ae3a42117e6defadc091c7667cbbe8f28b413d46a9ffc8c8db52cd04ca3e7bb3

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 20:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 338KB
Sample260628-zesd4aev5j
SHA256 ae3a42117e6defadc091c7667cbbe8f28b413d46a9ffc8c8db52cd04ca3e7bb3
MD5 b3b99c217f4c4f8e208241e45724726c
SHA1 0fe52c21295c3e2205a25aaa7d4139af3f7d1de7
SHA512 65c3d6db6a28b6e1015a2d78ff50695dec005bb920337877f7ab1a3f11f6085625e14a4620b3ef40c6da56bdaed6941ea44423a1b3ce7a3ee2b9c3504599c8e2
SSDEEP 3072:gbKZDISLmjKwmFIULOmPmJexhy5Y5Wc2XxwUsvfJaBLmjKwmFIULOmPmJexhy5Y/:gbK9MeJgrMSoVQ
TLSH
T16574B728B116D53D9C578BA84279BE74519DC2AED582CE2CF3ACC270174B4BDE793AC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
58	4712	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4712	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271527118010869"	msedge.exe

Modifies registry class 58 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe100000003e221a6e3de3dc015ba3c1b347e3dc010fad79203e07dd0114000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{DEF2C51D-B108-4FDF-A47D-D309C38DD27F}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1384	msedge.exe
1384	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5632	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
5632	msedge.exe
5632	msedge.exe
5632	msedge.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 760	4048	msedge.exe	85
PID 4048 wrote to memory of 4712	4048	msedge.exe	86
PID 4048 wrote to memory of 4056	4048	msedge.exe	87
PID 4048 wrote to memory of 4056	4048	msedge.exe	87
PID 4048 wrote to memory of 4056	4048	msedge.exe	87
PID 4048 wrote to memory of 4004	4048	msedge.exe	88
PID 4048 wrote to memory of 4004	4048	msedge.exe	88
PID 4048 wrote to memory of 604	4048	msedge.exe	90
PID 4048 wrote to memory of 604	4048	msedge.exe	90
PID 4048 wrote to memory of 604	4048	msedge.exe	90
PID 4048 wrote to memory of 3140	4048	msedge.exe	91
PID 4048 wrote to memory of 3140	4048	msedge.exe	91
PID 4048 wrote to memory of 3140	4048	msedge.exe	91
PID 4048 wrote to memory of 2692	4048	msedge.exe	92
PID 4048 wrote to memory of 2692	4048	msedge.exe	92
PID 4048 wrote to memory of 2692	4048	msedge.exe	92
PID 4048 wrote to memory of 3272	4048	msedge.exe	93
PID 4048 wrote to memory of 3272	4048	msedge.exe	93
PID 4048 wrote to memory of 3272	4048	msedge.exe	93
PID 4048 wrote to memory of 5004	4048	msedge.exe	100
PID 4048 wrote to memory of 2636	4048	msedge.exe	99
PID 4048 wrote to memory of 5004	4048	msedge.exe	100
PID 4048 wrote to memory of 2636	4048	msedge.exe	99
PID 4048 wrote to memory of 3116	4048	msedge.exe	102
PID 4048 wrote to memory of 3648	4048	msedge.exe	106
PID 4048 wrote to memory of 3648	4048	msedge.exe	106
PID 4048 wrote to memory of 3648	4048	msedge.exe	106
PID 4048 wrote to memory of 4176	4048	msedge.exe	109
PID 4048 wrote to memory of 4884	4048	msedge.exe	110
PID 4048 wrote to memory of 4176	4048	msedge.exe	109
PID 4048 wrote to memory of 4884	4048	msedge.exe	110
PID 4048 wrote to memory of 4884	4048	msedge.exe	110
PID 4048 wrote to memory of 1576	4048	msedge.exe	111
PID 4048 wrote to memory of 548	4048	msedge.exe	112
PID 4048 wrote to memory of 548	4048	msedge.exe	112
PID 4048 wrote to memory of 548	4048	msedge.exe	112
PID 4048 wrote to memory of 2776	4048	msedge.exe	113
PID 4048 wrote to memory of 2776	4048	msedge.exe	113
PID 4048 wrote to memory of 2776	4048	msedge.exe	113
PID 4048 wrote to memory of 1176	4048	msedge.exe	114
PID 4048 wrote to memory of 1176	4048	msedge.exe	114
PID 4048 wrote to memory of 1176	4048	msedge.exe	114
PID 4048 wrote to memory of 4756	4048	msedge.exe	115
PID 4048 wrote to memory of 4756	4048	msedge.exe	115
PID 4048 wrote to memory of 4756	4048	msedge.exe	115
PID 4048 wrote to memory of 4312	4048	msedge.exe	116
PID 4048 wrote to memory of 4312	4048	msedge.exe	116
PID 4048 wrote to memory of 4312	4048	msedge.exe	116
PID 4048 wrote to memory of 2776	4048	msedge.exe	117
PID 4048 wrote to memory of 2776	4048	msedge.exe	117
PID 4048 wrote to memory of 2776	4048	msedge.exe	117
PID 4048 wrote to memory of 5528	4048	msedge.exe	118
PID 4048 wrote to memory of 5528	4048	msedge.exe	118
PID 4048 wrote to memory of 5632	4048	msedge.exe	119
PID 4048 wrote to memory of 6132	4048	msedge.exe	122
PID 4048 wrote to memory of 6140	4048	msedge.exe	123
PID 4048 wrote to memory of 4792	4048	msedge.exe	124
PID 4048 wrote to memory of 5784	4048	msedge.exe	126
PID 4048 wrote to memory of 5784	4048	msedge.exe	126
PID 4048 wrote to memory of 1384	4048	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff92dec188,0x7fff92dec194,0x7fff92dec1a0
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,6703660191246889176,10002666354371492962,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,12660272362734809263,17566379109146209495,262144 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,11081191691737856381,16317211646216879664,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,4857921289201940686,744493424427226913,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,7001661765310832126,11671856560100493118,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,3646837262206130997,7168672265365465958,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,76434424972789961,7827146652727446412,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,14772643886290098012,1162604771394919630,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,10657232434367749901,17759162492811726078,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,15792823357857729249,1987374025058628035,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,15792823357857729249,1987374025058628035,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6316,i,3789431448262155379,6027117210924428446,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,6649817754247296565,6818175586152501727,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6444,i,7597854501564019166,2838927761095327464,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6924,i,17652500311705417209,2025307575628880729,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4292,i,17780629239964375356,13036483972580016249,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6280,i,17175347557438586597,10136823735146218165,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4980,i,11059983523782371969,1799288433194246796,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6304,i,2950897121781297074,5576872217372469118,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3652,i,15300292902121393963,813524695518505436,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7292,i,14362119218644493160,4487819053029427178,2097152 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7648,i,5345824328991446324,2838997517503565721,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:8
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7636,i,6950548650688240668,9653771256846091893,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,6341044788931893955,4460398533295707070,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:8
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,17512895621582754003,2945654165280377228,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:8
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7784,i,1758165597428067705,2714389046201261384,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7356,i,8135597008181817810,17700884057589707934,524288 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,3485351701419538843,6004710945740764844,262144 --field-trial-handle=2340,i,12003942073849446872,6209336210992631764,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 96KB
SHA256 11de5a5aa3d08f69e1db14ac9c5347b7d09b8ec8fa89a4dd48a53ac13bfc3af2
MD5 601873d8a87f7b6dc6d2be569d361b63
SHA1 90ddce036c5ac461fc0e2ad6d2549625f35fcad8
SHA512 8d0aa2ed004fd07ff6c8cf0b2f96bf2addadcc481e811d3070d206a2862ebd154f857021dc0186eff184667914b6e23239b3886e18521bbe109e9c70df09ea1e
SSDEEP 3072:TY9ViJr6dK5Zi9YhM9Dic9o4EKgg3Wn41QA2kCISlb5:EeV6dmIx9lSg3c4FCIgl
TLSH
T18DA3020ABF4FE1AE46B742548AB607CE7A906241D0369997871107CEB1F78FE5C183D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 67KB
SHA256 9181129b7f21ceae21a9074758772987bc3847786152978513e297a35ff5c09d
MD5 7b79a79d550f942d8363cf61a7753d0a
SHA1 d7eb775e1c44f0b687ee5ac35e97f50c97073859
SHA512 06a9134a5a5db0162d279f0f7539386436e5627ff11bd44477ea15a53202d0a8f7494d72b0f7c4da36a4fd504b528952765ba7a3389507e14734808356cd551a
SSDEEP 1536:Ajk25m17rpXnlvVaQM+8SJzkN9Vx41p2Q4d6R+:AjkF1nVnlVaQM+HJzUphD
TLSH
T11663026F1CBD722D55DE07B96227B878FD480243FC901A8DBED702F897AA6CA51C3244
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 401KB
SHA256 38033735ff4ff2ba4762f13ed6c52ff85aeceacadb2612dbf998c5bf79ce6cbc
MD5 037c3af77fa83e73e12729e3ca855f99
SHA1 d4fe4062376213d010bd4baa93331ad18b1cbde6
SHA512 0bfc554b7b318e97a1b9d733e2c436056d4d1b3c01298e2c8cb5124aa7eeda3944bb1a4c71ef3f5578584f71bb6dc61478f56437369e11392799841089ec0a0e
SSDEEP 6144:034q4Tbu7QaXFNQgG3HdOMvUnLToAKm84XBwHwX8qFFVATEvOjHs0BkQ:034qSbu7QaXzZd44LTm4RTX8qynwmkQ
TLSH
T1A294238B514BF27DA3CA4C16F643DF60F041395E8A42E9B7DCB7C84259D0AA90F1CAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ed

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ed
Size 375KB
SHA256 431a3251deb71c9c6d19db7ece22c26583f9d8fdba96fdfbb6a5b27d4214e31f
MD5 a3e719f84f525e2c6689b3f6ac73c402
SHA1 e3e93bf2c5aa88529ea3c1e524d2350245e91515
SHA512 0816380a9e625ce2e34fef598104a90a2724096b4d627bbe790c58008eeb3c50c732aa24500caa54fdc46c7f63216533adfb46d119a74aff4ed421b9f381ddbc
SSDEEP 6144:bk02i6NJqyLQCeqg5Vici0bU4rCHA9Q9lkOmEeWxF9Mh+kLNYr7tHLh:bMNJqybeqYvxCHAmXmEevbK3Bd
TLSH
T1A4842368F4BFE4A2AE8449215E5E0D746F487EB21740540AFB7DE2BB2415C493B6F203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 b89939e383c1449e2dbc9aa66acf8c4a8e10521d9e57eb651442432b6b1db941
MD5 99eed5b8dd7cc4ff568cc6eb361e7aa9
SHA1 cbb4bd325184a632ffbde641b38ab23afe485b0d
SHA512 fd02677ab3f206a56ec551d5b0c7244f646a710d3c98ae9fba24840268e742013ac9a12bc173a254a271a607ea603a08340b33a5ec3a96e71727a41c5e980823
SSDEEP 192:1IcoY2asNgZv0xQJgdIGJM1Y5ebnnaDIV91YKWNdn+V1XhWb5sRtpLnbRPjht+tr:1IcoY2asNgZv0xQJgdIGe1Y5ebnnaDI+
TLSH
T15702BC344A825553F7DBCBF1E9D959BAB333416306E3CEE62D1194FE140A3F6C48528A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58fdd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fdd3.TMP
Size 3KB
SHA256 7eec6f5f8fa50499ce1a8526fa49010fcb7d22a711bdbd825bd5d13f3d57cd0d
MD5 2fe44bc2775080c85f569eebc6622c44
SHA1 4a9757a7018c1aacc91f8e12f3dee30808d2e8c1
SHA512 9671d4449d8bc7b5d6d29813c7a7fe8210e59756c2b1117864596652c1bea128b7a50676cff8b6fbb892b18d1de0221c1f8e19bb60bfc8ade9469642a3f6cd73
TLSH
T13C6183394B135883F32B06F0F4C2162A3573819409A79D4A3D54C9FD691DB27CCD92CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 83e771bbae8bb2fefbf5e97488e3b6ea73b410e0caab741d82a63e916fcad6cf
MD5 a39c2c2cd32e302e41c9101078fde450
SHA1 88f56464be1c5c14f4ad3ed11dedc5361daaa079
SHA512 531745220ec12f06571d6626f21ce67259dacbb754c31b4ae70334d1a092c8b13156eb6b52eed7ae57a530abb7831f7ef991571bb560c8043e7a7fdf9e0f2919
SSDEEP 192:D9zj3caGovNIB2t+BHOZ71kmt0Gzr5Jtm7HdF36eOGspcnWPGtebxx:D9zj3caGovNIB2t+BHOZ71kmt0Gzr5JZ
TLSH
T10F12ADB6C3E4826DC81162F0AF287E1BCE1D085553683D67C9E4EF8B93E2472E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 28f3f0ba1ba419dacf44f550aa3693972e5fc00afba3edf9316b9dc9f41b98ea
MD5 844470e4de0cd34a180c23db2e235561
SHA1 73708b652a54120bfefdc36166500130ae4206dc
SHA512 754c06d1a1c61f2f70c194fe6bde1cb101243222430a90d68748dcc33772822a3431cde16504da2ecdb05a2b5c7eed3044c18390447f441188448929bbf4ca73
SSDEEP 192:D9zj3caGovNIB2t+BJZ71kmt0Gzr5Jtm7HdF36eOGspckkWPGtet:D9zj3caGovNIB2t+BJZ71kmt0Gzr5Jth
TLSH
T12712AEB6C3E4866DC81162F06F287E1BCE2D085553683D67C9E4EF8B93F2472E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 bf5dae0f84a4e2a225cd8c65873b1c3ef4d122f1bca410506a133e740d4e0580
MD5 08f03f1cee26d39b04577cf6e1f11823
SHA1 c09426410944a4efd5722e140d26758138c8714c
SHA512 d1a3609cc42ade094040a5b3628076be801e49f9f387120812886d53c0d909a4c9d3e63db54f12a2f8659af7776f88a9c5779d2e2179b07dab02a4364ff6148b
TLSH
T134D023533114B0FED65C7D915175AC4FC72720211D01DDF450D0545C1D3155E171B144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58c59d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58c59d.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d2dba99484c1bb17bff07e6e7947ff077993820c5b9bb365029ed432dc7a6c5c
MD5 739b16aafa725dd76dd716bc54536341
SHA1 ad19f15cbc68a4b30cdabb5e08382be471647c52
SHA512 89dabe7fe20c89efd93fe33638bdca10ad49f614e3c9a68f9cff55d253850af82632dedac796fd602d5b009f69a7a2eb43f941b8c0261fcef3bee06e61f70bcb
SSDEEP 192:sxZwR2yM/jK1Ml8MkN/fMsXe6jdLeIdpdTHW6+WNGYHjrfVDIgrJ:sxZw8MN/fMsrjdj9HbGq9
TLSH
T14542D7166A345977CCCFD309FA45BF53D6F94572A2900E48A9FCDA0C05E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 aa4188e1a2cc366783b04d3940fb40131b4f10902bd7eed868dfb7fd6927753f
MD5 f1779d49c6a7f207170964d141a1f573
SHA1 7d1e6a6c8851b55deef4625caaf40f40df56b778
SHA512 618413e9a1d2172923d4f86a4833fdb45e756051c0be109ec82d7a42449df24918629535b66682cb85dcd0472d329d99599680e5122ad92fc95d671fe2c301f2
SSDEEP 384:sxZTnd8sm4N/fMs9jd8QPHbzw/TQ/kcyo+:srdFm4N/f95NHb+OtO
TLSH
T19F82D65366248977CCDED219B9257F63E6F85572DA900E4CA9FCCA0C04EB6ED2212C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 548d6e6046f9e753c85d1fc19312ab6e2f1017dcc3bbcd36963e7a331bd76e24
MD5 637bdf3623dd442c434e6a8fe0972d03
SHA1 9b7da6c65a0fa120f327f9fcb68f561351249e70
SHA512 07af5e391d99713284137d037e3545cf4a9f1fca2719ea98397539587edaad591434dab7e3ad2c0176740e047a3857a6c9e602ea60153d98f8a07936972907d7
SSDEEP 384:sxZTni8qlm4N/fMs9MdFZ1y8Hbzw/dU/kcyo+:sriLlm4N/f9MFfHb+YtO
TLSH
T10D92E95365245977CCDFD219B9227F63E6F85472DA900E4CA9FCCA0C04EBAED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 f484e8418be93af1d6595f6f2a80c936bcf4bfbd1373cc7f60d18751d2e0d068
MD5 74d6dbfb8f89f23df50d08148fc48a7a
SHA1 b171b15a36b884093173face698a5c992fa92566
SHA512 33ee8392433c37fb3af0723c0a10ea9f17cc753e161f2bd643b170fc999e484f5996ade42abcd9cf3ef69b6efda66c24fd9ba9ee018eb81dc74078f97cec4946
SSDEEP 384:sxZTni8sm4N/fMs9MdFZ1yCHbzw/kW/kcyo+:sriFm4N/f9MFVHb+3tO
TLSH
T1A992E8536524597BCCDFD219B9267F63E6F81472DA904E4CA9FCCA0C04EB6ED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7a35eda1a6666e8fc05de200d16b89cd626ec64dfa822652b5423d2b4699044b
MD5 38923646953628f227d18b7231a4792c
SHA1 a2bc2fa5cbfd9a5177bb393831172b1554f8b2e6
SHA512 28ae16d29d8d9b49d30708577153ef1a1280933140a99c360ba07e3b02e0698cc72430071f6f52a08ad4561838898212f3ae7491ac1b250dbbd786c2e17eae71
SSDEEP 768:QbUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RTroVV0l:QbUZYTMWvg0Pou1ja7eLZmRgIl
TLSH
T1FFD20B3F280CCB7E4F844E9DEC2A6F967ED801CB5A584D5447EA894C03C72EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 5a5979e038eb75a91391d8954b8ef3e76de44d6e243b9a776d6efcb40ce60562
MD5 5a61b1618397306378d9a76f8c9697db
SHA1 f37533cc558c8364601619e627b31a5057d06e89
SHA512 f76aca8aa8a5a964c655d18a7b64166c83bdbe4fae49487e371eceef96408a3f9b1729ebc8be4b818c8b5899de497ebf1173c872e177f22aaba3d11d7765b572
TLSH
T158A002218F804406C02215B175A303413310C8E05200734748A105D8FD557445D4141C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 8d0933f3da80c5a53646832cb64ec21b615bc68ad1de1f9e988da7e253c968ba
MD5 756343e63ab75d5e8dc9673efaa7e6fe
SHA1 07b6a849c46dd4cd7e7c72528f692807611adcc8
SHA512 0eaadbcbc8b7a5c2d661f056edb05dc332de49c6672685bc01461283d620fd9a5d59e6d7af82523c499078ce3d6a2b545943307f2e5bc4718465eabab4d3ba3f
TLSH
T10FA002160682060DC94663F0659742516612C92D1203634581A19044CB596855D7180D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 3KB
SHA256 6b0ee86aacc152a7411068528f12e77fb275f7f64376b6e819bc851ee803ec82
MD5 b65b8657f180f85314e94ce7da6091b5
SHA1 e8dce1bc98206e1b4bf08f24fe2bd64a5b5b9408
SHA512 ff9683f63678b8bc128e76e759664c68bc096e33919f2406603c3b0d79e60fc5060eda319c6b64376568fa23467ec1fe070e2d181247f0afd8b75f795f37e5c0
TLSH
T10651DA5D8C462B0ADD6C567364F7048C27F6B6DC67448A0724EC5634BCC3B7E28A475E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 2KB
SHA256 90317cc6870271c8e480f419149652fba2c91273a8e0c833e68bd6d989507588
MD5 cc766921a89ea76129b85a4648fb787c
SHA1 5542c54c0f555e6be36ae95cf75d995909861cb4
SHA512 cc7b2ce7d9ee9c3ab4fdb8d66462ce1070b3efd3e3aa5a794ed938286597ee1de427e3a47065b053be1091cd1c8a22eeb2396d3686279f09ac395e21acde574b
TLSH
T18D51C74D0E609A5BECB841B215F364A437B0A8CD5A11EA236CEC2131ED8375E2D1B7AD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5872d9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe5872d9.TMP
Size 2KB
SHA256 ee4d864ffb6211f6026c35d1790cfeaa0f4dd5622c32c11bfc511be5c1d3473c
MD5 c996757336958bdc289728c74083327d
SHA1 da676c97273b3262df9e64d0732938549ce458c9
SHA512 469be1f4b5dba20985293d51f947eff4d2fc695b04d2c38da5acd88ed1fcb5d26bb28e5e5a9754819e7adcbf68cdf0b78522463d2030186967d66c7ba741d3fc
TLSH
T10E51CA4A4D818A3DD89440B30DE378F8333A68008755BF5374FC5636AC9279E3E1E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 436da501621f91722e205f847c3487f03e81dc76caf0e2312867627450a5675a
MD5 098ed927e0ec058ea3c09a830258d92f
SHA1 dbf89d15f072bfc60c1adce0ed7667a659ee5069
SHA512 ad80ffca6266a0ebff6b42164ef8da7c3008a5e698d9b2d2f5bdc41843436ffcf1532677b809f2bbd38d3ba7468ca8596f46a3dbc65dd2b18c16647881816ec0
TLSH
T13DE068F32EBB1810AC6BC7D64471F4A4010138A8C64DAD8E00AAA2A310B2300280AC22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 824ca719d9c9b5ee5d7b00f432a80dd9511b98f1404c190fb1c5b88b60a645e9
MD5 cdc91891112cb4ea185a49e3d755836a
SHA1 662e309f3d6a4b5125a6bd13de1143bd75e05e5f
SHA512 644e540095c155dfc319bb3c6a8a3850264548f85b2a5dc765817abf010a3919b8271fe850ffa60fbef62408afe455a1df26fbc0066bbe2022398f0b9f264694
TLSH
T1EEB024D05C044041C15043FCF0D0044C31347C14170D113541FCD570C0535C04455144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58df9d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58df9d.TMP
Size 48B
SHA256 8f5f9c5cb3b03e819021219db76abd2ec31f75ad069e6e5bc7718c94357fcb5a
MD5 0825ca6e9d874627bcdbb66bc05559f7
SHA1 7a928410115e4ed9cd1e81a362cf934d298ad2c3
SHA512 f5d069125f93cf782008e631d7647827289f39dcd999b8dcdb92e2952de48d724b86970b34c0fec287e36c2e5244fe23cd691d81dc91ecb0cde5a897dc981ac6
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 24d04fdc74a134aaf4b1b66a54600918525ce238f432e98e66bc3ab15aaf6a7f
MD5 31ccec90beb222bc167991808417e17c
SHA1 8f5bc8793776225364fa95c86f461a38b7f678e4
SHA512 406cd4cdaa36de413985632d4449fde09e80fd32231d48b74d1d2d90a3179355da9baaf6c09ba30588ec44fffae2bf4ececaf9cde932b8eb5d1883060aac977f
SSDEEP 96:KA1eK2AUkQKJW6+DuKY033yKUAyGbOKUou:E2bppRd/
TLSH
T129D1284A70BA12413C7D2A489354971B8FC271633228B42B7FAD01B69D67E21DEFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592476.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592476.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 254a2779f11c487621f8b695b58bfcc95a530f7a673dde41d9d9283df7cc7601
MD5 8ae9f9ff5feccfb4407d2627beed90c2
SHA1 17d1a78c3ac4d2e462c43749f053b5000f658195
SHA512 35667ae47e6cbdc3cccf8c4573b19e4ef5fdf94cdfe9f05a79d0da8a483287c2a1cda6f3c26cc35b02501796272d22eb4f21dc83745b8cefff1412d16a902ca7
SSDEEP 384:2tNn/s3n9SfsNqebdbRJpuzX5od+685X8tJrAKxmn15wbAjEO8qeH:2j+9UAdHMO0GhAcmn12bfZqeH
TLSH
T15F926C3298295C675EE3E589F44B3217AFB89177D7842F94C2EC5F0D01EB298132AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8f17f49d63d4a10878cb877b2c9813cb9e4aef3ebd51373ea182c10895c9f4c1
MD5 81fd008a229ac856ffcce5b914a116c4
SHA1 6d4ef9a472df13957e86398589176a200de029a6
SHA512 2cfe24542db96c16f223884bcb9f635c799508e6b6da6fecc68b45b7c96ab1319df49eb31fe509679be3569bb9041b9e209164224218db57f1a9ac98e53d888f
SSDEEP 192:yONo61VWQmiUyzGgGX5Obd+jqjzorvmk/au3FOgU6:yONo6WbgGX5od+68UgOgU6
TLSH
T12002D835A8687C6B8EE3FE49B44B37135FA92167EA542F84D6EC1B1C00D769C2346C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 31e12536d4b5fc4ba9be85d49906b4a43d5370dc3e94d09409a89dcd7b2e21f1
MD5 8c929fdee49a13d9b89900ca16779472
SHA1 e687851bfc3897d8d086100c3b7726905568e909
SHA512 4d76dd823c7f52fa423e7759dd59b6ae1c373038f009adceaef8c11265fa47e0cca1def8b0fdf22c1952a33a695e49f6c62d6963d892cd39a07bb4b3e8083ef0
SSDEEP 192:cONBx61xWQmiUyVG0GX5Obd+jqjzorvmsX8ySJrpjJKcqrU6:cON76+P0GX5od+685X8tJrrKxU6
TLSH
T1A3120A326468AC679ED3F584F48B32139FA85127DB856F84D2EC2F1C01DB6AC135AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7354411bab3fe4b9926ba70d8d47393fd073d0e22f2281f91cafa2365d858d53
MD5 327dcae8d75e411d853a28aa9bcd0ff0
SHA1 f04a0443344fbb01190bc845670ba93e4f7ea340
SHA512 cdae95b726edb6a2bd0990f168d7ec75a5678ea3293f2720950083766442b93d991caa34b0f6185f53a51bb78593a7a81123f244c607751938eeb59eb68251a3
SSDEEP 384:EtNn/s3n9SHXsNqcTydb9opizX5od+685X8tJrFKxmn15wbAjEO8qeH:Ej+9kXZd2YO0GhFcmn12bfZqeH
TLSH
T1F2927C3658296C275DD7E588F44B3217AFB89167D7C42F9482EC5F0D02DB3D8232AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4b80a9fad27c0386220e9e96b067cb96355551c763d4b43e56f1820b431383c2
MD5 58735eafefcf980983fbdfdbc1a25bcc
SHA1 27a2d04f07a2f707f62efd6c8034b4da1b154a62
SHA512 ab7bcbfebe7f4384ae3798e384bf6d4b1e80084b7c8c3f21b1fb2c285d6dac6d93da0edee306da46ce7c860b0c0e83d6e4399c2178bc5668752111b5b2da6225
SSDEEP 768:CFKj+9SXPwgJdG+oFYO0GhJcmn12bfZqeH:s9SXXdYC0yZRH
TLSH
T1A0C219F248D74836D99E9747B73E2D129EBCD163F6802A50B3984A0CCD961BFD30AD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ec2bc6694404e030bdd15782bedd4dc6917b0a8d4c484989c48c240f205da58b
MD5 2c8e09d9eb9d409b1ccda11ff322a606
SHA1 dc904894de7404e9d5fd82d9762d148bdc120cc5
SHA512 d52dbdaf9f13c4344eb194393b99c0eeb03ec438e58ca34951903a8e31dda96b5b64467260488e61941ccc00628a3beba289f47ac41354faac520a16b3190d47
SSDEEP 384:2tNn/s3n9SHXsNqXTydbCopizX5od+685X8tJrAKxmn15wbAjEO8qeH:2j+9kX4ddYO0GhAcmn12bfZqeH
TLSH
T1EA927C3258296C275DD7E588F44B3217AFA89177D7842F9482EC5F0D02EB3D8132AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 59f83e17f9c2202ea86f957aa4e04da88d38499e3ad01fcef203019507a6c0d6
MD5 77fbc424834ece76f7702934b0452fd1
SHA1 eadd06e839361179ba9fc1768985f49053942129
SHA512 655e49ee7f6714c9137d7875cb3ad9421bf787a69cae998455e404f33f79b4a6bf5ee2889ebb98fa60362ae1ea8be3d3213e1844b0e010065d69e742906fddee
TLSH
T127E00202D20000FBC01D433000C757583FF6C02003F3030A457165782C233003D72F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3a0ea9f712d38674a82065ba3475d826c3d68525a8672b43a3e653ab2421f06c
MD5 2bbc68498b15fc5ce2b4fc3022235425
SHA1 8b3613407889fac6cfdbfb361dc058be56d8ce4f
SHA512 50d4352fa0dfd89fa5dae375366a39fc9b451ec8b41ebad12814bb5aaa6bd004ca43e3b4a555c764ed54ec618e28b5566ab3070d7ad4a9fca840b28e24873b37
TLSH
T1E1E00101E20000BBC02D433100C7AB683EF6C00403F3020A467269782C267402A72F50
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe589248.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe589248.TMP
Size 392B
SHA256 1cd5c91562098893e82a0d48706aea5039ebdf687bba3082d92829e8af92fe94
MD5 fd1cd200d26797e1eb544940a1b83172
SHA1 6c14d127afd3d6ea2c944e62036848f5495f5097
SHA512 00b16b4ff957c6cce6035e6744f21b68e6ae6036c1858374af7c3cb9cd3c0b2b6865bece212c340b8808afe07021ef914558db8caf8cff288f973a1136c1adf4
MD5 SHA1 SHA512

Submit Download

f2e46421-6042-46ab-a0fb-37e0c0a70ac6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f2e46421-6042-46ab-a0fb-37e0c0a70ac6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a82c30874717fe2a291ddc0388ef5f0dd3bfa431a89a16dcd10ecfd4efbb7271
MD5 b188cc9cd8915c336669669e858bd57c
SHA1 2e0713bbd987cb441d0daca650674eff18ca9fc7
SHA512 4022e659fa41d25f82fcfdae8eabc9f123a233d974396848db7f980b306531c2c7e7111a29fcf85826b60d4c48812577af351b3374f46df4fbfed529525fa1fb
TLSH
T15941145CA6E91149F3B7AE5AABB6A86D483FB8771E06905E10110D4E0A62B40CD71737
MD5 SHA1 SHA512 TLSH

Submit Download

Kittycord-Installer.exe

Path C:\Users\Admin\Downloads\Kittycord-Installer.exe
Size 408KB
SHA256 0a8fa9a347f285a34538b29a8d01b20a364417efddad499393280208e63bb85f
MD5 bdad2bfecfba5818a77cabe41f9f35ce
SHA1 d47d8ad6815a10323d251a07267bc5c24290ff4b
SHA512 2e4ea38313a334a0b0c6cf9a6a3a63b4696736615011576362af9bc80983bcf4b1816f22639a863d1d0a01954cba1fe4c7b7cf31fa06e534787050f0bd8092e4
SSDEEP 6144:4lQjiwltto73TyDmpVZYHzfdtm+E50ms8NFymxYxG+VpKPJmPZXJ7WFFMpepun:4lQjTtE3TLfYzbqNulwPgPZ5K7MpQu
TLSH
T14894AE323F05CC9ECB5B6B79801615A05E6C446B0546D61977CE05EFAFFA328C2BC2A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download