Analysis

  • max time kernel
    146s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/12/2024, 02:36

General

  • Target
    https://goto.now/kSMfT
  • Sample241217-c3t69synep
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://goto.now/kSMfT
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9eb5a46f8,0x7ff9eb5a4708,0x7ff9eb5a4718
      2⤵
        PID:3244
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
        2⤵
          PID:2980
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1796
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
          2⤵
            PID:3384
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
            2⤵
              PID:540
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
              2⤵
                PID:1648
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
                2⤵
                  PID:4512
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
                  2⤵
                    PID:3832
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:3320
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
                    2⤵
                      PID:4776
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
                      2⤵
                        PID:2288
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
                        2⤵
                          PID:4700
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4128 /prefetch:1
                          2⤵
                            PID:380
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1812 /prefetch:1
                            2⤵
                              PID:1812
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
                              2⤵
                                PID:2992
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
                                2⤵
                                  PID:4360
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,16722031193085994049,14132145985770261280,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1152 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:3924
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:4712
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:4268

                                  Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 152B
                                        • SHA256 f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32
                                        • MD5 SHA1 SHA512

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 152B
                                        • SHA256 b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841
                                        • MD5 SHA1 SHA512

                                        f_000001

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
                                        • Size 21KB
                                        • SHA256 412088c946e99d58ae72897699f2b896b47551ebaf09969be2a16f223d3d8c73
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000002

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
                                        • Size 23KB
                                        • SHA256 ab25f94f51f31d69f3a7ff1959eafe9ddf3fad8e983fa216c91795bae573e13a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000003

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
                                        • Size 44KB
                                        • SHA256 2897ce935bf259f030e1c67dc25840da8793d4b58bc5fc8d5450525490d62590
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000004

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
                                        • Size 43KB
                                        • SHA256 1b455a005fd6d5dc5d8239834e08a68437761ad748ae521df0504c7b2f134907
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000005

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
                                        • Size 103KB
                                        • SHA256 bf97efc6d7605f65d682f61770fbce0a8bd66b68dac2fb084ec5ce28907fbbdb
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000006

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
                                        • Size 47KB
                                        • SHA256 c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000007

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
                                        • Size 18KB
                                        • SHA256 94e5c823e72e71cc20f4bfa29b0434f2260040965d9d066c0e7cb5dc99ffd6c3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000008

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
                                        • Size 29KB
                                        • SHA256 f696dbf8cecfefca50ea3fa5cf29f5ba98c37e723bbcd5c6381269e08be54e0f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00000a

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
                                        • Size 42KB
                                        • SHA256 d70dec47837e50799c46d9b8925767d32f65adda04ec015be6af92bd4caffec4
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00000b

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
                                        • Size 59KB
                                        • SHA256 a746ba588555b584fe98e42ac1a2dfbb92c2831b54c263f51fe91d124b9214d7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00000c

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
                                        • Size 101KB
                                        • SHA256 bca48aa06fd698b8be08eebf2ce6b4c70f0297bb7197588e7cd8613a0a56bfc3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00000d

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
                                        • Size 20KB
                                        • SHA256 3eb3416904e2d4354a4760874b015d4b7ad0f4f231889eb2e80a7c2ba79c22b9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00000f

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
                                        • Size 30KB
                                        • SHA256 67527b8f186d6633fff48843dc2e9bd75bb07f227f7d0d940f7c996b0a3c256f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000010

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
                                        • Size 21KB
                                        • SHA256 18be0d4d904d21a678cec9664fdd316e0392f63bcfd166985ffa25f551b20955
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000011

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
                                        • Size 18KB
                                        • SHA256 395dcacf42b6afe051edd3ddd8eae68dbd1c58f0b6ff345624f366861b60e941
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000012

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
                                        • Size 20KB
                                        • SHA256 a2d804e54d655a53053419498366fcc7e4a9e485fcc872795b22b31c6b889720
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000013

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
                                        • Size 19KB
                                        • SHA256 ca877e4461a5d3d6e0878bbd7f0e8673979acb15bbf59d5c27096b78b4490e3e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000014

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
                                        • Size 68KB
                                        • SHA256 d65eb75c2f3cb2b808687bb9667615029ba71a52d6261cc922a239a7df8a8d28
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000015

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
                                        • Size 43KB
                                        • SHA256 45cba5e72866d28036c2628074b9e0cb24ec0e7fe08f1c0af1cfe0b42179e264
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000016

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016
                                        • Size 75KB
                                        • SHA256 aad6b6bb918d96aa219dcb54ff8a8a9587a9abbe51b4ee131fdb1a82f028745b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000017

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
                                        • Size 88KB
                                        • SHA256 9442cba9804cbfce11010881cda395e6df369f778358e50536bc183c926370d7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000019

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
                                        • Size 42KB
                                        • SHA256 956e1fd407995ff1ecca3bf42ca0d01086edc7eb6a965e1d9d4a48f197a8bd30
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00001a

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
                                        • Size 39KB
                                        • SHA256 fa802b853572d8a40ee939940d0cd9562ea8f5954c0522b0777e01fcb546c3c8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00001c

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
                                        • Size 66KB
                                        • SHA256 9e064ecdf692f31b14ab3295b587b7145d60e4e440562c519cee240b6584a36c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00001d

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
                                        • Size 23KB
                                        • SHA256 746a2e17f6b6918d830fe68df4a46a7c48da613cd34fff111da98c451b002f6c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00001e

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
                                        • Size 84KB
                                        • SHA256 1b423c3db9bb2075b747629a6fc87424c8987d255d9751a2dbc07e8cc735c447
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00001f

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f
                                        • Size 73KB
                                        • SHA256 5f0cc67a5b52010ddb8f692be354c013e8d3abf50309ec057d4c033e7489fdaf
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000020

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020
                                        • Size 172KB
                                        • SHA256 b9785973ff386fb128bb3aec553e7720e59c321601014ab2af832fbccb1d0d72
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000021

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021
                                        • Size 40KB
                                        • SHA256 e73ceb9052ea848498daacd8a9fff37846cce47324b38df12e9dcf0bf25d2e3b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000022

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
                                        • Size 42KB
                                        • SHA256 e9ca7a8587bb3674824a28a8a80836e3483dc3bbe97c658bf7c984c5b424920a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000023

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023
                                        • Size 34KB
                                        • SHA256 825185060fbdd918bd11110d1cecd83651bedd967ab5fd626bf3d6240e48cb25
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000024

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024
                                        • Size 19KB
                                        • SHA256 1f259a190060434d2432dbe010a01df5d2c048f3296dc47c8a8e87e939f178c0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000025

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025
                                        • Size 19KB
                                        • SHA256 7ff0eb6c558832548e315080d0937798de8a901969b546ce38a67c540cd13e8f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000026

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026
                                        • Size 19KB
                                        • SHA256 d0bd6c5e771ea0f4bbdd92a6d1442f80d07bd78fa3b083057ae758b47880e647
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000027

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027
                                        • Size 30KB
                                        • SHA256 5b652f4cca97e188c71619ee4dc3fa0d7b8ba21600bb2e94a752dfe3dd551c72
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000028

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
                                        • Size 33KB
                                        • SHA256 163a1d0890a0d969efa7cd1e87eaff0247b3b2f407aeb8a135a5bedcb759a1b0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000029

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029
                                        • Size 47KB
                                        • SHA256 20a4f78d219e6a8195259c45d3769c7940e909659d56e872a0a73e7bb0277251
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00002b

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b
                                        • Size 43KB
                                        • SHA256 f9f4cf980d54559d0955ac804f19729a074f6ed9f5e50b45869ad3b569a5e371
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00002d

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d
                                        • Size 66KB
                                        • SHA256 06cf153398fcd6cf95c4a803e2fbe86712f19312d3063a7cd1ff612b7cecc69b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00002e

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e
                                        • Size 24KB
                                        • SHA256 fa71bd89c5b67e3f5de358c507307692aa82bac338e9e46319b31a945acd7493
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00002f

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f
                                        • Size 38KB
                                        • SHA256 5fe47b9e1254450910510d5d1ab8c76204e73f29359ff4dd21679a9ef22f8525
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_00003a

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a
                                        • Size 29KB
                                        • SHA256 0d0df9558a11e84ec622a0d8a5914c0e5af6e2048e9fd3d827c6fc0bbede7450
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000041

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041
                                        • Size 30KB
                                        • SHA256 57b9a684f743cf229723c1a5e9936d930cf48c3b5056c16c09cdd71ee6fe803d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        f_000044

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044
                                        • Size 89KB
                                        • SHA256 9cb8398ca06946845efba82e74b30ee29c2ceeb34877ff67186e01e41611e270
                                        • MD5 SHA1 SHA512 SSDEEP

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 4KB
                                        • SHA256 ea62eb1240584d70711e982c5801874eb7fb6ac002a1c70763635868257b6182
                                        • MD5 SHA1 SHA512 SSDEEP

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 2KB
                                        • SHA256 8d41e2724ad1196e0cede2ca960503952da62f941c9daeae20619889ff0973b3
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 4KB
                                        • SHA256 610252b7118a83f592a069c31c1b4fe6779faf263e2567970a524c6af3f6ddb4
                                        • MD5 SHA1 SHA512 SSDEEP

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 2KB
                                        • SHA256 d47fce7d73d6e5821763cae23d3e1aaf16992e930171a49585cdf31270a69b48
                                        • MD5 SHA1 SHA512

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                        • Size 963B
                                        • SHA256 5828ccd19a5016a757a4773be028df557e98a05e7dcb91bd22a278f9fe232f1c
                                        • MD5 SHA1 SHA512

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                        • Size 890B
                                        • SHA256 4f832d8c623bd1de6859e1d8aebd69bbc89edc66dc11e0a95eccbb58d5279176
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 5KB
                                        • SHA256 3416beef4c32e49c04a7859551dcd657c741edfd4d08a2b600a583f5a9d62bba
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 6KB
                                        • SHA256 4883df12cb1033d4b7041a1f09f1c86762214d34de5733727e322d0958c5bee6
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 6KB
                                        • SHA256 00523df65dca5c528577258d56551346ba688e613dc000594ab3fcc0422de437
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 6KB
                                        • SHA256 ff3046eb04b0be438d5c20840164d55a12eb27af2695bdbda4fbcd221d9b2ada
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 6KB
                                        • SHA256 94fadab3ba87651cb06eaefaa690b2e86776255f2f2067878935e3108122e5ba
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 6KB
                                        • SHA256 b6fbb9032143a775b567f77ba5a7d742785acabb0a2e61c5b7144440af29a843
                                        • MD5 SHA1 SHA512 SSDEEP

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 4d911cc75449ea4355f9f97a12853e39cdd8ec9409bc21bdbccedf4af97d13f8
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 14d1cb4a5d1eb1b7044f310ff33936d971706020a55e3fead93ff59fffd54772
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 fa8664c396fe4e46fd7b1280add9dbb6d41fb1c362406908c542f9c1a0883c74
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 44e86ff3aaa271a0f70f3cc86970b1406a3fa471f860cdaaccc1ed61901e7320
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 5f5ba0b514a316ad47649868600e6f41a18eccb348da89737aa98e771e7a98fe
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 cef337bf295b554ccde999cc8f41033ff6e22882eb483d2b9a1154774d03b293
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 8b6564ea1ad6612f80facbf7c640a24984b38b5656a0ab5b9b9a944d5d7ff103
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 856acf29708b7e34344e0599ce2cff3ad828b59b7b33218df25bb3e7ea0146b3
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                        • Size 1KB
                                        • SHA256 3043011e7875a1c81fb02e49977cfbf38adc05921a436d4c4effee519088fc9d
                                        • MD5 SHA1 SHA512

                                        TransportSecurity~RFe57fe17.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fe17.TMP
                                        • Size 1KB
                                        • SHA256 0f49b2a2a20f2a7aec4fc4f4f54f905085854cd6ffa61730f21554ad593717aa
                                        • MD5 SHA1 SHA512

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                        • MD5 SHA1 SHA512

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 10KB
                                        • SHA256 5e6f5bdfb0b145dcde7b0d347f94d88d48f7893c387a7f959b5a06d4839d8467
                                        • MD5 SHA1 SHA512 SSDEEP