dee48103bca140695217f9916ad161934dd4e15ac5351a4f69f19894971f8a0d

Analysis

user interaction
yes
max time kernel
48s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 21:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OG Synthwave/OG Synthwave 2.0.exe
Size 98.1MB
Sample260930-1k6z4syses
SHA256 dee48103bca140695217f9916ad161934dd4e15ac5351a4f69f19894971f8a0d
MD5 359f0c4b77f53b1d8b734d4a822516f2
SHA1 5d4bbfe2202eb50621ea95c7468826a608dfefe9
SHA512 020922910cea8bbf70121480041a5d44504d4e8caaf754537a62b5a114365b69637f882ac70cf0bea2dda715987afe736bc119a5d0e8e85d9093ede326864efe
SSDEEP 3145728:otyBxstzHYmf6voT3b++7i4jCvxDlMpuuE:ogWtz4YTLli4jCGD
TLSH
T126383311AC7B54AAFA628DB903794B8A63727437079337EECF5E2E3019C4F852F15429
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
5548	~$0e58c1f3.tmp

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
24	discord.com
25	discord.com
38	discord.com
45	discord.com
53	discord.com
60	discord.com

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 6 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
5788	OG Synthwave 2.0.exe
5788	OG Synthwave 2.0.exe
5788	OG Synthwave 2.0.exe
5788	OG Synthwave 2.0.exe
5788	OG Synthwave 2.0.exe
5788	OG Synthwave 2.0.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	OG Synthwave 2.0.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	OG Synthwave 2.0.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5896	msedge.exe
1532	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{08875947-A1E2-45A3-B419-B58110F46691}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{5784797B-0E87-4B41-B743-535AAF7E0947}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5788 wrote to memory of 5548	5788	OG Synthwave 2.0.exe	88
PID 5548 wrote to memory of 5020	5548	~$0e58c1f3.tmp	93
PID 5020 wrote to memory of 2604	5020	msedge.exe	94
PID 5020 wrote to memory of 5896	5020	msedge.exe	95
PID 5020 wrote to memory of 5152	5020	msedge.exe	96
PID 5020 wrote to memory of 5152	5020	msedge.exe	96
PID 5020 wrote to memory of 5152	5020	msedge.exe	96
PID 5020 wrote to memory of 2052	5020	msedge.exe	97
PID 5020 wrote to memory of 2052	5020	msedge.exe	97
PID 5020 wrote to memory of 2324	5020	msedge.exe	98
PID 5020 wrote to memory of 3340	5020	msedge.exe	99
PID 5020 wrote to memory of 2324	5020	msedge.exe	98
PID 5020 wrote to memory of 2324	5020	msedge.exe	98
PID 5020 wrote to memory of 3340	5020	msedge.exe	99
PID 5020 wrote to memory of 3340	5020	msedge.exe	99
PID 5020 wrote to memory of 5572	5020	msedge.exe	105
PID 5020 wrote to memory of 3496	5020	msedge.exe	106
PID 5020 wrote to memory of 5572	5020	msedge.exe	105
PID 5020 wrote to memory of 3496	5020	msedge.exe	106
PID 5020 wrote to memory of 1676	5020	msedge.exe	108
PID 5020 wrote to memory of 1912	5020	msedge.exe	116
PID 1912 wrote to memory of 6056	1912	msedge.exe	117
PID 1912 wrote to memory of 1532	1912	msedge.exe	118
PID 1912 wrote to memory of 1220	1912	msedge.exe	119
PID 1912 wrote to memory of 1220	1912	msedge.exe	119
PID 1912 wrote to memory of 3676	1912	msedge.exe	120
PID 1912 wrote to memory of 3676	1912	msedge.exe	120
PID 1912 wrote to memory of 3676	1912	msedge.exe	120
PID 1912 wrote to memory of 4972	1912	msedge.exe	123
PID 1912 wrote to memory of 2832	1912	msedge.exe	128
PID 1912 wrote to memory of 3344	1912	msedge.exe	129
PID 1912 wrote to memory of 536	1912	msedge.exe	130

C:\Users\Admin\AppData\Local\Temp\OG Synthwave\OG Synthwave 2.0.exe
"C:\Users\Admin\AppData\Local\Temp\OG Synthwave\OG Synthwave 2.0.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:5788
- C:\Users\Admin\AppData\Local\Temp\~$0e58c1f3.tmp
  C:\Users\Admin\AppData\Local\Temp\~$0e58c1f3.tmp
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/api/oauth2/authorize?client_id=1529961440667238471&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2F&response_type=code&scope=identify%20guilds.members.read&code_challenge=kJ5Mn-L2fT52s5K4LWU-MeJJR8PhOD_qz_9E-3rTw-k&code_challenge_method=S256&state=-GBWCp47MaMEt4yMayGEgQ&prompt=consent
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5020
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffe36edc188,0x7ffe36edc194,0x7ffe36edc1a0
      4⤵
      PID:2604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,279206081347843060,3863407625117496790,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
      4⤵
      System Time Discovery
      PID:5896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,14421517093296694616,1361760452609128155,262144 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
      4⤵
      PID:5152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,4556803278637389555,18252276014377481620,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
      4⤵
      PID:2052
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,10859933264874607329,823758955850283004,2097152 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
      4⤵
      PID:2324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,9731448391638798464,11850640110635823719,2097152 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
      4⤵
      PID:3340
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,13889218503213181216,7133742976234718808,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
      4⤵
      PID:5572
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,12603768467236926376,1506978180123854187,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
      4⤵
      PID:3496
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,9389627761711383104,7395012540775034316,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
      4⤵
      PID:4324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,9389627761711383104,7395012540775034316,524288 --field-trial-handle=2272,i,17618447205709038207,2307606548411632052,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
      4⤵
      PID:1676
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:1912
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffe36edc188,0x7ffe36edc194,0x7ffe36edc1a0
        5⤵
        
        PID:6056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,10898692434752074339,14009294147234392227,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:1532
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,16028318414036753258,9981747645543247035,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:8
        5⤵
        
        PID:1220
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,13212535443372551294,6470506290630393447,262144 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
        5⤵
        
        PID:3676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,10427040431679564276,13453372303398776434,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
        5⤵
        
        PID:5216
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,10427040431679564276,13453372303398776434,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
        5⤵
        
        PID:4972
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,17859172798839990266,5186426302080510864,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
        5⤵
        
        PID:2832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,5585706796415718124,15022101774925949789,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
        5⤵
        
        PID:3344
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,5875579693892389858,1560184595320820059,524288 --field-trial-handle=2372,i,18293663510933925833,10610216371000240236,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
        5⤵
        
        PID:536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Browser Information Discovery

T1217

Debugger Evasion

T1622

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 15b36af2befe35fe915a838fe373ddadc995b04c807ecc30b4341d10033a6db1
MD5 092938ca57c95aad4824564030700ed5
SHA1 503fe833f028578d12ad3657fe13fa1f19816e4e
SHA512 02d0ea2b81625af46652104f4f757f01ff62f80f9fa25da516572b1ddb1968b36176ac8e6a8d640ca5e12bd56e534b35750e329e0fea9615e29267e2cc412087
TLSH
T1E1D0C0049DE83FF4F439303E13280100B0884E930B03204042520A444C503D300D4CD1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b8b06246305d6d0fd3354eff6a140c2ffae37776ff490ecaf42da651f0a2180
MD5 223b0dc4769c801dfb8095026257dec5
SHA1 c5b40403c9d5e1cbcb897059bd5d0787dae68831
SHA512 a5bd002b364060e424be35512498c3aab6216ebf78e8068db1633bae75c7484077700ab3a72c617c00cb00db9f58b087b2bf91b598a49c4854a6369642af6495
TLSH
T1B8D080D8E5E42E68F956147D31156241F1C4DF546D077090D153525459563B151940D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 ab9d51ecba610032870faff1e6b89d699c1bae41e36f782489b91f9c6b181c0b
MD5 94f030ee09f64abbcf1e61ed27555ca9
SHA1 376b9c0e672d07e7b331e2521cb6227bd6568764
SHA512 1c3807058dbdb391c9c76782bfc57f175f607fd2b7e998812e92fb2a70c12bc2e9481a67a77d28724486961de64966e819502eda2dfce5b2b72d52bb7bed9be7
TLSH
T167F0F4F5C825EC7B08FC5B2820A41646EB55135B2B80998F3B3D811D8FB1A3B868686C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 31beacf73c31385c5f7ab77054b93507cb44f8ab998e135548bc703db213cf88
MD5 87f73c2c5785a05aa62350553656c1b0
SHA1 123226d35cde83c40cff6dcdc41075d1169aaccc
SHA512 781474e9b2afd731be1a4f4fdd2c71745dce8205ded7571e1b7fbbf0c0412bf58f874ef9e4d5345d73ec0832220a2f43bb204c82a64e351cbc323e3dd9e51990
SSDEEP 384:exndM+j6RD/YGvcmc7qA/M23Dy5ZTvFB:lRDQG3cGALQFB
TLSH
T191136F3EFE624D2BFADA163C052F5A307B70DA36C4DD903702A5F0A9BB113461AED159
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 a0b0714083ef0f7aac1af4a5df22d63b8d0c4ab22d73686fc982635bb3e18f58
MD5 0c1c7155fcf848941f2c3cfc78dbc35f
SHA1 5b354aee0e444790f409fc127244e777060b0961
SHA512 522474af77a1e20972760b5ad637d28a96c37951dc6377d0281c495336172820cccdf802b7aab149a1319937f4ad005255ce8536977310509fd70bb88d46c306
SSDEEP 3072:Y+iL/IL/EHGsI4L/lL/+L/48cn2KwaMvxrOA:9iL/IL/y3L/lL/+L/in2KzM4
TLSH
T10EB4A4F38910542BDB7812F593033A3DC277419D3CD6EDAAE5794C952828F32B6B8E91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 da9111cab97f424f7d342a54fe4096884d85ae6c7d3a29123e84bd2f19517d40
MD5 782ec1def4df64ca794533330d9b89f3
SHA1 7983cdde05817a817ccbe9bedaaa1e869304a53a
SHA512 e647973b5f7595864c087577402aa046dd7d695d0f3f80ac42041bb4c2d3be1c1546d498e05f234b7d551c5f6a29f4db04b1e4004b4fe947d14c95cbb7f0f039
SSDEEP 3072:zW3nbev51ERNwiOXHQipAYDrUNvMJwPuy+kWyNs4uN6W+fouvlyPMnQfEkC+bTwF:Kev51cJWE4cJwPMwmMs0bsV8GL
TLSH
T1F1A54CDBCB6469D2DBABDF70B9D0CC1A7E7420C1AACAE0836441C7B911C37C53AA519D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 dace0e6f8c9844f31051740f22a9aad786e8bff2ba656f81aa202f7c1bc92747
MD5 1bb98e55c557c6fa62ea557eb672a25f
SHA1 b33ba9d37adc4aaaaa267b7e4d626cf5ffac62ac
SHA512 1763aa412d45d7bc948d79448e83ceab01141abef00be61a563de62d2637ee190be51c6c0c1054d2c14c376e5a50d8c8b7d02936ea32d020a8384b85e2288e3d
SSDEEP 12288:e6988jQKr9pIaLjNc9DM5FZ1AbbJZQXWlFLFwD58CCZWtEkvg01D32nccVKZgbTu:yVwuD6TmIyGsKDoc1L9gKwjsizIIo/
TLSH
T1E1167DEDCA7858C3CD639A30B4F0E9477C7413C3F995D1D68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9226431aab7897823a628856bdc190a357fee2fb0ad441dbec65698c4381cabf
MD5 dae8dec6bb11c676e0f90a092662c44d
SHA1 df55c851fa3309ea573fd6c5d0dcb4f5215624d4
SHA512 55c2155fc3d088611113e7b77db85adab7751418221300e6a3ef09d8994bdd84d2e26ff0693708d82a26b83dd08b4565eec311bc1f19796793ada603419d20c6
TLSH
T10F812BA2EE50841BFFA4AFF088D8197735B841F0A08B5E3185BCE4F56FA23B452D1840
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 67050f2c617fd9021905a8491fa0abc9f2675dcb3ffc0734d3e251207bbd3a5f
MD5 3a4464c0a80667020a4f97c93c17e7d8
SHA1 770c5a57ac55535e8beb00fa0e4c2677d6cdd228
SHA512 7435a1cbcb9d2df1e05387171abe96150a47ad18725bc83eba00e812796805fac1a039562a6dc299b3ceb996725860d75a0fdd44b5cf2650434e56d711952642
TLSH
T169E0D8D5A5C7C63ED968348652249F0CC2C03A43DACD6E835704D8C57642305B285AEA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 99286766e6ac08aa5a5709c6e64a8edd26492ce554d34a71b1690cf228eed36c
MD5 0ecacbdeee1caf4bec8c7112feb802b3
SHA1 a92c73a70f2f27f9c1bb7b5b15b62c56543acdc2
SHA512 33a270b77d3f758dd728aa030982f6b617c0e00d0800996b339415775f789eb46a7fed412adfbefcb832888a803160bf5b28bfc8341187e31033f3cd2ce533b3
TLSH
T1D0E0268455CECA39D124789382694B08CBD03903A2CC3F42170CF8A16142A89AB9EBE4
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 ed474746f7e7cb5c414396471d0d60f928c848574b38c0dc190156e432975689
MD5 242c2bc629546eab8f1d3a47881740f8
SHA1 771c432c055f597738fca2af1f1302943fdbadb6
SHA512 27ee53392ec2882492df3f111e9da823a98025f6163d32dd6f1d1ea5129bffb854e7e3c722ec9ada0978f04eccce1be3d63195db55adce53e2e1a5e5f4724cad
SSDEEP 96:6BCxKEe75swAr5M3FJu4yYvXgz1XxzE5H:wa0XAFIJFMtY
TLSH
T1A492A5134D313803EB450BB96B266838D97AE1DA7E9ECCE53A31A4754DF4189603A89D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 ce272c4d2187ecc064abeb44395b171a55f380c167b065fe46f716b492e27819
MD5 097a3b50dc7726a3f4fdd3ce7dba577d
SHA1 731d9f48c2adad6c67b82b1c86946d1a9b2d4b62
SHA512 d3c498e18aa25d119210f1f1ad4ad1c4abc58eb769a2ce7d76c5e5ebf33952032115c8f65ca1aa18a28f745d928329abb666e9599ce00aedb111a90767bcb731
SSDEEP 96:7EoXzIU+bGz83uy3+u4tgp4DLjGQLBze9z3CPEEjBHMsDEuspU0wbtqrOQpPfR4K:Dzf+G83uy3Ct7XBBK4H7DXspU3iD
TLSH
T11F14321E5F602712CDBD427669E744B39D6CF03B8B5366DA3C7114B5CEE3642A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 1aa4bc3539e6e9d544b6d46169d2888f1f0327d1f9831a2d3eddc953e8f2f0c1
MD5 295e571b1b6c5fd8b3108c4aadd091cd
SHA1 9a4150f772beb0fa0bdba5306daef04050f65054
SHA512 974d2f2133617381f4884ede3ef7ca0422d43e0c0ff8cd228bb6e1d860b2c41ace09916e164410718c84f43a014caa5c024b1586aed2852fe2fb4911a54a2c46
TLSH
T153E0D8A096EEC6399126205B82587F08D7E1391FD6CF2F415B0EA841B001048E3C62E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 87cf6eb7a248a315e6acb8282195f3c35b2c874cb35b637274e294aa5ed292be
MD5 41c87ff166e62135cb5e2c8c683e3d87
SHA1 c6c1ce700639b98a50197a6981573ad8875c4adb
SHA512 44f86785ff73f5d75881e2b066718c62b39ec627efb4d1da58fc9a56d94ff87cfeb95902a573f80996f4166793e2e89bb939306f3e462b55284afcec0cc8e64b
SSDEEP 48:T2SLopFMatSaw/auUOt8Bq8LcmxM/6lu1Frzcg7HN51woHNZ82+onwat1KSaUtAa:iSeMatUaAKqOxM/60rtD1wE82RH/d+A
TLSH
T1D092C74E6F202111C1F98B7ACDD2845BAF7C106D83A7B9D6BD0434F38DA6A57F4014AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 739ed073c604b120c9075fe060943832e24938cbdf7b6dc5c9bd0c389c3df04a
MD5 bb6a65f85888d4304997258d8f0d343e
SHA1 f4b7fc4ead088d5cb702742e0151cd9172bfb080
SHA512 d345e4087deee6a4e3e3eca89340c1aec7084601931957a6f8a09ab00e65cd33804cc59213286c31432bb7233c0173532b1dec447f01f2e34f5681d7812736f5
TLSH
T18A519EF3C7E8862DC91156F0AB187E2BCF2D0954432C3D6AC8E5AF5B93E2471E14169E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 24636913c597c3aa8f50d4e6507db1c840cb7e3b1ed53cc37459eaaeaa9d8d5e
MD5 5ba85dfa60db0c1cd7387b2c498090fe
SHA1 c8158c0d1860e4e5b7a7053053acb88fcff3a733
SHA512 f928a7677bdaa04ee3928854f35842acc05cdc53cc2d41aa64cbc6c843f284caf7a9f3f8bd2c57166022ae685530d2e92e0a52104b60570433710d817a8c8135
SSDEEP 96:OIEumQv8m1ccnvS6iT32ac2Cor9Gf9WsznF1imq6P/f4g:OIEumQv8m1ccnvS6iCV9Z
TLSH
T141F2F2FB0767A205D98444B0D4005B8EAF16404B47F6B6EC76C44BE3F7A21E3B1B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 50805c1961746ea10a9ec6e4f4b5fffc3197081335bfd04b9bc08261eddba132
MD5 fa9a59ab361f3b29bf027dbcacac7906
SHA1 38f0e452dfd95ceeb05ff7450e0aab224f80a23f
SHA512 644e331de99113a21a01f78204d2f6ca06652a199c3943f1e123c98bed9f3032a6dfa45da480b26c18a15ce8cc9d42ff8aa419cd1d0ee21c689766c3f276ee13
TLSH
T128E0685788BEF0333028443E1D88B8003BBED034008050F4CA66923C70E01B7871245A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3e1bcf4a328ee6e61aefd470a785e118233bd6a16e2ab89d73251b05670724e0
MD5 b323fd7d5bbf753344857ad865d8542e
SHA1 cc7104a04cc40964aa310c733ef8dcfcf77d2593
SHA512 c84e3e32847c65cbcc59f6e80401207a78be0c26611ed6ffe31d80e8b33a13334367c8668388dbf92aee66cbbd720d66f528cb30ffaf5c6fe533ab66b07131cb
SSDEEP 192:sxZsR1jU/fhsUAWpVPQZZNINqnzodp+jHW6+WN2P+d/Y7IRxY62AIgZsJ:sxZsjU/fhsvWvPOZNVsoHbp/J7Y65ZQ
TLSH
T1C152E715AD28A97F8CC7D21DFA557F52D3F9203291951E48A6FC8A2C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fcbe92dae16f7a322ad76bec9a480e1aee1e51825a568b7d7b02881deab68450
MD5 17406f569f2d9f0752971b2e98969fb5
SHA1 87246d80fca663ebd51013b8f0027026c92a748c
SHA512 f34ebdfafea29d319a59330a685d8e054556ed6b5020abcda46177f0a093423ce3f3fe2c4a78d3d55d9388b310f123b25a1e30f211559dd51fd8455974a353b0
SSDEEP 192:sxZsR1jU/fhsyAWpVPQZZNINqnzodp+jHW6+WN2P+d/Y7IRxY62AIgZsJ:sxZsjU/fhstWvPOZNVsoHbp/J7Y65ZQ
TLSH
T1F152E815AD28A97F8CC7D21DFA597F52D3F9203291951E48A6FC8A2C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0e899325759a82250b433b0c25cffe68c9fa3a03d46aa79e39c560b66d321608
MD5 7e1d43954cc153b718ef0f93e690cbfd
SHA1 677bb6f4fd17e1fa96771e0d4c221c0159b96d42
SHA512 786f7fed02f59985400be35044b6b70ac625e049b9196d9c1f40370417c73c902df914a25dff0f52200da050738b4c79bc6fb87fbf342feecab35481585ee5a3
SSDEEP 192:sxZsR1jU/fhs3WpVPQZZNINqnzodp+jHW6+WN2P+d/Y7IRxY6d6IgZsJ:sxZsjU/fhs3WvPOZNVsoHbp/J7Y60ZQ
TLSH
T1E052E815AD28A97F8CC7D21DFB557F12D7F9203291951E48AAFC8A2C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d1026fa8ce2fd5e871c78bf2d6e7d96e7a458e487e520300af0863083362db21
MD5 6be89f223a75a3c39af66caf871d4ca5
SHA1 feab0c309607b00ec3fcbaa84ca7fba856c64a8c
SHA512 27f46b046658270485b1ba9e50b7e0475dbce90b7ab5d6b80d0b67a81a7d249c01c51b136c42e420681ca74a9219cb26251fa11b34445729510b6e324500bfc9
SSDEEP 192:sxZsRYjU/fhsoQZZNINqnzodp+jHW6+WNz+d/YbIgxYFAIgjsJ:sxZsGU/fhsoOZNVsoHbM/FkYqjQ
TLSH
T10042E815AD28A97B8CC7D219FB557F53D3F9203291941E48BAFC8A2C15EB6CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 677d8c8bf77e734adfba8a3b3483d6b7b3cac4fe36f7045d4974190ec8485c1a
MD5 caebc78ac287583086552f398a64269a
SHA1 de18d06f43e005ae19b76c28127c17d81b3b3b77
SHA512 8676379766f64fe427a310974827c3602d85733837ba486e2d50f18bc6c952a462b081ea3a953578334a3b23ea278aba7bc8211fb0e6c9e941d5a9ef23932448
SSDEEP 768:0RyktjU7pLuLbvnWvDBtt8F1+UoAYDCx9Tuqh0VfUC9xbog/OViwLWLlMC7fnron:0RyktjYEbvnWvDBttu1jaPwLWLywf0LD
TLSH
T1D9E2EB3F780CCB7E4FC04E9DDD6A7E8B6DA802CB9598894047FA945C02C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 26a266284fdc80197add1f215670f9a012726e042dd6a5473811c6d6724963da
MD5 45d7e9675bddeaa4211e9a28e166e344
SHA1 660f340981b2e7036ebec2e3a37c6d01710e8e56
SHA512 b1264ab18f27c3182be027b22a1706bdc79a4e8cdc10494445bb51f67b04c2e380f16ff7174689af947740d4167fa833a149f1a524b5d4ca1f96956f59a23d4a
TLSH
T176E0206046D5C67DA125208305688708D2D4B947D3CC3F453F00E8B852425CC72EA2E0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 fef8dde2394da7e1bf405a61a9f76c68cf4bb6425d1008e3b576bc2ccfb02493
MD5 84ef720a1e9b3d6c8c97ae52b07e3a31
SHA1 f1ff18391d294206917a5ae73a522c428f58a32a
SHA512 a3ec09fad334bb355368d86d3772bc8a738452c6ee1678fc633adb7539d19cbbc7623b2dd42f4cd6aef1f438a3365dedb425b91c21f44d325edf5d6f2fb8eaf3
TLSH
T1B6B0129437208A13C885483303F0C7806F44E05510C1E543C80CCF921F05EAC3E418C4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 e976dd2d98780e6b9f1cbc8f75997986b3db9358cfe13c2cff42cdf7ab7adc87
MD5 db12c4ecff8b92950b5877c81d4680ae
SHA1 bbdfc86f4e70f555c826b03841fdd3ff27613377
SHA512 dfc377918bd61a81657af4ee30365a4aacc069fe40dcca76a809b0062bf613e064c84ad6f5356ce4d3fb4e7005fcf7711a97886a55db1a8048367720e2b9ecd6
TLSH
T1EEE0D87057DACB3AA15520C742A8D708D2E2B943D6CC6F523B08B48473065C8B38F2F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 1c46e622542b4164c656c2a09c98b48fcc945882cd7111e9b5f7144a0677f5ec
MD5 c4dec36a882ccc398ddef8b85a898c8e
SHA1 de58c6ea4c04d39d6ea0d7f69c6d6fa2469a377b
SHA512 47932407722adddfd44578b75a0dab0ec681334adb4a8ce089a793d3d28056d149a949c582da376d0153514ab5cbd86c31cf5fc0a8c153f2f62575b7de054b0d
TLSH
T180E086B486DACB39D114608386A59B0CDBF4BD5797CD3F87670878A1B102188B3AA6F0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e22cc2bbc8bcbb1fbf521d0427dbe47998ce2f02875e02ab56a5b33a9d0c7f17
MD5 5e5ff09a5761f5a28125e5d6eeb1c737
SHA1 c03ca0ac14e83eac15a5e13a1c6881eca9c6ad2d
SHA512 ec520d355cd8e7453b5c61aaec95ac3fa95693759ec89256184b592c9a627db64c8659a502fbffca642ea1f71c18eab92a49a5a6cb6a9daad11e348dda4998cc
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXal1R:OtfFvpopPxrB4RhfarR
TLSH
T1C4B2551471BA021038FE791881B5876F064232B37159EA7B7FBD14A69E6BF085CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 6d8d635eeaf624c7805e47fa55862ee08d408c8f14d7664b5e4f9d94d5b44f29
MD5 f05006b91db1e0ead0b42f8b0ee01489
SHA1 9cdc66a10d2bee3d5c74cee855f654ef4bcc968c
SHA512 a4eae4d91c561eb58264739aa427aada5114913e57ef6e4eced60f92eb798d746f6b470ac7b16b2f8f02addefc71596e11dd205777af185a4b3c9910220c8f27
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXal1LP1cz:OtfFvpopPxrB4RhfarLd6
TLSH
T1E2C2561571BA021038FE790C85B5871F068232737219EA6B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 90cbde46cace4907087af4a1c5908a318727352ce8698a4e5263286591db2ec4
MD5 2ea7ade7c82d1799fefd9dd8b47ee21f
SHA1 463c51ab54cb353f78b9848a43e2120cd573e3f3
SHA512 c63e013038b5e4973ad81277231e5d685380faad65592883640dd788368b6bbf7471e1bf985975a638a66a7d69239de1f43ab8a520fc73d463a277c37f8d6522
SSDEEP 192:P+xW5kwsfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mx3fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1A324630A7B747001EDE6D9725CB080771E3C716DCF22A6D16DA254694EB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 70fa30b84e9220a3a35620310e0dc6975d5faf4624e3836de6e26f8e533dddcd
MD5 de35c8838779b0ac06e168bcbd8b160e
SHA1 bd78083e595128009382c3da1a43ef30463d370b
SHA512 833dc43948714b0df66c5fb9085769af33a35707b8c796a165ce31e878786628fe1f0a5da7736c0634a984669c35973f43d321314523471914f609df2ed6f30c
TLSH
T19B515EC0B3A964997EC9A941C22E5607A4E53F7B260EDDB1373E54F48F8981C0E6ED31
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 33dd1e737619019dc75f6f793ad85efffa9da7d227a600881a8100b3504f6406
MD5 55d26fd2e5717b216521449dcb64a217
SHA1 424584b6851b2bcbd5b75d4363ab8c6a336811d3
SHA512 6f46d4c3af36160dedc1d799606fc7694d5c63e26a673a794e4198317f82ea23a0c33e99bc09f1547281759b468828af9efa9297d7dc67263fa127d3c350706b
SSDEEP 192:42ODTAs7lrNUQ2s5WPIBDPnQpIIIQbwMIMSvLYcYau:aDsshR2swwQpIIIQbwMIM6BE
TLSH
T1D252823926491B33C85E1FB71B6A4F941BD8884102F32A5D72A2180F9DF7B9786C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 670fbc07f953216c64407eefbf5ec7d01fe29a67304c3ec4dbc7e600124f11f4
MD5 27255b2930fd00c072936394001eb92b
SHA1 2dabf7c8fd189a6a090331e59a2396b3edcfc9b5
SHA512 1125b2c00bb87a29b221801cb36e3e1560c4317c24a7211190d759746794da0ee1b938efde99e5fc78ec0adc03b193c1c1aa6969f09bb5e789c8d79b8f13b910
TLSH
T1F5E02010D9E9C67FF524708701284B08D7C43F47EECC3EC52F00D454614294A7349AE2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e95270795338859cb7dac08e5d81accc1814a9aa45f45d6b848b6285d8fc4ccf
MD5 17cbf99bbc6be452e6b3274030e04cf1
SHA1 535118a6dae1c18e1b0a6c262c489c29bfded53a
SHA512 6562ed025d0bfdfcef1c8e28dc7d53fbf879faeb9fb12335e8b6239ea39a3082ad609668beddd71c0d5fd2ddf13e473e932c61278bc6fd73994cb6c753046c62
TLSH
T1AD21BF56F320C149E14E863DA06BA7351378E8529FFCEC0F45B964356E72A001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 61bca6dceaf324efe7e27aa981a216a954dfb5c6e220d5fda7daeeded9ee37b9
MD5 a2a47402bc3e1d43275257490c537b29
SHA1 91094bca6653777c767059d06a95f93989c98ec6
SHA512 28ea6e9d7d1a799e2b3997f66ab0146ee9d382e795d28a7ec62ff791efbf09d5f75d3a19a5e364dbeba6bf5a9a9667c3efb51e64590253b2198caf92a0ff98e6
TLSH
T11AE0D814A5D5CA7FD520608702698B48D7D53E87EAC83F812F008C44614258AB74AAE2
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 3ab4b00468221ab0ff4d3da05c605fcf8f9e7c653dbfe2a33ee5a9ada0c77dbe
MD5 b9a7e1c8607dba4ca3d9d1d1cfcf209f
SHA1 cfa93776e29ad22a693de1206be6cb4d93b89a42
SHA512 419966847b55dd6f7bb41166f8253ba410df349fbdd63956235909094a8ac9cef333e3533f8f0aa6341c0821360e019bd0ed7e3e8fd9aa01eec2f0432165bbb5
SSDEEP 3:MsEllllkEthXllkl2zEflIrh/:/M/xT02zZJ
TLSH
T18144040C7FC0C405C50010704051C3F013F0D43405335F433CD54D335DC75510C00014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 9db42a6b262256e0da981c0125cb6c5853102b47d1471e66d26e1e0fb60fd970
MD5 972d51de1a4e2ad8182d4d43fca0de72
SHA1 9fc0bf301dc83192868793e0036c628b015ddb41
SHA512 cda59aa2d5f5ca43cd4882b60e9f1394f934f4ead799d97cac7e754ea60cb77ea3394a99d46d0a969285b90b839ad0b9a4abd81fd6b177b7ba95f91884e9a06e
SSDEEP 384:nsiFEZcIBsNW8TUNTUlI475mgwIUoK2fMBPOmJu/LQGYdM3kCMKWuFftgOIwZOyD:XFiB/wgDgUBBP9dgMKWuFfXsv9y
TLSH
T133E23AF1DA55C9ABBFEA4AE4A3277602CFF04123C6889694FDDB0DDC0C9E19D0386815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 17f505c51148da0c446cbcd6d431d9832d90c230e00167ff39b1991d6c87ee08
MD5 b03fc86419189fd620e2547615b217c8
SHA1 49b28e2f19dd07d6950ea47eef194447cdcb0b83
SHA512 2bc374beb5facc95d7c466c72b8bde7f915d8c75aa5ee1e96793e3dfc69fce0582942dd3b973f7c427ca3c74b340fbddb4e031bff85aedd0d8f1750c835dff5c
SSDEEP 384:npiFiZcI63sN08TUNTUlIm25mg5tnK2fMBPOmJu/LBXL7O6R2Feo4gL/7IzQo9:AFQ63pwgS2QBPWXL7TRya
TLSH
T175C25C32EC94C9BBEDFB8F99A74A7A07DEF00267859C8AC4DAD95D1D008719D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 53dbd086ff4ba79f6c3c7c9817c1b91b5707684d1777bbb6c8212f93b0235f6a
MD5 c08e637a16457b3b8c030f594348f2ec
SHA1 1d96e21cc50d726863947da373e54fba056968c7
SHA512 15dfb12ad65b604815af0b7063bae0eeb74fac5b6d3693f13bcb12215cc3279dc4df5216cc7e0a0bb4e669c501bf18ad9195922f01b85b70be8fc11196319257
SSDEEP 384:nsiFiZcIv3sNW8TUNTUlI475mge9oK2fMBPOmJu/LQGzUtgOIwZOyFoHgL/7IzVy:XFQv3/wgDPBBPgUXsv9y
TLSH
T17DC24A31DCA8D9BBECFB8F95A74A7A03DEE0516385AC8AD4D9D95D1C00971ED030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 734c8d7100a76672ebd2d3ff2ccb8f135ca803a8c5e46f9c44ea0f4459a93a05
MD5 9af5bba25ce63f46be0f099b8de2649f
SHA1 f9dacf54f7cc14d9c3a9ea8bd31fd01e044829ec
SHA512 f046062897f4fe73ff19e220000c0c382dfb6b368f4c8401d11985078475018f314eff861497e93bbdf603fb0cebb9ce1747e8d11c4b2e6ba6a4c772b0ab1ed0
SSDEEP 384:nsiFEZcIBsNW8TUNTUlI475mgwnUoK2fMBPOmJu/LQGYdM3kCMKWuFftgOIwZOyD:XFiB/wgD/UBBP9dgMKWuFfXsv9y
TLSH
T198E23AF1DA55C9ABBFEA4AE4A3277602DFF04123C6889694FDDB0DDC0C9E19D0386815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 913e5184fee731fed3c6d4c4765668e5cd87359aebcb395cf536ecc35ec49dee
MD5 0f28657592a4eb6042b837db9f327700
SHA1 375ea303b34299524e35b152f5744d76197c4f93
SHA512 2827de78daebdc903aa906dd2ce6b8eef5bfba12f0894077a061f2ebf439f3dac61702b598ebde78aecf11e88b23479a45116a4703c7490340bb19003743e978
SSDEEP 3:MsEllllkEthXllkl2zEflv7Uu:/M/xT02zUR
TLSH
T1BB4404047FC10405CD0510704C51C3501374D430C5515FC33CD145335DC75540C01104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 516B
SHA256 d4fce3d89da8991d4bd3134369243c7a47ed86ad8ce9066cfa2881a247436c93
MD5 4cebc05c115fcac8de1c75cdaa8a0f3a
SHA1 ad1deb0de109e628e7a8273a840ae61bceb86f11
SHA512 668d179359eb06bca3b4ae1fae38d9ce56ed105f6ab7dc83333e686b3ec8bebb6ae64f65b93a718a47f793c8b16b335268757b39a20ac8a202a9fb58cf88f57c
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1947513aa6f77d5d2beb433a33cbea462324f815d772f63d5a2162efaacc232c
MD5 74af1c385ff258594606370f2aac6748
SHA1 e1282a5d671be1501b8fecf42a6a1698cfc2ef2c
SHA512 7bda4c811f4de9a245532413966dc88da6bc4f8c5e164222d09e17073339cc1880d70f5cafd5224e22ed59bfe0eb75d33e91cc6f0781a6a15b32963203f0d9bd
TLSH
T19A412A5CBAE9115CB3B76F5A9BF6B86D487AB8732E06D45E00020D4F0663B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 9a0a9ef02e2a311609c132a21df9b84c11971eba4107c6e3bebacb2f6d1a5b7f
MD5 6ae0cbcb0179e795bb23b81718622643
SHA1 111aec4cd493cdee754cd017b329faa0a4f3c36b
SHA512 1f98cd37010b2b020c34dcd7eadb23967a4afc7937d7d8fbf8245fea31f658fcc6dbfda7ad0da76b596dedc1e00cac757cf8e81b0946b6f9741b788e2483b80e
TLSH
T1FB515E58A9FE005873776E5A9BF6B86E447FBD732F06904E10110E4F0A57A40CC61B3B
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 458ccb83c2a2b286be7d3f68fd584ec5fe551863b0965617eb2e14ff913603ed
MD5 7b24b7b1947651b92fa3f9e05910ca9e
SHA1 09fb318f74f46c2a1a9dcd04dc26729d0e94f53e
SHA512 2aed09f3bec3a71b62dd266f88f86c98054822da6e9899e4147ad11bfaf9c22c84a1763c61de0d317f8cc051e36912369ebff789bf66fc81ee2f3f24dbb6c680
TLSH
T1C0415BA03935B63B8B874BC960660C842561E191132FAA4CEE479474BD5CEE3572E7CA
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1676-308-0x00000279055B0000-0x00000279065B0000-memory.dmp

Download

memory/4972-481-0x0000020A5C6E0000-0x0000020A5D6E0000-memory.dmp

Download

memory/5548-199-0x0000000062800000-0x0000000062813000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads