56021cc7ade71897cab63422bbf884ace8e4a828f2f2bbbd74ce79b4bfed8db5

Analysis

user interaction
yes
max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
message (1).html
Size 58KB
Sample260730-xe2xesdh39
SHA256 56021cc7ade71897cab63422bbf884ace8e4a828f2f2bbbd74ce79b4bfed8db5
MD5 e3a074161d944f897e994949afdfb718
SHA1 081a923c0ba1537f10e87cf4baa3789fc3129fb7
SHA512 014079800ddb41192fe584231e68efe63ec57ccb96fee3e15bd90e4043b8b9b1a54c387461ff6667f741db4487b07480074e8f5878b8f1d4d30565818e1e66cb
SSDEEP 768:zBjRMUS7jaEQ+AAxGxjIY01mYN4Kn47g4zH1G2oOBApTpru7whhLmI9r1E:zBWUSfaEQ+AAxGxjIDmYN4QSlKrvLW
TLSH
T13B4394AFA64621518933B37DAF7B6308FF7350535542C2507EECA6900FB18168666FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
105	discord.com
106	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4340	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299109806529683"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{C097F5E6-416D-4295-94E9-E41531001084}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{AA47B413-793F-4A41-B947-3F252EB007C7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
5644	msedge.exe
5644	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1652	CredentialUIBroker.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 864	5100	msedge.exe	88
PID 5100 wrote to memory of 4340	5100	msedge.exe	89
PID 5100 wrote to memory of 412	5100	msedge.exe	90
PID 5100 wrote to memory of 412	5100	msedge.exe	90
PID 5100 wrote to memory of 412	5100	msedge.exe	90
PID 5100 wrote to memory of 4412	5100	msedge.exe	91
PID 5100 wrote to memory of 4412	5100	msedge.exe	91
PID 5100 wrote to memory of 4020	5100	msedge.exe	92
PID 5100 wrote to memory of 3768	5100	msedge.exe	93
PID 5100 wrote to memory of 4020	5100	msedge.exe	92
PID 5100 wrote to memory of 4020	5100	msedge.exe	92
PID 5100 wrote to memory of 3768	5100	msedge.exe	93
PID 5100 wrote to memory of 3768	5100	msedge.exe	93
PID 5100 wrote to memory of 3536	5100	msedge.exe	94
PID 5100 wrote to memory of 3536	5100	msedge.exe	94
PID 5100 wrote to memory of 3536	5100	msedge.exe	94
PID 5100 wrote to memory of 216	5100	msedge.exe	95
PID 5100 wrote to memory of 216	5100	msedge.exe	95
PID 5100 wrote to memory of 216	5100	msedge.exe	95
PID 5100 wrote to memory of 4288	5100	msedge.exe	99
PID 5100 wrote to memory of 1680	5100	msedge.exe	100
PID 5100 wrote to memory of 4288	5100	msedge.exe	99
PID 5100 wrote to memory of 1680	5100	msedge.exe	100
PID 5100 wrote to memory of 5044	5100	msedge.exe	102
PID 5100 wrote to memory of 2872	5100	msedge.exe	108
PID 5100 wrote to memory of 5032	5100	msedge.exe	109
PID 5100 wrote to memory of 4632	5100	msedge.exe	110
PID 5100 wrote to memory of 2292	5100	msedge.exe	114
PID 5100 wrote to memory of 2292	5100	msedge.exe	114
PID 5100 wrote to memory of 2292	5100	msedge.exe	114
PID 5100 wrote to memory of 4656	5100	msedge.exe	115
PID 5100 wrote to memory of 4656	5100	msedge.exe	115
PID 5100 wrote to memory of 4656	5100	msedge.exe	115
PID 5100 wrote to memory of 3404	5100	msedge.exe	116
PID 5100 wrote to memory of 3404	5100	msedge.exe	116
PID 5100 wrote to memory of 3828	5100	msedge.exe	118
PID 5100 wrote to memory of 3828	5100	msedge.exe	118
PID 5100 wrote to memory of 3504	5100	msedge.exe	119
PID 5100 wrote to memory of 3504	5100	msedge.exe	119
PID 5100 wrote to memory of 3504	5100	msedge.exe	119
PID 5100 wrote to memory of 3188	5100	msedge.exe	120
PID 5100 wrote to memory of 3188	5100	msedge.exe	120
PID 5100 wrote to memory of 3188	5100	msedge.exe	120
PID 5100 wrote to memory of 1756	5100	msedge.exe	122
PID 5100 wrote to memory of 976	5100	msedge.exe	124
PID 5100 wrote to memory of 976	5100	msedge.exe	124
PID 5100 wrote to memory of 976	5100	msedge.exe	124
PID 5100 wrote to memory of 4456	5100	msedge.exe	125
PID 5100 wrote to memory of 4456	5100	msedge.exe	125
PID 5100 wrote to memory of 4456	5100	msedge.exe	125
PID 5100 wrote to memory of 2420	5100	msedge.exe	127
PID 5100 wrote to memory of 2420	5100	msedge.exe	127
PID 5100 wrote to memory of 2420	5100	msedge.exe	127
PID 5100 wrote to memory of 4760	5100	msedge.exe	129
PID 5100 wrote to memory of 4760	5100	msedge.exe	129
PID 5100 wrote to memory of 4832	5100	msedge.exe	130
PID 5100 wrote to memory of 4832	5100	msedge.exe	130
PID 5100 wrote to memory of 4760	5100	msedge.exe	131
PID 5100 wrote to memory of 4760	5100	msedge.exe	131
PID 5100 wrote to memory of 4760	5100	msedge.exe	131
PID 5100 wrote to memory of 2672	5100	msedge.exe	132
PID 5100 wrote to memory of 2672	5100	msedge.exe	132
PID 5100 wrote to memory of 3736	5100	msedge.exe	133
PID 5100 wrote to memory of 3736	5100	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\message (1).html
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffece17c188,0x7ffece17c194,0x7ffece17c1a0
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,17831655634062023828,14433584602900463188,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,7646652372275158665,16766584697948973886,262144 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,11669137483167603951,14582075067628467149,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,9601209710968481353,56604128121324670,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,13352210637244686298,14282934992655086629,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,5174315430267581321,7898373996017913066,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,1308822954018731219,7111828606134478587,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,7649551250029429754,17819037596581610645,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7382761938508246490,5286161244327469176,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,6241566428512790173,2215962679424589156,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,6241566428512790173,2215962679424589156,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,500259643270154312,173196384292621336,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,13073120245140110012,9879685392250700002,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,2514038856705359066,16905338621714991042,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6432,i,3152931055914152167,10453208390085892723,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6584,i,14124175463116020480,8781016578192734135,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,8377924804882700185,10367898769209163708,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,14839322743851792099,10792159107547992390,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4448,i,9870323529011016634,7815089306164168177,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6828,i,3671359627992941422,11144632728008644995,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7524,i,3031956607912680632,1423835121654471390,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7720,i,12913697915598870565,15304380855995887910,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7916,i,3317785517954001443,4981045314049688487,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7788,i,12560404631180265507,53168508115958142,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7836 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7928,i,4412438253358229318,6562580710572161248,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8236,i,11365293287881826156,11980977536043595012,65536 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:3
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7812,i,11530935504058501133,17699601089909093317,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8432,i,12237775654979751064,14612030633745922064,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8436,i,12779212782086376057,16171216390979823878,65536 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:3
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7788,i,8193198367349128490,6321304981067802307,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7708,i,12851398803420039435,245916137960693673,524288 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8408,i,15345519922235704826,5993165804397758932,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7840,i,2711962201758793699,2812536851662330208,262144 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7708,i,7904688160120226640,14340987099849799425,2097152 --field-trial-handle=2076,i,11622015094385962138,15689907760308701648,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:5884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1656

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x470 0x2b4
1⤵
PID:1324

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1652

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65f7bfe9-96ec-4506-aef8-c1defbe1021b.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\65f7bfe9-96ec-4506-aef8-c1defbe1021b.dmp
Size 6.3MB
SHA256 31c2d86d8d1af2b23f4ef8089da477ae5f5fc749d3263ecf00d49ef903f4b224
MD5 3df0e886a2b58d4a75286edb9b22be64
SHA1 dc88c8ffe8e7f8746914fc57a84b14ef11f0cc42
SHA512 34b308a919664a5a689fe7de2d404c04a7b8973e5cd43b5596355d5ecf8566d70ec02de62648b9033744301916e55754e6c8ac05d4c985e2aa085ffc622194c7
SSDEEP 24576:XFzdppXi80e9Rb7Tm4u8CnNbl6tyg9RH6l4eoN:XFzde8r37UnNBpg9RHG3M
TLSH
T19A66F9B5F34286CAF00546744B92B741F7FAECE049C6A753A611B32E1D773889F1AB48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c6f6dbfac4af94c94c915841ab3b25c901e88a7b1b28cd8491522ed4b7d67c64
MD5 3b90cf452e69f70433d34335f71641cc
SHA1 632107012ae0624b2d681f90570566b98c551a00
SHA512 d8bb5729680591ad3193116589be611283f7862bda4a1fa0f4cbaa7a9b0fe559859dc7ebbc67cab4fd46913ec91701a7a37ec27648437ab02a27ec6fbca89036
TLSH
T1B0D02370B5A9ADA0C82C0030803002016E66867530DB9B032045880D98B02C0F2DF8F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 1024KB
SHA256 56aefd9759650643831c113adbe2de67ad48d42f655c0f4afc3d343d90e8b2ea
MD5 72e4dd728b41ef08136ff2dac1bd2472
SHA1 978d650ca52c3b6fc8166837f71e6bf99538f943
SHA512 923c96803a47cb5e349fe3849c9576d8a3da3cae9413f55c9c22d3d44a2c2e73886c11db4030343102925b757cd9acb0e3713087a48ef9c2270a86512569e46e
SSDEEP 24576:ztIgoPjkT6ocj3wLkkj5FbD4N64q3zmgKhRhjNi7pIgX80Od:ztPkRocj3MkoZ4Nw3zkRhjqpIgM9d
TLSH
T145253371BDB9BA85C9326336C22746310F4D74DAF2852496E9AD4B2EDCB405C06E733E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 194KB
SHA256 c10e17b13b5ce0744296c41397071d11ff67e45bff5188eabb399419ed65b69c
MD5 86f8fa6a3bb7b911de87291598a8a5f0
SHA1 222b936b1a911ab97ba9569ceaef161a21261db4
SHA512 151dc5efdf6f82ced80104801e3044efde759b23b1229712450debf79b04ef71dc903d939d00544256b9141470caa19eaf60bc418d8fecba7c13addf29ce298f
SSDEEP 6144:je2meMfjLztbW6z70nhXxjN6jxDXCLLT9/2kj++fCu6:jGee9jP0nfjNQzCLf9Okj+q6
TLSH
T1191412F86F3786FA77E351BDA218528986BB16441A801F52F6C01C37CA647D7873189F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 429KB
SHA256 356465f91d18430526d17ffcb5ad3f23b05fd92e5f38d9e3ad6c93048f647250
MD5 c13ede72fcfecec3076d6a6dc82bd935
SHA1 dc75d77e72b95aaba3f3e8b53c1f4372f6da6a77
SHA512 7ecc485047f74c19eba38709ffd88787955d6c3c85b2380374734fd228b7457000151da3afa4a26a2c17a8bd9249ac33938953c945a9e485f3813b1c8b81fb53
SSDEEP 6144:l42O95xRjsyUXprSIvNJEBEF35QiNRGv2NatrT3V1ZL/05/NUtbgEHXnauyXw7uQ:lUHpU9TbXNatrLVXmVUtskJyAh0FcV
TLSH
T17394239FB7E1519162CC625723B6F24A171CC35932FA6EC00E5E0FE98A5EB90D9ED310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 431KB
SHA256 11b42afb4888abf284c2781b254cf56517b609f959ae28086378abd333b0d3f0
MD5 e9016cb9a16b14556433b899c31c724c
SHA1 714e92220b1bd341a91c5ddeaac3824e5536d972
SHA512 264efa56a37ee47fe353658e3d9b4b58b08d6f44e5d12f049494ece849f713b29ddd2c72a538115cc60edcb4b0a3eb57e849e5c43b07f7b591c3086cb7b9a380
SSDEEP 6144:ABmVp7meKItZl7+RbJMkUuYZpGzlgvZmRplrkJ6SXZ+VilxG37IIn07dxd63UoO3:ABmVVH+Y7uqQxfG6SXZ64pjnUe7PKe/D
TLSH
T16D9423C243E85EF47FAE1A7D28177E4C2B4F9D0389A1652E169B6795E06C14F2CB710C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 84KB
SHA256 b02d81653438f2206e406fe74f198c4081b749f7ab9e5a2de8c1fcf349bf0f82
MD5 a06a101f4e9ae9bc3c7185f29d973177
SHA1 71ad19396030d4f261a2b79d182e107583b81016
SHA512 b022a01a0aadcaa3e9f8ede517d02121f852b5d20a3f0e07f76a01d73c412caff82f6ed33f8e8b459706741720002af2c8047988e7c4d96d360348d73cb8c1f4
SSDEEP 1536:X/Vo6Xtocjv/2uDQOwVIC+Qo+kgi1GbP5xunBQ+JPqiCEyDddmWOGPR7hjMHy5sK:X/Ntnj3BwVNfzq3lCEyYGPQHymvMNrY+
TLSH
T10A8302D04C3B7A5463A19924C5CF3A4CD4E1A65F9F97E8AD8C89B39B11F640E3C0E84C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 510KB
SHA256 b1d5e70506701994dfe3fb695d00c5dad180d1e4e0d2b4a3adf8335cc015fdd4
MD5 e063562c4dd00831c5b72a8fb8b1ca77
SHA1 cf80e44b91bca950a013621da308dbc744eefc9a
SHA512 c595b2c309bc04a026e15b7d27258934e8fda1f0d9130ad61892794c57cf488f9522a69de74480c772ec8e5d5b0716c97988106381a9344fa9d107fcb87914a9
SSDEEP 12288:Gg1PiUWP/kp49RCH1z37UALcUKGT7M3L5T:BPiB3mVjIALj72
TLSH
T1E7B423E336AB4BC2D5934D3A1B0C0977FA158A3B5CE8234A72B04BC36B217965A5F750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 62749580ab8177ca637b10e4273b5360d6e4c088afd94948dc8f9965e1104fcd
MD5 50fd778aaaca0eb511de896c753eed52
SHA1 fff67ddbb588007a5d0bb074259f2d15078ce574
SHA512 39499414210e894a7dce02dc53bac5a0dabe1b0af2ca4e45e0c2ca5b7c3fc1774b4a3dd65609d9de395a8588fc57c5e3ca80dfbc9c0001bf3a863f02767aaff8
TLSH
T17A71E91C45E26B45D7D23231E4CD390B3571E86A0A6BBDE69BC8C8BD5F0672D8E7104C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3bb15b4d9ce66e8cd313f004618508b86ae8a39fff20267f977b45b8cb1fca42
MD5 ff888d9471b831203a1dd50cb133a85d
SHA1 565a347b8e90029717dcb401f1cdfb2fb00ee4d6
SHA512 0dc34e3913911cf55798381032093782fd58ab5d894391bf688b10683a9a34eea4ad4e97567b51ba0d961a29b2eeadae1832366a58a669ffccf8e8dfddaeaf54
TLSH
T18671D61C05E26B05E7D23231E0CD390B3571E8AA0A2BBDE69BC4C8BD9F0671D8E7600C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 51a5154baa167f8eb7b09ba12f2cc69cff1ec2c19447d0de0c12f59ba65586eb
MD5 a752b63b92744702a3a72be81e564898
SHA1 af2659be1b8594fbb3a7bc90eb663a338390d812
SHA512 b7275df019b554700293216cab6ba31f675df127127b7f6f69a887e3b4a6b4bbfcd7d5e1afc619cce202b526af8f7d2ffe77d6239a3d043df5434906294cfdbc
TLSH
T12471F91C05E26B45D7D23231E4CD390B3171E86A0A27BDE19BC4C8BD5F0672D8E31048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_larp-bratki.netlify.app_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_larp-bratki.netlify.app_0.indexeddb.leveldb\LOG
Size 367B
SHA256 369ccb9d3dad8a2c8f83deaf60dc9ca6ddf2fc13b4e86fa3b194d337cc1c8370
MD5 624d1814cc9e4e0cd20b91ce6b8bec57
SHA1 6682792ccb930a6b58a8ed3706e1aca49f303016
SHA512 5c4d0bd48b165ce3c32cc3c8b1b581d03d05caa677d63aa2845a813140fe54be8c28e85ec7efd9469ccb9dfea274b30d5b13e4ed47cbd4c6d65266f4e2018014
TLSH
T1E6E0D824C4CAC27FB25460FA0525BF8DD9A3A54BE7CD3D461E17D820758B044F5BE391
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_larp-bratki.netlify.app_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 18e7f2bd43edfe983b5ee4385796c0eb9b190733acf74c1d40812fb1fb26d26c
MD5 b6e42dfda2d98a30acb9a077d6f77334
SHA1 3536bcac83378ffb9adac0ae1c91c7a8d473687b
SHA512 ef1b58c99dd34afc03bc45c85c7045462c6c9724084911f49bd8212969aff7250cdd9f0c1c0e438091dca3ce1f21e3209e7c500aec845f29cc2f3bdfaa637e8f
TLSH
T18621ABF3C3E5856ED90116F0AA28BE1BDE1D0511831C3C1989D8EF2B93E3072E102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2d2496ea54f2633fe15934f2b6748cfd06ed97c2e13c925a91a6278f61c4a15c
MD5 75a9b788b60a041488b4aebaa96c70fd
SHA1 36928055bea9c7cd9d125162dabe03a9fbcf0276
SHA512 7993ac7670368caae2f46edc5b2e6390f926a881eefadac1ff12e30cb39b1aee7020ababc4fc4b21c29336d6e5498280a2343adab0a2e17fa91575e89afac5a0
SSDEEP 192:sxZARDyM/jK1Ml8Mkd/fcsUhNIdpdZHW6+WNGYwK2vTIgrJ:sxZANMd/fcsUhufHbG/9
TLSH
T18042E6166A34997BCCDBD209BA557F53D6F94472A2900E44AAFCCA0C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7b514d9c3b86e4922c29986056d67d3468635a6eb05b1568cb7a910e91699e94
MD5 a32284a51a20425cfce40369d0fe4670
SHA1 076061e329c6ab9784ed7a30ac99d16023c646cb
SHA512 e738aeb7baf5139d9e8c115234b999206f4a0c6a1f233c424699616c03be8ae74842d9323b8baefdc0e3fcd12a5692c0e026c43f2245927f8331e163f3793987
SSDEEP 192:sxZgRDyM/jK1Ml8UQN5d/fcsJqkIdpRYYY1JnJHW6+WNLSUMtYwPAVTIg5kJ:sxZgNqzd/fcsJq9CDHbat4S
TLSH
T13362D706A6349977CCDBD21AB955BF53D6F55422A2901E44AAFCCA1C00E6BED2303C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 98175473824056195ab7ac3f0369ff8d15c765f50b3c2ef32599605b3f03d78a
MD5 fede5ae1be8cbb3d2d87faa81b12d896
SHA1 7bec19cf57e40c0d4ba8f5e623500b980afc739a
SHA512 b06bfd87028a84403abdb9d2f0771c48fdcef3722c91b24bf5c7254957c4cd36a89903db44057b3104f7ed6ce40cd3df8f1a17d5e31706797327e2692bfaa319
SSDEEP 192:sxZgRDyM/jK1Ml8Mvd/fcsJqLIdpoWJflHW6+WNLSEewAdYwBEIVTIg5kJ:sxZgNHd/fcsJqUJHb/nAdXZS
TLSH
T17862D616AA345977CCDBD21AB951BB53D6F64462E3900E44AAFCCA1C05E6BED2303C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1048a89b151e58b3b02b4f03b6ebf07984c822758d47d4a0689a71fa9ab97fd8
MD5 108de7ab9f55345b65ebef579cff9950
SHA1 d6ea175792df13f6cbdde105ba4f26c4c0b38477
SHA512 42510477801728eb93c1ba3cc71dbed510215e0238dcdd6bf81dcb99ff4dff593da6af6a0e1952aad44a68b83b906c96a05fb72092333ce5fbc00e6b42595f46
SSDEEP 192:sxZgRDyM/jK1Ml8Mfd/fcsJqLIdpRYYYWJflHW6+WNLS8UnYw7HVTIg5kJ:sxZgNXd/fcsJqUCsHb+n3S
TLSH
T1D962C646A6345977CCDBD219B955BF63D6F65422A3901E44AAFCCA1C00E6BED2303C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c1de889e3f054958796345012033e67e21efa8249884507fdeac5b49990492bb
MD5 9bc53e8a377ab5e21f59b9cfe2b555aa
SHA1 b0ccd49c4f7b2478e4f3673916bba15047b3be85
SHA512 e437573922883e0a48ccb3374142fb1e6353d32fa780d10394fcfd40733d59b611911961640e47416b03caf10eea5708fede3ddc1d75e6d33f0f9470c06cfd19
SSDEEP 192:sxZgRDyM/jK1Ml8M6d/fcsJqIaIdpozJP9lHW6+WNvLo9Ywm3VTIg5kJ:sxZgNyd/fcsJqeS3Hb09iS
TLSH
T19562D606AA3459778CDBD20AB955BF53D6F60462E3901E44AAFCCA1C04E7BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d5c1eaafa99d6cd5f80742d58afa914e4c1c7a2001fae9da4c41a9ceac521af9
MD5 c0751f121a8e0d21ccc72082309f8a1f
SHA1 ad43eaf612a3a94d3e33236351043aa961c3ef12
SHA512 4e4d0efaaf93ffa6f26a9f99f74f163b7a85ba811f6049bb7a096f211f6141bb19f9bdd74bc8ebd45f5f8c2212f164527a242d9f6e1714b11c8ff2f230ef02f4
SSDEEP 192:sxZaRDyM/jK1Ml8UQN5K1jX/fcsJqkIdpRYYY1JnJHW6+WNLSNF3Yw4AVTIg5kJ:sxZaNqzK1/fcsJq9CDHbC3JS
TLSH
T12B72C716A6345977CCDBD21AB955BF53D6F55422A3901E44AAFCCA1C00E6BED2303C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b10d27a86b981af0237a26d0f986df3e7175bbb1422529ebf5c56d41357a5bda
MD5 1a695c8b11ae6055a88f0a0c8a42124b
SHA1 b979345a7e8588e16b3cbe8c163e613b2488c008
SHA512 a7a500bd3ebecfccca0b6d21e721c26a3deae5ff4ebc846610db6153060b789c86858f5c0f580ad480d000cf4e12448e5920de7a3c51b99c6d9cfd07c9150b66
SSDEEP 768:KD4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dprohKc7a8:KD4jeXmWvmKLEu1jacPLZQdCfX
TLSH
T17FD2093B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\223ecdbe-2e05-4735-93db-227fc96a19d6\index-dir\the-real-index
Size 48B
SHA256 0e2ab4e2e8e58e876f67e7bd4d3140413f78e232ca0e81a93cc4ce4db2b52714
MD5 20ef873b03ccae743cffde00bd0d43e5
SHA1 274472ea39352b825f29fc26053289b38e4d8ce4
SHA512 537443b2a0949bdf32e9112a6cf1a5c6c9f80a60a3f2bb89e9fd9d57d7a9548f2fd6dbd6c5f2cad74e6edf66776185254cec98dc2a6d30c6ad8538b7ba8944c3
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5a0bd8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\223ecdbe-2e05-4735-93db-227fc96a19d6\index-dir\the-real-index~RFe5a0bd8.TMP
Size 48B
SHA256 54db5138cfa9ee75d9e464a7a80c7b58cd5c4f1138623cac76ca6ae743520014
MD5 22deadbcd459803a2872788028523c2d
SHA1 76131deaf16456f24516f868f6e99e83bc2cac1b
SHA512 dff387e8f033e0b6def2083f7e4a398343c8fde92a507904467d9a39afe7a1423645db385ee440af519a4c25b8bd43276bea653c9f953634e1e149f2d2a4daf8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\c8e2125b-98ec-438b-b351-f38d9fdb67a9\index-dir\the-real-index
Size 144B
SHA256 3d41a18558382b61776e2a46d82bec112893b90e1bff0f9b7e8cd2088c617946
MD5 81e74cdab0ba102d71ded1fba608705c
SHA1 7927d98c5e18f2dd6e54e5d28d2621c59324c82c
SHA512 a6f71416e75d4d94b4bf3b6c711ae6241a8c50e6d839e23ce61503c9fe02d8f78ec2ec385eb4232af718a4c5a1ebdc2ccbc626a89fe27196449a06c439436f38
TLSH
T1BEC012088009A8B7C00107F10DC3009AB4310400A7E3120540DD09B46A13B500242440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a24df.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\c8e2125b-98ec-438b-b351-f38d9fdb67a9\index-dir\the-real-index~RFe5a24df.TMP
Size 48B
SHA256 77789d6ca373974aa4cb24905cb02fe3c29cd95635676b9896b77f3a98de9f10
MD5 c44c6046626b70b99463b41a798a6f92
SHA1 0140152ef3d761c05391706637ef5cd2a6b158f2
SHA512 4b669a0e3dbf09f9d60e03aaf16730486609f28d8023b36bb092bb968e6223defd88d1533813897d573ecdac203ef4d9a2362030c0c288743433a59a14c3434c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\index.txt
Size 242B
SHA256 3d16cbac28d5229d84e7969b39c988b3d9b227b3e564374d89ccb0e3f6b4802f
MD5 061f472387a526442f775b12a09e55ff
SHA1 74a8721fada9c0029459614f141191572cf6f84d
SHA512 e45ee8418d2a7c85ac629d1ab808db1972738d594c784daa13ed3cd303deeb10cfa47217086bab54b8fa55b1d362d7d915393f161e0eb564a4eea30d017120f6
TLSH
T171D0A76AF28A00B47AB6B77C225C325CAE16F442272E2601686E5637077BE906C6A805
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\index.txt
Size 248B
SHA256 f9be2ccf8557bf979c9970daf1f3bf564cce1b54f403b51ffb07dc4c4f55e647
MD5 378885b8933789880c954ec38f238067
SHA1 4ff5a2f025d402e62b55509e1e2d44ed45c188e9
SHA512 6d162462a4d1c65e8a792d4ca3d0dfb42acd30f8dd081c0a7a1380b6bcdec4ec54af792e611b62309dae33cf8851058ec0a2954273f5eb99ca19622e6639e374
TLSH
T1E8D09762E2C600B437B3B36C221C324CAE12FC02231E2240686A3033037BE40AC6E800
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5986ca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1113c2145250988fcab93bf0b097753c1e4a698b\index.txt~RFe5986ca.TMP
Size 156B
SHA256 c2581829cb5f205ca935ae62b3000085294de7c3fd48c73b422dafafa6e4c82a
MD5 f495dc74f004b48d95b26792239d2caf
SHA1 d053436cab17d4f4d739c22d19802eceddb3be28
SHA512 889f0dcc54ea4818c511b64d9b6c124420040bdc3a72da4190fb0b53b619675697f4dea80eb4e93ebda8393781a80c7a89d93aa3eacf9321b4c80b21f42e614d
TLSH
T1FEC08C93D18102F8B6A272BD539C328CEE128C83175A12106466322A063FA5069ACA01
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 becf7ad8baaa80df6d4041464a852d5155467c8ee3bef738a6c075ff10be6cb9
MD5 d0878bbd696e7b40de281eac5dbecad5
SHA1 d17a34356204f12e964ef709f71d1b2df7ed71af
SHA512 9e8b052a704ab6d4f22528cd5e6a4ad4cc6baf4d541b8df412e3aee0ee23bf6378bd75dee0f8dd2fcae1cda49faca5b2c54bff054f1ea35931d3f9512fae90a0
TLSH
T1FDA0022001544035D10D4A7124D9495232106D9453F2424240D5914CDED41614122844
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 06b23b6afe99befd47b87bb90c4d8960e4edd395ad44a835974cc7b4b44a2481
MD5 74b7f8f4e7db620654a191ea30ab77af
SHA1 b8c2f191a4e02cc8b62b7c4ae2d9a075e9b7c18b
SHA512 00d515735fc4d67719cb459d3a2e14af4e2d481e6032aa60d71e3a03e590fee16ffbcf4d41fa65d316c86948d2d2587a9fed190dcef9ce09e3f716cbf2f2745c
SSDEEP 96:Kk8gKJ2C+DSKMkQIVsYOKegqyTzgggKY1gmgcwgDGotKIwK5qM:SzJjIVsYOKe3yTsgU1gmvwgDGotXT
TLSH
T123B14701307706863D7F2508A5A5DA5A47D2F463301DA42B7BB944B2AF6BE620CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594184.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594184.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 631295efc370c83f8eebe1e70b779ba45496e479196eb1edc285d312bb03e7c4
MD5 7cbbbbf166105c773b380ebe2288be1d
SHA1 59075b43d0dc1d845f876877cbcfac7320e690ab
SHA512 bc6eb26b410dd8f376475ec3f0b950fe9f4dc3484ccbc08240acfb7c022148756f1478d5bda248a8014441b45df389bb648e105d558e8207280de97071d326cf
SSDEEP 384:OiFiZcIwzsND8TUNTUlIlhb1nGx5fTKf+w8kZyXH+2rFUOObjI9G6w7Pv:lFQsOwgHyWbKHlZU29MH
TLSH
T1B9A27D339868CD3B9EE69B56F49A36138EF55077DBD5AB84E3DC9B0D00875AC030AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e918bb8caea6b877327e8060202e60c058f7ec7b584f13859c70d3d465029993
MD5 4a8dd20feb9c12dbed92716b961374ad
SHA1 c7b671be999a1c3cf129de5951b4fac373c1de3d
SHA512 c46827647f095d01478d1b9832ca4085bdb3e1deb8ddc566ce9b65240f7465feca7de922b5a8add77ebdac736effd459c85940824f8b6021be99b380779ce8fc
SSDEEP 192:EONp6hZ0QmiUyvDpc/+jV6jzorkZk5wOZLxU6:EONp6oEpu+w8kZb2lU6
TLSH
T1FE02D93568686CA78EE2AE45F48737135FE5112BAEA56F84DAE85B1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 54b3c2cb619fb03ee06fa8cd156e283a2a96e6857b1b6f1961ba83e0f6b2bf4e
MD5 15270c780b923b9ba220940a2afa0d7e
SHA1 1c52b89a1e02a0b0b6bda6853d12b2bc920a7319
SHA512 66d0ad79e918bd17e5ad4e98d1cd726819e65392d3acf996255fac18e4c9fe52df149478f05a3f65eeb35033f4674c32993cea5ecf2a19669cf8f54ac187c61f
SSDEEP 384:xZcIhsNxhb1nGx5UTKf+w8kZyXH+2+FUOObjI9G6w7Pv:ZhalWbKHlwU29MH
TLSH
T19F929F36A8389C338EE2E556F09B35134FF99077E7D96B84E6ED9B0D04869BC130AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 fab4cb8fea7ac4db76b830dfc333e5f3345f16aaa9c6924106ba0ad98559b3f5
MD5 115752d3610689a62191a930e105d636
SHA1 2e7b0102f81bd09cd8433f33e8e589a028c82f19
SHA512 1c68f3ccc34b20be56c583dc34963f4771c3fced34cca70245542a6a2df6e34b4843441e5775df56b75fa7dac069d3bd12fd542dc605a1c97d0a641140ab8598
SSDEEP 384:LsNxEb1nGx5UTKf+w8kZyXH+2+FUOObjI9G6w7Px:LTlWbKHlwU29MZ
TLSH
T117726C36A8289C338EE2A652F09B35135FF5517BDBD92F84E6ED9F1D048B5BC130A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b75977d052565d33492eac4cb592f9c09208515e8defa91f200bbdd0a738cf9c
MD5 f1f4e25a52fe290e1b4f41622671c9f5
SHA1 1d53118d010769a6ec091433b22667a69ab6367b
SHA512 7c5304306ec331ef91cd50379ef74653bf2553cedd0ae409365a0801db2703cad548b23249389ccb9a594c4bf88a17db2a75cd18dddadced62270112c212948a
SSDEEP 192:OON86hZDQmiUyuDTWc/+jV6jzorkZyXH+2Y5cOqEq2U6:OON86RTTWu+w8kZyXH+2D9UU6
TLSH
T14912E936A468AC674DD1A655F08732235EE95127EFC6BF84D6EC1F1D00DB6AC234BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2e4fd02ff33f40206e15284d7b1917c38a3933ccd3cf8a76b1084700de8b74bc
MD5 ddb188ededf76b00cbb812ceb86e5255
SHA1 69fb028b0327427ed9d0952c3f27932046b2a663
SHA512 56b0113aea997485c8390aee1798010485ba8904e48ef312443054d349e7c198aab21dc63f71501d2f05cabbfaf82c46ad342c30cfc2b152ff6eb55f1f7c7e91
TLSH
T1E7E00216520010DDC434173420431F3029D24020417511044B71025C1C233012B117C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bc9b7a090fe637047d0fcbd173e910135566dac568b0e15a279d749e6fb4116c
MD5 9bb17ec7796631d43d0153c7777c1dd5
SHA1 c757e218833271d601c3baf38c0bf23f675d8697
SHA512 26e0011bd1e91b01e924f86ff12aa0926a6fa6c9ccedd8984740f7bdbf87481ceff6ea572319e71615c5cc7ff419ccc684deba324447f99a258b33a274aee0d7
TLSH
T17AE009269220109AC435173560D32F603EF25221436715094B71026D2C323063B11684
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 44018afc5fabda336f7a922407e8ed5feda7d7b6b1818e2c5aa40ea3d4d0c1a5
MD5 9cf5855d5af72aabfbbdbbe50752937e
SHA1 0ed18730614a418dc9de1879e702fb28d78485fc
SHA512 8ecf29472bef7d8812669a7d683a5f3b79d8d12b48c0b68e6635088d722c4cd4ce649839759c287beccf4c3581b656054190b6fba2d6291c135e8fcc4605e0ae
TLSH
T16DE00215D21010DFC425173560C32F7039F152104367150C4771027D3C223072B11680
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe594da9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe594da9.TMP
Size 392B
SHA256 2b4bd930ffb040ae5f889adc46a46477a4361bac317817bb60a56b916f25bc2c
MD5 5ec4ee8088cadeb2330b6dda2143c55b
SHA1 7cb07bbb341fe86103eacfc9e946cd6619d1b1e6
SHA512 a5e57c04a6f2ba385f13dc74ca3dc61b00cd97c3c17fc26077f381e4e1548011c5dab79ec125c653b54116fca13a18c811a6e5ad5d3c8a625e6dde4e779b2baa
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 64e83aff5c77cad9e53dff18166f2be701317905ad8037ad31f4484bbbffe9ce
MD5 1a60cc022e16dbc7506e01b339f11f82
SHA1 9a1cfe50e2bd91e71f49542c49a11a817f4f7c2c
SHA512 f37d599124ebcde96469b915d9bf9d0ecd467d157269c1286d38de9acbd2534b8b426b664c6afaf01a4600d511df319ca755e664e2e67aa58d73fa04e6ce1274
TLSH
T106411A58B6EA114CB3B76E5AABF3A46D487BBC372E06C15E10110E4F4666B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download