36bc33f7a17da5ebc7c3eca08fa1930bbbfee9b5c93aadf4451a55836f3f46d4

Resubmissions

21/07/2026, 04:38

260721-e9p71ae17q3

21/07/2026, 04:35

260721-e7tgmse15m3

Analysis

user interaction
yes
max time kernel
570s
max time network
558s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
watch.html
Size 1.1MB
Sample260721-e9p71ae17q
SHA256 36bc33f7a17da5ebc7c3eca08fa1930bbbfee9b5c93aadf4451a55836f3f46d4
MD5 0af025d0c742e6dc395b18b982816706
SHA1 df183f86c3769c9483d13568b7dd1bfadf503e37
SHA512 37918614a892a6dcbf0cf49b114dfcc0803dd2918e6c93d1598c7cf3cb9ae7fc42af2ca5d6caa4cbd80d7e4dbfe84ff89cb60fa3a34d27feef7c1bb60b7f194f
SSDEEP 12288:RVYtgztgMtgXtgQtgetgttgjtgGtgKtgutghtgRWuqZ6Lknb9:RVyWuM6LS
TLSH
T134359224186868BA9957E207DDF5FE3F5DE413284BC8D96EBCB7E78C01DC6080DAE452
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2600	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290823297927063"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{5C61469A-F8D7-4EDD-9A52-28509D05CF8A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4636 wrote to memory of 1232	4636	msedge.exe	85
PID 4636 wrote to memory of 2600	4636	msedge.exe	86
PID 4636 wrote to memory of 4808	4636	msedge.exe	87
PID 4636 wrote to memory of 2368	4636	msedge.exe	88
PID 4636 wrote to memory of 4808	4636	msedge.exe	87
PID 4636 wrote to memory of 2368	4636	msedge.exe	88
PID 4636 wrote to memory of 2368	4636	msedge.exe	88
PID 4636 wrote to memory of 3344	4636	msedge.exe	90
PID 4636 wrote to memory of 3344	4636	msedge.exe	90
PID 4636 wrote to memory of 3344	4636	msedge.exe	90
PID 4636 wrote to memory of 1640	4636	msedge.exe	91
PID 4636 wrote to memory of 1640	4636	msedge.exe	91
PID 4636 wrote to memory of 1640	4636	msedge.exe	91
PID 4636 wrote to memory of 4680	4636	msedge.exe	92
PID 4636 wrote to memory of 3508	4636	msedge.exe	93
PID 4636 wrote to memory of 4680	4636	msedge.exe	92
PID 4636 wrote to memory of 4680	4636	msedge.exe	92
PID 4636 wrote to memory of 3508	4636	msedge.exe	93
PID 4636 wrote to memory of 3508	4636	msedge.exe	93
PID 4636 wrote to memory of 4008	4636	msedge.exe	99
PID 4636 wrote to memory of 5116	4636	msedge.exe	100
PID 4636 wrote to memory of 4008	4636	msedge.exe	99
PID 4636 wrote to memory of 5116	4636	msedge.exe	100
PID 4636 wrote to memory of 2156	4636	msedge.exe	102
PID 4636 wrote to memory of 2172	4636	msedge.exe	103
PID 4636 wrote to memory of 2172	4636	msedge.exe	103
PID 4636 wrote to memory of 2172	4636	msedge.exe	103
PID 4636 wrote to memory of 4448	4636	msedge.exe	104
PID 4636 wrote to memory of 4448	4636	msedge.exe	104
PID 4636 wrote to memory of 4448	4636	msedge.exe	104
PID 4636 wrote to memory of 5136	4636	msedge.exe	107
PID 4636 wrote to memory of 5136	4636	msedge.exe	107
PID 4636 wrote to memory of 5136	4636	msedge.exe	107
PID 4636 wrote to memory of 5880	4636	msedge.exe	110
PID 4636 wrote to memory of 5880	4636	msedge.exe	110
PID 4636 wrote to memory of 2204	4636	msedge.exe	111
PID 4636 wrote to memory of 2204	4636	msedge.exe	111
PID 4636 wrote to memory of 2204	4636	msedge.exe	111
PID 4636 wrote to memory of 3308	4636	msedge.exe	112
PID 4636 wrote to memory of 3308	4636	msedge.exe	112
PID 4636 wrote to memory of 3308	4636	msedge.exe	112
PID 4636 wrote to memory of 4040	4636	msedge.exe	116
PID 4636 wrote to memory of 3060	4636	msedge.exe	117
PID 4636 wrote to memory of 3356	4636	msedge.exe	118
PID 4636 wrote to memory of 5988	4636	msedge.exe	127
PID 4636 wrote to memory of 5988	4636	msedge.exe	127
PID 4636 wrote to memory of 5988	4636	msedge.exe	127
PID 4636 wrote to memory of 1108	4636	msedge.exe	128
PID 4636 wrote to memory of 1108	4636	msedge.exe	128
PID 4636 wrote to memory of 6116	4636	msedge.exe	129
PID 4636 wrote to memory of 6116	4636	msedge.exe	129
PID 4636 wrote to memory of 6116	4636	msedge.exe	129
PID 4636 wrote to memory of 3000	4636	msedge.exe	130
PID 4636 wrote to memory of 3000	4636	msedge.exe	130
PID 4636 wrote to memory of 3000	4636	msedge.exe	130
PID 4636 wrote to memory of 6112	4636	msedge.exe	132
PID 4636 wrote to memory of 5280	4636	msedge.exe	133
PID 4636 wrote to memory of 5280	4636	msedge.exe	133
PID 4636 wrote to memory of 5288	4636	msedge.exe	134
PID 4636 wrote to memory of 5288	4636	msedge.exe	134
PID 4636 wrote to memory of 5364	4636	msedge.exe	135
PID 4636 wrote to memory of 5364	4636	msedge.exe	135
PID 4636 wrote to memory of 4508	4636	msedge.exe	136
PID 4636 wrote to memory of 4508	4636	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\watch.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92f08c188,0x7ff92f08c194,0x7ff92f08c1a0
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,16475207507087644008,4848799618784574216,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,3230077202342615610,16229606408036368293,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,144645094365821345,9545993105005465460,262144 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,2977475382598401740,12862627647050515515,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,7342996312844771453,11339407698848076675,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,798303378027811375,13897402282625602369,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4108,i,4956032328829471822,3073608401998258994,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,16090359937959156610,9003325321782082653,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,2203153576739709132,9402705575287551316,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,9315646072209908543,4548966715642496342,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,9315646072209908543,4548966715642496342,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6304,i,10226073947290626474,12557571911156356355,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6360,i,11075394024609201004,13107455476964087096,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4220,i,9527588154824614758,15755427929304378225,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,15412932068234636728,13016940760320027616,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6888,i,8679477192234698972,6529654964432347042,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6736,i,230490295985820920,14138766428634450078,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,13593190514195966508,10679353227339190189,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,3343033351059176294,9623879360931443230,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,4198771215535500038,1495625292900986248,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7164,i,18318070590654512386,12782620525427238745,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,3880397322487219667,13797099592363815406,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7212,i,18157913278281078944,15411214788638693883,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3956,i,9812460438082290022,16624591166368362391,2097152 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5168,i,5704606896042003553,12391924833669494520,262144 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,12020405606995910097,8768206084627160547,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=1044 /prefetch:8
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,4947501286164538294,6486079262363276823,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,17730278034671232354,17837867548285044614,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,2949566991833169566,10157882330527498275,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,3276924954320402488,4468730923268725325,524288 --field-trial-handle=2436,i,12366363831047830940,8893859084234039386,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:2992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

76cb047d-3fef-4f01-b632-619473b6ef7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\76cb047d-3fef-4f01-b632-619473b6ef7d.tmp
Size 392B
SHA256 aa9c5a2a1e3675b0fa5c6a95ecf6befdfa8a9dde2dba8ca7030265c8536d6cfa
MD5 15fbc2bf6a21ba3f70b151a8708f3ed9
SHA1 38659673c6c3a9707eb5febbea7e290fcb53eae2
SHA512 6a0a6026c499126f2d50c38f57ce6dab7588b57e127cb9313be9fc2ebdc5f9d9ae2ff557316e2b37561988278265239e263989ecc66e22643217992b712240d5
TLSH
T185E002411741107EC03C033540B71B703FF5901022FA0705562601480D733043B30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 15fb0211c8eb377a1685da615906bd906df175898b2623a52b37d8e40cf5e556
MD5 64c9985041fe0f3afa51871385d5016a
SHA1 776bed5d51017133eb4e4660b6604e3a7241469f
SHA512 a6874719f7bb1f7644f1a44b4caf67bc37e7a8b3d1d327bff3b1210feb5fa2c0503a268c4f1ff9def41c667c89d68089ed94bd5122c8b927cce8e792f9429ff3
TLSH
T1F5E0DF752FE8C5EB036096C6CB599254D12473AEAB8DE85AB33CA8BC3440420C3BE498
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 402KB
SHA256 fface945db4e82dba7ef85512fdad2d719f45c0abd77bf52ca2bdc46c3832a3c
MD5 d4a441d025254930895d41eb02bc0f25
SHA1 14237132e91fb0e25761c58182c9a5c25dd039df
SHA512 0d496f465e98ccd613e70892514d37384c1afd7a7065676d56d76792e18f273ace95b55d1043edd31de04230cbd91fdce9a71a445750efd54e42d540c4159eba
SSDEEP 12288:svnfY0y20mRn1tU0EmlEDaOXzXzDK9xd8WPFxrJpjMJNg0CP:SnQPa1tlE1DaOXLzDKrd84Fxr7jMJ5M
TLSH
T1F5942387CA9DC9D38E6B739D07CC763A0569B9D7C45BEAE72002B0372392AF272405D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 67KB
SHA256 dc395aef9b7e763bef7ae3cbb3909a7091e9a80fe343c8babaf4710316e86888
MD5 9f905b65baadd82e1896c5b55cd9dafc
SHA1 0f5a2cd0361b3dc64fd871edfa4be7e09e14fb3a
SHA512 38255d1cafec27b6050add25b00b93b0a931114000024f6d4adfe8c7302296a84e87bc193b3eb95d0b686c83b19780f941dcb548e1c36da2d4aa5199e339a97f
SSDEEP 1536:SPenObz5SEnb0Lao3buyrp4h78CBuq0oN0jfeoUPoYW:JMHb43bzuh7jF0y0rDUq
TLSH
T14C6312FDE1876F927E060404388027DDA11F79D73D83EC931626A59CBAC54B38764AF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000de

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
Size 16KB
SHA256 b17b23990851346a40d733da642788136fcc9913a5e690865be124637f16bf66
MD5 e97f51ffddb5102e601f568bebbe6656
SHA1 80b1ed86320c70b9a17f9d5981a132b9a4a6afeb
SHA512 0561e3a1f680d2cf8fa0d19282359588fbdb3a508831810aa5059d6b7b072c840b06323d4ce4c66464ab016fdca47bea6eedbd765acf8c6a503ff2edf91d5fb8
SSDEEP 384:PUsJMhkvuJpDKSNflVDtakrzt2ro/zvllLMZ3u:8bz7Y0ztmez3LWe
TLSH
T12872D0A96EF500237B2B8CEE15D083948E847AF36D6B7DF642883067849C6A17D1858F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 36KB
SHA256 70289f97f1db148704b760df842c1ee143660df16157668a86bf1fd97821b637
MD5 33772a8f0ca4846e29fa21fc1e60ee0d
SHA1 6c3115f449d6abe32082daf717abd5b23dff6ca2
SHA512 c2c2a3361e11d9b2a11eb1f37447c6bcc062190eedc12e0f1d54e37271cc64c666c06231cbab08b755dae452de02ea6f91a00e4a7269b40708fef3c79480d2b3
SSDEEP 768:CeIopNYtZl7AchvSvtpzLAiLwM0e6BThtZvjvCmlmHnRpRNsZKZcxu8:LIxLllS0ZBThfamORpbU/s8
TLSH
T1CFF2026868104E9ADA7270BF4EB5198FAB4BCBB4C91F5582D5E401490F9D07B2358FF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
Size 16KB
SHA256 abf44e4e9928c3c6141c00842746c42192078d699b8e8e65c4f7e630aaab0210
MD5 e6e59b39017f4009a0a3327967431678
SHA1 7c69616071dd68e02e4dd2b6e07281a1b627f706
SHA512 4fd7cdaa93d86fa40ebce2c45f9fca7cfe2293c60c0b2d84ce0cca3cbeebf5fe60aeabaf3568f7d73e1285a088f9e1c0bcd77c2731ee24981e393347e7cffcad
SSDEEP 384:pOibbuO6oghUlywYvxZyNCQvLm0HP5a17dO+:sYbIXJYfvLlHRafO+
TLSH
T1DF72D09752C0858B1C3003AF10ED05C18DAE32265B5B4FC1D08FD6EA96E2EABD52B727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000106

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000106
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000107

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000107
Size 68KB
SHA256 6dbc461a49b2a4d4312bd272383ef4a0a4472999baf1423240a576ab6953ac99
MD5 5f16a2f0c29d5575bd2335f64edffdb8
SHA1 cb5b12fc3f8de7d854219534d661942884b6ab58
SHA512 13509796fa872e1087322da39d83086c82291bf49a64c704e6e5e05d1d9df1ed1216b3b2c29cfd38ced066d07def40b0e30bf3a01bfde3f49f998b22d3a803f3
SSDEEP 1536:6nS7ChLVxkopkMxOIdzaA79aelJcW1DNxD:vWhLVxkopkKBwvelJhD
TLSH
T19A630262A99C291E0B345E5B2FAFB275A06CDF0E1D21403D1FC483D925934B50E6EEE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000108

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000109

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
Size 38KB
SHA256 4392ddde86f22a921269feaf788a13509946046047df6926017041ff33d0293e
MD5 04bd0131c5ce154413f71d20017679e6
SHA1 a83459180dca62eb56edee213409f83e12fa6172
SHA512 5818141afbbc45553e72fc106699d9357437f1c2751751dab4f51ad7127e92a6ff85fb67905073addfdec5dd581c8c22ffc8dd6b85919d6a1d72550ebda5376c
SSDEEP 768:hrGgBfBZrOcgLWz/irLn2nTXzHXP0JsdgCQL1/UAv73nWEjvvuUwp5:hrGA51OQ2naXzP0Jsdns73WEaz
TLSH
T1170302AD7D526331E7FB684CC972AA1340C424498063CB1FBEFF098E9D44A4FE056A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 da411123bad6cf773b4a92505d74b727d25db58f86b1fed5ebef2e5c58d9b2d5
MD5 bb66b64d00e10e7cd52ac23f462f2ab0
SHA1 b070770be75ce2e7f172a6107ca170c28a2f7679
SHA512 dd100c927020f76379485f488ede0923eda498b08cfe15cfa523c8702db11919b6272296c4e16f1e12ded9628099ce777b57dc20013b4d1ef0fc0df6ee3b1dc8
SSDEEP 192:mkxUaIW+nyCM4ywZjaflsUbrMrxDPzhHHP0QyCNA+m:XUaZJCM4Pa9hsxnhHvYX
TLSH
T15B420A7902C2112AEF69843986BEAD9576E0A0F9F43B1F4E5419D4BF18377C3660392F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 567db0603bd96e542283703b56e110b74bd35e96dd49aaa5f493e83338f58df7
MD5 ea15c7a7c9648e478f84153cbb659a85
SHA1 2a9a78ea2b4d685ad73978955394342ef6842ec9
SHA512 1b8bfcc27b37549dd3b14201adca4ca184b00b01ad6d9dacc92ec224643abe0a956f8d87ce6b17e864d192857f8b8ac3d547d4b7704ff311afc822ef999304d2
SSDEEP 192:TSHTIAbxnEwCM47wZPWl9Uk8d0qWfVHPp9y0Ng+:eHTjbBCM4YaltZVvW0
TLSH
T13532C67902D2112AEF69847986BEAD8676F4A0F9F43B1F4FA801D4BD18377C3061352A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5927f1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5927f1.TMP
Size 3KB
SHA256 0215be5b567fb1412d5b187414a054e7122bbd51bf8e9fb6ae23083349503ea5
MD5 4e280c2d8405ad70ad91dc9fe619b48d
SHA1 b9e05c1feb0d85d5ec72266533d6098ed8829e0e
SHA512 c7e70b54681db41273ce629f715342e50a4d5bd57025b23f2795d532177517973d410a348366e8e5b67f327e32d541ddfa433c5cce56f6e0bb74a52fd3b28608
TLSH
T1BE8119BA225242A4FB9101B1E9FB9AD2F071E8FEF5BF0F5E8550487E4D30393451972A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 87f44b216c148700cc4118e6a4e34791d8af955a2fafd3f972f0e21cdfca1708
MD5 94cc4755bb60d6bb8721482820861d08
SHA1 3ab99efe9ae96f71730159017dcbdbc1b2ec9ea4
SHA512 d99117d05ac9451c171d646578c427704ea0ad35ada9c33a355a7fd3624ccc9e83120c9d5c9789a94236223aa7dec3d3dba3266522e9390e2fe13cab49b21afc
SSDEEP 192:DTPWB4IV+oiM3n0RI0XLJvvPYhGuAq8fnX9HdcZjc75THtI/GtzivgkliRxO/vjo:DTPWBlQoiM3n0RI0X9vvPYhGuAq8fnXf
TLSH
T16E02AFF743B1866EEA1196F09A08AE1BCF5C0515436C386989E0BF17D3F3472E151B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 9748ef5b0c9374a18769ee5f06626c4be3e1a45be78e95c1a89ed0635f2858fe
MD5 4df20fcefbc3bdac2aab8f547080ab6f
SHA1 310fb10428a3452383422c18c156aa32e0ac0edf
SHA512 3143f33c494614aab8ed67cfd75d2fb155b49d5c76dc351a96da59d00432dd92d117119fb5884fd4cfa070a1c6566a21a5361a70afb97f01f5d13a3f0a197744
SSDEEP 192:DPLSB3I6+txJSqF/FqenJv03PJcVhGuAq8fnXeHdcZjc75Tut7IGpzaKvgkyEXBc:DPLSB4vtxJSqF/FqeJviPJcVhGuAq8f2
TLSH
T1C3329BF383E5866ED91256F0AA187E1BCF1D0515876C3C1A89E4BF4BA3E2471E101B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 00e6b2161a623487b29d607f69b85a794bd748ef6517e4b153a083e37dd23b3d
MD5 7fd107c1404df7f74f4759d3ff6d8cee
SHA1 acf9b3c8a898442fba5db3a05feb060bc4b24995
SHA512 a604cbd831a1f8f1e1f942e9a01b13b640def23454f9a96dc8dda3764a0198bfa864fa9617234bf80c464fa18e878436f063faa4327f4a3a96a80da2ec5f52c5
SSDEEP 192:DPLSB3I6+txJSz03PJcVhGauAq8fnXCQcHdcZjc75Tut7IGt8zaKv3x:DPLSB4vtxJSziPJcVhGauAq8fnXCB9c2
TLSH
T189F1ABF783E5866DD91152F0AA18AF1BCE1C0512436C3C6A85E4BF4BA3F24B1E141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 764722d7d0283fc1ceba8b85d7cc1496c77b9cf75aac4f5e1223566bf0b4a037
MD5 d17cf72ca3db440c71fc522d01b194bc
SHA1 0040454d75b3063aa632d4f24b701e0fdbccfde0
SHA512 bf9b1849a21c446204b1c3c76c96cae6d42bfa8b518b54f48e7d1a803e6ccd8a28a7fa78d0fd619fecc142a32c9b5b0ba6050158eb9673906dbc75ebfed4da23
SSDEEP 192:DTPWB4IV+oiM3n0RI0XLJjvPYhGuAq8fnX9HdcZjc75THtI/GtzivgkliRxO/vj7:DTPWBlQoiM3n0RI0X9jvPYhGuAq8fnX2
TLSH
T16902AFF743B1866EEA1196F09A08AE1BCF5C0515436C387989E0BE17E3F3172E151B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 60d0b07cde0f5e283cbbc5fc4f925d109fd45f7bf2259619f4ef7be2bf6fde29
MD5 c3f28e2ff80cbdc72aef19566d958c49
SHA1 cb5cae122415e3e76f2bc43e3df07ed18eb98789
SHA512 ff936b02fd0da59dffd9d5183ef4d1fe6ddc4de90b5fe42f414e9db6c9700806820f9fd5babc34ce9fa78f5d76411da52faa08ff2f17c203aad5f5fbf34a1e95
TLSH
T141D0A923320120F9A67CAAA680ABB8CFDB2600610812DE9610A0A99C1A268BC0517552
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 6ac3555f1c88887c68a6f166e145e49356031f58b198154ac5778ba7c014a0be
MD5 2ada63ebeed64f7ce661e2c8a27a1a43
SHA1 26993755415cf30de764415a1bfc3a58e6c54a5e
SHA512 f1400e972ead8866c0f2c860d9aad64935e5b6e73b3127aba7cb288d7f7ac9b0aa4eaecf7ede334b467d6d4ef6039f0b2f62be0655705db393950d8ea93a7dcd
TLSH
T198D0A963220430F4A578AEA280AFB88EDB2A00210802DEDA10A0A9981A3A8AC051B0A1
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59069d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59069d.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d7535aad87d54b842b352939c62b78abb67dd177d087b35c00b251d70f614ebd
MD5 491697613af375fb83b5a6fccb4c4e9e
SHA1 373f52b4e0567b276c6c1f433a2bc1fb2b8a132a
SHA512 8970ae806a4146b7c94654cf49ee909b5b9b57822c03a7ec37b60f0e58974cf8ad13d5413574cedfec72eeecff43be18c6fa49054e6399e2de6d9acf2925fbda
SSDEEP 192:sxZoukROyM/jK1Ml8MkS/fU/sok9jVYIdpdwoHW6+WNybf/YvC2jjEvIgrJ:sxZouk4MS/fU/sok9rTHbo/IY9
TLSH
T14642B6166A349977CCDBD20DFA55BB53D6F91462E3900E44A9FCCA0C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 32f215629a8871e66124bcf745414a3bfab62918f03af179c855edfb448daa28
MD5 9eed097fa64681434f85270ab1ad5778
SHA1 7c4d6c759db49d88ca11b00137025d5ea78d807b
SHA512 93917e64831af94700a39e6ffa1294b96104274af2a89af0c53c47c1ea78bf3799093cf5427f44d6a99e3a03f6e0a8c9a53a85246a676dcb74f188e1cab61e16
SSDEEP 384:sxZoynskYqZm1S/fU/sILkkVlb2/Xl3mHbccX/BYslIAy:sPsk/Zm1S/fUYkVBsX4HbpBllIAy
TLSH
T1FBA2E452B120C8B7C8EAC91DBD357F52DAE954A3DE504D4C99FCCA4C04DAAFD271282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fd2ce4194ed6b99416db58825fcb9e043554d2ba6023b640313a73ccbcd0bd6e
MD5 a23a33bf1a87262ac9b62f88e3b08547
SHA1 48382c68c1ec93263642ab21b0000fff8b468ca1
SHA512 1c5b55ca12923655edd6c0e938e1c61da5fc18ea5abb03e00762cba7f7c0df1eb9db9c1e0b5b39016e2f3425aada95dfd3396a18fd82df171f79befd8536b2b9
SSDEEP 192:sxZoukROyM/jK1Ml8MWOS/fU/sFeLk9zVYodpmmwoHW6+WNBkiDbf/YvWa2jjEvO:sxZoukYuOS/fU/sILk955HbL3/JlYO
TLSH
T15D52C716BA349977CCDAD20DF955BB53D6F90462E3940E44AAFCCA0C04E6BEC621781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 2a2fcba86cdc1684d1a05e3a13c97201bacc4ea13f180ca459bfe282a0efe3d2
MD5 792180a094adacdada575709a09a0e71
SHA1 2426b1c6ec49ef29462ab166e6d4770b5fe060ca
SHA512 d811d3a9a36fd9a6a123ae6921b041d42e7f656584d447a1e9ab97e12198319715f12363c513fb996b2ff4fa46b47c65273b4e7c8cba5f0bed897314a3dd679e
SSDEEP 384:sxZoynskYsm1S/fU/sILkkrlb2/Xl3AHbcM3/aYn2/VAy:sPskJm1S/fUYkrBsX+HbzaasVAy
TLSH
T124A2D352A120C8B7C8DAD91DBE357F52DAE954A3DE500D4C99FCCA4C04DA6FD272282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 da33344c8efe5a150e7323473fae1f0cc9e9544375030b5d257c36e585dcfd5e
MD5 838ed6141d88100e9f40a011cf6f84ee
SHA1 2416c64f4f0280654e606b360bbba823de119f7d
SHA512 4868631881c4364d938d94b0abecfbd77dbdb24294227bd04a3e4820aa53e7ed96edf1121b3a17f0ec5b3fecbcbeacf01aaf387ad8ef75cd77105e078e44dc16
SSDEEP 768:99seJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp+ro3i:99seJ3xWvhfynu1jaVcL88pVy
TLSH
T179D20B2B280CCB7E4F844E6DEC266F966EE801CB67984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 781f229f8980c13a1a31897370bdd578387f65b296cbfd2e4201713a5491bbbf
MD5 3a336c9f76c97321ca3aa1ee417cd149
SHA1 e4aee3e91392c7602eed1c933f1c49d3b7cac518
SHA512 87505ef6b1bbaba703dac18c9e5e1685722cb2a02f73f056b90807abf05a5391ae2282ae4eaf34c0851ca4036e9eb023bcc12f9eb72402bb0bbc4ac8db2a365d
TLSH
T133A0022556C13841C00A63F669D6536132118A900341572781F0064CCCF1B46458204D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 c68b74e38b952612c356b557a73449c33cf20879379f1f4b58817f74231b4005
MD5 cea26f02ba27ad53f5cab8483fcbe4c9
SHA1 640fd490aaac4904a831e932d46c43ee4fc1f41c
SHA512 dcbc0e1a5f42af22a46833b2f4b2724bc0297f98b4696f1590fea0109e8c97bf91a354ac6246de6f0f2b91d9c84ce4024e1beb13efc5a4314b2e7fcc8bd00328
TLSH
T156A00434DFC00105C45331F11F5347455300CCDD3110530FC0D14054DD705444F4310C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 1KB
SHA256 07fa91205f2d20c851fb2c91d74a2832b3578c8c95121b6d55520ac4e86a8d6a
MD5 aa9caaf17e4ef003a7dfbe63d4fd5f1a
SHA1 11ba2818fcd52c7949c4c9ef2c795d27a167f6d0
SHA512 f7336e7b40631e3046e056a6b437016569ce704884c364f261e9588062de014897467c6a2d3116f24a35f9854e9cfb60c7c95f7f75bc3288f16df48346f68fcb
TLSH
T16A31868C8E90595FE85944B711F2B5E43370C8DC072163635C3C36352D373496A4B2DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 2KB
SHA256 b153f8f68477205c2d08564081703ddea531be63b53349894d2d2f6b322415c6
MD5 dd0b7ce91e78a4327315a8ac78ce4773
SHA1 06f63a03e86196809e53a9f26b1578104d459008
SHA512 06509ae18115cd4f238ba91f97c69767e6b5f2c51dfb92356970f1371df4baa07f350e67f8db361a083b6866af013aa5557b47c70084533118738239ef2f76d5
TLSH
T1DF51A98D8C850E97DC7C107368FB1485737628DD46884A0B6DACB674BCC322D2D1B915
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b2b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe58b2b1.TMP
Size 1KB
SHA256 7e14a5e5d6915839dcd2ec5492ba6c91acc4c6dd59d22ab55940b905ace890dc
MD5 742e3212f6c6c94fd43675bdba076c88
SHA1 4e20eab36067f62e991b267d8cec3e6e198c8b60
SHA512 ac9609b486c097d854c9c5c37963697e4d3262706b5b544bff0848bf84193c44f51e8d95a6b7c7c721682889c726c8b66e92a51b77621e7025f84e4200b486fb
TLSH
T17A31358947915A0BF88041B70A93B4F87330C8005322B7D3A97C26395D3178D5F4F1C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ca6fff2f20479866429fccd566e208363dcb918dd9dfdaa5daf6687d8124c892
MD5 ce6763b75a8f6d321a100c7c83b75028
SHA1 ad56f1c1cce0ade243030fbc27f8ea33d74fba91
SHA512 5a4bc98981daa463feabc700ebcbf48da9c9e5cae96a42fe3e511e1811ad4dac4598cd3126610aabff9d5d4af6030322fc522a28dae13f515ed8a702ed13b400
TLSH
T1FFE0D8B62DD72454BDAFD3D2643084900A4A7499E945FC4E555AF6871072355309AC25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 102097ba978ea3d9261e3f7b3adda881277b5c629720a548a46949e26ff932fd
MD5 602a0a5fdee8dcc83127a39dfe52d1a5
SHA1 2e3bb3c7a8732a6ac1f2889c3bbf8a9851f2e009
SHA512 9e2bb3e1c8245daa7f5a89a05ded1d05f56f3d1b11fa6a541630cce3ed3bbed90a7040d1463feadb2e642a9c7c36c8e22ae040469f153cb1955564ea4ca4d39f
TLSH
T158A002138D95B049F005A27490A149C43224C8EC072D221182EC029C8890A8045F30C5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590814.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590814.TMP
Size 48B
SHA256 69e35e27cc429ad6bb74f498ec08251671c96ebd96f537c10631970dcae4969c
MD5 8a13dc7f4285ec28e7756d7c752c5379
SHA1 e928d022848a28c9f99fef7d972602ab26526ee7
SHA512 1f871649d8968cc8d81e7b709245207ea87ef916b71521d08bdb4d2c5d8b2097c3414bf97d75286fc177efa5c51c72ea7baae5780b7c53a456e2b4043bdabdeb
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c3a36d531833693c31b4a0eeaa62d3770f0e0ba067cfcbde2b2a2751e5964725
MD5 2736705ed9c26825dd613a30c27cb909
SHA1 c41f5ca4e9d768ed3b3c82f02546d8b44f21d79a
SHA512 7a9d6fd7ba116dbaeb2f8b1ac40344544ba5bb162884dd50076d40279a5ab13029d2031fe56c5df69b05e6ce4bb291741d12598ef9954c8f21bbe5a9db2b7ec7
SSDEEP 48:KYHIhKggkXyBOIHKnq0jy9TINK4UICjifTtBX:KYH+KggmiO4KnqyeTeK4UDjifTtBX
TLSH
T11C910D46343F130329BD2848A7A19E364E4271A37468A5BE7BB844A24E27E164DFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b987393f-fa2c-4dd3-91e6-958a239fac05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b987393f-fa2c-4dd3-91e6-958a239fac05.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 18399a02a60de9d2f977ebd3ff8265c5bf244e6c0107566245f9ce57c86738ab
MD5 6eef89312924e6c4fd4c675c14f32374
SHA1 af91a8e2f575d10e1beca53c95cce4ffcccfe35a
SHA512 57af18b4301e62bab6bce34b02103b69c599110a8d4b328fc7a637fac550b81aaba310a313168c1814f8034efd587e62d872f4068f36f3a02d1bea1678ccef20
SSDEEP 384:etNn/s3n9SfsNvgjTbl7Iivn/2xOxzL2dhg0:ej+9U3B3//0EL2Lg0
TLSH
T183625B76B8259C6B9DA7A149F14A37071FB881ABD7C52E44E5EC2F0C00DB3AC5307A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2ca1b1931430af6e1ba122e810f0d9b6759a352c8db2e928b9afb450e9f14e46
MD5 7c238e4bbaee9ac182e8de880976c9b8
SHA1 3a51f0ce402ceead79af9f2439f742293fbbaafc
SHA512 d6be9ab2ad22dc41693d6dadc4db47b2a5865d525fbe8427077d4b7b09b5c7f15b8261b6081edf2943166e7bb1672d6b0f45c4382860c5147f027c0cacdc41e5
SSDEEP 384:eiF1tNn/s3n9SLzsNR8TUNTUlIlgjTbl7Iivw/2xOxXL2dhg0:1F1j+9AkwgCB3I/0eL2Lg0
TLSH
T176824A37AC548D7FADA69A88F54A33075EB441ABC6C1AA50E6DC6E0C00DB2AC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 061e6769c82a246cc0136f4fa81f3ef1001251617980ab83f496c290b37ac06c
MD5 97b4f2bb7c187af6fdce889804d15b92
SHA1 60d048e3889fa216e2d812ea31414ff72f2c29f0
SHA512 c3a6672ed3f115f360cdba1ccb58d9d53e7866dcf795f4e3f704f562c3131b03c1e926e5bb094fe6f7b3992876c05163f87604877a4bf6e20b1ff6beeac6fdac
SSDEEP 384:stNn/s3n9SfsNvv5vl7IijKexOxzL2dhg0:sj+9UO33OsEL2Lg0
TLSH
T170625B76BC259C6B9DA7A585F04B37071EB881ABD7C16E44E5EC3F0C00DB2AC5307A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d17674cd08be13dd1b8cecc518ebc90af576a04527aafb754c4c2698fc70402e
MD5 e9cef2a94a1765816d2dc4944a3c141b
SHA1 697cf6443dab2483966a0978fd4cad7a8184aaa2
SHA512 b233d416299bac5b31abeb31287f44d11c1220214b079e06ddfc645da2170a774ab524259384a6a5036bcd61246ba9e48bb1933fe59d381a99fba7b9c84bdc32
SSDEEP 192:lONx6vMtPQmiUyIpThTKcCOxV847Li7U/u:lONx6UtRdTSOx1L0U/u
TLSH
T187020936FC786C7BDAA7AD46F48A271B1FB451ABA5905B50EAE82F1C00D724C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 27ebad4be9e14f2b81cc6b41157e44768ebba46de713b64fe3b8d15c5212067d
MD5 852ba1a3fbd26e54750de8aef5055fd1
SHA1 43a86688b9ec04524e775fa5a7a659d765f74ec5
SHA512 705d583176b284cf431ba5fa5ea45b26d29411623079fb9f5fd56379f623a971d4da70e65a53e77a1064f9648a16104506469987d6892e41948c0955cb892c92
SSDEEP 192:VON66vMDPQmiUyVpahTKcCOxkm80IL2cqvhU/u:VON66UDR6aSOxkL2dhU/u
TLSH
T13612FA76BC649C6B9DA3B541F48A33171EB5826BEB849B50EADC3F1C01DB25C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1f57d7e662ee9087638f4478646f9a4cd214142a72e1963290948f183899bcb5
MD5 106424ef60c7585277f3d26dfb034d7b
SHA1 7129315eba0f4bbfacd2bfa0bd05076e42630d2f
SHA512 1371c846c50b0dad4c709c85a9ec7a8a2503f3baae97c491e0858185b67989f111d712434b62bda163040f405e0120344818f59201380f66724969c43199a47c
TLSH
T114E001415641257EC02C033540AB1B702FE5501422FA0605562601481D733043B30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8963067b11c3da85802ac0985f608e91b2837d3f6b082b95ba0890677a14505c
MD5 1ef621630119000b6d13ff28884afbe5
SHA1 adb86b0e8282f4d713c70dd9d3d293636944b237
SHA512 3a3fe6fe7d1490a58cbd5b57879fc71a08f4a8b193509dbb485648637ca5e9c9a123be33d0eea19c8b3423748a0a865b89553cdff0e02276df2cc0e1e6329c37
TLSH
T11EE001429741217EC12C033541A71B713FE6901422FA4605562611482EB33043B32F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58c0ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58c0ab.TMP
Size 392B
SHA256 e8f0bb596f067a23ffe7f2f378c44614e2568de36e5473ce977a15d99067e5e5
MD5 11690ad5e3d89afc6d0b4d40361ac5b9
SHA1 ce7612c80b1b75bb20e4ad949f8ab9bfdf192873
SHA512 896267563d1dbcd57258075d5ce94c7c2041ea2beb3d2a21e8c76bd502de9d8385e7cfd7b196043065c8f37257b375296c1dab43848918d065311b1a579d0c6d
MD5 SHA1 SHA512

Submit Download

d87809af-3c87-4d18-a66b-73bf4f529d6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d87809af-3c87-4d18-a66b-73bf4f529d6e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 06b131b4f3a777085aab20301cf645efd83d84738cb135855ffe611126b96ddc
MD5 429cdaad23b87cfecf704fe69869bdec
SHA1 09813e9d81bdd03ed23bdc1167633178469fc2ca
SHA512 10005d4cdca975669cd9bdaf09092cb974047dd6160fd53c7ebddb896bfbdf4e0f0960991b89758bc662538f36cd353aa4266d5b67952e413a63628e29142e2d
TLSH
T1C1412A6CA6F91158B3B76E16ABF6A86D487B7C772F46D45E10010E4F0A22B40C872733
MD5 SHA1 SHA512 TLSH

Submit Download