7dfae2a0b6658ae613e2422cffa5d9c7bdc496a1a32242324a245bd9dfc67273

Analysis

user interaction
yes
max time kernel
8s
max time network
11s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 03:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Q8GhostX.exe
Size 2.8MB
Sample261024-d2vbbafv6v
SHA256 7dfae2a0b6658ae613e2422cffa5d9c7bdc496a1a32242324a245bd9dfc67273
MD5 b13343b6f44dc6bcbbc30bd2f7fefb1f
SHA1 ce93cf381d49d099d45a9eebbdfc072ddad0e180
SHA512 26eaf152aa91fabdbbc76217e601138e6b918f9bf28d7f69ce570693975af7e2f8b35f8f2d4e8ca4e54e0473f65b0a28a3a8909c69c6f107e3b4731197f17764
SSDEEP 49152:n5TXFT0hPf3Q9m3Xs+hxpc9Fj4WuO7W2e:n114gmzxKW
TLSH
T147D58D07FCA508E5D9AAA3328EB255927B74BC491B3263D72A50B6783FB77D05C39304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4180	msedge.exe
2692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{8862EC54-6F80-4552-B35C-182F9E5A3932}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5136	msedge.exe
5136	msedge.exe
5136	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5136	msedge.exe
5136	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4688 wrote to memory of 4244	4688	Q8GhostX.exe	85
PID 4244 wrote to memory of 5136	4244	rundll32.exe	86
PID 5136 wrote to memory of 3392	5136	msedge.exe	87
PID 5136 wrote to memory of 4180	5136	msedge.exe	88
PID 5136 wrote to memory of 5980	5136	msedge.exe	89
PID 5136 wrote to memory of 5980	5136	msedge.exe	89
PID 5136 wrote to memory of 5980	5136	msedge.exe	89
PID 5136 wrote to memory of 5880	5136	msedge.exe	90
PID 5136 wrote to memory of 5880	5136	msedge.exe	90
PID 5136 wrote to memory of 2328	5136	msedge.exe	92
PID 5136 wrote to memory of 2328	5136	msedge.exe	92
PID 5136 wrote to memory of 2328	5136	msedge.exe	92
PID 5136 wrote to memory of 4940	5136	msedge.exe	93
PID 5136 wrote to memory of 4940	5136	msedge.exe	93
PID 5136 wrote to memory of 4940	5136	msedge.exe	93
PID 5136 wrote to memory of 964	5136	msedge.exe	96
PID 5136 wrote to memory of 964	5136	msedge.exe	96
PID 5136 wrote to memory of 964	5136	msedge.exe	96
PID 5136 wrote to memory of 116	5136	msedge.exe	101
PID 5136 wrote to memory of 316	5136	msedge.exe	102
PID 5136 wrote to memory of 116	5136	msedge.exe	101
PID 5136 wrote to memory of 316	5136	msedge.exe	102
PID 5136 wrote to memory of 1364	5136	msedge.exe	104
PID 5136 wrote to memory of 1456	5136	msedge.exe	108
PID 1456 wrote to memory of 660	1456	msedge.exe	109
PID 1456 wrote to memory of 2692	1456	msedge.exe	111
PID 1456 wrote to memory of 2084	1456	msedge.exe	112
PID 1456 wrote to memory of 3772	1456	msedge.exe	113
PID 1456 wrote to memory of 2084	1456	msedge.exe	112
PID 1456 wrote to memory of 2084	1456	msedge.exe	112
PID 1456 wrote to memory of 3772	1456	msedge.exe	113

C:\Users\Admin\AppData\Local\Temp\Q8GhostX.exe
"C:\Users\Admin\AppData\Local\Temp\Q8GhostX.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4688
- C:\Windows\system32\rundll32.exe
  rundll32 url.dll,FileProtocolHandler https://youtube.com/@q8ghostx?si=5DcC5CFHiniPVwF_
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtube.com/@q8ghostx?si=5DcC5CFHiniPVwF_
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5136
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2e0,0x7ffdb46cc188,0x7ffdb46cc194,0x7ffdb46cc1a0
      4⤵
      PID:3392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,16549639829611066452,13798845506499306548,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
      4⤵
      System Time Discovery
      PID:4180
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,1090190545536240289,6602015050553226921,262144 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
      4⤵
      PID:5980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,12822695199102092731,18008496033919036151,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
      4⤵
      PID:5880
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17688084231632474117,8795798829910257538,2097152 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
      4⤵
      PID:2328
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,12656179265431916625,3227552930884247016,2097152 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
      4⤵
      PID:4940
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4892,i,523414869193053191,1255561274550835978,2097152 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:1
      4⤵
      PID:964
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,674407964374076478,15271658006436917021,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
      4⤵
      PID:116
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,376779154564659699,7956661273907232665,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
      4⤵
      PID:316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,17233363949350205418,7172988854774773909,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:8
      4⤵
      PID:3456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,17233363949350205418,7172988854774773909,524288 --field-trial-handle=2312,i,9859711162218976368,15658001487318718156,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:8
      4⤵
      PID:1364
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:1456
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdb46cc188,0x7ffdb46cc194,0x7ffdb46cc1a0
        5⤵
        
        PID:660
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,5167145506550369445,7280910903017877782,524288 --field-trial-handle=2668,i,17584901827585503775,5395507069737617171,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:2692
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,6588776984191930802,11415716751800793692,262144 --field-trial-handle=2668,i,17584901827585503775,5395507069737617171,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:2
        5⤵
        
        PID:2084
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,3264114769644499629,3490726210467620326,524288 --field-trial-handle=2668,i,17584901827585503775,5395507069737617171,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:8
        5⤵
        
        PID:3772
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,16280263964620224129,4968292252818400371,524288 --field-trial-handle=2668,i,17584901827585503775,5395507069737617171,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        5⤵
        
        PID:2708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,16280263964620224129,4968292252818400371,524288 --field-trial-handle=2668,i,17584901827585503775,5395507069737617171,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        5⤵
        
        PID:3508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a7ea634-4e67-4884-bdc1-b74b5633e745.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a7ea634-4e67-4884-bdc1-b74b5633e745.tmp
Size 26KB
SHA256 6f4d07c28ec26d139a656feb6c57f2883fa361ea9b467b1b2c592a01d2e2d2f6
MD5 241884e7cfd9915de23d2b16b1ce6a43
SHA1 856a73e6595aa57478fc004919caa6966e359622
SHA512 28b032cd76195f7bbb5a7359d091e33c33c9ebba4c37811590b9553fa5c5e3d7ced45587f616c09e0e6ba3306923462e95479325214720786624840cc89c6057
SSDEEP 384:n3iFiZcI63sNB8TUNTUlIm25mg80iKzfMBaLXJIhtu7O6R2FeoCrgL/7IzNo2:yFQ638wgSkKBEou7TRn5R
TLSH
T1A7C24B31E895CEBBECEB8B99A74A7A07DDF05163898C8AC4E9D85D1C00875DD170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 28b62a3db7a5d2dc7d0616b81259ec388417e0c112ade2395c9934bffeca26c6
MD5 e41e3ae3661d9f8a37283ddbc07dd67d
SHA1 bbe9d4921f3283582d624215ab8cd50831de7e40
SHA512 f5639aa82cfcdd064e05545bb0809d1eaaed3d06bbd7545f75d6c8b57af8446fd7d30e46bcd87c8e74f4062ec8265eb16a2b26492761e618166d8a61c75f2bbf
TLSH
T157D080157D573EFDD6AE7176155C9580B540CF634717155007170D184D5029258D4ED9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 204cee7e98049e1bbb0de1ac996e4f959e4712a4654a218b3aa0a24faf7d77bc
MD5 50db28f1814446e9718bf5ab8173c3fa
SHA1 a45a5c9e5bd00ad80333c8574b9a4454aea44b74
SHA512 051fa80aa07f8cee19ca89ece4987033bd10badb6f6057b1ee863e8040901cc6dc281a0182ff7bacc12cbf5d8ff973a16681d2564fde4ea434faaa0b6d6d90e8
TLSH
T1AFD08029769B3D1DDF8F6173364896C0F500CF574607597016170E14494037559945E9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1bee9600bd5a33bc8f0668c55e5de638af2900d2c5b64b0b6a076944d9d64cb1
MD5 dccd83af196089fa1701326df524d8f0
SHA1 13f464d146d477458e5cbfb269a644033ae23e4a
SHA512 3c03334f587184595882b502100116cbc4a277280eff870b6b7fa3504e1b35e2d10391e179ea984fedd6d9e4c2b85b75e89e8dc8d55fe7529b3a34a2442689b8
TLSH
T1F2D0802576973E1DDF8F6173364896C0F500CF574607597016170E14594037559945E9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

2b794075-9a22-4a45-8ff2-7868810c559f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b794075-9a22-4a45-8ff2-7868810c559f.tmp
Size 414B
SHA256 4312589db97fd3a64fb1bd091295cfbf3d315a73c8ddc4f23c37d17b6d6bb3bf
MD5 86ebb9ad5edfe1c4880eb179aafb9760
SHA1 d97070cd877080e106e6d9cfe38ee19847e18875
SHA512 c5f4947764b399b27e4c5fcd81f31fb72007f17368bc26f6b063991a96bfd0dc95055fef55e0dbc50393700e521e33ede5d9359786dbf720e640bf8ae370fbcf
TLSH
T143E061F5CC55BC3709FD571950585645FB4503572A81884F3B3C800D8FF1736518A96C
MD5 SHA1 SHA512 TLSH

Submit Download

67d9fb06-180c-4dbe-bef2-7da2ff7c2ab4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67d9fb06-180c-4dbe-bef2-7da2ff7c2ab4.tmp
Size 13KB
SHA256 ea604af85385f3c428f24f6032e1878750f53098c9f6de118c654da753afff3b
MD5 9d47daf2ad7da35ff5fa72a528ae51b6
SHA1 9e2c9d8177c23f12ea04d76e54eb1f85d2b4bac1
SHA512 a5069c98982697cb11820972716e2bb30c880aebfc087e36aa1a77bd4ec5db73b75009eb2b7dd8e5b260f8f000ac655c66d88dbca6cc188a492024f4fb1be748
SSDEEP 192:sxZLRoja/fAs+WpVSQZZNINJdzodpzmZaaHW6+WNqttS/Y7I6pcY27ZIgZJJ:sxZLCa/fAs+WvSOZNc24HbP/JfY0Zz
TLSH
T19552E915A924597B8CD7D21DFA69BF13D3F92032A0D05E58AAFCCA1C15EB7DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 fb0998cad0da9e970ad86a3d87c84ac3a3fd845b82eb2608b123f91b14d0dcdb
MD5 d34e0f60e7836d84fc065e56e3e5b318
SHA1 4078affe5dc5190d1798092a8774fd6d832366a8
SHA512 fad6e030a02c526046ee60f5d90b75379b5685515a83fb5c047d2cae2052c07e6803dfa03afe0c8eaf4b04849ed65f3e6bfa9f07149a050514b99a75a837403d
SSDEEP 384:fyCjy5MlAhL+EMT7V64tt2/S3WbcbiPi:faOYq3ZvAkWSV
TLSH
T18E134E3E36011E26E6DFC93C469B2B3867B0E8F5E4D215539771F1A21322346ACAF057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1fa2855d656c023f571a6da2a792ad498b799e089f97f51a9b55d45d41f0af7d
MD5 2a9546702ccd2859d90f58add729e5ab
SHA1 772eaef932bfd20c50f2bcdab70eca6071a4a1dd
SHA512 2924308162faff79838885d86f96b62e1be57c3b6ab15de7cc187439adbf4282b4bab0e20e16b00e78fa90fcf27f33d7109a235f458f30b82cc289542faabe10
SSDEEP 1536:HaaHBTL/+bL/mTBODw21szNCnRO2aL/CL/KL/Qdk7L5yg5:H7xL/IL/htcTL/CL/KL/h0Q
TLSH
T1F24450F70951A00BCBA852F5E2033E3ED177456D6CD1E8E9E2788CD52925B32B6BCE44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 13ac589099f7061f6ac82da58742effe5295e3758d7d6c5d610c0e7bb5c7a5d7
MD5 678b2331b910921066c2ab5b20926222
SHA1 13557c02c2f8ef5b02f5de597c3623d83adab6a2
SHA512 34c84d4bea0673ba361dabbd5d0e8c93f7d7ea1227149f6806b32d9d4919bbd1e62e22568f0df92bef550f16df419a160f73bbafb002d10e8d840b04266dd010
SSDEEP 6144:Hev51IMo5yY95Mmw1BOwbQItyKzwvzOltEf+8HD6/BD1:HevC5yYomw1BHzwvzOltEf+8HD6/BD
TLSH
T189254BEEC7681C82DF6B8770B4D0D90B7E7021D2B659D0D39940C5E897D2B817AE92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 84a4c10326fec6c845204e20f0fcb2abe952a33e64e8bb1836ebf3ed00b3affd
MD5 450414a7ffcc2e8221881ab749d8939b
SHA1 597fdbc00c5b7f49fea5ffac4749ebf90267d477
SHA512 c5a5f9ee545d5603dbea89a5483f6dfc7f733c328984016ebdceaabc18cc8b1493cbfc99fed2953924b6e13b79da5c0f0fdf39c9203a6b10fa60521e796f141e
SSDEEP 24576:nswvzD60mIyG/Ww1qNEDFyKro0U/wYqTzCDG9+LI/Kp:swvlmZo17Jyao0UETL90I/U
TLSH
T15D166CEDCA7858C3DD63AA30B4F0E9477C7413C3F954C1D68898C584026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 106ccd7a46c70e667391f0707dabd108d0adf5e36870f152bdbed4001955ebb0
MD5 2ee7524c9a0c826e67460d0156a652f3
SHA1 67a799dee13e4004e171ff9ceffd0ab83e3edbb1
SHA512 0b54112dc5130cbb51b0ffba35d8b6af2b7535c41f58caa978389ad308ea44716b3d8b16acc1f7bac7fa371227b91ced858c8354b39dae3a489e4c9f087fa87e
TLSH
T1E671E89D196FB0A0DBAFCE3185D9599FF63407F4A2835EA3B3E2C0B8576B7041014054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e32f5a3335f1ff7f6cfe10a05236cdd9da25c5d82f0be4373c74c08e1c5c83b1
MD5 f5c9fb6b8d49aab56ae89b4b8d5580b3
SHA1 da7c74ce50447b7908aa6ae9d192a16472fe1dba
SHA512 e1a2dbda6b45607298c61cc20783d5dc18589890c2f84a2cf874846422a4ea1fab9842ed87eb4d9101012ee39b0d3917aceda12642b4f4283396fb258c987cd0
TLSH
T14961A68D586FB0A4DBAFCE3086D9A95FF9780BF0A6835E63B3D6C4B8672B7145014054
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 340B
SHA256 3b2f1382f7d4bbda7d50f1911860084f5fa6df0653f88e8529ef50e02c18a014
MD5 2f48b321d1a9fdb14039eb39f4b2ce6c
SHA1 3e1c28c65f8faa7e98e412fdd47313dc911980c5
SHA512 1358a6f6ba82d5ce67fb245ef13574dd80545f5658d5c09eed4c2a74eba7b63100d1ae553b430ca3e7041557c937c784fec408e33629d1bfbddacc7c2447fcd3
TLSH
T147E026D4A4CAC13F652838C325245B08CBC03662DBD1AE271710CCCC7A0F001B6A37D6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 073ef875b748bfaa79a55678cf75ef7172b203b05f5f158c444fd48628b21841
MD5 957bcada791602469a46ed7f82a77a8a
SHA1 6d9753a8e1d33668fdcd001631c27dfbc7f42f55
SHA512 89b532c006dae3f5bac8ad44183eedd23f13a26b19c027097684ac456a698ca4311beff4f7352e3e87d2d3b9ef7c2ab3f45c8d30266e904fcbbe34e9f34dd39f
TLSH
T1CBE086944CCAC12D946868E38769530CCBD17557A7947F1E270FC9C4750A6C9A2962D0
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 a0453ad8bf39b06950639d546c87d9bf26aa818b6970190cd512ea2fa32a6844
MD5 d29389e6c77ebccce46994781aa594fa
SHA1 7b0948ba640dd43a17ba65f4f184ad8dfb2196f2
SHA512 e181ad9c7ab0c98eb8f314560a3833c166b0eb78f4b59ec6723296fea149e78d71cffe2ff8a8a7bea78a482a1474d37659672b9654f15139db20f1ddbb402242
SSDEEP 96:6BCxq1dSzVv8qu4Jy9emzk6vr/5kdvkvzVq:wazd/u4JycmzrzR1k
TLSH
T15392F7A76E783842DB442D36202D1A399D37C29C5FB79CA97058C0617C78B93D03DAAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 3b51c4abd903db2e336d1121aef17953a988f6592e51c1a392cd1fbbdb0bdb31
MD5 874881a3817292110afc82e8f39f40e9
SHA1 1638f5b492cf1edb991c023589dcd7c1457c1a51
SHA512 f5e8eb16e60f4f885bf5235b1d48c71aaa619cccf4e8496daa3aba90a2c33a77f57df33750a60e9756bcb6f4ba84079771a2e3139e3f916541729947c25c1ece
SSDEEP 96:dgzVFa5IU+bGz83uy3+u4tgp4DLjGQLBze9z3lqzVjBYHjBHMsDEuspU0wbtqrOA:a32f+G83uy3Ct7XBBKBGoH7DXspU3if
TLSH
T18C14401E5F342311CDBD417668EB45B35D7CF03FCB526ADA686114B4CEE2B52A02C8AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 69634149eb0ee452a8419aa936980b1f3cb1e6b9f567ab67c89fcbca6826a886
MD5 b39fdf6f0ab4444f341031155e2a112f
SHA1 2b4a29b99b1c5c5d95a49e988d192bdfd71e1ddd
SHA512 6cb7dd4831e2b88ca441e6222325230320c71b188374db01408daca3e320fe76f82243e0d1ac5679e5d145203b7de6ac7951f881f1d22c25808c1708cc9a3f98
TLSH
T174E026E084CDC12F621C20CF823B7F0CC7B03617E7847F061B19E984B80E004A7A22C6
MD5 SHA1 SHA512 TLSH

Submit Download

44bbc297-f97b-43f1-a817-4b29cd430ccf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\44bbc297-f97b-43f1-a817-4b29cd430ccf.tmp
Size 3KB
SHA256 e0286b58de3fde37da246f7525f63e7339ad70a17bb28008140841195dd11b9c
MD5 bde98cee286e5d8190e2b83a5e645b47
SHA1 27ea558f98a729661ff0fb517bf9ebb475963f82
SHA512 a0c9df3328b3d46751b42a1b32aceefd26b28526bf6a3f1c0fc03aea65091249d2a2923774ba14dbbd49f8459a5faafbbb1ca14cbb16be885518f66f00eb4e08
TLSH
T1F171BEF7C7E4C22DD91196F4A6187E1BDE2D0D24836C3C6AC9D4AE5B93E2471E240A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 decf9c133c29b5d3c0699210a2b6b20d174a796b313dbb594b713297859f252f
MD5 23ae7bf57779d736406e04d29f848b02
SHA1 7c0d2f957fb602e452d3e7e2a8c6095968f33f5d
SHA512 1929d9d868b0cbf4fa166cc4649021cab62fe42c3c882d9b51f0b5a9405f3d1f2de5871bfa1b19b62395fdaa3c90f04db2fbea2c72ba4e77212d3ace1d0855d9
SSDEEP 96:iSeMatUaAK4F4ilWldWZbwnxpWneDqoj4iUeTSxp:iSLaSaHDldGwnxU
TLSH
T11092D60E0F601160C1D64FB5D5F0856F1F7C002DC793B5B9A92854B2ED39B8AF5462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 ab2583142547f03b9c71d5346dbc6a55751019286b2e2115377a87db305422df
MD5 d1e3b6094836204e5653dc7d39757247
SHA1 5808674cc8a6a5fde2448088ee4a64acf6b4c8d0
SHA512 2323c7d56bf0626e7f370df6b7c94fd55dbc681168f745f0c7b841f0c8d9cd405e4634d5cde9e85805deb69cbb46b2ed008b70aaaabf60f6c6fd6a8b44ab80d4
SSDEEP 96:i/IEumQv8m1ccnvS6x4IofVgPiMrLU1o2IQQ5Tf39USUA2dOQ79TnFIrXyUXRoZn:i/IEumQv8m1ccnvS6xgli2oP2tZXm78Z
TLSH
T13FF2EFF702239105E89445F0E0006B8EEF16045B47F6B2FCB6C15BF3E2A61E2B6A8756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 3a3677257227f5531a385188672cffab7d84ec2148f9c0033f3ffcd4a5319fe2
MD5 d0e3bcf3e86415977f6e44f8062e543f
SHA1 fd12e1ed7f2b8680d3833ee4376dabade253910f
SHA512 54bb04a45af5aa6fa437e7fb6e398d26cbe86607ed6f781dfa0b5c9b808b147c39a7e60e8e1b64bca26c2d5b033a565722fe648fba8c852b3e4276c97abcedae
TLSH
T13101479BC5FBF07F20BD887A1D44BC052639A872099460E9EA93827DB1C20F76B00931
MD5 SHA1 SHA512 TLSH

Submit Download

b04dd4ee-ee9d-41e0-97c0-c3aa4b2e065b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b04dd4ee-ee9d-41e0-97c0-c3aa4b2e065b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 35bae45d1ce2819e113f73e860bbaab8f1966720c5f489dd15bc74b9169228a4
MD5 6e91107e204d3518511781b5e405deaa
SHA1 b47cbf0d06d91c5f9719ee8921a039ca090c86d6
SHA512 1ecc7de9d27e1f644c25721203854a966fcdddef67decb6b450acc37ff0550f520152eda1b36c3a9fef022f5e0c2548d9a3ee36d02cd2bfab8e27f85fee4c0ca
TLSH
T16FE086A049CAC23D602931C30765870CEBE4B527D7D97E562F5ACAD4754BA44B1A21C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 d8f3be09ef61f9ab3c692465e06637e9379a6e6e3427fed053d492176658f852
MD5 169b0ad5e0264931c4ca3e4bfff7b407
SHA1 a849da490374957c90acb6a629555d23207c4d18
SHA512 3890886b1fc5ddc6632165c071ae5721e6f18806e2613b4aad7ebc07a90c6f03a61de20ad45f883b52bd02037af964da0c3533f5e9e777e03a5686b02d1e5850
TLSH
T14EB012207704520ACBCCB8310B4047D15310E0011040099B4C79EF301DDC29E7F40E94
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 36249a206ea7b384eb9ef30b069e1b1524a0afcc9f57e49c31ceddbb457a8aec
MD5 2a12e4ea6a38efbe7f185157e9379f90
SHA1 2f99c158c4ff0c5be7d9b44bcbf144be5fcb8854
SHA512 0639fe8ae38c9479b6d243b1f9bd0b97c6550d428c825d1de460a628845fddb1270753eac17af423056ce019fdaaaf8799034c1d6c939a51a607434cd490a01c
TLSH
T123E0DFB016C9C33AA18B30CB0226E708C3A2B512E7D5AE262B0DD684B30F640B287290
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 2a03ae5e2ff5b3a4ed0d371ebbc7d8b5243e3f97c555702ba0cc5630059ee6cf
MD5 f0c22509f78988abffc531680ee92855
SHA1 6b8f037d1337623a38301f8466ab04aa0c2b3000
SHA512 a6220201ac9e1a6eaa68762644ab9ff2ac6a4601c9a90f49641d279d9e2a8133fd2370b090bb865ad741ab43e518b2d39bcb5f74468e6fa2507fec5f3bc10da7
TLSH
T1C1E04FF045CDC239510870C60B659758C7A4B9179795BE6A570CC484B50A544B7A66C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 a7128bad1f9d25826495a795b0edd2918c4df8cac2dfe090047016ae77c3e63d
MD5 ac0ab7dc69a2136f736f072f24bb0584
SHA1 394d517ce83a5d7d4ca8998ffe53c1933c7f1741
SHA512 496bf954f2860a97de5db7e2ed4f3e93a5515d0a319c018f248d6b91812f86b05e23c56331ed1545984512a2a0631100d99e552e8bbb1eea38b86a2ea12a9794
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXwPjCHd7ng:OtfFvpopPxrB4RhfwrC97g
TLSH
T104C2411431BA021038FE690C81B6876F464232B33158EA6B7FBD55B69E6BF045DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8bba452b794dc5f640e2157708e445e461e8a74f3d4f1e883ddb052d773a4683
MD5 663470024231b719f9e3fb31265a22fa
SHA1 7a604981faefe82ac515ce4ee0979709724c0098
SHA512 0e4b278d526f97fb14441ab12b25731e9ef6f9e4a46c46f750d8d0f769eaefd883ed4114f3e750808fea04cb70d7661b3d6330c02f9b10414d9eb166bec84829
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXwPjF:OtfFvpopPxrB4RhfwrF
TLSH
T1C2B2461471BA021138FE690C81B5971F464232B33259EB2B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 9313a4d3cad3587b6fc75dca21a092c631091be1048655869b944755b5dffcb8
MD5 4ee9dbbc10c71f55ed58c087a4c05679
SHA1 91af4fcdc341f977219b389ce0cacf5c12ef3325
SHA512 3136a31822e25d00769439447f3c5d3b0914ca63ad7c63c9201b921e561bd875de19c6738268b157943081f3f4c058d76adb321228c860c3ef1872cc50dc10b1
SSDEEP 192:P+xWiizBO3fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mx4efQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T18324640A7B747001EDE6D9725CB080771E3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 d0932bf3afc88eae53e7a6aac178885694b39b9c1c15feb7ad6a4ad8e71e357b
MD5 1051d294cf933364823a9033695007b9
SHA1 054a8d603679490c30eb3acd64b4cafcb9a63db3
SHA512 a5513ad5e814e291c9f39256fe7da0feeebcb78a7e00ba349eacdc0bdfe80ceab0a00e6aa6ef007486ae8536a61d911f5dfe7a498b57c3dce7f3acf89f448a69
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBgMOqVCQbIGOqVCuW:DEtSyGhp22iSjzVFb1zVQ
TLSH
T1A452319BED78219ADDE50770D5C002D97D39943D8EC6DE2254D980552EB8B10A31F54E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cad412b0-71ac-4f5a-8abe-946e80ed88e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cad412b0-71ac-4f5a-8abe-946e80ed88e6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d2b0ae78-5a76-47b3-a448-236f962cf3ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2b0ae78-5a76-47b3-a448-236f962cf3ec.tmp
Size 32KB
SHA256 81a59063470f7a0973b343f14e682f3b3160306aacc684651d012de9049f33e7
MD5 f142770b1d67dd8cd1e76d5192dd995a
SHA1 f959a0f48f9e5455d08f34da6eb985bdf06d8c16
SHA512 cc0ba6c9c4fa0b596b2ecf7890685fe11533c238b2e6b764d31337673e7eb14b2f643cb17ea1212eecc402e1bd82db62a9ef24906fd916351c3d2d8a988ba8d4
SSDEEP 768:0RyktjU7pLuLbvnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvwLWLlMC7fnro4:0RyktjYEbvnWvDBltu1jaywLWLywf0LE
TLSH
T11BE2EB3F780CCB7E4FC04E9DDD6A7F8B6DA802CB9598894047FA945C02C67EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f666b883-e714-4b3f-a26f-0e00cab11c89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f666b883-e714-4b3f-a26f-0e00cab11c89.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 a4e6ed1e4275bb7984a2dc9aafd55e111228596fdfe902988daaa17256eea742
MD5 0d9ea72ad05b6583c433576c2dfc3c5e
SHA1 082466050b02e314bbd5dd47e00b0b626115dafb
SHA512 3a6cec8f76f17d6b695c99b7e66d8489497f1eafe5ac5f0f6f5c6bb24e29839f5d36bc5040c23fc329d20763c3a63edc73f6f02bb1cba6ed73a92e2237e1e026
TLSH
T1C35194C0A3E95454BECAA941C11E5613A5E17F76220EDDB6273E84F44F4CC280F6FE61
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 f17fa8b7ab13a63813f8ae389b81c46a4651413e05ace377e43a8e23dba20396
MD5 0de034e79bf1a892d02425f8632985d5
SHA1 49f865cac292caafd73590c517c7f649ac219b02
SHA512 1e1888786b8a256b875637947bfcbce12fad40a6c2b8693b4b0f148dc2a9229d48c80017a494b5cbdcca52d214c074737d2f3c60c640f2ea014ba8d07d168003
SSDEEP 192:42ODTAs7lrNUQ2s5WPIBDvQQIIIHb7MIMFQYcYif:aDsshR2swgQQIIIHb7MIMWBRf
TLSH
T14F52833D2A092B33C15E1FF7176A4F941BD8888502F2225D72A1584F9DF6BD78AC52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 e8d3ef20753edf8fc9644c450f78a7d8035b90cc5ca1b80fe87a2b8d678c5064
MD5 2f76b704bfa743627cc99aaf1338fbf8
SHA1 959271535f100be8ebd3bca2ba6d84758ba1d8a7
SHA512 b325e9f549c530cac792568e7299a9d44ff34bac21cdc251a4035215b848de61b4795ddd817aa9f3fec7aca0dcb4fc5cc71757c5ccaeaa68785d227c1007229b
TLSH
T14FE08690ADD9C12EB01860C7457563C8D7916A17EB946E5E2F0DC48CB50A148F6961C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e95270795338859cb7dac08e5d81accc1814a9aa45f45d6b848b6285d8fc4ccf
MD5 17cbf99bbc6be452e6b3274030e04cf1
SHA1 535118a6dae1c18e1b0a6c262c489c29bfded53a
SHA512 6562ed025d0bfdfcef1c8e28dc7d53fbf879faeb9fb12335e8b6239ea39a3082ad609668beddd71c0d5fd2ddf13e473e932c61278bc6fd73994cb6c753046c62
TLSH
T1AD21BF56F320C149E14E863DA06BA7351378E8529FFCEC0F45B964356E72A001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 e674fb99f4c1bc51ece33f7fb6eacd64570f391b27716c22bb17a06a35e5d695
MD5 1d87f6f658f8d4dd4f83ec2b21266700
SHA1 c86a94371fe4d827714163b9c8a4cd43946c8a09
SHA512 9357678e9b3735becfdf9afd37818359fc7c4d7058e01a05a0c6cb9dec25f27f76d61dd85b3c5af218a76edf38afd8488ecec3517a583da54ab03327f793e1d1
TLSH
T198E02690ACC8C22FA02820C34175A34883913D13EB903F0E1F0DCD88B90B149B68A1C1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 814aad402144022868bcb220a196ab98620f5d10fdc92d83b72e383fc368ee08
MD5 f2d3af22d1f28dd3e6128ce2f7026d64
SHA1 8a9fffba969196d2fb65b7e38fe1762814e47a47
SHA512 62935e96524b4954dffab98caf9b12d03b8b0c24cf61ec515da043c853ef845b763a73baeb1c85a0a9acd588e1c2342e1f6140d86d0627bd67e191389f3fbd75
SSDEEP 3:MsEllllkEthXllkl2zEflG:/M/xT02zh
TLSH
T1164404047FC0040DFD0010305053C3D01370D4104511574334D1C4735DC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 3d7956d92ab078b844fa534561444371409295f59df03edfbc937fe0451f75e9
MD5 89a19f788acadf478ef59cf800240546
SHA1 70033c1c42113d982748a95bf52a3b96b35cdc2d
SHA512 c334f8d59eb6abc8a3fe3f1a0dd0e4cd3f0716f850c44241563d1aed158de8bf546044854ddf39479fe53e7a21f0b3bd89044f6b5df59c8729b82d9478552722
SSDEEP 384:nhiF3QkUSvYDsNd8TUNTUlI4i5mgh9BKzfMBaLXJIhMzeASZLArkOr+S3zf2IBM/:IFJwswgcOZBEjtSWrkOr++zf5QUeLf
TLSH
T165E20775D895DEEB98E6DAC4A649B642EDE00133C59C4A8CE6F8BD3C208F1FC1707916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 e0de35dd2b7ad590bfa57e9e50989c9792bb869f54c6d98fd01f0f3b0d496230
MD5 1dbb49a1851b0b3696418439ec8ca5d4
SHA1 f53b30055fa86cb24a4fb73808742c0aaffb030e
SHA512 892f9a3bd0b09a7a619cc52029f600117704ed05eff46f81f8334a1c2f0cdf153faef0c625177923ebe371860bee1d927c2de118099114e2a9a07b310bbf9215
SSDEEP 3:MsEllllkEthXllkl2zEflWc:/M/xT02zu
TLSH
T1BD4404057FC0050DD501103040D1C3501370D4104711574334D347737DCF7401C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a4ebf079-f31e-4731-ab7d-45baec6610c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4ebf079-f31e-4731-ab7d-45baec6610c9.tmp
Size 26KB
SHA256 1381534b003ba65e9f7ecd8830c4a5cddd72cecc0d89eb46b08cf9205c1fe4d7
MD5 55e4cdf7a91439e47a3b4f7ca006b55f
SHA1 ccd64773832c9870fa5c0f62eaa6d5cb37a7b788
SHA512 b2b4721b1e5f55d47bc9ee66c27aa503a92feff591de34e5d3c085ec048f6f9d1a93f7083520ec04f47a7468f6e93b4c919393262e65a7711aaa9e8e5bb51a01
SSDEEP 384:nhiFzQkUSvYR3sNd8TUNTUlI4i5mgOzBKzfMBaLXJIhMu2IBMtUxgL/7IzMIIlx:IFdc3swgcVZBEju5QUeLf
TLSH
T11FC24A35E899DEBBDCEB8B94A74A3643DEE04163C9D88ED4EAC95D1C00871DD270B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a97978de-b328-4503-85c4-7611b9e75c36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a97978de-b328-4503-85c4-7611b9e75c36.tmp
Size 31KB
SHA256 da83d9be4fe5b5a09ce147a684a824fd368ccb85d90bc7678f4dcedc6903bf92
MD5 1141388412e65226d4eebc07661ba3e7
SHA1 866d6fe27a850f2ca56b69e689b3322d6c889aa3
SHA512 664d2004b1fb7f76fac91c5d2a34442b20c1e3fb6ea3a24302cceeb1ceaa88249125bcbe15fb8a2d469bd62aed3b6d335fbe23a32459a08712435348ada8c59e
SSDEEP 384:nhiF3QkUSvYDsNd8TUNTUlI4i5mghUBKzfMBaLXJIhMzeASZLArkOr+S3zf2IBM/:IFJwswgcrZBEjtSWrkOr++zf5QUeLf
TLSH
T135E21775D895DEEB98E6DAC4A649B642EDE00133C59C4A8CE6F8BD3C208F1FC1707916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d30abf67-ef62-4d0b-8062-6ccffcf5693f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d30abf67-ef62-4d0b-8062-6ccffcf5693f.tmp
Size 25KB
SHA256 b62de83d9913328e3105f3d9d9d5d3bb94802981bb23012b80d5775b7afe7d45
MD5 5d5396c0a0875a84d19183da97dda05d
SHA1 38851aaa03d93b09249518e013682aab333b4b6c
SHA512 815ffb4e37ba6bba701197ca36e258ccb471e4679ca992dc6d451dcbde2837869fc9c668f433402a26c12751c29764d54efd166643898bcf3d5c100748bcc7b2
SSDEEP 384:nGiFiZcI63sNp8TUNTUlIm25mg54nKzfMBaLXJmG7O6R2FeoCrgL/7IzNo2:tFQ634wgSDvBEwG7TRn5R
TLSH
T1E2C24B36EC94CABBECFB8F99A74A7A07DEE0416385DC4AC0EAD85D1D008759D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 c50b297ac199b7fac63e2d19d90a5ac224c5c9e47fa941772575528b1597e9e3
MD5 5cd5c0ce4033c7750da5b1fce2619e44
SHA1 a57be843ed84f87308803a25373094d62b705e21
SHA512 9bf30fd6902b8eaba6a2cc1f971d5754495e8aa5a5b8a18c7514c7997136cb94090d69bebca38550b9653f49b16b91a96d9e915eefde00a426bcc94b526d910a
SSDEEP 48:F8WplWqp/IHRH34kWqB1kQnjhHmr6ITmUY:mWWKIHRHIbKkQndHmLy
TLSH
T13E42896EDA2CA9A2FEE10B3ED7D1E0127B36A60EC2E4D5F1095B905747C440405DB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b2c3db9a6ce97dcef15e109f38d273ff1adebcacc03736a843b9936f068976fa
MD5 77d67792cdc36712295c01dc65daf694
SHA1 8ea053173c03510070504890596e25b468bc4bc6
SHA512 05267c2f308f5a671b9c1b0cb2bb417e83de125f1c2156dddec343e1e8e0ba0c5bdbbc0d9c2be628ebb55b7c15334bb1045c1ef3b33b917ea9a7f533417b2abb
TLSH
T1B3415B68B6ED1148B3B76E5A9FF3A96D48BE7C372E06D56D10010E4F0A22B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 0fdd169ee849e068034641d0cd83c1cd725965ab5ba49392d80c18e3b308d489
MD5 9ef950529466d77247bed92b654fc523
SHA1 2ca41f669f78e4cae6d6f00e3aa9ebed9bd26936
SHA512 b7cd42f022a6c53edb847641000434b45902f4ceff46e38897ff90994e1a9aabb790e58c82a7a39f1b8026a52598bfa72d9bc164cec669926d1cfa7fc228de7a
TLSH
T11B514D5865F91114B3B77E569BF6786E597F79332B07A09D10110F4F4A27A00CC62B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads