f998421eeaf59af914795d4c87fb78753bcc4ca62211694f8187e97e0d1a5701

Analysis

max time kernel
899s
max time network
820s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 14:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 12KB
Sample260730-rt5c7sah76
SHA256 f998421eeaf59af914795d4c87fb78753bcc4ca62211694f8187e97e0d1a5701
MD5 8be1ae43e5e5aef8c2058f4653149a38
SHA1 78b6f83f8aa1965297ba92ca7c35c3d3c35ad9ca
SHA512 cd9723578f0bdf3ed979f48f24935dfe983b809e21efa1876d808cfc4c6a7065b916ca50dc1cf89af0b81d4533f2fe5ecca5671265e89907e1f8e233e33dec53
SSDEEP 192:Xb9DJhySVEJfU1DyexOOgjy2IGaXD1Og4G7qpy0ZArZ7yyw31VzF3K:1yRGLOOseD1OyZFwlVzFa
TLSH
T1DD428513EEA00D2B437F16F92FB16789E947898FD24A5C01B0EE7584AF95F13C813586
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5932	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298954286073823"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{0735C738-347A-451F-A914-05472364C695}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 4644 wrote to memory of 5988	4644	msedge.exe	89
PID 4644 wrote to memory of 4008	4644	msedge.exe	90
PID 4644 wrote to memory of 5932	4644	msedge.exe	91
PID 4644 wrote to memory of 4008	4644	msedge.exe	90
PID 4644 wrote to memory of 4008	4644	msedge.exe	90
PID 4644 wrote to memory of 4732	4644	msedge.exe	92
PID 4644 wrote to memory of 4732	4644	msedge.exe	92
PID 4644 wrote to memory of 704	4644	msedge.exe	95
PID 4644 wrote to memory of 5764	4644	msedge.exe	94
PID 4644 wrote to memory of 704	4644	msedge.exe	95
PID 4644 wrote to memory of 704	4644	msedge.exe	95
PID 4644 wrote to memory of 5764	4644	msedge.exe	94
PID 4644 wrote to memory of 5764	4644	msedge.exe	94
PID 4644 wrote to memory of 4200	4644	msedge.exe	96
PID 4644 wrote to memory of 4200	4644	msedge.exe	96
PID 4644 wrote to memory of 4200	4644	msedge.exe	96
PID 4644 wrote to memory of 612	4644	msedge.exe	97
PID 4644 wrote to memory of 612	4644	msedge.exe	97
PID 4644 wrote to memory of 612	4644	msedge.exe	97
PID 4644 wrote to memory of 3144	4644	msedge.exe	99
PID 4644 wrote to memory of 3144	4644	msedge.exe	99
PID 4644 wrote to memory of 1676	4644	msedge.exe	100
PID 4644 wrote to memory of 1676	4644	msedge.exe	100
PID 4644 wrote to memory of 4212	4644	msedge.exe	101
PID 4644 wrote to memory of 4212	4644	msedge.exe	101
PID 4644 wrote to memory of 2844	4644	msedge.exe	103
PID 4644 wrote to memory of 5884	4644	msedge.exe	108
PID 4644 wrote to memory of 1408	4644	msedge.exe	109
PID 4644 wrote to memory of 2708	4644	msedge.exe	110
PID 4644 wrote to memory of 4628	4644	msedge.exe	111
PID 4644 wrote to memory of 4628	4644	msedge.exe	111
PID 4644 wrote to memory of 1072	4644	msedge.exe	113
PID 4644 wrote to memory of 1072	4644	msedge.exe	113
PID 4644 wrote to memory of 3028	4644	msedge.exe	114
PID 4644 wrote to memory of 2532	4644	msedge.exe	116
PID 4644 wrote to memory of 2068	4644	msedge.exe	115
PID 4644 wrote to memory of 2532	4644	msedge.exe	116
PID 4644 wrote to memory of 2068	4644	msedge.exe	115
PID 4644 wrote to memory of 592	4644	msedge.exe	117
PID 4644 wrote to memory of 592	4644	msedge.exe	117
PID 4644 wrote to memory of 3984	4644	msedge.exe	118
PID 4644 wrote to memory of 3984	4644	msedge.exe	118
PID 4644 wrote to memory of 4236	4644	msedge.exe	125
PID 4644 wrote to memory of 4236	4644	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x240,0x288,0x7ffec584c188,0x7ffec584c194,0x7ffec584c1a0
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,17679288725752384648,12899577507531484612,262144 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,15428098287481450586,3916221934133230970,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,491102830414081432,9215757114421144463,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:13
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,657512039341153068,14127403677417835196,2097152 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,12262293611546687609,12572572913033111188,2097152 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,15008977662420653248,1737562356640049677,2097152 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,7681289379427810575,11162395976467923157,2097152 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=1540 /prefetch:9
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,5917086889841999157,7242227119381493921,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:12
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,5814167307292093210,6233523709825054034,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:14
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,11350166400296873961,2254871267915014147,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,9510422755095519213,12842711045790565476,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,9510422755095519213,12842711045790565476,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,12721163847910744229,14828272025661188488,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:14
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,1953280071073434193,6255278615150567825,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1540,i,3235957067448727827,17805805127259669854,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,11625131357961591520,1660449403567789440,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=812,i,6647604729312034337,6461081514155537436,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6632,i,6599321647107642168,14231283234629247405,262144 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3904,i,6049062826796121204,17955499688356001415,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,6781596476600894691,10848812281181485377,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,13887644323930031178,13765998730409931264,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:14
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,18295601089698624401,8712209151301619760,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=1116 /prefetch:14
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,11724773857556536493,7744286426791250397,524288 --field-trial-handle=2352,i,3823949940600142830,7432787161811958219,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
  2⤵
  PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4628

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5792

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

7f6c7ec3-25d9-4fa7-b625-358f03d350d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f6c7ec3-25d9-4fa7-b625-358f03d350d1.tmp
Size 27KB
SHA256 eb391b6d61e8c534dbcfefff566950ec7cd88056e0cd0c5d29e6f63903ea8ee5
MD5 db7c24499c52acc7b06b97eff470494a
SHA1 7e68f1f0afcef0f9f95244b9aef0e83d7339d9e7
SHA512 f0571c00bba68bbba8101274801c0345977746b52571a7ca303f0f5b68e3c703ac8c4174a414b189bb3fe6cdb825eca0c2bdae7f8760e8c77ef72e1cfc67f3bd
SSDEEP 768:KduETwWgNhfsN8F1+UoAYDCx9Tuqh0VfUC9xbog/OVywLI+roJq3u:KduETwWgNhfsNu1jaXgIVJq3u
TLSH
T1C4C2EB3B640CC77E4F844EACEC29AED66DD801CB66988D5447EB894C03C67EB521A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 97cf58709b15d56f240f79db83671cb50bad6c28442d632a77a5eb2d595f8467
MD5 43ae576c8ca997a56636bb1d5210aba4
SHA1 b0feb1fa285a69240aca948a4ebaf100792a37d3
SHA512 8172024c7fa06a9b179b6c905122198095ff93d507cfb46816dd560e1c80bfedfb868f49daaf95500772bbdf5b36bf991380a34bf0388fe5b8f9b2e559f769a7
TLSH
T1E0E07D8564C8C3AFE259B48B4368D78CC3F0360FDBC8AD0E2B04948AB001444F3F26D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d4a9d7fd3cdb260c83747c9079da8e4cb974e89d22682e840511cc89a4e3f058
MD5 0b857db38cb8c35bd946f1e177257089
SHA1 428c5581b3044b992a08f6f9828f043ce772bc6e
SHA512 cb98c7a90ea54bd317c914d469cd4b59c72eef8dda2b3c909610adec91314e2aef1551cade7499634cf263dd388bce47da75338366ed502737b1dde6ab8c4b13
TLSH
T106E0208584C4C35DD254768742EC634C81B13A0B93C4EA8D2F088C5A7101AC467D55D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c1e42b6e4cef45e6d086095956fe5323436045c6576e776f7648aea61096ab73
MD5 d6362c3958a92c1a43afc8d095017db6
SHA1 9519edc8b3dfb3c0fcd249ef69c5f2de0af48ab3
SHA512 5d99341f409c121c4af2a7e7e39d4d9db726ceeb96c9efdce64fa5dfe92d63fe0bea03ec08a726b91321afcbd8b1a356714cfca38946aa89cf2906e107ec0728
TLSH
T143E07DC445CCC3EEE278B48742B9638C8BB0360EE7C8A90A170288CF7046D40B7C2AD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1e369b6f8241424b260d5315958ecba1c91b2c53aed97d4c7e24344263be7f59
MD5 d181416cd3b3813e365006684bb4d254
SHA1 cb0bf1dde088d16f74452b7d78a0d1b87b7021f3
SHA512 74943ac0057a2324c147c1280ab75ecd06aabfd53ab8df2618bb60ad28a0f0ea7f63362a6cd0c1523f087e294cbce48e38fd0c73a5bb530c915606330a1b9dc3
TLSH
T1CDE086D485C9C3AEE358754B936E538C92B0360B97C8E98A270894B9B241994A3E26D0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
Size 945KB
SHA256 9d8a13d250ae3c04f3718a479b52a40e3513d71e1ff2a3c5c96dbc923b2a3a78
MD5 fabf240085e9609476a3eae4c5928f02
SHA1 3595f4deb69bbc8ace71e6f8278dc1f68b2626da
SHA512 c2ffb607a638792db088a62c094ee1f242667b531a98eae866512927fbac8bf14fc2c8cc4b39b020582d025dcf197bb5c16e7c291ee7d651f4b17b84388c5fbd
SSDEEP 24576:QD0KiyZuKzhYINIkFMGEiuBfVsKSat/sm2HIS8zFY:QDliyZuIKIR2diMmWMR8zFY
TLSH
T1492523878348ED9EC57DE8B58447F252AA51E01CD28F5B87162DB4DF0EA80E2FC5037A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 7f05eae1a3b2912422810cddb60f4c95a7489cbd3b3d6421738e715929597031
MD5 9398984cf731f501a2c9231a8e797635
SHA1 f6402457273cd8e36a326313f64c70d538adcf4e
SHA512 7b7aa27a72e53cb162f1a6e961cde4a24dd1a6b15cd36c99c2259d349685af9a8bd10dfa6b21c13bdd18d3b36e0300aeca389f9af9bed6b9f91e9e29239e2fbf
TLSH
T13141419A73EF09D0D795C7F296DD557932FCC49A45C3AE41503A2E744ADAF1071D0023
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ba3e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ba3e.TMP
Size 1KB
SHA256 5a638bca3beb25eb349dd95dc56448a28cbae353d6b07cb48d200d24bfa229ce
MD5 c573db27cc1bd8fae04b71afea6fc646
SHA1 a60452c5569ecefe7211f85d71919c71267f28ea
SHA512 765085a0521824f5e74e23e7cd1df3b16587746d020af33bb8eaec72190d488020a9fc0135a80423513a2042f4d8707a500a69751682c10d42212a0562b771d2
TLSH
T14241419A73EF09E0D795C3F296DE557932FCC49A05C7AE52503A2E744ADAF1071D0023
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 20e62be278ec91d7f42437a4230b1e17d3235b8dc28f06e106ccacfdd7c23ced
MD5 8a76e8d27e022f9b73479a0d96aad876
SHA1 2e05163d2a35ec1c339e85d34f92e862290577b1
SHA512 3961b1e606cc8578a62ee9b0076898471eedda996a0688f1dc79ee16fb075f1079e6e770fb7404a7e7d20cf0d683f6758b71fee93097a36d7d5a28edeccab26e
TLSH
T1C861ADF783F4867E891196F4AB146E2BCE1D0516432C7C66C9E0AE1BA3F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 bc01aee530358ed824bd0da7ecbf31838f59895e377f916f5d4ee4e61dcf8ff0
MD5 a2ef6e2d4d0cc3021c168a3796e0cc80
SHA1 ce7f861b8d5b968738bb1828c49d311459d3210c
SHA512 eb65f0226222e33743150bf760ac322942e5f1d6de1a976c0d0f503c346721134815a9291ae3b253325306960684a17e23c447fe3dd3f30fe3acd1cf3cd489fd
TLSH
T1B661BFF7C3E4867E891196F4AB146E2BCE1D0516432C3C66C9E4AE1BA3F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c4ac0371dc4ddabf2dfee195df9e72db460d43bc35bc569392e0520343d07f54
MD5 9344c013b4a8a880f0af624f2e69bcf4
SHA1 c914e63b24e0d1d831e5ac7c193e8401b1db5939
SHA512 b32245e9b998a540b561d3db60abad35efb2ee43177f3c36c4572cca64cacd451c284c088806f5297ddca16654f57cd0d66767a5216d448a808fe90eb41ea1a3
SSDEEP 192:sxRcRMyM/jK1Ml8wb3/fEsA+3AtOzoA8p4l/g6+WNIYZFLKhGkIgIJ:sxRcGl3/fEsA+CA/5IS8s
TLSH
T16052D8166A24997BCCDBD20DFA557F53D6F85573A2901E44AAFC8B0C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2a2ed6d31fc46b3cd36d74d55e4ad93c0460f1be90e8876c4c39d2536522c640
MD5 7fddf1fc7995f868f6080c0a005e2cd5
SHA1 16b40b9983cb3cbf53c6c18444682e2d634db0e5
SHA512 2da5e212e3601f55ffd12ca59a2e55af98d5583c58c37691309b3bfd64a5a2c56184a3a75002ca91250db1fad2a4a46c070dce8716b3b1f2dbe90c26fcfdca2a
SSDEEP 192:sxRTRMyM/jK1Ml8wb3/fEsm+3AtOzoA8p4l/g6+WNIYZFLKhGkIgDTJ:sxRTGl3/fEsm+CA/5IS8x
TLSH
T19052D8166A24997B8CDBD20DFA557F53D6F85573A2901E44AAFC8B0C00E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 664dbd3e2e3331b2ebd4cb601c9880ad8167e1de6399d6eb7785e754b15aec15
MD5 b3b7f979bbe6c70985fafc9c86ef149e
SHA1 2db29dc466a6e9a36b34aebcff7c35261a56ffc4
SHA512 09a6b421c4670011f93a90c827b3a0ef1b008310a05b3ac86d8121113c0a3d4131130b1b64161d4b493a48ae913a31fefeeb8b97c8b7e997e56aa722be1862f6
SSDEEP 192:sxRTRMyM/jK1Ml8UQMb3/fEsm13AtOzoA8pel/g6+WNIYZFLVvhGkIgDVJ:sxRTGq63/fEsm1Ca/5ISVfb
TLSH
T11862E816A624997BDCDBD20DFA557F53D6F85573A2901E04AAFCCB0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\24d646ab-c5ed-45d8-a89f-cd59def85c19\index-dir\the-real-index
Size 72B
SHA256 4138c82db3f9d32c16798971c30a530f556b7374c1c812e4da537f54416c025e
MD5 637de42a7c47161896c656cabff1e155
SHA1 4a0d0c5c449b7d8108fcd92932c972ea320f93ce
SHA512 35bfbee2800e79fe1c9909853c50fe1af489cd9ab0d27a43399fb748b68a4446c916208422c6c776d772416344e0e2cb980d8b05e2ed7bbb0d380b1b98ac3335
TLSH
T1D9A002120AD508AECC0551F01097B5891303C95C0D20870360E810A99C92449E581016
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dfadd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\24d646ab-c5ed-45d8-a89f-cd59def85c19\index-dir\the-real-index~RFe5dfadd.TMP
Size 72B
SHA256 14c4e5df1d18a635b4610a95922bda391287197e102a68d97377af215900e00f
MD5 6a901325e0d29b7c15ffd2b4442d3a0f
SHA1 ee08260cc31cb7be164c1dface35275cd2ee9c7e
SHA512 e8188b44f19fc2b507e4a095d4fd254733bcc7a50325cf47802844e6ab93dd55f1725597d930a0753ab7af649aa950a0364b1c1b8e8ab04e3b4137ae1f7c7d43
TLSH
T103A0021157C10C91CC0191F02007C34A2383CD140111C30BA1D450698D924456A9180D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 c433298f4b579765b271c3c1b6e4d22affab41fb016020eaec489ac2cef84a0d
MD5 dc32dc1d515952adec96cd3581694ec5
SHA1 7588d07b20e2232dc5ab835a8e6ee56daed1b6be
SHA512 66a061ebe2496dce72625d718b25df8d94db6de670ecdd9d06076ed263923ec4f0aa5d4c54582ba3ecad5309499396df4f5bde6e5d23635f3ae22f804c8d41cb
TLSH
T105E068B22CE32D30FC6FEBE1287060A40149B858C504AC4E241E92C310B13543C0BC2A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\816badce-ad00-47c5-8c92-1fc298ffd64a\index-dir\the-real-index
Size 72B
SHA256 72b67dea9e6f62cfa494e080c3cea1209331d2724c4dd8b017d9ce5e4f632456
MD5 3d21f5450048f2d0494c98aa71111867
SHA1 f35a3776ee0901fa50b5baf0f42d4922f47dc7e3
SHA512 7d62f0696ce4af85624d0343ed47f04db2061a684ad7a132d078df74341b16dc4dde0addddb1551d0c6c1388083adfafedfeacf355ef2e1cfd2564f51cdc1b60
TLSH
T100A0029201E41042C805AFF4204A75B33225AB110D9352A39CE0F24A8E66D507721D40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c0e5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\816badce-ad00-47c5-8c92-1fc298ffd64a\index-dir\the-real-index~RFe59c0e5.TMP
Size 48B
SHA256 d652628abe85d417428d18f9a6468231eda6b2bb137c610cd601719dab37b161
MD5 fd60ae82f5fcf8c48651ffb696c7b822
SHA1 125ceb858f9e53dbe6129016610243272d59eaa6
SHA512 f7d63d63e6e34f8416e512f0c90c2198500fc9d249418ae07312b5028ef78994534c1a87544314e104fe39f6a6a3356b8b57092b99aa3daa0772120b16a3ded6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
Size 109B
SHA256 4b4a1c5744d8391afaefd8bd41a7ad3af4e8210e3663a08e3c8b8dabfe73d484
MD5 c5d27d76a16229036be893d1c75f2087
SHA1 a9b7f611925aee2af4610d699ffaba49574fadef
SHA512 8dfafba086891b6764f75d8e8b2564ca0dce9f7789f306d4b33f93e8d7513615b567d206dff49bca4cbfad14b9c2ae29b4667f92a9094851b8979ecc5d4e3a36
TLSH
T11BB01215D5C71A73D2DB1B0D06160C822C3EF000D22075CBF06E4D1A303D9144DA0DF7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59c114.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe59c114.TMP
Size 114B
SHA256 6c3cd66afb450ad9ef3d7a3e23dffda5fa8aeea6720238ea33a7299e3d80df11
MD5 85794b8e1174ac89147f186894bb0969
SHA1 e54aae0a6c8dacb0759081a6ca784e64253bcd48
SHA512 1676316d724126e6188852c71f2af520777c6cdf2674055b916b634b7d677bccb72d851ac20b800782cd150faf71255b104d7bb6dcb94af27c526ae48a3a1dd9
TLSH
T1B2B09215C1961A6292DA190A462308821C3AFC009210758AF06A34023439A148AA0EF7
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 3122be54fb7b13d89ba4e8effb95024c33c05813f056c4b9d15a312cac1b106f
MD5 7403a4885f8522d36399c3813c30ff9c
SHA1 5ef636b921c6270c5b0c0df763a8b6a3916f9782
SHA512 3f32d9054ca825cfd5a8f2ce465a5847a768835282890b3cbc399f885a423226721842e8c5f477f3b8c6a2ae3eb578965d52b12a460e2a84180ead7e8bea2c21
TLSH
T198612991303E0391387D6514D9B8C85ED2C2B891716CE86F7BA859B68F6AE134CFD8CD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 332bf556d509cc6433be9f25066f036569b0cb29c6fb7bbf867c02bb68fe6572
MD5 87e69a7cc738394328f78abafc6f1331
SHA1 571c41096c5b130e7ae021b34ba7698ae957782d
SHA512 0fd2430045e9f61452c8670756286f08614ee642bbc0d28a629c67d956800a4311368f168ae9dfedd40bba4afab44ff36851123db1e45664a14dad6e35c9276c
SSDEEP 96:KR8dIsGK+MW6XXg0MK4E5EWEnEjEREzEHEDWE3EEEygErEDK4EagElEDcEJEhE8E:C8dIsGK+T6XQ0wE5EWEnEjEREzEHESEP
TLSH
T117912991303F0291387D66149AB8C85E92D2B495316CE86B7BB819B58F6BE134CFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

96a76b6b-e364-494e-a4c7-357b29413e1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\96a76b6b-e364-494e-a4c7-357b29413e1e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fbf5344330e064f0ee7ce36573b136ea1796ea604c40268caa7252e2ccd825c5
MD5 0bbeaeb9aefe241c4bbf86755284fdb7
SHA1 bb4e2674223e24020b604fbdca9afab1c8ca879e
SHA512 aaf3e336ed2d6dcda394409c451e85586599c5bc9a04360932b227779c409f5ce633732084f0d533ac829dc71f042cc02214326927d839fd97b7de3ca8e88adc
SSDEEP 768:GD3mct+LeSFOUUPaX4fouOToPvB2thtA9VAgUb9ME:GD39osnnwthttlb+E
TLSH
T1BFF2C0B2BCA94D73DDE6C398714A31521FF09263D3E40F889ADE570D0A879AD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 506f31c27268d81bb9dd81a732a28af072f77fddbdf0b29828c473d769b8e7d3
MD5 1f76b32a7ac84a29d09d4936ca2dc1aa
SHA1 305ddfd4b78cfd6b4103b4d76458fe6e6f6a36d6
SHA512 2aa2023329c324711a64f7fb72ee58021c4d4b23847c021f3bd238c1c7f12c88547343f3e145a6120459d36315917b1532750c53474437a20129f5de36bf2dc2
SSDEEP 768:lD3LYt+LeSFOUUPzX4fouOToPvB2thtA9VAgUb9ME:lD38bsnnwthttlb+E
TLSH
T127F2C0B2BCA94D73DDD6C3A8714A31526FF09163D3D40F889ADE570D0A87AAD470BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b76ead8c1ab6182dfaa4fbafafa19a99d5258195c2d921ff59f94d8c0756f4ec
MD5 8b5dedde155d134684f3584d952c60f8
SHA1 4a927d07542d91eee7b44b9f9c978ea466a91f1e
SHA512 226dfe1500f0ac8dc8d9451d13e84c329dd048e334429420c77fb0d49244698be84b19de5d9d46ac70dc17d5e431229e303cea57ec302b8b68bdce3389a975dc
SSDEEP 768:yFQv3Ywg8Yt+LeSFOUUP7X4fouOToPvB2thtA9VAgUb9ME:Jv3SDsnnwthttlb+E
TLSH
T14F03BFB3AC988977EDE6C798B14A32425FF08173D6E45F84ABCD9B0D054759C470BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e81d5287f7a8e1d0425d631603870cd7810fe6b3b09cc1c11ca00b2fd7ffa5b6
MD5 ce6bcc55974aa64860e108a4486fa438
SHA1 ba9dd57ad16b000fe5a45a762f07ce682019c52a
SHA512 a4352a1270d2d8addf24160c0f778958c1c089cb9fcf8dc0dcb430cd1ff8cbcb99d1184d8c1c0e5759903c98c3fbc331d0d80cf5e7fdfc11e81dafcfd848fd65
SSDEEP 768:grv+4UNbdH3Yd+LeSFOUU/X4fouOToPvB2thtA9VAwfeVH1SlX:gbsbh3APsnnwthttiEH1Y
TLSH
T1F903CF32A8AC8A33DCE6D398710B71432FF4915396900FD499DE1B4D069B9DD470BC6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

945ad660-2e68-4f5a-94c5-329afaef43e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\945ad660-2e68-4f5a-94c5-329afaef43e2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download