hxxps://mega[.]nz/file/R2ZnVIqC#sEgxaBuqgjlYXX7aMIMwlYueIcM6mH2XIaVnHs14LEw

Analysis

user interaction
yes
max time kernel
60s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 01:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://mega.nz/file/R2ZnVIqC#sEgxaBuqgjlYXX7aMIMwlYueIcM6mH2XIaVnHs14LEw
Sample260723-cczztsvsfv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1676	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292454087256116"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{4C2B95AA-E0E5-4592-A05E-157A189356C3}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe
784	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 784 wrote to memory of 1712	784	msedge.exe	86
PID 784 wrote to memory of 1676	784	msedge.exe	87
PID 784 wrote to memory of 1872	784	msedge.exe	88
PID 784 wrote to memory of 1872	784	msedge.exe	88
PID 784 wrote to memory of 1872	784	msedge.exe	88
PID 784 wrote to memory of 4384	784	msedge.exe	90
PID 784 wrote to memory of 4384	784	msedge.exe	90
PID 784 wrote to memory of 1680	784	msedge.exe	92
PID 784 wrote to memory of 2900	784	msedge.exe	91
PID 784 wrote to memory of 1680	784	msedge.exe	92
PID 784 wrote to memory of 1680	784	msedge.exe	92
PID 784 wrote to memory of 2900	784	msedge.exe	91
PID 784 wrote to memory of 2900	784	msedge.exe	91
PID 784 wrote to memory of 1452	784	msedge.exe	93
PID 784 wrote to memory of 4344	784	msedge.exe	94
PID 784 wrote to memory of 1452	784	msedge.exe	93
PID 784 wrote to memory of 1452	784	msedge.exe	93
PID 784 wrote to memory of 4344	784	msedge.exe	94
PID 784 wrote to memory of 4344	784	msedge.exe	94
PID 784 wrote to memory of 1768	784	msedge.exe	98
PID 784 wrote to memory of 4368	784	msedge.exe	99
PID 784 wrote to memory of 1768	784	msedge.exe	98
PID 784 wrote to memory of 4368	784	msedge.exe	99
PID 784 wrote to memory of 3604	784	msedge.exe	101
PID 784 wrote to memory of 4024	784	msedge.exe	102
PID 784 wrote to memory of 4024	784	msedge.exe	102
PID 784 wrote to memory of 2804	784	msedge.exe	103
PID 784 wrote to memory of 2804	784	msedge.exe	103
PID 784 wrote to memory of 2796	784	msedge.exe	104
PID 784 wrote to memory of 3176	784	msedge.exe	105
PID 784 wrote to memory of 4692	784	msedge.exe	106
PID 784 wrote to memory of 4492	784	msedge.exe	113
PID 784 wrote to memory of 4492	784	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mega.nz/file/R2ZnVIqC#sEgxaBuqgjlYXX7aMIMwlYueIcM6mH2XIaVnHs14LEw
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x258,0x7ffc0125c188,0x7ffc0125c194,0x7ffc0125c1a0
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,3017128472504042685,686871523377448432,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6944476657111652621,1350110385016973012,262144 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,13725130322563333602,14791751160570356058,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,1371484005757646022,7826843509005682866,2097152 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,13310548564346817520,11909071871873590049,2097152 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,13010487971801941430,1515586936648819532,2097152 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,3811151028451024620,3925913224929228745,2097152 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,2749489978782070785,9914060385126072285,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,11571201080065467641,1147477728528958942,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,1388480805923210181,4678981787707354925,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,1388480805923210181,4678981787707354925,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,6582992014219036127,11722143144334831898,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,4111149231001007059,4962800145036037458,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,12049586937450933934,8767911836181944652,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,9093835650149550170,9025496629427059016,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,3069418712973843914,7907215835331876466,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,6436523327607952867,7893290882287527275,524288 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4356,i,1141986739214264359,13602971321580314835,262144 --field-trial-handle=2232,i,11649448292181804979,11378919749761978272,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2624

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1afec355748fa9333274cd3fc9d10184666d1977c1fd41b56214c7269da0fa2e
MD5 b1a1e368fbbfc2861373f4300d283b9e
SHA1 b00bf4d7d995b2d02e5280c8a931cd4320020f39
SHA512 7aba0d507abb46b37a75a08af73f77b3961492097bc582f45c907aee9fd2fcc696c301044c034a6c9cded882e271661774652aef149196d1482c36e1e6866ec2
TLSH
T10D714CB05EDB0563FB60803268E332667731B7FAFC175E9902E24B352795B61F05A024
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5893cf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5893cf.TMP
Size 3KB
SHA256 56d1a9fd624507013845c85b1c2abec730208eccbd6744c77999b2d0bb828de4
MD5 1d58f399f49c4cf8ba1e89a6bb39588e
SHA1 c82f98d7f44dd765c164ceca2b9e4c5b382863d6
SHA512 fa17b1a04b011b434bdbff728255ec1ee79145094570a7c329c8b38f26c42b69377ddd779366aa59ce4d6a106b1e972ed03d31edac95085542e5734fd8747cf0
TLSH
T1D4714CB04EDB0563FB60803168E333667731B7FAFC175E9902E24B302795761F45A024
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\p\00\00000000
Size 1.9MB
SHA256 d02f1fdc592612270e9f54a21d6205c5823af91bf8b6b3c5486b03c8b9ed3ce4
MD5 8e24964b3680ff2fe319e0f3c3a82d8a
SHA1 5ded62efaddb55cedb5001c2d9db440c38afec6d
SHA512 dc1f833abe47691b15b6bc7f7931bdc7b5fe5891a230f803e34586a82825873883e8ec531def45cd222eae723c5e8985d90824d29b5066a3a31b25ce7b0320fb
SSDEEP 49152:ARNipy4M22zZeiXaAPPHxIuR+y/A07lbjWJDbxvXvk:ckKxFeEPvxHbl/W/M
TLSH
T1AD9533E27A3EF70AAE4F38A90773650D41E9CE761E437724CD2870860F725D4B8E6652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\p\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000003.log
Size 9KB
SHA256 59552c00b821e0cfc15ab14dd1ec371eb40d93901ad2a784afde37233505d228
MD5 1066921b95a85e851ce2437ef7f22050
SHA1 b6aff1818b24a978e22b90a0082ea9b5ae574527
SHA512 24fdff374ddcce47026a465ce836eb44d07c14cee32252d7aeb137c6dfc25f5b37696ef109e59ca9da9905b245b156041db5db290b5034e1b46cc5c4fdf26957
SSDEEP 192:OTNFT1Qw1jr1fe1xD/1Oi91i871f451op:K31+5N9/i85f4rop
TLSH
T165129DAFB598CE23D42C9A702E772B914377EDC4BC89904AF4C473E8817CA45DB611A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 2644eab710d7f35b30221a030728d38f1e89fbd758a4079384c3b78b6afb240b
MD5 8049f44a9f053181149cb1be17ec24d0
SHA1 07a7f9d44cf387954a290e995239652c5213603e
SHA512 053c56d7d01c3ee34c2738fc2d7b455809922b35f27eb5df3de212d29d457c167a976da7be7483bce7f4b928690f9caf91aad0d9f41bb80a35a46c18c6cedaa6
TLSH
T1C7E0D15445CDC51F6594705345347F489693358AEBC93D419B0DC464B881498FB7F150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 0b1c1c09c77d106caaf6f20d8fbb87886db455c25c981a28845afeeef0983f3c
MD5 239527d0398c0a228bba3bb8122026c0
SHA1 10ef7e3b0e2a1d3019affa3d8b347245e2df140c
SHA512 616e07920c9b195b716f2c72488e301e8da998130f6d9356a48e7e86bb305bb1a22c7d79a09b574d590ab37785e3beefa015cb7601b31ad26f5ced4867d31c93
TLSH
T16FE0686041CDD61FA09420934538BB89DAE3758EEB8E3C816B09D828B4814A0FBBF150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 68a4e7002295640a5c53cf38b57abe7529109a6b4cc57307881ebadcca7797e8
MD5 43b3cd829fa33dd415071b64fefba080
SHA1 eca18d9c79e8973c5644923f7995db0c889d7b1c
SHA512 50d6120d6699c5097a091326916f1718ef50b73b5d7b78606b0b91c53efc7e262e60328ae5380779e848438888df2ad385395ec3c8914a55a03147aafa0b222e
TLSH
T1DAE0D15445CDC31FA195506345347B4DD693758BEB893D411B0EC464B487094F77F550
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 5d0b8c932bd06383a348b4b15324be909314fa3aaedb5e60e302a70caba2c843
MD5 45d94b35cdb2f81aa8d2c6bb4efe8616
SHA1 497c0c0fa88f6e625c531d14835d764056e43385
SHA512 f267389497a06959d67abf43295ae75ca5cc9a97a56305361e3a59f7b9b0b38f93e9b3276898db438337b82ffff94d92e69a3c11f5a3796213d922eca2931934
TLSH
T18EE09B9445CDC29FA594109346367B4CA693364EEB8E7D411B0DDC64B4C1090A76A350
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 fbf334cb599ca165ceb5fb3d6ec5d295f7675172f425c8b0d72090f5df03e72e
MD5 b552a9f05c1b971b86c61da8db41d8f9
SHA1 d186107dd0ed38a02e03ffe5a054c81f104b7c8e
SHA512 210c10f30bfd45433fddb67c20fab2f51107d45c14880b0984e075610855e777c5fcdcac0661f148b69eb244a4ed75ae3e0b02e5b9ecafe3497e9b0033060c30
TLSH
T121E0226A81CDC25F718821534624BB8CDAA775CADB8A3C812F09C86CB449280AB6B150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 b9317b4b82aad18b8034c47488c635f5384140695371166f4116d34d19b1f0d8
MD5 100b90eff4405dcacb02f4a7545186ac
SHA1 d0775abfb46107c133254dfe25a2c2dd00b6b1b7
SHA512 646bf0b5ac8becd4821d1c04dcf844e6b2fc987e701f22fbaf2b105824842afc7ebea27dc25c72102f70f8a925b7cc224a6a8d1b5484d139e7fa4ba16bff9caf
TLSH
T1B2E0D15895CDC11FA1D4105755757B4CDEE3378AEB8D3D411F0EC464B441091F77E260
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 973cea104160a89f8a6c005999b463e3da3cbda6dc93c2edecb7b085c6286098
MD5 8340ad3d929663c63ab805c87585abd3
SHA1 a3f69baf1e2ad1b4adda6c9a3e9b337bfd81a46f
SHA512 5c7da360e93a470f38ba6d149604e2d13cf334d7a67551662203eecd34d5bc5a766285b5f72c6275e7b839ad883eeccfd4f4f7bff57b07159f9994c5075a79bc
TLSH
T178E0D86445CEC25FA19860934674BB8C9AA3758AEF8A3D852F4AC878B4410B4FB7F150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 bc4ea011e67a5ae0add557475e802abeb0db35e8252513d6e74c11f986cfd701
MD5 949a50325047de498efb0451b962f21f
SHA1 5fad492db4cec5661d2e2c6f615ab2aa02e65e7c
SHA512 84c290d5c3fbb3964dd93df79d26e2c8a983ee9b51b9d8ddfe968842023498d10e8ac2d22345ae4d32471117ce8ef7640e55efc6dfb42ea1499c8adf6e7f3e2c
TLSH
T15DE0D19497CDC11F61D454534538FB4CD6D3B54AEB8B3D411B4DC464B481190F77E160
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 d58d2a7b50d2e625440e2c972f2c33a944e8a815abd71751109d298289062db2
MD5 39bc782ee577a088a10c18d70f7b30a5
SHA1 de3095b376f747bf29611599ff3db313c08f12f8
SHA512 f78a2f56716b56007404d9fcb71f072353f86dedcaf1e8a61298a4e8cf4b5c1f0f45176609efa4f3cb3d5c50e84eb3401379f6da2f7572c62d58770cacf9d224
TLSH
T1A8E0D19445CDC12F6195146355387B4CDE93394BEF8B3D411B09C464B4870B0F77E150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 593f16bf67aa1c7c0f8f88718a3ce4388d4d09116a5752bb5a03bef731da1916
MD5 c2fb106d70d19292fa18d4f52f3320b7
SHA1 1695350ce9990205122deffb63b81c84f272fafe
SHA512 4bca65edc5c7cf3a32e50f3e16ee0f70397408e091d51cd2da16ffd56bb90a545ff882fb09e89369e024617b2403f9fcbe926f0ad68f0b0a0942e398e26fb54a
TLSH
T11FE022A081CDC25FA4A460A74534BB8DDAA3354EEB8A3C856B0DC838B5810A4A36A250
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 74c7c322da4458c8ed7426e44ee35b20575f2f4b4b5fec7a669bcfc6d1d31b00
MD5 31eb33e144d70bcf44c450a899647ce8
SHA1 b7a102787f1de72c5b757c8819a5547fd0a1837e
SHA512 6cde3a8285652f2f4ad57b116057469a801b7bf58a5f9b5271f6d99631bbae4da37ad8e1da6e22054c833d9a63eb2f4cea763cdbc524d5b282cc1e44d5ffae2b
TLSH
T132E09BD486CDC11F6195205349747B4DA6A3754EEB8E3E411B0AD574B9C5090A76A160
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 375B
SHA256 8d0e61fa98127ce06eb9aca0a05da2e94f9a3f47d251a52ae01304bf68e451be
MD5 ff4893b05da41a5d2b6a46d0499bb421
SHA1 769bab1431d861609d52038c7c2ee57fec3aa053
SHA512 ef5e7faefaaad1d3980f8169eed2f0da4e1d252b26933d7753eec3f5698cc9849496a15bccbc5dedad5961c8d8393fadb2a730dce17249d2463712cd99760566
TLSH
T116E0D87846CDC25F659460939535BBCCEAE3364EEB8E3E812B0BC868B4410B0F77E150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old
Size 335B
SHA256 46c3f19d2f1f892b002ed5915453357b1be3a63c8633cca521a5aea866c07272
MD5 bb9e2440159c3d180ad320889e7fadc4
SHA1 4c9a0decf91ca8f285dea91ab4e22aab68a172ff
SHA512 2866afcdc8c446fdb650b0585f62b78d5cc2893f0bec18cff3064db2739b18f64236ee94dcd6507ef639b139e4c665cdf913599be1ba8fc82038da329936de76
TLSH
T17EE02024C5C9C36F519451D24535BB8DD9D3254EEB8D3D451F4BC8287842094F67E251
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c4d727aabc70d88b644841e9f3db3c094bda0db534b17cb255cb3dc2db6a9d38
MD5 e24370440d39c4949cf2cc349abd4014
SHA1 0c75d0ee2fcaa0b183d2a5e7e037f9602c663122
SHA512 a40f4a9780579ce790996bbf1e87561dade588313a6cc977e06f9915641075e9bd10ddaeee79b28910caa1206c6bb9864792dc02a22329a374c6373ec4b48651
TLSH
T16031ADF783B185AEDA1156F0AA04AF2BCE5C0106439C3C5A86D4FF1793B3471E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8f02037eb68d13537503472a06f49be62576650b5f240a0ab3d9a7ded16e91f5
MD5 1ca46b16c3db660ad1f6ec91441f1458
SHA1 27e069ce58e33bcc108ce0487920fd90ad9e85bf
SHA512 a4bb493e7ff8bfa7c79b6569c127b754e87ace281758b0629c1dda824d4eb649c2bb3b207c0406f68edb954569e7542eb239aa19b3cc6348f24205c4f754d44e
SSDEEP 192:sxZYRryM/jK1Ml8MkD/fDs0+eIdpLjHW6+WNQFJ/YIxfs8bIgrJ:sxZY9MD/fDs0+PPHbw/D9
TLSH
T19E52D8166A349977CCCBD209B945BF53D5F94473E2904E94A9FCDA1C04E6BEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 15ed051bef0ba5d00f678017c750eecb6d5c1ac1ea948514186aae2e939c53ec
MD5 744ca95c0a28631b9423dedd4656c590
SHA1 f41ded547ccc28ff8fae27d11ff19fa4019e92f1
SHA512 7314a44e72246aa9c859e6bc6408eac67c88b7abe389c26f758e7d500248fc4ccc6d177a2cf002c49e155dacf663ff293fd5e4e5cec51875326229aee93c05bf
SSDEEP 192:sxZYRryM/jK1Ml8UQmkD/fDsJNeIdppjHW6+WNQA3XYIHysvbIg5aJ:sxZY9qND/fDsJNPtHbXX5s
TLSH
T15352E7166A345977CCDBD209B945BF53D6F94473E2904E84AAFCCA0C04E6BEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 de118cf4985ea674d217a7ce13f5cd0c0a15dfa0732bc60afe5c5f855039c08b
MD5 29d389ac380315b3663ab3438a44f974
SHA1 c6ede7b4794def2522e1e36dcf879b40a4ea6f49
SHA512 3d576769c01ed23e7b79491e546389b382c6d3cb4b5e893f57da853e8528c18185a7041e34caef9315ffda88a1e97abe2833fb1a570257d0275bb413ede5293c
SSDEEP 768:6EsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9tro8EC:6EsqxXlWvJD6Tu1ja54LAs9G8D
TLSH
T1C1D21C3B694CCB7E4F840E5DEC266FD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 9KB
SHA256 d658fab8df32091cd0c41e44d29cd314011f8e024a0c04a030d11fa51025d7c4
MD5 198fa7a51fb7d52a17a0986f35be0b87
SHA1 080d526d20917af36574c48d7d50819e0f957a1e
SHA512 c1ce738ac07946f57df2b3191e54770e763546b701febdc475a0384c4da88f4f78ed3979d01563b4fc594a3dcce2e6e389c2b637d8b0994cf5442b8b835ad91b
SSDEEP 192:xlWh3gi6qTDy45eyHLhq/c1YhKzgQngvBm7g6i6Ixob7:alIwvngY3iEb7
TLSH
T184124C4EABF53033C9232931AA9BE1133E7351072057BA09BCDF52AC6F8436557DD564
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
Size 4KB
SHA256 aaceebada2e6fe15aa38c6d555d253289b4c18fa8c32180257f8d68143d27c08
MD5 2f443e7d9b5072b5b1b2da8966b8a935
SHA1 f64da436361b05022fb83154e02d8bc6a6a26357
SHA512 9c909b381ec2a054ca0ed846dec24514e4cfdd01335340316e9a33e3c9a027ec7fe7c2b784471ace531a00a64c0cd8d3d2155cbe75fc19318a957bf55cc51dc1
SSDEEP 48:xEJFB0ZRG72XCB7HAOEQxHvmk2K6PuNGS5ZDiDwI9d5MZmEg7iDHj6XUFRYY4SfT:xEB0ZSsdK67Tw5Hj6SnErSWWxS2jLY0
TLSH
T1D6A1946183A13927CE2703FF95A6452633B548093FC3C35A649263645C323F75B9AD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6263747150f5cb66873b39a4da35bc99e71b947a662ee5a37ad279cf86ba7def
MD5 ee6eaa8b4bcb016e075eab4262406dc1
SHA1 eac97ef0b539b6eadf1775aa5fef9bbc3f64528e
SHA512 ef72a1affd476d6e5147a937c6a964a59e75793fe75b5f879bf908fc278e34d98ef07bbb861825dab89fb2673fba340199074d150819534d5ce9de0d5e6b7737
TLSH
T108A002320995E461D1140274D17342853B1189101F0B221544A545D4CC90545531A42C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5893bf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5893bf.TMP
Size 48B
SHA256 fa7a55f8541baf5130c5a0c5d28d26d3fad8f3327954a5fdc186cce85b19ef24
MD5 ee2d1c5c338d98c9615704706f1040d6
SHA1 e038762475ce352cab6310f78588c3beaa2eee90
SHA512 9ac059ca9dae068858c53f26abe9958fe530aa604dd6b4e52a8f2fbd976c48a1786991981423268a865efd85a99664327bba16f3f7d0ec6f1c160c07f0005861
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 704a810a794b5126d4c100f7122665fd6622b9217e8c5087df0929d15e2785a6
MD5 7d7619cb5a5d48fc83f493c96a45f960
SHA1 8ce0d780ffa7a524b7270191c8be544c51dd078f
SHA512 066c4cf19cc45b09d454f028491c24eb4f21868d94a9fcee57fa54477d67890055fa970a86fbabfc3eac56085beb28b44e22df410965f2d4354734c825689b98
SSDEEP 96:KYbaKYIK+P6Ko8uutGKuIRJKKqQaCMwKZ2KK8K/au:ExZBdPxzCv
TLSH
T131F16906713B820238BD690CA27695378E8372A7751CA57F7FB860764E66E120EFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d51ce8db-8f41-48d1-b658-17ef8ac6ec3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d51ce8db-8f41-48d1-b658-17ef8ac6ec3e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 eeb2b85404447a9f85a68e5c532917872f933d2729b5e723325c206a05553376
MD5 810135ef3d72082ad6d9f677f6777145
SHA1 288b8fc398c050b44ce767680734331960ad7b9e
SHA512 130a5be7da14e97871fbe75974b177024e995683c34dcf420bb217788ec040d87f28d89fd35fa8e815dde101cf7cc0db9f99729d175daa2aeb7e4447e4c62a6f
SSDEEP 384:JZcIhsNLEOkbIE6VRNVOK+t9FE8OObjI9G6w7mtA+:BhqcIHVOKs9a829MQb
TLSH
T1B2928E32AC784C369EF66911F58A39274EF9913BE7C95F84A0DDAF0C06DBDAC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a138595e8d87abd2e3ea06793e5ec65f39472b787be82f0e891e4433a1b9740b
MD5 454df6fcce6ddd8f08b79eba4f8c6520
SHA1 334d66827add16144683346f0ff7dfcf655e6c51
SHA512 e78f2b5dd160f4049533ae61fb8b87a92fb8df78c121f1889435d5c2039f7b229709be03e110a62a01d44a9d4e2ccf7aa0d80c1d4d8eae793ca968c98ceb424e
SSDEEP 384:zZcIhsNLdOkbIE6VRNVOK+t9FE8OObjI9G6w7mtA+:rhdcIHVOKs9a829MQb
TLSH
T136928E32AC344C369EF66911F58A39274EF9913BE7C91F84A0DDAF0C06DBDAC0306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b6e2b4f03eb46ffd06eeef0b02043a0489e7ed394e04e438a8c4d98f7e81bf59
MD5 75a056043b95965d7afe3b8e21cbb45c
SHA1 987d3244ffa026ca425d6f6de14c4e9c5f89ac1a
SHA512 4cc9b53adb4652c6e04d7337535fda407bc4b2fcc1c334f9043034f5caca862eb48b9acd0f62014f1e624e7a188e2980ebbb02d301aae064fe0c1235863e221b
SSDEEP 192:tONc6JkRtQmiUyJvW+RNVOmSY+y9h30ReU6:tONc6Ur2W+RNVOK+G9U6
TLSH
T1F202D9356D381C7B9EF66E0AB48B27175FA9203BEA856F84D6D81F0C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ae8e13266f0ff9c87e72e849009b934359ca1b0e4f9c4128796a196591a3d7f1
MD5 4f8d5f2985efae4c3b8f7d0a1603d4ea
SHA1 079b461a7c71e006a4395c23c525f0372313ecc7
SHA512 fd297b0e7b83d198e38b54d93242fd356d5828f87946999629bc84697f73aec652af21aca1629ddbdf54a9a131f0c3a69cc903246dbb5f84d2dcedaaae9dacb6
SSDEEP 384:liFiZcIqzsNV8TUNTUlIldOkbIE6VRNVOK+t9FX8OObjI9G6w7mtA+:sFQiMwgGcIHVOKs9l829MQb
TLSH
T166A27D339C648D3AAEF65E05F98A35138EF99177D6C9AB84E2DC9F0C029B8DC0306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2a31db50fdd6153e66fc304d48bf1f864cab3dbe97d184c93023b655dbedbee6
MD5 ee541e0c69034a0f0c239cece1d40d54
SHA1 1778a68c0b5bf99928bab0c04caeafdbaaf9de34
SHA512 167ea7ab0992d3fb80b757ca4106ad90055232fcbac0898a2dec0a67ab27cb56c683388c97d6ee1ea4079cfafbb61774628231755d5b9ce846ccc4e29f3c99fe
SSDEEP 192:DONm6JkREQmiUysvm+RNVOmSY+y6l9nFNVcrqD/U6:DONm6UUFm+RNVOK+t9FA8U6
TLSH
T1C1120A36AC785C7B5EE26945F48736174EA5512BEB896FC0D1DC1F0C02DFA9C234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 11ff2d763fb31ac30faa556a93d957d5c0fbd6e50d974225dbf118e3ec792b63
MD5 441dca3d04d2bfa5e78d463934f6dc60
SHA1 cb4471c0f3c9c7484480b076c61f65beeefa9c9c
SHA512 cc7776482b606a794547a98b218190fd7609ea6e739493df886679de9334247cdcd1cc458595c7d3c1a740c68f7e34479bdd44cd86b16ebff5a9a972d29e2663
TLSH
T151412A58AAEA1158B3776E569BF7A86D887EBD372F06D49D00010D4F0A22B41CD72B37
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads