ba551f7e11cafce6997cba912677324be698537a3c736107cec362cf75e8d34a

Analysis

user interaction
yes
max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 08:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 115KB
Sample260705-krfthabs7z
SHA256 ba551f7e11cafce6997cba912677324be698537a3c736107cec362cf75e8d34a
MD5 a216573f2a3231fbd39fa12c1a68a79b
SHA1 667ddce02e243a7b570aeffc3f26f4d5043d5b3a
SHA512 c90ab31a4511433e2c510d8a70159bf836b24391e31e17589a19d029bd8e482aa7df27e5ce28dd5768dc952a5cbc6af01bd0ced76c9fa5beaa1446514a8e9b8f
SSDEEP 1536:aqfqZzaba8QjqFfwngBC32zulXdThzv4wbbeDlxynGBr5PsfPM9//IRWInYnA5:aWqDgpgf2ItThzvxbeDRvs9n4o
TLSH
T12BB37C52ABD918A3243368E82BE6AA09777DD0278504D8F4FFED41DC4FC8798526378D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4276	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277150059992013"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{07499763-A73D-49FE-97BA-ED590F1C9A57}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe
3036	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 1752	3036	msedge.exe	87
PID 3036 wrote to memory of 4276	3036	msedge.exe	88
PID 3036 wrote to memory of 4524	3036	msedge.exe	89
PID 3036 wrote to memory of 4524	3036	msedge.exe	89
PID 3036 wrote to memory of 1816	3036	msedge.exe	90
PID 3036 wrote to memory of 1816	3036	msedge.exe	90
PID 3036 wrote to memory of 1816	3036	msedge.exe	90
PID 3036 wrote to memory of 4400	3036	msedge.exe	92
PID 3036 wrote to memory of 4400	3036	msedge.exe	92
PID 3036 wrote to memory of 4400	3036	msedge.exe	92
PID 3036 wrote to memory of 408	3036	msedge.exe	91
PID 3036 wrote to memory of 408	3036	msedge.exe	91
PID 3036 wrote to memory of 408	3036	msedge.exe	91
PID 3036 wrote to memory of 3536	3036	msedge.exe	94
PID 3036 wrote to memory of 3536	3036	msedge.exe	94
PID 3036 wrote to memory of 3536	3036	msedge.exe	94
PID 3036 wrote to memory of 1236	3036	msedge.exe	95
PID 3036 wrote to memory of 1236	3036	msedge.exe	95
PID 3036 wrote to memory of 1236	3036	msedge.exe	95
PID 3036 wrote to memory of 3164	3036	msedge.exe	97
PID 3036 wrote to memory of 3164	3036	msedge.exe	97
PID 3036 wrote to memory of 3164	3036	msedge.exe	97
PID 3036 wrote to memory of 1380	3036	msedge.exe	99
PID 3036 wrote to memory of 4712	3036	msedge.exe	100
PID 3036 wrote to memory of 1380	3036	msedge.exe	99
PID 3036 wrote to memory of 4712	3036	msedge.exe	100
PID 3036 wrote to memory of 3368	3036	msedge.exe	102
PID 3036 wrote to memory of 1120	3036	msedge.exe	117
PID 3036 wrote to memory of 4592	3036	msedge.exe	118
PID 3036 wrote to memory of 3588	3036	msedge.exe	119
PID 3036 wrote to memory of 2648	3036	msedge.exe	121
PID 3036 wrote to memory of 2648	3036	msedge.exe	121
PID 3036 wrote to memory of 2648	3036	msedge.exe	121
PID 3036 wrote to memory of 4660	3036	msedge.exe	122
PID 3036 wrote to memory of 4660	3036	msedge.exe	122
PID 3036 wrote to memory of 4660	3036	msedge.exe	122
PID 3036 wrote to memory of 4540	3036	msedge.exe	123
PID 3036 wrote to memory of 4540	3036	msedge.exe	123
PID 3036 wrote to memory of 4540	3036	msedge.exe	123
PID 3036 wrote to memory of 4952	3036	msedge.exe	124
PID 3036 wrote to memory of 4952	3036	msedge.exe	124
PID 3036 wrote to memory of 4952	3036	msedge.exe	124
PID 3036 wrote to memory of 3012	3036	msedge.exe	125
PID 3036 wrote to memory of 3012	3036	msedge.exe	125
PID 3036 wrote to memory of 3012	3036	msedge.exe	125
PID 3036 wrote to memory of 4404	3036	msedge.exe	126
PID 3036 wrote to memory of 4404	3036	msedge.exe	126
PID 3036 wrote to memory of 4404	3036	msedge.exe	126
PID 3036 wrote to memory of 4528	3036	msedge.exe	127
PID 3036 wrote to memory of 4528	3036	msedge.exe	127
PID 3036 wrote to memory of 4528	3036	msedge.exe	127
PID 3036 wrote to memory of 2412	3036	msedge.exe	128
PID 3036 wrote to memory of 2412	3036	msedge.exe	128
PID 3036 wrote to memory of 2412	3036	msedge.exe	128
PID 3036 wrote to memory of 5068	3036	msedge.exe	129
PID 3036 wrote to memory of 5068	3036	msedge.exe	129
PID 3036 wrote to memory of 5068	3036	msedge.exe	129
PID 3036 wrote to memory of 3076	3036	msedge.exe	130
PID 3036 wrote to memory of 3076	3036	msedge.exe	130
PID 3036 wrote to memory of 3584	3036	msedge.exe	131
PID 3036 wrote to memory of 3584	3036	msedge.exe	131
PID 3036 wrote to memory of 3584	3036	msedge.exe	131
PID 3036 wrote to memory of 4700	3036	msedge.exe	132
PID 3036 wrote to memory of 4700	3036	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x25c,0x7fff99cbc188,0x7fff99cbc194,0x7fff99cbc1a0
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,3201677902132897414,13331396510991685319,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,3615199496605679107,413588541026421687,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,12948497796349864362,5732895505481281921,262144 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10586962303626660746,8179023908153071805,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8102333297942844374,17418233153913915157,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,2189677566511586351,7049608400081571786,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,17377135397474452078,11474048233287263364,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3928,i,11666376932225867921,6024936775410907844,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3932,i,5069817470282545787,14245308286751813355,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,15396656285858966834,6190459757920968207,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,2724620146676153582,2555046660930121905,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,2724620146676153582,2555046660930121905,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,835851597478860935,8369844865501324277,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,102923297018285959,4921529826940274806,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,11734778971976185668,17976477162847158489,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5860,i,8749232200627690383,10762259397985221646,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3580,i,10476618929608066080,870204810456378877,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5320,i,13273043883413626686,32175856107695804,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5536,i,12717085633373464365,12108290957971527898,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5308,i,11339341878587631338,15200274441328489596,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=3892,i,12361636960160712320,17997437920805032959,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4376,i,7722344180226143986,16731146567278935873,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4408,i,8407428871293850647,9670427386849109826,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5044,i,5686685620727342551,2437085792028605303,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,13700492136428460670,2145363086434057946,524288 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6440,i,11956209758831622000,4196383831681881233,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4172,i,2347449523643299295,669040389657927176,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3620,i,15813231307849295068,9391361186953315082,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=3952,i,14875897834105712785,12529307443546906272,2097152 --field-trial-handle=2340,i,35685964310906461,6910338434496267470,262144 --variations-seed-version --mojo-platform-channel-handle=3920 /prefetch:1
  2⤵
  PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3828

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3f0682d8e605e123667ee0a06b4b412c8932f61f06880d2b80056a5c3808fd6c
MD5 c16d8cc85245fa70263392992309dca7
SHA1 1c04486b2734f5e5dea6c75e32c5b84453d215ae
SHA512 76d41a0909e8ceee8463827ce19599e16aea10bd9bba63361004ed624a81ae8475c2f266decb8c286dd3fd2171d0aad540a57d4a797a6c7e1da2e30248f101fd
TLSH
T1A4D023307A34BDDBD13930F5A4314B017636516332179765B150840E8D7C0C2B7C75A2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 38KB
SHA256 064610f94a2a935e890dde6e1cc15ad6211bc2300df1f5afd5aa307308261fd3
MD5 17c4e8e626bf74828ce7ff847d390b5e
SHA1 31c8d0834dafaa8e6ebe23b09ffaae4b9dde3e1c
SHA512 24424f72b77d10b01383848ee712a78bcd12e2c7258cfbe2112b360138f6150c296c0848187379dd64ba0725494cac2e71d55687843f2b5c26b977204afda2b8
SSDEEP 768:/rKHZnYuuc2txXb8kAiitdwEOn2jzw3GbP52YIbV/WIzsK:uH9YLfb+igQUs3WIzp/Xb
TLSH
T18B0301A23015BABA1A2F47ACC79760E80A754A9DD85E271C0C670EB9D31F7407D15F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 98KB
SHA256 a70945a3f3e36f2a1d2c339403ed4b84eb3f9dca52bb6c7a64848f87d1ba806f
MD5 c63f3846b9235d0252cbfeb8b47ea3b6
SHA1 f16b144933c9cfaf58778a5898291df5ab0f985c
SHA512 7a0a1532f6253b307808ab06fc49f6fc6c8dc540e924fca3b88677b3bbaf707b51ad174367df073dddbe447f88b0094778af7c5f858bfa379f31d9c76526a468
SSDEEP 1536:5mTGprD11HFcs6IdI9zL8Hwfqzej0juW32R6ZLEiZTU/PJ1+Okx6:jrXFcId0HtfTgjuncZQpV7
TLSH
T11BA302C4144153231B1BBCD1BEEE05EA07E89ADEBB5F48A80E045F7C07767A2A5F1897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 132KB
SHA256 5b1ad02715a39f758061673f2c39631e1d256f6b5d865355fc63a785f40f399a
MD5 eea015f6d707a93d55080ca68faf7a44
SHA1 d20219f4d08bd0f9323b6c39f14bfe199db9b038
SHA512 12d686399c0420434a39ad6a704dee99fc359af254bc7dd5dd9e24a46744b500d4b9c58f0a14632cf9117b493c83fe6aeea691348df604c91906cdc93643760b
SSDEEP 3072:pTlZGY8PoVuvq9fp3GEx3zV2+pd4wH6wh+WATVaqiOGReda4iKqWJgC:ZlZGlPoF3Gi3zV2+p9aNzgr6aeqC
TLSH
T18FD3126CE365A107E8C7670C25FC56AE320F04B889D1E7056AA1F927EC0FA5897CE1F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 157KB
SHA256 04198fdd90c12f0eac88765d9f959317cd656fee507b6113c4a3ddfdc3488c59
MD5 c91fd99f18f2e56da9cebe5134f7a465
SHA1 b259589cbafee1706f0ae20de03906443f2f4d35
SHA512 bb184423e93fadb3e466fc08757a30e94c3f898ef88dd691a7230469e6c8a17d683803f7b2bf72b4e7f675d5306a788e67faf925389706885cd5be399b8e4fa8
SSDEEP 3072:+Lmjr2XjHVcpZdzkVvYq6HkkGxcrVBMwayGbXD/JZ73mhTp3Oa:smcG3cvSWqVayebJR2fea
TLSH
T1B7F312C85618F7FE244DF34B1B1DCC239E0D44ADEAB9C72568D0DA455AEDB6B3803286
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 374KB
SHA256 9e58eef4c759e0f11538b7483cf06db0eee77e2f759477f430c0a0336baa7e5c
MD5 26636c6b0f19d3f091c8f9eaf16988a6
SHA1 301472ed6eb13e36e86ce7a9c30ca1158b1ff632
SHA512 b9377375bc95d52ec1615f5d87694ac9a7b9d19099630410ef159823fc8a31e2d6ebb8fa6242dfad2e8a0df673616604d0812d0574be8e0bb281935a1f3996d3
SSDEEP 6144:2MWU4MrvT1tBu/ARRfkKGM32RzlqKs/LXaMhXrO7ugO1KeiTxttKWK:BWYrvT1tBu/4GKNgRqKs/LqMhbO7j7er
TLSH
T13A8423DDA074E58D2A056560AB2DAF05B1FB435ACDD8A390CAF1BCB0FDC80F6E55842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 41KB
SHA256 ea873f38b4f60013c167547931ccbdf06ee84e54e9df621d5739c0ab93772182
MD5 1ade95f90c8445801f4e262e06fa4254
SHA1 9ff077077853386f8f8624c14559a6dcab61a5d4
SHA512 5617c53e9eb469c6978687ad252bad92ccb34edaf95a9043626ab8e0560b6bf92852a11151d0ed6dcce97c2563b9eef5b32155d044fb9be5dc16ebdb830dc1fd
SSDEEP 768:BE3slrz25obzpfud199N1W6rtq0F+u4yls70H2cfUO8LBFx6h+EA:BWs5z2abVKv9N1WoA+s70RUHB6h+f
TLSH
T12213F1C389FE54633C6C82D74EBC351D7AF430454A2BE3E7ADD160220F255657A8B8AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e6e4fc862ef98b4a09f19c8a7c51291b477886e8de8ee4065302caa76a38ff21
MD5 40f11f14da8b6f77161ddd077d2c426c
SHA1 05845143dc4f13cace7b2bafb0d0d55afb33017e
SHA512 8d44a3795b8f8709b42097c42651255a974f61c823fd5023e956942308e76112db79df376633d041b49d1ec472715fa063634b2977763daff0344aae9e439385
TLSH
T110615FB409314FA1FBC280BF94F3D245317086D5F8171E7AD05066785E3EF6AA01AD1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2f55081e36601321fd3d842512fadffa314a22a2f30f3badef5cf71e3eb8ec9a
MD5 47071139c1b83d7c7553c6cbe784759a
SHA1 c460eb7954da73794af50fe545badf9b07f1fe40
SHA512 90cd09876249a59af931b0546c74d2b9e3ab53e544e813bf4993d9a5523cbef897735a73f776e40c4b60c358522d86787fabeba8765cd61154370a095875b8ea
TLSH
T1D5615DB409320FA1FBD2807F90F3D245317086D1F8172E7AE05065785E3EF6AA12AD1D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 1ba4dd4624b66c588de7359f1ce6a4fe4b70bd795d4d5b26df1dda682e2601c6
MD5 ae7b2204f36c8984308775d3fb989413
SHA1 7b543181a335199a58379f5b3b70c98648f82004
SHA512 7bab8a0a44bdd0a462150f505a30f0e5958c1ad2ee4f5157a87928808fe914e7e3789883be6005b5b9aeba18e91ba086c2c1bf02904e4672fe28831d4b9f689c
SSDEEP 48:Bp8YX8Bs3jN91X31PJaJComcfPRyyNkMmyIG3qoEt5NBytMleVM3V2WdK7yBaXb:nLf11PwkDcHRHHqo+j7lem3VuO4Xb
TLSH
T1F8C160B045B03F98FFC65ABB8CF3DA45227041E1F40F5B3AD209957C291FB99509EA19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58a870.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a870.TMP
Size 3KB
SHA256 c1c2e7fe2060a16b212ae1aa44accfcd8423c6d8815d5e74e9b7f7452ee28f23
MD5 381051ee2bfd4927e5f7442df9d8feff
SHA1 f3ca7b938124711698abb42b41bd583f8c800aac
SHA512 34fac213fba39492ff94ad754a8eb9f3f4351fd2d4220341f49fa44122a84134e0df369eed4892f9ddf6df1e81aba21e976111fcdf41dd5fc63251123123994a
TLSH
T1E0614EB449314FA1FBC2807F94F3D209357086D6F8172E7AD05066785E3EF6AA11AD1D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 a503b7c2eae2a771c9836e88028a0605a823168341c4b19f9e97e1dc33244799
MD5 d19346e03470ba1e7bd74a2233f6bce2
SHA1 08fa5bfe7e90602534d557959a53a9509db5ac18
SHA512 fa36acda7ec0c97474277d54c8b203328bbc07f4a682c27b663eed374536c7b41fae4b8ea2e857c5291fa55eea417f13d5ffaf1eaf496f0536fd1be83dc7555e
SSDEEP 192:DPkao8F2dpp4BF0agnntW5787wcPZCZ5QWSuhG3F+gypgEwhQn0wO7N75gcyoGhK:DPkao8F2dp6BSagnntW5787wcPZCZ5Qr
TLSH
T185329DB7C3D9822D981156F4AB256E2BCE1D1915432C3C66C8E8BF5BA3F2471E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 577170515896fd74e82551b61dc880e453a3ec6b49a767e3aedd2d23b4fa10a0
MD5 272568eae14ca3d68ea2bfd1197a4d31
SHA1 c90dee9089afcc62d2a3cf449fa7d64cd4f86da4
SHA512 f5bf849a3f3bddd506fd80fa644943d363fe9a0ccee945a0bcce303a1c69a554a3b5983524d285b709412a56d719a7c823f1ecdf6a5d5f6e0086d9258de6c985
SSDEEP 48:YALlgWrNWyOgW+hWrNWIShWkhWysRzEsz8wEskCKsL23sL5dzsLPksLnNsKCZ2sz:DPxOaoFSFCz38wAtwcPZCZ5QWSuj
TLSH
T17591ACBBC3D8837D881556F05B25AE2ADD1E151B42283C6689F8BF4F63F24B1D10269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 65b033f2d0ea60f4b8a11b9517217827d1421d9a53a9a6b5d01cab0f528ca850
MD5 f8591ae1b8f6609653189519c4d41f11
SHA1 d56ca4038f0693befe60c6134e9021ba6e20dbcd
SHA512 09cfa1f3a5561cfff7d625c974cd28e597c46ad54b4eb80a83d3b8e5f0e43474f74d4b2fedd3f4f1e2756c0bc4598ab18df516c645de0c3dde55183940ad71a8
SSDEEP 192:sxZrROyM/jK1Ml8MkU/flszyKE4uIdpdUHW6+WNGY9IKQ24IgrJ:sxZrkMU/flszytWuHbGx9
TLSH
T1D242D7126A38A977CCCBD209FA55BF53D6F50472E2940E44A9FCCA1C05E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 12807f4a28d1b232fdc63d3198bfd554477133f6104e1f7b5a480e9fbab81f4a
MD5 6fab502e746cafe9508385584eb1de10
SHA1 1c92aa4961b18595c244a15b9323e270e42bbc89
SHA512 2701bf108885819a969652b4b8f2eb137434918f28711cd9e8fe50c9e3bdc405d33cdc879fe4ed31a45a4467a81fe88f52fe0f8897658cfee93b63cf63caadbb
SSDEEP 192:sxZFROyM/jK1Ml8MWOU/flswyKoMuadpoy9Du6JzqHW6+WNB6B+7gfY9IqT24Ig6:sxZFkuOU/flswyRkIHbqpfYmp
TLSH
T17C62E813AA389A778DDBD219F945BB53E6F50472D2940D44AAFCCA1C05E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 81126db4bea9337cca38e31d793c0e86e980acb1e652cc52f6d23cc20749b639
MD5 3bfe8e8d04389b4a24bb698f48413c3b
SHA1 37efc7491b18d8eb30732df77bf914ce16c656b5
SHA512 f702ba718959b7638de98a97bc1461ca456d10bfb5909e3f5a8ddb0733050d9eafd9a9ccf0f793c3ded4cbbafab1567c3ae9af44b214b4ecb162279d10c6a995
SSDEEP 384:sxZ2nmkukU/flsTWv9yRZMIHb9dSpfP2Ip:som4U/fCY9yR/HbTuNp
TLSH
T1E182FA036534597B9DDBD259F905BB23E6F80462D6D04E44AAFCCA1C04E7BEE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c56a427d0106f3f1f6b426275dafb6f944a92875ec2eae67d6bbdaad64387363
MD5 18ca75084d9b57b6a7699557a574f6cc
SHA1 08363863c5e3c513197b4fd241c8c70ba24b66a6
SHA512 dfd3ffd72b78ec5e3311694b3f32f8e19c6e03c7a7066ea10670245e721d2d379dcd57dceca7d973c590c8207ea06ffabba775763e8e52042accc2a27cadcaa5
SSDEEP 192:sxZFROyM/jK1Ml8MkU/flswyKoWDuIdpdTHW6+WNGY9I6024Ig5kSJ:sxZFkMU/flswyRWzhHbGbmu
TLSH
T1E052D7126A3859778CDBD209FA45BF53D6F54472A2900E44AAFCCA1C01E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3eb07453d7a0e57a561113f9732aed8dd28a7c241e0fc83bac4270550e971e92
MD5 d7b0f37ade7202970eb8ff9a29d79f85
SHA1 77052944aac65b0171a750ccc3491dd8bd4fe1a2
SHA512 bfa6ab953b33b7cbb0b6fd0f1d312d43988feab1e5385841f431c3b13864ae2c3b6ed8ba95aed50d7dd320dc75cde3dee1538274e5d02f1943524440c5299594
SSDEEP 768:Nqcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNmrowg6I:Nqcv21wWvu+Z+u1jaeFLeRNdwY
TLSH
T139D21B2B280CCB7E4F841E9CED2A6F866ED801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f51916b-51c4-4d64-b878-af4263e9a070\index-dir\the-real-index
Size 72B
SHA256 1e4a0de2dcde5922c0853faa6f3b8aa0ac5c959fb335cfd9bc6206f7fab6559a
MD5 c5fa32edd7860faffef774013c001f4c
SHA1 6b8488c5dc11facfe04be0d0ce7ae3d6aacf7154
SHA512 ac3b0ecc693dfb36215190aa592ec1a9bb7d58ab08e03bacd02464b841bbda00fc4532e54c036bdfefc3ff20cbac00ef2bdb529068910915c98e456800ffa7e6
TLSH
T15EA002360E804511D50636B21577094212594A504104230E40A14049C8B8557554161C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f51916b-51c4-4d64-b878-af4263e9a070\index-dir\the-real-index
Size 72B
SHA256 1ab02fc0258e1b1684d51256c7335d4bcc1b037df5acae7a364a343c72e61b71
MD5 dc8cf36832623037514922570449408e
SHA1 b064151fbba787e3e6d72ba4935a8f13563f9692
SHA512 44268f8f18f5bacd11af8334a16b2f38785bc7186bc1c1f721b352607c2decabac8e9b95875d9b90e2d2e87142ac27f2dca65199bafc3fbb0fd9d41f681c6dee
TLSH
T1B4A0022453800015C01215B2295353591704CA502360531786950044CC945404E7184C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\the-real-index
Size 1KB
SHA256 33373513c13fa447c64275200cdefc8cbeb61fe67eb49278ed28f8e427e9f169
MD5 a702014a4188f1a8d011e06ff488362f
SHA1 80ba76e43cec0d1b2c9e0267b6827cf1b5a1cbfc
SHA512 5845fed47feecfaa82bf8f3a81c4f57394d34e552107e08cd18926384292468f0df2549525c960849700560fa6ae313685236e384bd3b09dc0c5f7e8fcef778f
TLSH
T11E3174568EB11C8BDC6252B258BE71B93733E8DC6708CB1B142D393A5C9B71C32162DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\the-real-index
Size 720B
SHA256 ea9d8eb6043e929b9704cdd3a0f37b64288db02bf6c780c1e9957102f00e4fa5
MD5 a9664bafbbf8e8a0bb298dfdb1bc38af
SHA1 85f6898a3c699d30c9626f418826fc08c22eca48
SHA512 2b5018eeeebfe11b4481572344281e37e71e56e8fb6d669a6fa6d744250fd4037f8edd399a777583935b9952dedcf17b20ea78537e0a669b9d8195a05657a9d7
TLSH
T1920120892EB04D5FFCA246B304B560E07330C8DD2322C03B043D3A172C6730931172C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d671.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4e969253-cbef-4a3d-801d-50c093f549f5\index-dir\the-real-index~RFe59d671.TMP
Size 720B
SHA256 6d1382ebae0754bea208ad0b13e375349d233e449badd70fa05b6c645448ee66
MD5 29c4b5ba744f924bacda0fa724a0f1d9
SHA1 e93f0e83956ed54200c49be1108f38209ea34091
SHA512 b44fb9a95719c06df4f82c2ff8fe19f33afec2ded00b86d4ce00281ffea09f5bd251795da5858fede16af19d15b743710bdd94920b6e2aa944753a9141e21ba3
TLSH
T1AD010E968AA14E1BE8914A7608D550F9B331C9006222E663A0BE2A2E6C3A78969071CC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 92ed78758a81e3b1134308303a8dd895ab78d52bdbd7cbb72e029a4a5e55b2f6
MD5 197b8927566091fb7c4a1fa2e936ade3
SHA1 fd5b50821034fbee3ab7b151d4a22cf1515d413d
SHA512 a7841cfa61204ad0956550227ebfe5de696727660ff526ef63a90b096b14643fdbe5b31166b19d9b8c19171cb007cc43ebe7969fd0a81135c8f63cb38980b909
TLSH
T1BAE0C07B2EE72C54DDAFC7D5283100D00101B949D404EC8FC01776CB00B1744355AD62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 0af5b408e9c4a194ac3ced780cafd032c1197a138a2fa88ca5041e35bd206fd7
MD5 7e9fabb5340afab633b453931cb51a2d
SHA1 1040f2d8d104d5f64a1c678070523fc9d0a6ff1e
SHA512 5fa126247127513877572e91d69d95123c229b9fdf9b0ce8bf80d9611ae4d80a66c27d05cb8447d1422cf9f0c8c748453c40d75d90b97a96b3c0d30ea570b64c
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59e49a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e49a.TMP
Size 48B
SHA256 0bd68e04a6809fb02fe06d34e2550ac417aa9df7422f14127db1cd09203667f5
MD5 148456a498755416cfdaf48b86072953
SHA1 6d4e5eb95e21f4d85c2991166f0d0e5e48a297ae
SHA512 5aee1e8a76ec212b2e68dabef6804f6d5b6e3d74307aa76bc2325c6bdaa815bfc45be4ba3828da80134fb51438364b235c74293330ca7585b978294ea1ac52a4
MD5 SHA1 SHA512

Submit Download

0732e549a9c43ea3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\0732e549a9c43ea3_0
Size 194KB
SHA256 81fcb6ffa67e2ceed1532cee8054ac65302f159158e8aa52e47bb4f5c5b2c51c
MD5 50d3163cf970b7d531871a03d26267f3
SHA1 ac2a4b323d7d9fb9854a309cc7d57336456c2022
SHA512 e6fc1e8617d02d6564b480dd6ba0d90f1d5adccd8f751377b8e48090057e036eb26cc304b1a04763123408baac344b7835e43f87469b6e8ebb76869ef0316fd6
SSDEEP 3072:FegF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:FegF1cc9zByRIZa8HlI93h
TLSH
T171146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 c8b161790a549daa72beeff69c876f29a634f188f77ba3b5f05ed282fc397429
MD5 e02e19a7b0956899ba967e17a7cde348
SHA1 6b43261a1eacb553ca72d1b24de124aa7ff6edc9
SHA512 f29bde88faa547586a60bb7ce8fb3d9b479afafde8321908c0843296472363f61d0eb6e9707996463a9e37cfa96f3cb2d60a1bb7cb97ddd322667dd9f8f20f92
TLSH
T19CA0027541C909B4CA51017355CA13823240FDD0681C8F6BF5AF4944CC5206D760E503
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 21b6a9c13e70c020e3309025af30b8231c4a3f829a1b06efb13db9fb2b3b53a6
MD5 cd126f3ea7428d7b2d1f2c5858893da9
SHA1 6784139f2b4e03904c980e118f3d8609012f4cc5
SHA512 cb87d141fd203119ac104cab3154364fb0c6903a66b92b05e97e451253c91f90ae1aea9d9fc16d8c89e0560cde891a50276fc0a0df0b45fe7618dcb57ca181f7
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKakKDqCC84KxePr0xFzJZlz:mT3PTKr0xFzJZx
TLSH
T1BD912102303B128228FD7948A756953A4F41326B7814E57F7FB900652E2BF266DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66e95d8b-9cca-4153-9430-ed00f5a90076.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\66e95d8b-9cca-4153-9430-ed00f5a90076.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5041baf635a09a67f3eaaed3622a03d7c681566d0e4d2039ccbe5a077f967ba6
MD5 a2d8df1ff9e0adf2aad28e771182a489
SHA1 2673a66d8d838f8f407eb4722cef940fdb643d4f
SHA512 d1bf2b3d8a397212d93594ff70db1cf43ad9900f835f68b98a7c86712a65e9d6f27895e8b24cf12585e7ed196a2950cd621c6d8cffe477f48b58ff69390ea799
SSDEEP 384:utNn/s3n9SfsNMfiyyoRd8zi/1+e+C5ddJrZKOObjI9G6w75B:uj+9UCy5Rug5hzhZK29ML
TLSH
T12E929C3268682D774DA39595F04B3927AFF8917BD7C62F84D4DCAF0C02DB2AC5302A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 cbb384c0a50df4261eb6ef53f40a02a192eb8ac5078d1f03c190983a3ccfec88
MD5 ce638f364097e6322788b80e4592a1d3
SHA1 72a92a2b3c226cac934b827abf944c8c227e0c91
SHA512 7c0d5660c2d273d4105e5107a26fef0fbceceedf6bb4cd4c5859a5e497e8f4ab4310d58543586db450aedb86ade923d1f62668fd49f395c100f2529412e21b34
SSDEEP 384:12iF1tNn/s3n9SSzsNE8TUNTUlIlmiyyoRd8zi/q+e+C5ddJrAKOObjI9G6w75B:1dF1j+9Fxwghy5RuD5hzhAK29ML
TLSH
T106A27C3358989D7B9EA28A95F54B3517AEF450B7C6C27E84E2CC9F0C02DB2EC1306E15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 2cfaa9fea887b7453db1888d9da0009870240553da82dd7c5fbfe4ad7343a1ae
MD5 edcc9ab500c0f5752dc4a19b2f957c3e
SHA1 fd8efce4ca94b8f2b406073ad25c21cdf4dba42f
SHA512 28d0d57810e21a90e5a427aa45dd835165434507b79be6ba25a5f792030bf7e517830dc6806974d750a68a001ae9e9e6c665ad0a21a0fae481db34ab0fe4e343
SSDEEP 768:1dFSj+9FMwgAy5RuJfBhzhT0S8e9mX29ML:1V9FHEJX2+L
TLSH
T145D27B72C8985DEB89A2CEC5F606E5176EF80177C58A694CE3F4BA3A318F1FC0311911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 95ff4b0cd6a87068b391bc073f6eba7b3f1d86c5429b4461e611a92474d6d2e4
MD5 0cc41bc87416befe60b847bfe4ecd99c
SHA1 521e32183e0a3f2f2eabbf5d2101b818a2187cd3
SHA512 40395e43c74d0aa078a989577f26b84e180c1275e629c5c0a3700a4375d9523b6e7b0e6cb8903e8f2ec702add4e12c4201f7cdb0f95549dd3120e47360dd77b0
SSDEEP 384:tvtNn/s3n9SfsNMmiyyoRd8zi/1+e+C5ddJrZKOObjI9G6w75B:tvj+9U/y5Rug5hzhZK29ML
TLSH
T140929C3268682D6B4DA39595F0473927AFF8907BD7C62F84D4DCEF0C02DB2AC5302A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 327f8541fa18a798f9831f0bd502fb410df1701208f2984da9f880dff451231f
MD5 c44d0588489fdcb80d71c906d1aaf43d
SHA1 6a7532fda8e55481b5d9817dac8974ffa3e2a525
SHA512 56e46639c0277a6be33f8667e34792fe3b3ad22b129169bc973ae732e1f3a35411694a2c4fc811927edfaa994b8d94b2413ad437a83a198be9212b7dd67fb88a
SSDEEP 192:JONw6v+YLNQmiUyDuZh+CG3+FdeqmpvusqOU6:JONw6vz/bZh+C5daNU6
TLSH
T1B302FA35A8782C6B9FB2AE45F48737135FA82177EA922F84D9D81B1D01D775C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 81f0c2b46c5785ca0572cab063fcbc4e701fa1d4ac861c24e2c09ad6355ad8c9
MD5 6779123264d989c3d718eb66fff2a6c8
SHA1 aa55d45b874ed4392e885ff564d824b9203a9c5b
SHA512 5e2e41ba60219b257e5c61095132e8ba98f1bbc1a984a00ee71027f02add1b577be0429155540af7766137e885bb6555f8de7c1c532548aa5b8034a67e13f539
SSDEEP 192:WONx76v+YLfQmiUytu6h+CG3+Fdeqmpc+pSJr6CHQqsU6:WON96vz9P6h+C5ddJrjKU6
TLSH
T1F1122B3268A86C6F5EA3A545F0873513AFE85127DB8A3F80D5DC5F1C02EF7AC2306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b49fd8f3f921aacf7d211c6ef5b6a4a10ce718349387ff8ea21b03c48d75baf8
MD5 e02dbed228e6189e7674216421c399ef
SHA1 a4d764b0df6667c0933df75f5a8299bb5d887c77
SHA512 32ede199a9ebc9aede9b29740006b5dcfe9def00debb58eaa227b2d41d7554c47a96130316eabafbb71f816d26ebd93d1c4e5208fe1818518d3230e1be774ca6
SSDEEP 3:MsEllllkEthXllkl2zEiKlll:/M/xT02zB+
TLSH
T189440414FFC01C05FD1015304411C3500374D4104513D74734510413DCD77D01C10100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0c3b706fd2e4a9a659a28fa6d8d924c7036e5d158762e8e4b10a775a9be2a523
MD5 51d832d4a661751eac2572bdd34150b2
SHA1 0a4b462ba59d9d632234db6ebd73e03a594f0f26
SHA512 5571e2624f9e7380d443978a43c4b76063f46843667724f306d9c8a1debaaa8d626b268cb541f60b4e85a47a59e2928466b04351b9d0208457c06ec0ea36f080
TLSH
T18C410958A6FA114CB3B76E56ABFA686D447FBD372F0AD45E10010D4F0666B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads