hxxp://bit[.]ly/notasmh

Resubmissions

30/07/2026, 16:42

260730-t7wdkascph3

30/07/2026, 13:37

260730-qw9v2ayfjd3

30/07/2026, 13:33

260730-qtnvsabj3w3

Analysis

user interaction
yes
max time kernel
1049s
max time network
1029s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 16:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bit.ly/notasmh
Sample260730-t7wdkascph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299033595035802"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{1818A7DE-674E-4B72-B0BE-34F59D9C2388}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1500	msedge.exe
1500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 3536	4748	msedge.exe	85
PID 4748 wrote to memory of 4248	4748	msedge.exe	86
PID 4748 wrote to memory of 4396	4748	msedge.exe	87
PID 4748 wrote to memory of 540	4748	msedge.exe	88
PID 4748 wrote to memory of 4396	4748	msedge.exe	87
PID 4748 wrote to memory of 4396	4748	msedge.exe	87
PID 4748 wrote to memory of 540	4748	msedge.exe	88
PID 4748 wrote to memory of 3576	4748	msedge.exe	90
PID 4748 wrote to memory of 3576	4748	msedge.exe	90
PID 4748 wrote to memory of 3576	4748	msedge.exe	90
PID 4748 wrote to memory of 836	4748	msedge.exe	91
PID 4748 wrote to memory of 836	4748	msedge.exe	91
PID 4748 wrote to memory of 836	4748	msedge.exe	91
PID 4748 wrote to memory of 3336	4748	msedge.exe	92
PID 4748 wrote to memory of 3336	4748	msedge.exe	92
PID 4748 wrote to memory of 3336	4748	msedge.exe	92
PID 4748 wrote to memory of 4212	4748	msedge.exe	93
PID 4748 wrote to memory of 4212	4748	msedge.exe	93
PID 4748 wrote to memory of 4212	4748	msedge.exe	93
PID 4748 wrote to memory of 3200	4748	msedge.exe	96
PID 4748 wrote to memory of 3200	4748	msedge.exe	96
PID 4748 wrote to memory of 3200	4748	msedge.exe	96
PID 4748 wrote to memory of 1900	4748	msedge.exe	98
PID 4748 wrote to memory of 1900	4748	msedge.exe	98
PID 4748 wrote to memory of 2236	4748	msedge.exe	99
PID 4748 wrote to memory of 2236	4748	msedge.exe	99
PID 4748 wrote to memory of 4528	4748	msedge.exe	101
PID 4748 wrote to memory of 1232	4748	msedge.exe	102
PID 4748 wrote to memory of 1232	4748	msedge.exe	102
PID 4748 wrote to memory of 1232	4748	msedge.exe	102
PID 4748 wrote to memory of 3744	4748	msedge.exe	108
PID 4748 wrote to memory of 3744	4748	msedge.exe	108
PID 4748 wrote to memory of 3744	4748	msedge.exe	108
PID 4748 wrote to memory of 2180	4748	msedge.exe	109
PID 4748 wrote to memory of 2180	4748	msedge.exe	109
PID 4748 wrote to memory of 2180	4748	msedge.exe	109
PID 4748 wrote to memory of 3756	4748	msedge.exe	110
PID 4748 wrote to memory of 3756	4748	msedge.exe	110
PID 4748 wrote to memory of 3756	4748	msedge.exe	110
PID 4748 wrote to memory of 4752	4748	msedge.exe	112
PID 4748 wrote to memory of 4752	4748	msedge.exe	112
PID 4748 wrote to memory of 4752	4748	msedge.exe	112
PID 4748 wrote to memory of 4468	4748	msedge.exe	113
PID 4748 wrote to memory of 4468	4748	msedge.exe	113
PID 4748 wrote to memory of 4468	4748	msedge.exe	113
PID 4748 wrote to memory of 4792	4748	msedge.exe	116
PID 4748 wrote to memory of 4976	4748	msedge.exe	117
PID 4748 wrote to memory of 4268	4748	msedge.exe	118
PID 4748 wrote to memory of 5252	4748	msedge.exe	119
PID 4748 wrote to memory of 5252	4748	msedge.exe	119
PID 4748 wrote to memory of 5252	4748	msedge.exe	119
PID 4748 wrote to memory of 5268	4748	msedge.exe	120
PID 4748 wrote to memory of 5268	4748	msedge.exe	120
PID 4748 wrote to memory of 5268	4748	msedge.exe	120
PID 4748 wrote to memory of 4576	4748	msedge.exe	122
PID 4748 wrote to memory of 4576	4748	msedge.exe	122
PID 4748 wrote to memory of 5624	4748	msedge.exe	127
PID 4748 wrote to memory of 5624	4748	msedge.exe	127
PID 4748 wrote to memory of 5624	4748	msedge.exe	127
PID 4748 wrote to memory of 5652	4748	msedge.exe	128
PID 4748 wrote to memory of 5652	4748	msedge.exe	128
PID 4748 wrote to memory of 5652	4748	msedge.exe	128
PID 4748 wrote to memory of 5896	4748	msedge.exe	132
PID 4748 wrote to memory of 5896	4748	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bit.ly/notasmh
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9851ac188,0x7ff9851ac194,0x7ff9851ac1a0
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,2735681338582135504,6769245155773812403,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,16606435560103424182,4775456940712763344,262144 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:2
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,472158693122301984,15633029762177595649,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,397643196746925111,15100406576910915773,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13798334538199715634,7933759591428422631,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4072,i,4630709973846555954,10363893879216966282,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4104,i,173969955808243568,15475859804109373801,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5000,i,290954599313448093,17847677949907184195,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,14513482392150310573,7833478781630214309,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,9846337359362781479,6018502434983898418,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,9959975671961450801,6916981283782558414,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,9959975671961450801,6916981283782558414,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3532,i,12994046295688693236,9268999428869780211,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4136,i,1009805726953185480,16066228929599850390,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6580,i,3295057143984532113,12593382036119023578,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6752,i,13803163672448878994,9523992851128766634,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6320,i,13587500682562826145,7532757399668515744,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3532,i,10646090994166756710,9015183339324489754,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,15442716376780460795,6086466822926002041,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,14513278379498976970,4244058118298010742,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,9702399290379447941,9258978611065376448,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6744,i,14849184844207193473,2970808688232308840,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6432,i,4853592851924000578,11030214564998089521,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,9779739426431327446,6946676085889167537,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7008,i,11424749314425998963,4416776043429796429,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5128,i,11105978023719835551,8836963220460247107,2097152 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7004,i,6508871388723025523,17961146188596934410,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,4341809556797535444,17608560659687035326,262144 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,9879236103632639215,5472057418664688938,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,17945252191234962069,4633381138854175463,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,6165014926486532655,12399842342303025210,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:8
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,7571717875189388425,14311305566920520856,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,11969335524489966927,8817406320906767357,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,13219677908759748878,10131845717189849784,524288 --field-trial-handle=2560,i,11622462427011633823,9443225740172950114,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:8
  2⤵
  PID:2712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

614158ab-c78c-476a-bfcb-d8ffc4f999bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\614158ab-c78c-476a-bfcb-d8ffc4f999bb.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 555a8261a704cead956a85fe2c3b2656dd8463301405de792ec7b9230c443268
MD5 b236820f46c83dc9b891416a48005efe
SHA1 b218ef24bb2d548fdb189880e8215d4d6ba31d44
SHA512 2e6e1db859a5ffe31a10c42ac567c969060b347cc7b7f495fb291760425d40f4bba47cf4893943ce6d936721d05707ef1c1d94a029994b1280af60d38070cf71
TLSH
T16BE026589FC5E3B8890EF9879258B3B8C770B187A6CCDA7A330771A82443040AB518FC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6cc520575a113cbad238aaceafa064bb4a2f0f1011e93c953eeaf0e648b8ca89
MD5 c1e96583a39883c113b40576a5fb1044
SHA1 d52e9e45b3ce7a1cc6c5e238946058172db261b0
SHA512 7dc71cedffac20930546d836e0e044fd69f2622ffb4daa9f02579419c4112c78b4531abfa20636f32ade1b70317ffe3d6c5a184dcf5c5364f209ed8f1bda19ab
TLSH
T17AE07D9487CCC36EE30CA44B46E8576CB3A0370FE3C87D1A370494B8B007140A7C25D1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 28KB
SHA256 1bf53b33743c5c45d6c944815f74cbf58b228806858fb6e3a0b86c1204f4be06
MD5 5d66c3d97d4f69a2b3527e3997cbb66b
SHA1 94ef4f31c1a1cd780a172edfbf9e3de61697ef5a
SHA512 feb229cf976dc037130ce7e7a6c0e32fa8bd0c63382b0ffad82e4448767b88f8c17c431055bf834af6a5e92e2d34a6ec7432afdabcea9fae867517613afd3621
SSDEEP 768:YDWMT03T1/sy4Upj+7eLeD2qaWOJEPiAnKJ/JJzySg41:l35/syg7eLeD2PaiaKAV41
TLSH
T14CD2D146FE1D417CE5B277207AAB289E0B333C533A6147B91323985A5C68ED2D9C11B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 30KB
SHA256 f2c05d1d723bd31646c2c5adb65c29f317feab778a02511fbdcbc180853ca042
MD5 89c979cff1ebcbd06171dcd15927eb3a
SHA1 ddfb17da64f896ea2682bec12499ed9d8f65f69d
SHA512 ad58c49e307e87d94bcd1ad7dd7d729b752817dc2451d5869a7ecb652622fdc0be51c4baa263747d986898756d6b178570ba9ac839af748fa808dc9b7ceced9e
SSDEEP 768:QpME5mXXDrh5SBgD1LiXEBZiLKLWWPTO45o/fdQIdJAL:QpFEhFDRiXUoReOO4QId6L
TLSH
T106E2E19EBD4C25AE4220879142510089F2B19F4FEDDF1FD2E05D4D25B49D8ADBC2D62F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010f
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 7324a00e7ed9536bdb272df7dde7a2526c604114a64e766b0c00ae83d58f153e
MD5 67f4518a99d2ad8ae8599e7dd3e2e91e
SHA1 ac9dfd131c8fc27023e7ef624aebc2261094fb2d
SHA512 cb00949268eef3f19c77db20c97106a3984c522748e9073b28a72aacfa5b5ca4cbf0247bae11473b5f993eb98c88ff5491751d3f0c9d57d83a89c4b793ec9a3d
SSDEEP 96:r8lsLOB1+BOyvkCfkGQcxR9aRN4Wkf5ZuYYWu3/YGgJ1l2HD:r8lsLOB1+yCqOO4WKYWu3gNJ7C
TLSH
T1EAE10C30AC8002EEDBD060FD21E686E07571B8D9FA335EF6C10954F6E67A79272153C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5982e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5982e2.TMP
Size 3KB
SHA256 83ea364552f3230ba576a841b7b4292e65ba27e0708f554829e9731dc99c99ab
MD5 b4ff60569570d6555afba2dd6f933ef5
SHA1 b827afa32bf671f50f0eda3c03a58e0fdf4b7f22
SHA512 8bb50aa093386e2e115d50fac73f1550733919316bc8fb8bea606a7055b76659773937eff1cbedd2fabbd69cd9a3f2f559d504a5273ce38cb00cbd6a480fb019
TLSH
T199717E31B25140EFE79221F124E2528975B0CDDAF9339EB2C15A56F1E639360B6292CB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.docusign.com_0.indexeddb.leveldb\000003.log
Size 168KB
SHA256 1503dc714770a0c55caa9229f709c2a921d6243aff9db63f7e7f658b56428058
MD5 ce98ead691a0b910aa42d7106371b179
SHA1 aa01980b784e5777d9f5f0bddaad65a27735dd4f
SHA512 5b4c5bdba796ecbf0876eed9755bc67e8acf23bf94f83c95788e4268f359e03036d1b8ff5a0e09f055c3c933304b5676d066749943a835b566707153e50a8cfa
SSDEEP 3072:aSsf9US1JF3owcWZY0iyEmMECXQj4S4IyfIQDt/X93EZ7yOONXnkjPPhhAmWnDPL:64CSfBoK
TLSH
T1AEF3D52E6BF4585BF5B74ABA4AFB0B9395BB7C427C11C81EA041375C89B2A014D7072F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.docusign.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.docusign.com_0.indexeddb.leveldb\LOG
Size 363B
SHA256 2be2ad9b461d438632ff2483af4304e1123c6dc4269fc6beab47096bb7d812f1
MD5 e96e943331a048623b07765cdb481ca2
SHA1 f35704d242f15d9c0360116e485ff614d3c5a267
SHA512 b62b2879779900d4b74d563510715e9eff90bd4e590396328ea47a9f750c674dcf4c1d675bc7753e71e2927000aaf4c94131a37e6f696c2f4f29446574930f0f
TLSH
T142E0687CC4C8C62BA28810D320247F5ECBB3212B97C8BE850E09D914B04A084E1AE181
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_support.docusign.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

719143b5-72a9-41f2-8d9e-8c8f3685fa29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\719143b5-72a9-41f2-8d9e-8c8f3685fa29.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 bc61709fa55f2ef2b755d9b2b54ddfae5328a73e6a33f25d569f757a5b844d23
MD5 e66c6f3c74a171ed5787d892993db978
SHA1 0c564ea0cc0f13822fe3ce5603968d1362b84eca
SHA512 f6dda119505b420bc7ffce82128402547a8376400d3c56a9143cfb2119b8a865ef178202d7129b1d6ca31cd9bd9382c0730a0f64db353794b3e4a169a059db33
SSDEEP 384:DWo2S0jtVl5MP3OjYWleM3Sk7qtep3PeyR1eR4NupPt+h+1V1uB2iA/8kqzVIBie:H1SBTapXKHDyVvv
TLSH
T1B3A26EF787F4992DCD2262F5AB266E2FCE190514532C383AC6D4BE1B93E2471E101B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 fff134b7a881e77242dd2a103c4cd6c987b28b7ae071686835d721f31fdd94f9
MD5 81ea46e14062c176375a4f4af6277922
SHA1 ed6cd71dbf6f03c6a318e47dfd4e85d71acbcb16
SHA512 c13b3c97448e5b8bccbd5a8d937178ea89c3c0f2b75c84299a14c6ca5860360436fed0d0c83a92fba2e6057d042ddd763aa19e92722ebc2cc8ae8ac4fa11923d
SSDEEP 384:DWo2S0jtVl5MP3OjYWleM3Skd4esDTefb7eXmyJRKfkv2f1V1uB2iA/8kqzVIBij:K1SKTRmXK7Elhl
TLSH
T1FA927CF747B49A2DCD2162F4AB266E2FCE190514532C383ACAE47E1B93E2471E141B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 a1bb62e407b818867090bd94dade9cf4540b6cb07eb005e60e334bcd49aedba4
MD5 9264a216ac3e3b399cecfb0a55d22783
SHA1 7bb9321ef4d31b5966f63ee8d7243b51811fa226
SHA512 256fd181f05ca0ac3bf0dd9fe7927c2889db88b868e59e668ac4f6439a68108f6a485a57bd9e027049ea93c868c021e25d23ff28f6a26df0cbef5f5846ffb8dd
SSDEEP 384:DWoS0jtVl5MP3OjYWleM3Skd4esDTefb7eXmyJRKfkv56p1V1uB2iA/8kqzVIBi9:V1SKTRmXK7El7x
TLSH
T1C2927CF747B4992DCD2262F4AB266E2FCE190514532C383ACAE47E1B93E2471E141B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9fc3b45-7a47-412e-90ca-a54aac9f341d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a9fc3b45-7a47-412e-90ca-a54aac9f341d.tmp
Size 14KB
SHA256 24403c3056bdbb77286c7edb866fcfce3e355172bb9ca55dd560b96de60f54fb
MD5 1c0ad0d6130c63affce75887ccce94ff
SHA1 456468de04840d4dbcd2a851eddd925d10595635
SHA512 9fa70ba44baada33dd33253d4882d21256ab18ffbc925c4ea1821aa87fabaa894b8773d8f6eac7a95907f5dbd0ada1c3dbfd2c2d035ca739cc8d2e33c8ed3045
SSDEEP 384:DGaO56geQis5wUNmFplegp/wh1V1uB2itGs8kihB8DbB+kGTKkrE/R/gIg5DCfoU:TSbrrE
TLSH
T10A629FF3C3E5852ECD1152F4EB256E1FCE190A1483283C2AC9D8AF5B93E2471E255A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 34c8b3db5902c92e69a512a0df5983cf2cd8091c87ca51dc60c9bd2230a70253
MD5 1596cbc2d40c1b812eec2d42831566b1
SHA1 62fee4b13acf03340dc98435d0b90e3aca758e82
SHA512 b77a012e07009f55dd4d7b713fc0b7ed173bb7121202e7db569a23786603534d24ee0f2bfe595c90d47bec9ec607868e9f21bc9146b980fa2ad1c2f0d4815abf
SSDEEP 192:sxZzR+VyM/jK1Ml8Mke/fx/sQ3XEIdprnDHW6+WNBcPd/YInrjjIgrJ:sxZzaMe/fx/sQ3Xd3HbU/B9
TLSH
T18552E8166A349977CCDBD20AF945BB53D2F81462E2940E44A9FCCE1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f33c190ec319b7261ee413b92a2d0f51ffda38c6c9ce4dd8b81be9ec607dab14
MD5 f41d09d87410679ae5f3940932dd00e7
SHA1 1497dad23c5c4b6f4931072d6c400b6d9694bfef
SHA512 cfb8b0d9441820531e7e2fde850a7191a5f03d2f37b2533a58864825b9f4e5ae5fbd88b3dae39055760eed8a78c5d609ca52846ffeec1bd6a7aa1d6e9db4f2f8
SSDEEP 192:sxZzR+VyM/jK1Ml8UQTke/fx/sNBXvdp1AogOHHW6+WNv5H3NGVdPdM4f/YIYmxn:sxZzSq4e/fx/sNBXLSUHb4zf/tb
TLSH
T13D62D85666744A77CCDBD21AF985BB53D2F55462E2940E44AAFCCE1C00E6BED2303C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 dd07dee4d5d9ad15f5bcff741fb272958fb6ad0eacc0995272128f61e4a525f7
MD5 b7d9f8bc47518ca78296981b6aa89438
SHA1 26d0d8ba35f85272b53ff3a3d73819000e2ff7ff
SHA512 e8d3f78439516b7d4e2935debe8d57119ad0708be4d5545563f475281d60b4f776262ef33bdefa10153e5da3fe9dcc07cbb8a8a34c108f074efb3e8f429853c3
SSDEEP 192:sxZzR+VyM/jK1Ml8Mke/fx/sN3XEIdprnAHW6+WNBcPdM4f/YIErjjIg5NJ:sxZzSMe/fx/sN3XdkHbUf/61
TLSH
T10F52D8166A349A77CCDAD20AF985BB53D2F54462E2941E4499FCCE1C04E6BDD2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 61ea4c6fca5d35105ddad8a521f5ef82af7db21315c054541e2fdd88c14ade06
MD5 a97511ca0748fb2c80477db91ef891c5
SHA1 d13b04e1b71aba3c86c9eaba5fcabbceee5dbb3d
SHA512 dc014b2b054826a1003c78e8c0c80e8997fccc860b663018f138c09d976e6bf498f4b38186da49f5f7cc2a182a8cb8f58617f8d5709ef3d83c69004005a578e0
SSDEEP 768:HzsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9orowLHz:HzsqxXlWvJD6Tu1ja54LAs9TwLT
TLSH
T134D21C3B694CC77E4F840E5DEC266FD76ED801CBA6988D4447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\temp-index
Size 2KB
SHA256 a9e699536975e57c26f6e5f34f52699e3bd87171baaf3b54da514f5003b5f426
MD5 2098fb9615a876bd48868293f618ea6e
SHA1 74f6dd3136f3f1eae9b97aa8f3ce4f5dd3dd6b4e
SHA512 69d67ad477403a0d13a23e07a698a96ee0dbde80a70177e6e48b5b6cca96dcba3564c0b3da38d69db05b1dacb740168b7f8f73b92251da612e771977359c7cc3
TLSH
T15441A7CD0D45875FEC6444B3007264B43770A8CC5F5197036C7C227A7C533691D6B5D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cba30.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cba30.TMP
Size 2KB
SHA256 56be585fc9f637b4395235ff398d49085f000cecbba54f77d30dca67d11423e2
MD5 a841789e53cff04aef0623732b7323bb
SHA1 abd86d4e0bd8e010dfc837164b80d5a25a039b09
SHA512 a2e2c24f4ba4c6c34abe0c02e78f42cc0429380fd2a8c15698fa2d9697a5ef5ecb901607d4c2c61fb35c9698b254a9f570334ad9e307026ced5194208712ad88
TLSH
T17941868A4E42861FD8D045730993B4A83379E84097127B47A4FC573AB8A17BD2D9F1D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 61eeaf3b8d414d86fd779bbfb75b57bd83525e7b27c00fd35961ad4747af9a4a
MD5 c8fe64a8fa5d940a59ffbfeaf838b7b6
SHA1 f0a9c2b440b07421a99f26ca49be445117b426fa
SHA512 50fafdaf639ca8f1afca9cc81869b5d1e27458310c34895678011df970d206057142662cd34a0370b478d7e90f09bad636c9381c14efa30702b2f852088e2cba
TLSH
T1F2E06FBA2AEB0800A8ABC7EA187244A64414F828C895EC4F1029A28310722A03822C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 1670d51a2d8c1b55ce8c5a1e1b5cc7f1452d73781f0cef4b37559b87a93c6ce0
MD5 4c56b262566a83c221d6e5819333625a
SHA1 6be1c99ac555e1430bb5a778bcdc863021999549
SHA512 8b481f1d43cd7dc5def0cb69936ec90deffa138f36ca1817e2fac6b76dac76597a678087c2e395916021bf41c702807f6d1f58e3bc638e15f22b3cd68b7412f6
TLSH
T1A5A002118A6859D3C02403F4E882228863208910C216321180FC0454C9A45619923106
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596f0c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe596f0c.TMP
Size 48B
SHA256 208bf08359051b179a4b56fa4f9d1f7bd398224f14c24b82a94050746cb08f0e
MD5 8e67b093ad0dcdad354d82f13404cd9b
SHA1 755ff3416bbc1643fa15b893035688774777a421
SHA512 11430976aed6393295b4ba679ba883c472e4b3247be931c1b3e458685e96292611ea768bdbe4c68f70699368b71b0847ea8dcc5ea0d5345a4287611bccd36491
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 fbc02ca219621f58bbe69c80d4e5a7f91722b7818a3db720dbdcfd3c33cb77b0
MD5 3ede6f269e881b494a3186a3db435b25
SHA1 1c8a3a402c5023d5ce5b0d8e2672d09a136ed6d3
SHA512 b486dfd293627c785155853efd1e9b32f378e05874988ea843a939bf8e42d3640f281856255818fd6092d365b8fb9475187a33b070f867d1255c9bb4c9ad2614
TLSH
T1E4A00211064962D3C44443B85EC141936B114C157701131580E04844DDA81575311351
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b94500b460bd2327bee93a792d4113769b36373ddddd0fdf67d7504fb506d4ce
MD5 bb5f61e652115a676f8bb052b321affe
SHA1 b1f1d975f39490a2d37239974be1d48002f26ab6
SHA512 9e2e258b00d99b01d630f5cde92798213b121f9a1618f0b817182402de3acda66e859f312d45aebf28ef688bb37e64655435432d95929e0f0126f7bf40aceae1
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyZaIPK/q8vy5kIXKtuMe:KYbaKYIKqawK/q+KkgKtuJ
TLSH
T16191F146327A1252783E2998B266C5374F8236633118B47F3FF844664FAAE110CFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5906dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5906dc.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1761ec793e463d6a40959c3151d1df7bdb7f2a1ddcfe63f7e7aa16c8aecac1d7
MD5 e38d91db49d60632fd818f6229530997
SHA1 f97409397d26283944b5b0470054164216248e7c
SHA512 6159a80d748da1e8a4e35ecff3fd28aa70fdd086bf5d9c56504d25a91ac53375bb5961bcc5f7b3cb6c7c2d45592baea781c38775090285670e682b28c740ae5d
SSDEEP 384:8ZcIhsNAKWC1bFKrVRNmOfI98kOObjI9G6w7QU:qhztpHmOA98k29Mn
TLSH
T116927D326C345D769EE6AA56F8C726174EF8913BE7CC1B44A0EDDF0D05DA99C030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 812fe91b02fd7dd4a77d54010fc9f06ba7e4b1fe4bb0e0871e6d6c86fa664518
MD5 abd928cd6079c382a2eee7aa8ab7856a
SHA1 faac7c44e8c7cf71840a19dadc2657d69c3510e5
SHA512 cbc90c9d2b25333d8572350934b1f2833681216330103a6ad1eda9c4b2bf31074b7d261105778b790cb7e0be247b83d4a3ca69a92558f89a8a975af93b2a833d
SSDEEP 96:mqONk6SQsjpfHkRQ9865ih/cIPURHl8h4otop5lTDxBsPvvk40KQN0YsOmXxdwWS:tONX6JkRtQmiUyhHW+RNmOmoTh3tRvU6
TLSH
T1A302E9357D382CB78EF66E49B98727135FA5107BF9992B80DAD81F0C01D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7e0e21030ab736bef95d6a74e2eef7d4cc198a88fa22bdb5ec0a5ad219675e25
MD5 6d8289a1a6378252141cc5b4bc484383
SHA1 02986c87fdf4936856a2f52fef694a0863296fa1
SHA512 48e915991d67604ec4ef0c644b87a02c5b4c148d7ee93476e0a1e8806e5676c0eb3424ff7b7382edbc30408036b2afbb5a5f56b7095c614dcaa31266bd05c97f
SSDEEP 192:3ONZ6JkRUQmiUyfHp+RNmOmos19R3gVc8qPSU6:3ONZ6Ukip+RNmOfI9VkU6
TLSH
T1E412F73679785C7B5EE66946F48732034EA9912BEB896F80D1DC1F1C01DFA9C230E836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8a515f128f39c615183cb65d455fe1408b1f93fad84415e3a8d28095d8153a53
MD5 96305e7639b1e50e5dbe7136d2ee918c
SHA1 8fe32ac2167cb88889f4b766d1fbcb8d4e479bfc
SHA512 bed5a074ba6c6807d0c72a2dd7c703282a392e0b09f76963436b719b979ff42d89c9dee6551c9d685bbb430a73e9b163e6c1d5d5a96d6939690d613f3eae80b0
SSDEEP 384:YZcIhsNAPWC1bFe3VRNmOfI98kOObjI9G6w7QU:mh+hlHmOA98k29Mn
TLSH
T1C4927D326C345D769EE6AA56F8C726174EF8913BE7CC1B44A0EDDF0D05DA99C030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b5923fa754d778f80773ddc34e33afb83f8c170cdd853d875a554da5e76ff8d2
MD5 16dc84943d44b69a60d08e440bd69974
SHA1 b94457192819687a2f3eaf6334e69396999eb669
SHA512 80e4f26a297b7307438ca018e2f026c5349787b04f01be8098301a99f3deb76acce2ccc2b9c9f8149693df3b478b6ef95d74729a4e64b26d33910a018669bef0
SSDEEP 384:ciFiZcIUzsNA8TUNTUlIlPWC1bJD3VRNmOfI9BkOObjI9G6w7QU:HFQo5wgEAlHmOA9Bk29Mn
TLSH
T1F7D218F258E74976D9AE5B43A7BE2D034EBCD067F6885640B3C98A0CCD964BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e43cdaec1ad80a1311299ec4dd0db49ec348d34789e9601cfd15f380bc48341d
MD5 aaa8f417bdaefd4aeaf953cf686c9657
SHA1 f81f6dc5c3a779eb94898fca7aa47e2f9fcada0f
SHA512 243914c291d482ea3f6bbdf0923cd2847bca2c6e4f8014c2dd19c52e7f493aef62492c98b2c5e30c8fd9e35bd637b64914b6f35e1370fa9a8640f7adcc24d8f5
TLSH
T1F5E00907D30000EFD079073204931B367FFB997103F6020A8E2102B86D623012E26BC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 86984ffe29a5362680f8463770152451f908c099d535d373d3441f4582b8f712
MD5 aa52bcb76f3b28c594bf94a345210d6e
SHA1 58cea232c99ca00c9ed98ed74b85e65a3bdd27c2
SHA512 33183bc8e0e93ecc0d6805b3f5c617d235a9212cd5143f8a54aabe6d5e675cdfd4ecbc24fa6bdcf45f489c724706cf83fea9b00b52a02b5d286d95ca4ed8315d
TLSH
T1A1E00102130000E6C025073100531B205FE7D56002B603474E3002A80C323012E20B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3df98dfd865aaff1d93b05ffd0d057c1f4b8c5ef4dde72c639dab6c44e066686
MD5 290bfa60be2821001080cedb0ea9c47c
SHA1 871a4c2ba47958055c9e7635387664c75e01e069
SHA512 ec17c13687100b46a74f52c4b9117634eb783de1fb15e0174709fb14be30445f2231e46ca844e81f33a40667d316968de61b5379ac3c74f7ae9fc1c0517c8b97
TLSH
T144E00107D30000EED079073104931B365FEBD97002F6030B8F3102A86C723012F26BC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ab679dac6831b868ee558d44958528893052a7d84bf6ac0135189343d559c818
MD5 429c64b798d305fa6ae1d7812660c38c
SHA1 dceca366510e40323321be7f529ddc6650459a16
SHA512 16ff8366390b17c3fe5c9b20fea4c310bdf0154dd9382abf34c277592e3609808d011e49293e19151f37f63621bf958018fffb2d001a834f8ec52234d1065eaf
TLSH
T1E7E00106530000EAC029073100531F225FEBD57002F603478F3002A81C333013E22F84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe589e3f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe589e3f.TMP
Size 392B
SHA256 6f3d4306b0c8ec949c82b9cea2d00cde32aefc7bbcb1e1c901fbbe6593b0a127
MD5 6312102c9ae763cdb794a2c5dfb40ce5
SHA1 ca904ec3e27623932489d8d86b9b6842851e93aa
SHA512 9c0dbf2d2e917b846af56eb0759920431797cb45cce571014ec2931dd3021055d2336c5b488e993557579f0fa8b934d67c723c93dde54f754441df35ec23cd4d
MD5 SHA1 SHA512

Submit Download

b4b5b627-20ff-4e9f-9a65-bcc47f2edaa9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b4b5b627-20ff-4e9f-9a65-bcc47f2edaa9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6ad223b988eb725770bd2ff777212cf6db6571bf5b291ddb2add7a59f059de1c
MD5 61c7ade354c04a46f078a81bf8008ac7
SHA1 a93279ccbe42266a3a1538c65470ca66c229c8ba
SHA512 2952e95c4b15ccba6d9271d569b49bcd914137c04f4c172ba6d5d800f1b8964cb0b759abcdb7f30cf486ae5618683bf9e8dcde6c7506b77fc88495def78a1ad3
TLSH
T127413B6CB6E91118B3777F5AABF6746D48BA79772F06D45D10010E4F0662A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download