hxxp://getintopc[.]com

Analysis

user interaction
yes
max time kernel
270s
max time network
272s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://getintopc.com
Sample260730-agf2eahb26

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2352	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298439664635030"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{247E44FC-752A-437C-AB91-2296DA9E6525}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 4384	4308	msedge.exe	84
PID 4308 wrote to memory of 2352	4308	msedge.exe	85
PID 4308 wrote to memory of 1680	4308	msedge.exe	86
PID 4308 wrote to memory of 1680	4308	msedge.exe	86
PID 4308 wrote to memory of 1680	4308	msedge.exe	86
PID 4308 wrote to memory of 1320	4308	msedge.exe	87
PID 4308 wrote to memory of 1320	4308	msedge.exe	87
PID 4308 wrote to memory of 4624	4308	msedge.exe	88
PID 4308 wrote to memory of 2120	4308	msedge.exe	89
PID 4308 wrote to memory of 4624	4308	msedge.exe	88
PID 4308 wrote to memory of 4624	4308	msedge.exe	88
PID 4308 wrote to memory of 2120	4308	msedge.exe	89
PID 4308 wrote to memory of 2120	4308	msedge.exe	89
PID 4308 wrote to memory of 5052	4308	msedge.exe	90
PID 4308 wrote to memory of 5052	4308	msedge.exe	90
PID 4308 wrote to memory of 1804	4308	msedge.exe	91
PID 4308 wrote to memory of 5052	4308	msedge.exe	90
PID 4308 wrote to memory of 1804	4308	msedge.exe	91
PID 4308 wrote to memory of 1804	4308	msedge.exe	91
PID 4308 wrote to memory of 4768	4308	msedge.exe	95
PID 4308 wrote to memory of 4768	4308	msedge.exe	95
PID 4308 wrote to memory of 4768	4308	msedge.exe	95
PID 4308 wrote to memory of 656	4308	msedge.exe	97
PID 4308 wrote to memory of 1200	4308	msedge.exe	98
PID 4308 wrote to memory of 656	4308	msedge.exe	97
PID 4308 wrote to memory of 1200	4308	msedge.exe	98
PID 4308 wrote to memory of 5112	4308	msedge.exe	100
PID 4308 wrote to memory of 3708	4308	msedge.exe	114
PID 4308 wrote to memory of 404	4308	msedge.exe	115
PID 4308 wrote to memory of 2052	4308	msedge.exe	116
PID 4308 wrote to memory of 1400	4308	msedge.exe	117
PID 4308 wrote to memory of 1400	4308	msedge.exe	117
PID 4308 wrote to memory of 3232	4308	msedge.exe	124
PID 4308 wrote to memory of 3232	4308	msedge.exe	124
PID 4308 wrote to memory of 3232	4308	msedge.exe	124
PID 4308 wrote to memory of 2936	4308	msedge.exe	129
PID 4308 wrote to memory of 2936	4308	msedge.exe	129
PID 4308 wrote to memory of 2936	4308	msedge.exe	129
PID 4308 wrote to memory of 2944	4308	msedge.exe	130
PID 4308 wrote to memory of 2944	4308	msedge.exe	130
PID 4308 wrote to memory of 2944	4308	msedge.exe	130
PID 4308 wrote to memory of 3364	4308	msedge.exe	132
PID 4308 wrote to memory of 1712	4308	msedge.exe	133
PID 4308 wrote to memory of 1712	4308	msedge.exe	133
PID 4308 wrote to memory of 1712	4308	msedge.exe	133
PID 4308 wrote to memory of 3064	4308	msedge.exe	134
PID 4308 wrote to memory of 3348	4308	msedge.exe	135
PID 4308 wrote to memory of 3064	4308	msedge.exe	134
PID 4308 wrote to memory of 3348	4308	msedge.exe	135
PID 4308 wrote to memory of 3348	4308	msedge.exe	135
PID 4308 wrote to memory of 4480	4308	msedge.exe	136
PID 4308 wrote to memory of 4480	4308	msedge.exe	136
PID 4308 wrote to memory of 4480	4308	msedge.exe	136
PID 4308 wrote to memory of 3684	4308	msedge.exe	137
PID 4308 wrote to memory of 3684	4308	msedge.exe	137
PID 4308 wrote to memory of 4368	4308	msedge.exe	138
PID 4308 wrote to memory of 4368	4308	msedge.exe	138
PID 4308 wrote to memory of 4368	4308	msedge.exe	138
PID 4308 wrote to memory of 1280	4308	msedge.exe	139
PID 4308 wrote to memory of 1280	4308	msedge.exe	139
PID 4308 wrote to memory of 1280	4308	msedge.exe	139
PID 4308 wrote to memory of 4176	4308	msedge.exe	140
PID 4308 wrote to memory of 4176	4308	msedge.exe	140
PID 4308 wrote to memory of 4176	4308	msedge.exe	140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://getintopc.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff92152c188,0x7ff92152c194,0x7ff92152c1a0
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,1045583754462032483,13658459437588925210,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,17159037870693446788,12403515182982692455,262144 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,10289882404145367620,17559401542654936250,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,11913593030599581759,9850576253101915330,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,2507430244373396890,7537226673446031203,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,8822602409357225942,1635857815114279424,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,2677118152808152404,12315181930698607138,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3660,i,7182606825652679475,10570774202454748974,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,10684834545630693423,14526013966400445180,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,7473948356613317386,12139448638351458115,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,7201348218868788590,11623610787348945228,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,7201348218868788590,11623610787348945228,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,7247161582952011115,3197425325371369670,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,10683922119744260602,16963111040970298156,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,10472645682071160163,7985755127608573342,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15920557346702403969,12684291688026742117,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6436,i,11153418679796802345,4330407530529897370,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6672,i,11019610313688578337,6176592010807198192,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6608,i,13185791927067115667,18202208577371892131,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7076,i,4932404071108676089,5656469363980679987,262144 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7072,i,66133450712364923,13394763189312715913,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,4227592738877807684,1855738200240917203,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6640,i,8110551153346031417,1868227257091184643,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7040,i,482091543712248090,1598301140525241460,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7580,i,2515215806625955177,2423121405938505608,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5596,i,9617984033071040499,17406886236693883237,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4604,i,18358274443290547605,8183251847680554371,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6200,i,7731536816374311173,5008691653519467280,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5968,i,16263848642619821099,6081715691163565907,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7888,i,9706538707366793404,11092669289688293565,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3196,i,16673599109545086052,1416134941316429580,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8076,i,15264097041073515876,15182142711879479991,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7112,i,10906598799078519876,11338271751909900851,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7344,i,8090956643634598919,6691027424525498473,524288 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6596,i,3255544290564041173,3580283823377991147,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6952,i,15237610478873310271,7148206930368909207,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8348,i,18356613083939740552,2418521507435505223,2097152 --field-trial-handle=2304,i,6167110615618020103,13343100141987014213,262144 --variations-seed-version --mojo-platform-channel-handle=8072 /prefetch:1
  2⤵
  PID:2660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 0eb6645c4790d2cccd5c42b50a38006488a2d918def3a3279545937335eda886
MD5 3e8af8ffb619519ae9bcdff30d83c4de
SHA1 1a21bc4f5f7ab00285a793757f2f5aaa34df645f
SHA512 1134be1a5860f15ff1fd3fb85df13b8a53b718049362e243ecd865646301b0ed32e05c52bc9067e565400d439da872493c03521dd183470b317d94bde9a8b765
SSDEEP 192:a5y8gfkMvE2uH/BGM1f4ldHAuU4X2v6Nr0:0MfeGM1f4PrFXHG
TLSH
T1FD02A43066B8B367FB9A433140D9AA54FB7388E6FAC72E820E577538590BB8041D47C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 9c8995fb0c4241f3a448fb5a4df9363a4f8e953aeacd70d85cf836136e7c2b08
MD5 d3615dde318c7bc0be759ac8ab6988ea
SHA1 78ac8c69a7bd05be02f0cf3c57fdd2a6911c792d
SHA512 99dda3930f6fde59668ff82a615caf6711303006596322b777c1b62b9497d9a9432b33e22c38c809b214bbeaea36b756d983b1dfd94c4f38f1687f42dcd6674f
SSDEEP 48:kyPJvJHWruBvifYwoIb++GjZcMtA04u3sB/j7Q6hcz1IWS17nj57LGS:kc3HvBYb++Gja04uo/thcxmVGS
TLSH
T1B98180314596939BFBE201B190C12299B673CCD9FD633E421F233678DA17FA081653C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 79ff0c8f0853754382fd4bfdf94ac5aae1d51a08122b2fc9b72ebef200891399
MD5 9fedff4b5f648fb99fe01d99daaab8f9
SHA1 a281962cc2d3b13ffe58f488689d1f401b263e04
SHA512 b771ba06d6c30552591605313c30850b32e143e675ed5a8e8681f65d07f491f56eceb0669fdcdf3376ed17f85a47b5b3a4a344fe02dad5629d9961635b7fff04
TLSH
T19E818431455653DFF7E6027190C12255B2338DEAFE673E421F237574DA02FA081553C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 61ef400b93e0581b3ec8ed9567c0560f7ecc52b656a12212af54fe10c88a4418
MD5 14da89f8741b976238a91ca9b85ec969
SHA1 e3af225bc45422cce24a7be1ea202dbdb2853b40
SHA512 3e76de61c3202e584037c64bdf191ac7f98fcd64a14172106d74438a7059eb08d1aed059ce5d21eaa1f8a66aaec93cddf433900f67cca1474b92ed1c6e855663
TLSH
T150718131451753DFF7E602B190C12299B6338DEAFD273E822F2375B4DA02FA08169398
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5832b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5832b3.TMP
Size 3KB
SHA256 c30eefcb16942801282fa3e68f5e6ad56cc75ba5161f014e108cf158471f458c
MD5 a5df5e80bd91d74791743400644d452d
SHA1 740323f9ce40f9e58729de0c31874f8cee58960b
SHA512 354057e2b4c702cb371f4c96ddd8972319478666a5d22a6db271b631fc41afec3811878f89e1506e027157d2b4522731eaef6c8047392fa18340521e25a2efcd
TLSH
T18D71B534551653DFF7E602B290C12359F6328DEAFE273E412F2379B45E01FA0816A389
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 65a23f765cce244458976305a8d881822b043dcfd54dad96df1be1bdad081009
MD5 c7d4b80b30e5cfc6c4f9ccf838812b91
SHA1 a6e5516b627d30d83ae74fa56fc7da63d45db883
SHA512 c11e3fd8e93ad56425da5fb163dba564a8bc4a3a491563e575a22387c39f1912652e45ceb884d71a26c31d0ab58564412ed6aab2e77390a13999d3a1a1a8d802
TLSH
T125818AF7C2E5962E881516F09714BE1BCE1C0A1583193D1ACCD8AF5BD3E3863D216A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 a5e062e02194a7d0de885d3405eac1c8234f5bc81a3528341a592d4117c27677
MD5 d395d111c566b17766470218aa72c334
SHA1 b5d0aa6adccb484a29c5cccb87ea63bee585f100
SHA512 f595df8367af6ad1499b6916f68d5fa77309b33260ab087d964acff116162a58cdfb31944e5b2cca8a02e38402b05be0cfac15b13a29d994515f9243d2eca2a5
SSDEEP 192:D6oqRRUGWqWWJWPWCXcVSQZYiVGojgf8B3g0KJ6YWJyWJWbWtF8WE1WLWlfWrW2T:D6oqRRUGtHyPXcVSQZYiVGojgf8B3g0T
TLSH
T12832BFF7C3E5866DC81156F0AB146E1BCE2D0955432C3D1AC8E8AF4BD3E2472E251A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 57477b2451ae4cd5fe64fda7da28a4fdedd9bc8d0911728d0ff52d0d1b38b6a7
MD5 11226c15a728aa617b466055421aef7b
SHA1 106fbc0518791836f475d90653e12c95cd7e443b
SHA512 7a408d784b7f415b1ffd1e12739bdd90bc1df6cb92df000039da96e93e45896376695d13ef77daa6baad9b0a901dc009734a70c6d7d8704ea01307affbb114b4
SSDEEP 192:D6oqRRUGWqWWJWPWtZYiVGojgf8B3g0KJ6YWJyWJWbWtF8WE1WLWlfWrW2PiMux:D6oqRRUGtHygZYiVGojgf8B3g0KJ6YRx
TLSH
T165029EF7C2D4D66DC85156F09B146E2BDE2D0A1883183D1ACDE8AF5BD3E2872E21194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 90554c375ada5332624b47db0ab8e2ed703a1f73778fa01ebbbc109d1576d28a
MD5 f76090bd87affbfa518218800563024e
SHA1 c86a062895d82e57c6015d03e4ce568fea3d5218
SHA512 3a931684924c73718554ed814cae23eeb0d078958d869d71cfb29de51d4bf584ab52990286557c6bb1cbaf709b5c065129dd242bfe358bf6cbcb24e3eece25bb
TLSH
T100D02263624230F5A66C7E8582AABCCFE77620B81D83DDEB24D0989D0A3146E8917640
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b31e38e0479e298a8007b5ea0163bb806b1929328151f8fa8f8592e3d637fd46
MD5 260241d7c456ff7527c7af7208a544f1
SHA1 db2e96157cdccfc481c1758a6a58e69258f52950
SHA512 d4fc7b4b1a488d9f3a30f729c8c28f99c627ef2747841e52f7c399bf91d0a6cd6027888f6e51aeb20f2c85d2d6c98918e54d9f68ef66a92122c428f389d4bc78
SSDEEP 192:sxZlR4yMojK1Ml8MkG/fOXsxU2FIdppXHW6+WNkovXYIiViGIg5OJ:sxZlpMG/f4sxz2tHbXXUY
TLSH
T13452D606AB345977CCDBD209FA457F53E6F54472A2901E44AAFCDA0C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 43ab8fd5a8332b333233473db5777ca75fa4917269cca1fc3221596820aacb06
MD5 56d9152c97cc94d5d3898eb801fd1ba6
SHA1 c0cfcacd6c6b9f599d75e66b911d0f5b813cc5c5
SHA512 ecd8f0dbdb07f15442310ffa9d20f507151e5f943adff0460f46bcd13fa202b12f637be9bd9b8875c71a66109edd30aebb6108bb8680261e286f20b2b66d1a8b
SSDEEP 192:sxZlR4yMojK1Ml8UQJ9G/fOXsxU2KIdppxMHW6+WNkETdYIWViGIg5OJ:sxZlpqrG/f4sxzDAHbHdIY
TLSH
T1B052D616AA3459778CCBD209FA45BF53E6F44472D2901E44AAFCDB0C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 f17a9627e581891a11127d6fc2312560c2a951ea45dc6dcb792aab475b5481f4
MD5 7619ba1a09298596571524e164701aba
SHA1 6aea29648ab63f47d9bfbdad39a9875805943cd7
SHA512 32d297e5b7fb948c2127248ec6b3788e71e25c4341afa6ef25d0cc9028f6b0c5645cfb913650e67bb818cfae7fbb26072e9641601f015580288464ccf2e54d30
SSDEEP 192:sxZkQUnhR4yMojK1Ml8UQJ0cB4G/fOXsxU21Pjib0iddp4o3xxMHW6+WNoOET4da:sxZanhpqKm4G/f4sxzRjPcGHbmgk/mot
TLSH
T19992F912A630497B8DD7D619F9257F63E6F84473DA904F48A9FCCA0C04EA6ED2217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d2f3c808efba8ad36925536017152ae02c133c0ebbc79ba9f8450fa7b49cce97
MD5 23460e97ac4e13fa8f52a52ac3f2fa10
SHA1 78c00e77d734ae556974fca1ad582fa45b2a9124
SHA512 a138833bb544754a1d3f3777412377091e33e63cbcffa1c13bf81e01b202c01e40aa9536544a302bd0177486ee85d8e1da1e554021ed367a1a67364aad95f755
SSDEEP 192:sxZlR4yMojK1Ml8UQJWPG/fOXsxU2K/pdp4nxMHW6+WNkET4dZ/YIzCiGIg5OJ:sxZlpqAPG/f4sxzoNrHbHg/uY
TLSH
T11F62E716AA345A778CCBD219F945BB53E6F54472E2905E44AAFCCB0C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 352f0a58415fb5115c19435a4a680d4883c8d22d1d617f880038837237e2746d
MD5 b9c4577b5230ff4c343b4d64a9759a26
SHA1 4a69a953cce11c64b2904269cfd9ae583886cbae
SHA512 515cc0b8d9c719f4ae12b882d6361847e244d87c2685947a25ff1b53d4c245b20d55268d68625a8ff651ad801516b12a10381840c6695627ea0326469305d2fd
SSDEEP 192:sxZlR4yMojK1Ml8UQJkG/fOXsxU2KIdppxMHW6+WNkETdYIWViGIg5OJ:sxZlpqKG/f4sxzDAHbHdIY
TLSH
T18152D616AA3459778CDBD209FA45BB53E6F44472E2901E44AAFCDB0C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2a613a60d1ad394cc03432b8714540bb5b067ca093c9cdda25cb0df856b10230
MD5 4b0111f91e2101cde88b58400262ef73
SHA1 974b4d8678f9995a9aaf21ec96869ce9fe0a7452
SHA512 b5c8fa36acea40184e278f6ea4eeec8c5d4fe81f9b9bb0d6eeab14d32b7fe2e2c0a8c63f9ae6a79c3a7a0fe66de451a9a849e54fe1a0161da9beed53ba3559a7
SSDEEP 192:sxZlR4yM/jK1Ml8MkG/fOXscUoFIdpvXHW6+WNk9L/YI5mmGIgrJ:sxZlqMG/f4sct2fHbi/M9
TLSH
T14D52E7166B34997BCCCBD209FA45BF53D6F55472E2900E44A9FCDA0C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f52dd6d89f05851d9475ee2342ed2dd3e03858839a77aaab597f3e964652d6ba
MD5 2811d3bfae2f414f15f84828ed9dbb82
SHA1 6d07ef9e6e472108de8d7f523b88dfdddb5b4245
SHA512 b7fcfcf9d7d1344733d65d73278b7b80e4ce88f15f86f56ef65aaaaa97922bbe49c0229ed0fdebf2768fac95eb2192de3887cdcafed6cb3569dc175cc6b91448
SSDEEP 768:vbsqxXlWvJD0T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Qro6gz:vbsqxXlWvJD0Tu1ja54LAs976+
TLSH
T1F8E20B3B694CC77E4F840E5DEC266ED66ED801CBA7988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 753af8846d2577ef16fef4763bd4dad8aa0b1f65cb7c6c3686490801d7ba6e64
MD5 5153683edb93df0ba547a9636fe0c2c8
SHA1 3b0f741d2c94b551233f1e9c4b20961cf65045ec
SHA512 635f8829755a172753d5c91a26fa9019ae476ab2239e8bf52c513f873e116b00194360b799fe0e5bf16949d663af8fb3da468e0473a325ed4af640606d093eb1
TLSH
T1B3A0021403C28563D14257B02DEA526126118A50E2031B1549A10644D864ABB458700C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 52c08cbc001905ef78e5d5d3adb4ab7d5fb63d3c174093cc22dee7fa6e67a530
MD5 0509f0f524c423e6ead76deb10c31b26
SHA1 8aa61b544b8a50423e5975c079c397286b5526ee
SHA512 5c9d72cad9be4e0230cc0cf511214bd4829de1eeaa5736766d86307f5f5a0157f96dfec25c0eda612af7b6060dd7a100ecedc1935281de2fd23ffb53bab12bb7
TLSH
T131A0022013849245C11212F6AD9202417300CCA265141747819E70D4DC504C08EC204E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 2KB
SHA256 17da19ff3a8ec0205b1b2b3b23d88447abbde4d7058d67278e920aba6e6efa30
MD5 c414fb87d85629f178218f98b4ca4879
SHA1 08e931d36dc6a7f06013b65a9ea7897f8c212917
SHA512 c471a7f25316120ad39c796a9c3a4e640c0be05cacba6781cbd4b3c20e1e9a20fc47bd0e9663c32266319fb3562fe8717ce73b28a454d4672d53d2eb27cb8bdd
TLSH
T15E51D84E4D4A7B66CDAC24B328F71482373124FF4A888B07958CA87078C33252D7AA19
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 e42840cd84e47e78e2e29b271982bd41b851282d70b72905f056503751e09c53
MD5 fc6f567d9a8adcae3af1fdcf25a42fd2
SHA1 4121b70f90cf6feb9a0069c829171167229bbe1d
SHA512 4e8a3d42895dcf8497b98c73f6c86bd941c88cee35c74a4549d191e6e5982c51698c315281d7151d2ee8704bbc1c289c9ed454974e0f52f95754585a69e8eb04
TLSH
T1983130CD8E91A99FE4A488B2107271A477B0C8DC6B11E7138C7C62773C2634A2A1B1C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a2702.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5a2702.TMP
Size 1KB
SHA256 8296a395f2fa84118598c28ab185ec20db5b73e99c9d4c57e689882b02408ab1
MD5 55e2c3cf9aa7bba3def1601867eaf2fd
SHA1 18be29168a3f8ddb84ba1767c0a543f223dad2bc
SHA512 d0716316e49c1391a2b4fc75653f0bab03e96d18c83ee798c8137f13b3308df96433dc4c33772781868f2f02fbdf421b26cdb6a00d255052426a6fac7845280e
TLSH
T13331328B4B82591FE8E440B60A52A4B83379D8406322B7C3D87D673A6C7979D2E5F0C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 4be1749b2d057eb456ee46306590371ee11dcda72f5a2fe644eb04e7f880f411
MD5 210fe24c01df44ae5f6a5794614d2113
SHA1 d95d3cd65ea3343337fa8cd19c3f45939051ef44
SHA512 a8cb00268c63801d9ca5fd00a0f27dbffa3613bc6f8310cc6c3609363a3bedac76575f26a214eff4d4b1e0bbfe2b0b3073ecab38ae570bfdf69aa35f24de804f
TLSH
T1C0E0DFBA2AE71814A8ABD7EB187294A64515F868C991FC4F1129968714722B12826C2A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 96dff48cfb9824c69779acc733dc907efa9f3fe04df164e0094b2d48ebaf818b
MD5 8db152736c326ca790b5d7b0d0ea9332
SHA1 ff172d497589c05142513ad2c5a4b7ea40a42dee
SHA512 b1298581c111e6667e32ff5a5a661d1dfcefb37570c71f5382611075cc0fa55d338c40c364496736c07f3d38fffb4fc0e9abc7cc34b633cdbfe96cd7f7a66ee2
TLSH
T1CEA00222C9588482C10446709B7903D56A998CB88A05631242EC00658A6824045F2506
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a7f72.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a7f72.TMP
Size 48B
SHA256 e4b8e196da8ac2d71b5a5cbee8cca1395cceafe1d005e0de2b082fa881c00300
MD5 29106d4334b4e8bb16b5c525bca16797
SHA1 7e03fedea8e10b5fe1bb35527bf432b3b0372ec7
SHA512 4533207dfcff0d7a9d73f757e3b6de3dd56e62cbba8e32756d6dc14957dfc07f1a364b37f3b02e21d0254fea7883e5d71b168f41d92223034c334a925b4f874b
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc01d9a35bee42339c1d67b22598400c1e33359c245e75d5b172fe2372c1295b
MD5 2e38e78ccc15a000ed6d6f9411023449
SHA1 6c36ca4f35d2f1c296cbeb1c592011026acf2ff3
SHA512 5ef70db2a394c7c815c918132658e7d3fb354afe573cebbc521db434cc20b069179e013ced55275ae3a9c2ee845924d9b4766427003c60f1a7ad3fe2f8743491
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTy3JMdIdKegIvyNHIFKMko/:KYbaKYIKvdCKegCeHuKMk8
TLSH
T13E91231A357A0212387D2868B266D93B5F413A63701CE46F3F7850660BA7E114EFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8b5c592-42d3-4b38-8f82-f728b9d1be21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a8b5c592-42d3-4b38-8f82-f728b9d1be21.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b93b1d77ce3b8b6a5e1f03b8c811549ae5c9e6f9656fc651cfbde86884d6678c
MD5 94c0a9c7255e22f28e07a74546f37f21
SHA1 59c9cd28916a6fdc4d363c164d43290b5f1b9cd0
SHA512 219cc19e71e2bd7443060f3027d2432726a0ed6a64004ce3e8abfca2cf26244682cf7f6fb5cb5caf61062a9cf3b803ef2ed3b87f710603f193fe26acfb6c109c
SSDEEP 384:RiFiZcIxzsNh8TUNTUlIljvjhC7PnbPofVRNmd2OYoQ26OObjI9G6w7+e2:4FQBAwg5rhvNHmRoP29M+p
TLSH
T15DD229F248E74876DAAE5B43E77E2D134EBCD067B5845A40B3D89A0CCC960BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 784222d0b0b8c6b1c6f3923603e908fc9b1060165e84ae21c899a8d1bc76d1b7
MD5 727556099d657313db011120f6f366fb
SHA1 9556ab97f46e5d5d3ef2e2978ff5cf355c140c43
SHA512 fbddcb392b2343136fce6d88c204e228737323c360bf36563b6ed19efbf3e0bc8163583db49b93f1a3c83912133475a3f3edef5f02d82b530b0628589e9e2b0e
SSDEEP 384:rZcIhsN/AvjhC7PnbPkfVRNmd2OYo726OObjI9G6w7+e2:zh5rhPNHmRDP29M+p
TLSH
T152929E359C345C779AA7A555F48B35135FF8E03BEBC82B40A1EDAF0C01DA5AC130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d006f5726f693388ce80a245a0db682499ed4aa8427e1178af3cc671e206b44
MD5 b5201f979892a611424e12c3347766e1
SHA1 a255933c4910c4b520f84f6991445839a4056de2
SHA512 7906b0a02787868de18447c9ed8c3333bca280a8b29912e19ef2240580a2ae74683a661957893bfed99396bb8d61de940877a98b406493d4f0648e6f1e7ffcd8
SSDEEP 192:tON06JkRtQmiUyOzW+RN5+Fd107sh3URHJU6:tON06Ur1W+RNmd28IJU6
TLSH
T17802B935AC782C7B8EE26D09F58B37135FA4217BBA952B84D6E81F0C01D765C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b54427951ac06d1abd83b22b41be1e81b209d7fc72aa091528cb5149656c0e84
MD5 0ceba7d068eaad7e495f01214e7e1249
SHA1 de5498e76a53eb238791835fda6c7e0f1ea548d6
SHA512 43af5c2e512879a9133afef6340dc600162740367397e315f578a70d673cf73a9954638b65fdee847e3f6e8bf291376627d0e8dbe16d9dd3df69c71c3dc7a0f8
SSDEEP 384:RiFPZcIx/sN+8TUNTUlIl3vTghC7PnbthLVRNmd2OYo/26OObjI9G6w7+e2:4FH5ZwgJMh0JHmRHP29M+p
TLSH
T1E2D218F648E74876D9AE5B53A77E2D134EBCD067B6846A40B3D89A0CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c6d316c7c70340217306f4a6dc5023d1128ddfe23bcf1f07223789eb538e3633
MD5 ec6fe68dfae0098b07a18231beb521c5
SHA1 936831ce223f00d2a2c3d5cea8df144c9d913fd4
SHA512 b34221d9244980a973e718de9a3b4ee8b2d4bd8fa98de63da09c9b6bf7038822df0f505094e68245f1d1121fb10f65171c672cff5dae3b2f563a95ddfe7533b2
SSDEEP 384:/ZcIhsN/jvjhC7PnbPkfVRNmd2OYo726OObjI9G6w7+e2:XhcrhPNHmRDP29M+p
TLSH
T1F6928E35AC345C779AA7A955F58B35135FF8E03BEBC82F40A5EDAF0C01DA5AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2b16504593532719413232a2614ad9572cb6d0da9cf87565fa407c7f7e1698c3
MD5 8f16fe85678bd751503639ecc8900209
SHA1 f2129fed37f77d2fe5d0bbd12a115483d541972d
SHA512 d3a2a60bf53eb414d53bffff41b4c2b00fa40a4b4bd1ba2e3e306d50ef437a7ce1a623a9d924d76ee3b79e69879594c88218fd27ffa1d73fdcdbfe6682fa1d3b
SSDEEP 192:hONa6JkRmQmiUyjz9+RN5+Fd107ptpefPwoUCVcmqpU6U6:hONa6UCu9+RNmd2OYog26U6
TLSH
T13B12F93668786C6B5ED26945F48B35135FA49137EEC97B80A5EC1F0C01EF6AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9cccc61f520d8c80ba4d0f33f4e6dfa7434cd7e5a932d6665c15fada147dea24
MD5 390e72797cd9e0edcdfb3b05a8a226ca
SHA1 165a73c0269e735a7e342e6dcef4003618ab81f5
SHA512 9c307d3009ef1dd4ca7447e543986e59ff211431119fd338bcb4798e73782b3b7147accff0bb303212284a75f93a6abf4131c83fb434e1d6d1d84b73a1f25e18
TLSH
T1B0E00207D70050AEC430473200C319313BF25430117B06546E9911A83D533043F30BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 88c4ccb48cb453045b7cd1d0d19c97ed0987a7f2b5a31069ac83437af6f7f535
MD5 c736f4f60f54f6683de3086a95bbafe7
SHA1 9a999ac5dc89e38cfe2403f52482cd8f9607ec7d
SHA512 9207f821f215c84c0267ddd721b29879f1e62c240acaf31616c4ef3e81632175a0e9c1d83199573758f1e1ca2b581ab8838ce5fc08902f484d895150b626758e
TLSH
T180E00407D300507FC430473100C3143137F14430117701545D4511D43D033001730FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a31b7400f9f8a57cdb50159ef106f076f94b7f188163abf72a49b080ea80657a
MD5 8cc62e74d518b704a594d0ecd11d1242
SHA1 94f8e927b7d69db1285b654c0c8a0bd7f8279af6
SHA512 b5ce78dc15d721795fd4f61aa810d7a053b3f8de692e630f8fc152b6d3d830d2938de4b0b7a922cab82370254053844ca863a7e70f4e319deba772239a9a8ab5
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe599e88.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe599e88.TMP
Size 392B
SHA256 5f262469ccbafd82a52ff88505dae1959547e6c7b54171a79eb22d7d3f8be82b
MD5 280b305275048d822171e41dfb0239c7
SHA1 f9179392af01333d59b4e5fa4a51fb8b283e3da5
SHA512 8426286c78b6cd02e05ac577432787d5196b2f3f89e2694c35b614176e221bc2f14c94ea041bcabbca6527c6cf8f68c0da66e9b2f261680fc1efe191817ec668
MD5 SHA1 SHA512

Submit Download

43f6bac2-882b-40c5-b083-b25e11bfb506.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43f6bac2-882b-40c5-b083-b25e11bfb506.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 19ecbda9ab226d9bbd0a83f2d582bce87ee6355a9e6202845805adca989d054a
MD5 c67d65a62c30e548a20730300bd1a146
SHA1 15a3f88bfd4fddebb000df692958ebcedd1c8507
SHA512 106330ec2d04fadd2d1f3679d8e0eae0774d9855ec3df97d760124d9b628c5959fddc323fd65f2802b65b59195c2715d550f1efea19231bff5966a442ec0b934
TLSH
T14741185CA6FA1058B7B36F5A9BF6A8AE487BBC772F0AD45D10010D4F0622B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 8d69e8ad9a4fb19e194852be54e06bcd6d95a91104e63e885b3723810de98540
MD5 b97764a46a9e8b312acf53d2b148a251
SHA1 c19bfcc0bdfb15e6de1cee64ce534b38f8d4ec0e
SHA512 8131c3e09fc467dc4e850a668d1371bfe3988273f7b5e0a39b2cab397a489834dbfdcf32cd3d78c34e440849de631c09d1fbdeed97fbe307183121f4c67f0de5
SSDEEP 96:eWvoJNxuWNuYyoJtWsEVE/zSJLHrJ4SCwkurN5EQEQoJruWNS9boJnIuWNB:xvoF+o2sk6zIJ4ZMNo5WoBIT
TLSH
T18102D1145BE6265AF2F7EEB1A6B37611BF36F9295D048A0D4181820C0C32E44DA7EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download