed66d15047f38c9ae0cefe90ad5724ad1dc935b5794baa5c52dd3bdf2
SSDEEP 192:D0pcqUAJhGIJkV16hZJ/JMJ1lvrPDrGGarKetRBPdL14PeUPfCVeTid:DqcqUMs0kV16hZJ/JMJ1lvrrrGGa2et9
TLSH
T1BFF160F6C3D4862ED81356F15B243F1ACD1D1A14B2293E17C5D5EE8693E10F2E24155F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 688B
SHA256 1658fd2d3f6f0815efa541228bcd830aa4cf726d09fd694404129857025ee5c1
MD5 bed1c763d8a6c956a2754bb6a9d6aad5
SHA1 113c11f6d3c76b5a0a97d44f843d385e0701396c
SHA512 bfe3b430ee0e3527300cedd92f228d04928ec6d21e64f2557a1c85da5b1b3ba29487a60a6802f24d80d5d2aa38788e87ec2e052bad96724bc3ab779894f4a5a5
TLSH
T14F01FC9785BFB87720694C7B0D497C4D2679B83101A358F0DA96827CA0409FB2A57035
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c000995e6d78d792a65b77df24ff9a922f6f9e6fd742888c8886c6d235259f8b
MD5 4d31a31881c6a5d304a30793ebceff10
SHA1 10ddcb97efae97263d6c52378244678ab8eb3326
SHA512 a43ef5ecf0e2ef556c728ebcb4d520bb2e7f98dfc092e2868f94aa7e0050a7148e717e84b27de569221e33b69f0f7e6fc5124d075093323297d84b1bf4ccae4f
SSDEEP 192:sxZ+R/WH/fUsi289PIdpXQHW6+WNPN6/YapHt3IgrJ:sxZ+wH/fUsi286gHbM/r9
TLSH
T11822A6627E68A57B8CC7D21DBB25BF13E6F9103251D11E48AAFC861C05E6ADD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cf4660f49f0e98d3ab130c0c28ee37e330198140b185b37ffa22bf928bba1285
MD5 2f6d2964c18b94080e06623dab0b762c
SHA1 26d2d1ed3a45772b337bc7f87adc500a1ef46949
SHA512 b4afdd36d2913b6ec23fca38f4eb45e3470b5b1a26931ec5d55f581fe5b33872ff40f6a8f925354692dd0ff80c8a6dfc3efe423dd02af522ad9c6ce14c4743ee
SSDEEP 192:sxZbRVWH/fUsrkWpVIUPIdpNDHW6+WNb4UTVqDYep+4FIgbaQJ:sxZbmH/fUsrkWvIvhHbDIDpm0
TLSH
T19032B656B978A57B8CC7D21DFB15BF13E6F9143251D11E48AAFC8A1C05E6BDD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 39dfcf460358c85b0fd07ff32c76aaf29f3b9ce0e70f3a6453412de707249576
MD5 aed737a7ee0c3d0a8c34b7c737a5de92
SHA1 dd9381a8b5b4f485d319b26923cdf1133d9ca474
SHA512 d7afa0f9861a83a637b05ad51aba5bd5cc87a8ed90e2f925dfa07a211a10daa5ba20072bc08afb9c3184f6ebc119cbb332280c0843c82ba90a12a65c024fe330
SSDEEP 192:sxZ+R/WH/fUsrC89PIdpXQHW6+WNPfEZYapXt3Ig5aa8J:sxZ+wH/fUsrC86gHbEZroag
TLSH
T14722C6527E68A97B8CC7E219BB15BF13E6F9103251D11E48AAFC861C05E7BCD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 976d7dd7f55a453722e5e1075f839907ec4ef31563bd084776dda626ea9e40e8
MD5 13740a83880b6152750ecf5ff3d0f57f
SHA1 c27f7b797ebae617ae2b103a2f3ff7b55c2328f4
SHA512 db5eceed06a073951dcfabd83b958c7440e66ce01e023d700fc543e8a673b47d0ef2b1601bf895f5a83e71236e3560397032fa92e15cf1e8c50b94edad8a97ef
SSDEEP 192:sxZ+R/WH/fUsr289PIdpXQHW6+WNP+2ZXYapWOt3Ig5sa8J:sxZ+wH/fUsr286gHblXJ+ag
TLSH
T1C122B6567E78A57B8CCBD219BB15BF13E6F9103291D51E48AAFC861C05E66CD2207C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6ef1d2fcbcbc9a8f4dbb35b065d2bce8f3adcd12e813aad6daef5c91560939f8
MD5 9d1f5ea30010e0597c1494b03b71c92d
SHA1 c001f772adc13037c25cafdfa3a8174df98b0b1a
SHA512 a916fd61286297828c021debf5760ba2f1f37b5212cb0841a93e75d19803f8c61f27cae9646c98dc1ad26a4b64968faefe95a2e3f7ed0398443a6fbdf73312a0
SSDEEP 768:z5WPcLKWvKece8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7cro4VSPmRb:z5WPcLKWvKeceu1jaClLiF7H4VSPmRb
TLSH
T1A8C2FB3F644CCB7E4FC01A9DDD5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7b526030bedf830215916c92f79f5baeea89bce7115274b2b455afd167050d18
MD5 19a842615439bbb042b51998f6392f8e
SHA1 5ef1804b130a28f33751b8083b72a8295bfb9e51
SHA512 778637f598a03acee4a08eb6d0e1179aa537df3cdb508ca239b0a606b2186316442881a3e1faab89c1e096e0df3e5b567220d94fc0c3dfe173e8f1ec2d8d5298
SSDEEP 768:z5WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7cro4VfePmR4:z5WPcLKWvKeEeu1jaClLiF7H4VWPmR4
TLSH
T126C2FB3B644CCB7E5FC01A9DDC5A6FA77E9802C796548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 c44d9e1c318bfccb92fd9a02015b92e15098872006ecd38d335f7ed3352d5004
MD5 ffaec419a209e9869dd09efe1b8da548
SHA1 55548d1f6ae105d774bdfd947cb6c600430df6eb
SHA512 b425976393675ecffc8b84c4a2444c1595342cdab03bec610fcc7f8983914f7e598461417e7e2b91e0507cdf5aa21e9e03ffec4e5decc4550f6ba6bbeab2f1be
TLSH
T14AE026D845CEC17D625932934238974982E4790BE3CC3E466FC0C840F347604B9926C0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 8319dd956e9aa1eef2594fa49e76dfd9641dfcdcddea1f0efc2b2da334b788ce
MD5 9c98bc6936991f0e8402b98977e34fda
SHA1 0f1e238bae7e86017eee4139bcc76ee4c8d2e5bb
SHA512 5ccaf5155ce7caf04a2c6d1880f92eee886d678c8d6176fb2bd9aadc4a8f216b490f663cb85c77a643bf5218f854e854c23ea1b321091393ef2abf0123ed74b8
TLSH
T1DCB0128537595202C4C44C730E54DFC05310F02270007493CCAC4F615C2AD9C2F00888
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 c776a737eb2e84b04939e8a0c2fa966f954f07488a5941e3f6eea2692cc7de4d
MD5 d61f0b290766dbb9c7fa51c248f18fcf
SHA1 f69c54935798660869977835c9d07957f4a0a3a4
SHA512 4655ad39a0f18d10fa5c4de542d5a195765f647760157d4040308d61e10db0dc83338e3ee95beaf979703502a814cf478751169419b912e65b9d7d2f4c6ac1f8
TLSH
T1FDE0D8B816CBC62A628D70DB8234F74D81A3BA0BEACC2A716F089880634714076436C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 2b8a0db9eddea9dea1e7716e6e29bb9e0762765813a00e5de5a8f421df1d48c5
MD5 b0aea143ad307bd2d2c58e54effc3eb2
SHA1 c5e4bc3e2dc833b368016767e6bab5874f3b030b
SHA512 5120883af6206e9984156a2c08d17fdf474820c80402a910e1f4c7aa6e37f497ac9d78c916899577459fe39b1cee24cb3c53b645373804e6acf5b0e4df96db88
TLSH
T114E04FF845CAC6396148B1978274AB4E82A1BD0FA7C83EA697484C40B343144B6A66C5
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 792e9e514bc001d63bb050d984817336e1ffa9665ec747d4a5bc7915f3da5281
MD5 e905bebb992dc2240bef870ecd19601b
SHA1 e42963bb056516b680a01a176dfba4df7472df9d
SHA512 8d84fe7ec7350d496b94115e757d2945a00b4fa9c067e55c47417dcdc43e0e2dd88d43ba1c1886f7cc336a42a909f259d1a8acb5fcd8a5e0ac1036c279d96bdf
SSDEEP 48:K0OpEIGM81bAHIISg1K9E1W1xulY/A8OyLjGnDtFVWbFIdISDWK9z1hWxrGYQxp9:KoF2Ku8aK8AKpK2acKzyKCp
TLSH
T10A91F34431BB120139BE399991A58B5E028132B77458E63FBF7E04969A6FF041DFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 ce8d24e2bf0c067573f62a35bc8274ed2a1405ddddf187d6532b0d03898b335a
MD5 40b71a838d1aee59e0ed85a0f4edf6a3
SHA1 6fdd3f6f14ce4351516e9039614459b6f63dbd08
SHA512 ee8d1ac5aa579291431718d0fb9b1108f1ea646f3492cf9ee6feeec1fd070130b7dda52187110ddef756ac203efd2c8d3120c3a59ecb4c6bda444dc9d9db6769
SSDEEP 192:P+xWYzWMJfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxcifQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T15C24740A7B747001EDE6D9725CB080771E3C716ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 b56954456de8e8e9c30a0d1ae9c8a6be28a5296ab5e07b73cacfcb8d01210608
MD5 9afb9b061755b24137d31f4a95b9da65
SHA1 c37e11bf5a024f1fb30d275aab45938762cfadaf
SHA512 9e5dc6da8816293d82c1cfc24c3e33ae7da3701a955e975a541bc0df7b4e0ab9650819694918a330e20431a8477aa330e490f27a1c1adbe1d357164d9c6ee7a1
SSDEEP 192:395QkIIIbbLMIMNsYcYerOriAsDlrHyQ2spt:395QkIIIbbLMIM2ByrbsJ12s
TLSH
T1AD42B72E23085F33C09E5F7A139A87541BD8CA8151B2692DB1632C0F8DF3E5782D16FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 d94df514e92096ba182f3c5b51a0f3819207288994445c7171079a990b2aa28f
MD5 947c324747b497dac6d4df3edcf560a9
SHA1 8985982ae6b1e0b2feb4b49bcafadad025386f5a
SHA512 611121f9e50c6b731e99144380bfe52d67ad87d3903eff1dc099d37d3cf0a53ef2f7459a21a911ecaf27e70747ade7a0c09e33f7a98f6d2d9f0fc7463b3213c0
TLSH
T1C4E0CDDCA9CEC56FB09D348B02645B8893917A0BFACC7EDB6F04CC48A703644F296281
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6ade9128cef4b71446817b36e985ba7899de088d2459b3ab6561ec36c75ba428
MD5 ab1907fcd60cc7224bae0256a3474aa3
SHA1 c449bd8a516f8e340192d9b943e0cfe809451322
SHA512 1c675da8053687b7703ef24c57141f71e041ecbddbea2232a8077f122050a07389a5f071b036afa9de44b50731ecdab6331e9dd1020baace9d12e34275c71ba8
TLSH
T1D821D896F334C249D1498B3A503EAB251728D4518FF8FD0F497621683F76B240D477E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 e70a595aaf6f5ff57bb780497aa9b76958ab961e00dfd1b404ce05edc9c1d9cf
MD5 cd5b9faae9d44cc12419897b8c15f7f6
SHA1 c5c9fb014a4892913d5f4e3404d63d8be5217578
SHA512 733ce0d8fd5cbcd64e4d34912abafcc808b5248d7c56426edea83ff248834a6f2ffe58cb77a60b268ef191ea1c97cde462bfe230e430b7246ee436e935066f52
TLSH
T1CFE0785C74CDC15F5095349701A49FC883913D47FA8C3F815F01CC445703241F347241
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b4c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b4c0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 865282f9b3a06c2f669b6ed56768410955c2d824c655a9261313fdbcb2dccf42
MD5 1aeec534daa65542cb36be0b528033bd
SHA1 ca53b1f883a8ee2844bcf7cc6b6f84cb6363cc98
SHA512 83da46419c40ce158e80fefad5d309cbca8aa3877085390535b2a6118828028abeae038f37e156ec6fb9e261152082c3811a0fc170939b3c943976bd901514e8
SSDEEP 3:MsEllllkEthXllkl2zExllzX2:/M/xT02zGX2
TLSH
T1C1440205AB80051AC5102135811387A183A0D45405115B53A49114126CC5D400C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8fe2ca0c619eb9f3431be3ced09d8a900d76381fd0adf8f8595e910c8fa9e989
MD5 929fac60df6449f7a62944e1f62d3385
SHA1 d17cef7e0a31cf3747cb402a8733e7991dd5348f
SHA512 faf8e0379cc64bc2a7fca968bd7b09439f4f7566d6be2b85410cfd095eb29c0def51c955c9797e6804dc1dcdceae9bdc65a075d3745901b0bd68eb970e9111f4
SSDEEP 384:vZcIqsNIqxyj1OvMTzIGmnZctQ4iHsa+VYkd7UCoJ:nq+yjsUH+Zu5iHhgb7K
TLSH
T1C1828D72ACB8AC769DB7A641F9473E134EB4916797C86B8095EC9F0D00DF398130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 45ec6cd1c43aa32cdc76e4014ac52b9d4f2e420af92b1693bdca24e91d9275b3
MD5 ef07cdbf162560bc01df96e54b4c8ec2
SHA1 c843c9eb3ef1aa416d3a390e324f1a5612d0c3eb
SHA512 749f44e1b6e54bb47c8c1392cf11a67d8d024103c79a3021fd541b60ff3812cdaadc645d1c997b12214ab127ef35a0022dad8936d2ca6177ab84fc68b98c2973
SSDEEP 384:tsNIqxyj1O1MTzIGmnZctQ4iHsa+VYkd7UQ:t+yjsSH+Zu5iHhgb5
TLSH
T119625A76A8B8BC369EA3A640F5473A139EB4516796C83B9496DC4F0C00DF38C130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 dac0fa9afb29bd6d1a50dba254a095225cb945a4df1d4abc2539f039e4dae46b
MD5 d75fcf6c4ef572c098e4502aa4a5bf36
SHA1 debc7e09cc8acd238a8f67ab8c3ef9125a7866c1
SHA512 e6498d5519fd29a1663935070feceea244dec09bec2dcea41066d5b56e8c24be0692291a959edeb7987eaf648b334c832e6f12d7f76654075f47ee02ed11d2ed
SSDEEP 384:X4iFiZcIa0sN48TUNTUlIlbxyj1OvCTzIGmnZctQCSiHsa+VYkd7UCoJ:XDFQ1JwgHyjsqH+ZurSiHhgb7K
TLSH
T163C229F258E79836D9AE5743A77E2D038EBCC163B584A650B7C84A0DCC9A1BFC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 70e61908355f9a4dc1c066e48c0645db083044c1254f6efbf1ec5e32e066a28b
MD5 599ec1141fa2723c7970c6ccc96e8e39
SHA1 01e0ea4ddba8bb2ff2dd0dd057754f407720de51
SHA512 11613cbb40d210cbe3d83d311cfe8f44d2b2172be496fd26d2f9f8309fb5fa14a4b9f582544ed3db697f01670cb8058ab5a077fc7a8dce41436fa937f2cdf335
SSDEEP 768:XDFO1VwgHyjsrH+ZujiJSKDKwIr+4Chgb7K:XQ1byjs7+ZujcDKwIazhgb7K
TLSH
T145E26DE184D75CB6D4AE97C3973DAD0259BCC133B1885548B3E86A2DEC9B1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 361abbe2cb48e46c889425537744f1f140c57c4531d891ac88e610bc4b7b16ea
MD5 41f233167a5b1d96e7498fc837eb3ffe
SHA1 319f782cbeeeccfe7686adf13e0e63aabcf401e8
SHA512 adbdc07faf23d779bdf4d05dcfbde638711f0ad95b8fa1c5d5bb738bb022ed4ed4277f6cc5fcba9e8451024bb519bb5524bc681f5a4c8b05a81451cdf8f75986
SSDEEP 768:XDFO1VwgHyjsQH+ZujiJSKDKwIr+4Chgb7K:XQ1byjsI+ZujcDKwIazhgb7K
TLSH
T1A6E26DE184D75CB6D4AE97C3977DAD0259BCC133B1885548B3E86A2DEC9B1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bdd0a56c2608f500b209aff4cbd2f5bd5b6ae84c6da75821f29451f2bbc915c0
MD5 bced32679074d370336f3053662ff6e3
SHA1 13fe61c8110b1374a86ae25dd49a3751ad576c28
SHA512 c6791e587792bc6d6e806d513c72c9dbaa7762e5c9cd5c5a0b13dc27a969b929ee1356b87e187ed47fe5ca1d235a8c903e139317eacbbeb4e7640349368d7297
SSDEEP 384:/ZcIqsNIbxyj1OvMTzIGmnZctQ4iHsa+VYkd7UCoJ:Xq9yjsUH+Zu5iHhgb7K
TLSH
T1F7828E71ACB86C769DB7A641F9473E134EB4916797C86B4095EC9F0D00DF398130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf3f688d5daffd986ce3a117d1e0e6a76c0edfed7f08563c5e8bffc7e2b1da6a
MD5 25cc0cd46e20036aa0ae6d915d737acd
SHA1 0991c69a22aafc136c274a1582d6c50c4c67fe81
SHA512 2cb07319df0fd30ab9e4f61fa3b377bf2518724ce7125564862229f4c1f1e1c4ca5a39a7498300415de0529d7b16817e2b98b2db5ce2b7153bfec67547537a33
SSDEEP 192:aON56IEfQmiUyZfTBuIGmnZALtQuP27H2/kU6:aON56DhyBuIGmnZctQvHHU6
TLSH
T12E120975A8B8BC779EA3A844F4833A135EA54227DBC97B80D9DC1B1D01EF25C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8f6736c0c43fc6c596cf7d67777173def5fb9edcb54c8af506b125e42bb4ee3d
MD5 9b9264665d6991d908f527a60a13f165
SHA1 1d2ac8f5621134848b142edbacd22ece964abfe2
SHA512 a8aa928cc4a63641df2de0ecfdebf2910b17594f52e51203dc482ba9d4e2de86185b0edc3979bb51dd805e15a49957c008fc6f8ba65a56d3bba399bbbe9c868f
SSDEEP 192:aONr6IE7QmiUy3fTPuIGmnZALSC7sh1U6:aONr6DtyPuIGmnZcXs7U6
TLSH
T17902E839AC78BC7B9EF3AD48F4877F236EA5112BA5952F84D9E81B1D00D724C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 ebbeb3407bad16e67d132bb813a1a4a0a5c80fd490bc907bba352ef687bde2d4
MD5 2395ea314336d11a899a9fd95f95d3e9
SHA1 6d5a827060ce422ce03cbc311401d6142c339408
SHA512 c8f86030737cd9a3403a676cabc2ad849bb868aaf9b8d346dcc5d2da94f98317682bfa2bb28c09e1afa149fac149b30fc903d3877afc32b58768dd05252b4349
SSDEEP 3:MsEllllkEthXllkl2zExllom3K/l:/M/xT02z5ku
TLSH
T150440455FFC40507CD4030344013C35043F0D4140713D757745104137CCDD400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

6250ef34-c325-47e1-bc21-b0d75f4741c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6250ef34-c325-47e1-bc21-b0d75f4741c8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f572920f5f9706c6e5f13d2af026cfe668f4d6354968633dd5a53258b631d107
MD5 621f4ed14cc2894deab6976334d701fb
SHA1 191c9e2c6ddc6f1e39fe507fb2f30e8466afb80e
SHA512 308d8680a2fd9e0abb4edbf395cc698cae323cdd99f07e1eb8c12451311a55474504c62e683633cbe08ffd4f110673669ef88d21ac2c0784449364794612f48d
TLSH
T19F41E758B6FA1119B3B76E56ABF6A86E487EB8372E0B945D00010D4E0762A40CD62737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 800f6e5a2cfd91e29590d6a87567dea5565c976acc3048b53ae2585a932eb9c5
MD5 48751963801b33d6dad902e9f7a0aea2
SHA1 ca8727a405709b7eae2db877a4f3ed754ef7cf0b
SHA512 c1da79146124a45a1c487df82ae788db55131f7ffbd57c7840921a9d2b977f711cb1d9e4672ed961192055b258f8b082a842cd2723216908f494d80895c05416
TLSH
T171515C58AAE91158B3B77F5A9BF6A86D487FB8632F0BD05D00110E4F4622A40CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download