hxxps://is[.]gd/PqL9p3

Resubmissions

31/07/2026, 01:30

260731-bwwwvaag277

31/07/2026, 01:27

260731-bt6cha1dne7

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 01:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://is.gd/PqL9p3
Sample260731-bt6cha1dne

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: 758681729565rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com
phishing
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299348467192941"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{E55D4C27-57CE-47B8-98D3-7D30132C6B47}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2752	msedge.exe
2752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5060 wrote to memory of 2076	5060	msedge.exe	84
PID 5060 wrote to memory of 4620	5060	msedge.exe	85
PID 5060 wrote to memory of 4372	5060	msedge.exe	86
PID 5060 wrote to memory of 4372	5060	msedge.exe	86
PID 5060 wrote to memory of 4372	5060	msedge.exe	86
PID 5060 wrote to memory of 1552	5060	msedge.exe	87
PID 5060 wrote to memory of 1552	5060	msedge.exe	87
PID 5060 wrote to memory of 700	5060	msedge.exe	89
PID 5060 wrote to memory of 700	5060	msedge.exe	89
PID 5060 wrote to memory of 700	5060	msedge.exe	89
PID 5060 wrote to memory of 4028	5060	msedge.exe	90
PID 5060 wrote to memory of 4028	5060	msedge.exe	90
PID 5060 wrote to memory of 4028	5060	msedge.exe	90
PID 5060 wrote to memory of 4600	5060	msedge.exe	91
PID 5060 wrote to memory of 4600	5060	msedge.exe	91
PID 5060 wrote to memory of 4600	5060	msedge.exe	91
PID 5060 wrote to memory of 872	5060	msedge.exe	92
PID 5060 wrote to memory of 872	5060	msedge.exe	92
PID 5060 wrote to memory of 872	5060	msedge.exe	92
PID 5060 wrote to memory of 1748	5060	msedge.exe	96
PID 5060 wrote to memory of 1736	5060	msedge.exe	97
PID 5060 wrote to memory of 1748	5060	msedge.exe	96
PID 5060 wrote to memory of 1736	5060	msedge.exe	97
PID 5060 wrote to memory of 3388	5060	msedge.exe	99
PID 5060 wrote to memory of 4796	5060	msedge.exe	110
PID 5060 wrote to memory of 3272	5060	msedge.exe	111
PID 5060 wrote to memory of 1012	5060	msedge.exe	112
PID 5060 wrote to memory of 3732	5060	msedge.exe	114
PID 5060 wrote to memory of 3732	5060	msedge.exe	114
PID 5060 wrote to memory of 4748	5060	msedge.exe	116
PID 5060 wrote to memory of 4748	5060	msedge.exe	116
PID 5060 wrote to memory of 4748	5060	msedge.exe	116
PID 5060 wrote to memory of 4280	5060	msedge.exe	117
PID 5060 wrote to memory of 4280	5060	msedge.exe	117
PID 5060 wrote to memory of 4280	5060	msedge.exe	117
PID 5060 wrote to memory of 2404	5060	msedge.exe	118
PID 5060 wrote to memory of 2404	5060	msedge.exe	118
PID 5060 wrote to memory of 2104	5060	msedge.exe	119
PID 5060 wrote to memory of 2104	5060	msedge.exe	119
PID 5060 wrote to memory of 2104	5060	msedge.exe	119
PID 5060 wrote to memory of 2376	5060	msedge.exe	120
PID 5060 wrote to memory of 2376	5060	msedge.exe	120
PID 5060 wrote to memory of 2376	5060	msedge.exe	120
PID 5060 wrote to memory of 3336	5060	msedge.exe	121
PID 5060 wrote to memory of 3336	5060	msedge.exe	121
PID 5060 wrote to memory of 3336	5060	msedge.exe	121
PID 5060 wrote to memory of 2924	5060	msedge.exe	122
PID 5060 wrote to memory of 2924	5060	msedge.exe	122
PID 5060 wrote to memory of 2924	5060	msedge.exe	122
PID 5060 wrote to memory of 1608	5060	msedge.exe	123
PID 5060 wrote to memory of 1608	5060	msedge.exe	123
PID 5060 wrote to memory of 1608	5060	msedge.exe	123
PID 5060 wrote to memory of 4116	5060	msedge.exe	124
PID 5060 wrote to memory of 4116	5060	msedge.exe	124
PID 5060 wrote to memory of 4116	5060	msedge.exe	124
PID 5060 wrote to memory of 3572	5060	msedge.exe	125
PID 5060 wrote to memory of 3572	5060	msedge.exe	125
PID 5060 wrote to memory of 3572	5060	msedge.exe	125
PID 5060 wrote to memory of 2752	5060	msedge.exe	126
PID 5060 wrote to memory of 2924	5060	msedge.exe	127
PID 5060 wrote to memory of 2924	5060	msedge.exe	127
PID 5060 wrote to memory of 2924	5060	msedge.exe	127
PID 5060 wrote to memory of 4628	5060	msedge.exe	128
PID 5060 wrote to memory of 4628	5060	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://is.gd/PqL9p3
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa0554c188,0x7ffa0554c194,0x7ffa0554c1a0
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,12087449251190481210,9065615423562516506,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,6684498640574760134,17522783649641014002,262144 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,885153549765696351,7166503555622643421,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,5566971597996793963,16451711408562685810,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,4451609323591873665,8753532453666134583,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,10989924313261323728,10028075467787138196,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,6983650708211194319,3726553931410075435,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12997920258425572763,14328658070745951793,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7460748137706588244,14693947109623385658,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,8890235520474992720,5953181366103808127,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,8890235520474992720,5953181366103808127,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,16607696459378631388,18101588857900430916,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,9266278546642791471,10301220882986855992,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,1281243357596555592,6186556285085789532,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,10826662596028873869,14239550212619563479,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6204,i,9625928051177391386,7968236455426272877,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5892,i,3361709112188580696,2908566729544588116,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,13599563252117057991,13568519683535220379,524288 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6672,i,332121516235404726,9276513621039620328,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4456,i,260531190103879978,11531819828166579970,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4468,i,3264774986791219456,7241840138365604285,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4344,i,11225239908263706693,684340318753630236,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6568,i,13889297025111273961,89866943828770429,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4436,i,18207320978481356267,12182885498787327893,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7288,i,16259956184661286983,8823456293012807089,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7840,i,10376435245152926035,7562818035014163678,262144 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5152,i,10356380288436488114,17929976710362450328,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7744,i,14132432758054767833,2545124163358081198,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5184,i,5052731289025646189,11275457670527047330,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7820 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5252,i,14447124668726346262,5605240694213150377,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7860,i,13570076722246575349,16512266607035963024,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5504,i,2255592709389772403,6224822099523624050,2097152 --field-trial-handle=2308,i,13403270417503729245,16005252657829131303,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:1
  2⤵
  PID:1796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 204KB
SHA256 a43a2329b135900cf08f68cb7a0154f5244bd067713ddac3c523b320ce2afe8b
MD5 e7c75bbd7f37e515670dd4e260c6549f
SHA1 d9d853d0b4af49f022e69fa627ff75c8635e36d5
SHA512 c06a239ad141842fb6f3289ba9f82008441a8b265be69299e1e6376145a563ead6f24665acf8f5b7d7f9a2ada1274c543f6b85da79d4d1a8fed78b68cb879f02
SSDEEP 3072:WxUxDcPfLr6798TQLfl/78RdNgF62O+zFKs4IcmM9GOi1mTktOC1UGPiNoEwyEYj:Txo8eTE9W+FKs45tGF1kk0C1UGPPJM
TLSH
T1BC2412CF34E765B023CD518C1A7CD545D9FD03BEA5480108FB1E1BE1EA5C46BFA11AAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 83KB
SHA256 c616e3e7f29b152d3b3f0c775123879fc7c408a59529cd21476b0a45458453b5
MD5 2764f1a7945f9b1d4f58d55bf8856932
SHA1 c0609e2ee04bc33851f38a1400279a1e5e576de7
SHA512 d29f1425433d3accf3c170d4b531ce378c20a0f619d9e78a6b4c8f9a0e3ccf7035f93be5a6ecb4be79126d73cecb4b62bba9bcf065953ec5a9b63c6430806a03
SSDEEP 1536:Z3CZXcLnss2/jjd7kWBCBfB/VjWEJQAPGEedGPbEwARMslsoc9WLRzjdxJ:yqnsr/FksefB/lHQLEe4TrWcGZjdxJ
TLSH
T1EA83020C7936E289C6922A2BDFD5D23322258FF8572223D8777A144E8313E371D567B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e5
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
Size 68KB
SHA256 47d91cd0bf170ab1972a0777e1051fe5ee2a840a1d9efbeb0097e338228a8888
MD5 2a1e87320b14aac1134938a0c0bade85
SHA1 3831900aec52ad0da761f20a4fa1069d6434a6fe
SHA512 000744a8dbbc14690245ac7924c7662544bee356b4973075f5e78726fe0848e6aa96b6cf327718217ede7cde98d7874a2a4c934d1c864203a6015df18fac2d68
SSDEEP 1536:6fWZ83jSNyAUf76Z+AGYguWv0KxwhneG/7Qe4rxzhRelJ1Z6EUR+r1:6eK3jS3X9GjuW8KxwhneG/0jJelJX6ET
TLSH
T18C63029CFFA35BB52865C41E9C69A33E48E3E296C97B9721133B01F502116C2E0F461F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
Size 28KB
SHA256 6672e6a25ff27fb35f4a259d660959bd5581382a5e6d82f386379ebd3f285637
MD5 715fd57ef8cb9e99eb69f5cd370f52d8
SHA1 f407d02c2894e65369410d532b53b251d2917941
SHA512 afe412f57346186e65cd7e89716d0dab59272c040c0b11b9f10e114f76c174da9bf9c6e44e2c7e9c208549309bf21d8b25bd9cb0474deb247dd91178407e0cff
SSDEEP 768:34T6ObSF7Ej76BfxFoFRJ8oKPjuXiQFQZw:34JbP/IFoFPvKP6XdOu
TLSH
T144D2E0F6A188E96BDF34AEE5023E1525F2120AF51467BCB1EB2FD21D17C957352BC820
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012c
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 05eba62c0ca131beb9dba6b9d5380e86d7856f8c62001ac0f16f1aad50b4fbcd
MD5 235b890fe0465be9002eda76ef12e2a7
SHA1 c901ee21bb534853c17d2663979a0b0f4ecf02b2
SHA512 dc6977925e89bdc9878c0e687d9c1f408be42232221c802bae5b2bc0ef8e63f5221ac38d16506f69ffbe5b4e5b64e9f456cb84b70c4bcb7e9b9e1f10a21202c3
TLSH
T16371C336223100E3FF32417239C16201F97DACEEF6AFEF2A4964D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587644.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587644.TMP
Size 3KB
SHA256 422058522c474e8d823f81e49b331e2bcfa8c9ec33d25a70a6c8887e593323cf
MD5 93f508bbc901be0e88af6bd50224d984
SHA1 f8556faf5ab5d0730174bd2138c4a3742b956e42
SHA512 b62cbce5727420eb143915b0e1f2142d069644498b4452952687b116442bc7c931cfd0df500fc27d995c1fd886b78263ebe9d1f853f3ed8793f34a8cc3ca73ea
TLSH
T17E71C236222100E3FF31417239C16201F9BDBCEEF6AFEF2A4964D4B71D69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 22a81fb352d423655f1d742840fe21c5569810d3915774e82bd44dc0790ca8d4
MD5 a65952bf3fbe31926eac299839725822
SHA1 e457ecb874f6854698b0573cc120bd299c0b68a3
SHA512 94658c5c4535041b5f56898a3ec01217d4b2889210ce4b53a0cb5c3db604a380a0fa69407d6a55a1bc099a60f3890d8b39c02ea47be695babac50a5380f04f70
TLSH
T1AC21B1F783E585AE9A0156F0AA24AE1BCE1C0912435C7C2AC5D4FF27D3F3475E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 11881594969258dd2e2bb7d7ae77cf0f4ae354a49e090894803ee916aa130788
MD5 a6e985d9e6458cff90695b8d0f4091da
SHA1 81c97bd82ab608a2da3307cb4448568db73189fd
SHA512 9f1442f9789e5ea54f24fe149ebb84f22623c49ca266494896db8667dd098cc86b7d1cfbabadc69e2f292871aa97afd01480f6fecdc08ceef171471845480a00
SSDEEP 384:DZbYxnBjvZ8dhJ+JQyUzUFH1wkbocc7xqda9SjfANfSt5T7H1ONc0QGctuitzww1:NILC4IzG
TLSH
T1E95299F7C3E9862EC90162F4DF287E1BCE190914536C3D2A85D4EF5BA3E2472E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 89250956cb82af0be57e856dafab92b0726dc3063ba089013385e6f0a250bd6d
MD5 2d8d0779862ba147b42819ab2768ce8c
SHA1 673cc64211f10b735248e4534ca7fa82abe74099
SHA512 3978d2edc31168bfcdcdcc71dadfbfeef780536d6061326147b1930b9cf257b9861230d6cddcea68f4b9364efbdd9e55b0987369f54605521ed6303582e658a6
TLSH
T17AD022A3724570B4BA6C3EDE906EFC8ECB3604618802AEE820D0F8EC453246C0D27180
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 792ae9f9f2eff6f7145575fad254658945b803b77d523559b1251a393338bdd8
MD5 9ec33b497f057e25aa20b6797cf48229
SHA1 9d1862436db330ca3ed6359062899e8d8525c327
SHA512 dc525989f537fa3f94fd5e30d9249be45b3f7bebbdf49903f773be38fe58435c6647a743be4eb7c155c8f4b03b711bbe580a893febe2adcec784a6bff5848a92
TLSH
T100D022B3724230B5BA6C3ECE51AAFC8FCB2600A18812EEF420D0F8EC063246C0D07280
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59ed25.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59ed25.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d0e1cc44aa38ab161d5b226c72440ef372ec7ed6b4448ce3863d1b94ec8badb9
MD5 f505b5d26d94355e2092059f1b220ae9
SHA1 550f239d62e30a0c88f44e2b4b443d68a7db9134
SHA512 f06728bfd77c566af5cb4adca4882001e193cd1cff76c4c64e425c247f2d6bd51461d9c0e4d9e1c824322eed6debe23e0a70d6b903a550933606ad61b90616d8
SSDEEP 192:sxZvRvyM/jK1Ml8MkG/f1sujPIdpJHW6+WNGYIwPjuIgrJ:sxZvDMG/f1sujgJHbGx9
TLSH
T13B42E6166A389977CCDBD209BA557F53E6F90473E2901D44A9FCDA0C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 bdcc79180976fb39613c4d2bec74913766cdb10c4923ad1bebf3deb6f538b3bd
MD5 1805cee65d0fe258837f08f09de3338d
SHA1 b120ee60173a5c9731601fd11687ea922456eecf
SHA512 539790d500a64fc92b325d4fb400c871e1ab486a768b325d88e99a66f4f436a4b029ef62746f17e55890643e8cd2dc6ad134dd1aa09f4a9223443fd7fc240c3e
SSDEEP 384:sxZ4n3tqY5m1G/f1sGwKTOGjEfIHhlzLlNlMfDAt8XoWh:sa3cMm1G/fvwgxPHhCo8XoWh
TLSH
T11DA2D652552089B7CCDAC61ABD31BF26E7E40463DE855E5C69FCCA0C04EA6FD2316C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d38b02b84516d891309f6e669cb5a2913fbb611480d1d8466d3b458f921b45e1
MD5 ba575b4f74814efb7f426bbff74b0bf5
SHA1 f2e5e68e218b467c8fb3e82406a3ed3098121f44
SHA512 531667562988ea16cc51f73d55e618fa8e3f9293895c275f8dfc63b74ee2f7be846d2984b5985aa221782f55b57fcaad730b6fd1fd24391859586eaea13b47ed
SSDEEP 192:sxZmQUnIRvyM/jK1Ml8MWOG/f1sGwbeib5Gbddp4PvHAx6+WNdYnSvcXYI9CguI1:sxZ4nItuOG/f1sGwfGtSHhmlXCt0
TLSH
T1CB82085266248977DCDBD609B9217F23E6F40473DA941E58AAFCCA0C04EA6ED2317C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 288a79b41f1e925532e6a8afa31a21287368b808cfdc6b8007483e1573d4199d
MD5 10bb887f8b685438cfd5197830fd1589
SHA1 bc689a5266fb05abc61f17364feb416ff8100a58
SHA512 a0dfd0b75a015890a08a5b1634538060d688b790fa39153e7f9d5f228fa6008bbb7faf62546232bd6b78c167f13e9f76578edf3192fa65ccdce298961d603ef9
SSDEEP 384:sxZ4nBtu2m1G/f1sGwKIOGjowiHhlzllNS4/Xzt8vh:saBzm1G/fvwLxWHhNZ8vh
TLSH
T198A2E652A52089B7DCDBC60ABD317F26E7E40463DE851E5C69FCC90C04EA6FD2616C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 1cd01efc60c230cba0705f5ef421ca92a03c0f14402566e575722b69b7d93881
MD5 526772ca9dc24a6effa1f819b7c3dc4d
SHA1 96a986408b7b9935f5e9d393f967b10e56f6f987
SHA512 9a4e0c3f5cdf55f9a70bf4b4ce0a5602bcee25a44a44391f2e159f7f3df653f634e7ea0e99eb83e7a1f9ae46b7d0cfc851aaad774c02da83ed3264165d520c60
SSDEEP 192:sxZmQUnLRvyM/jK1Ml8MWOG/f1sGwbe2oILb5G5dp4PvHAF6+WNdYnSQk/YIqCg/:sxZ4nLtuOG/f1sGwNoIRG9SHVmu/Nt0
TLSH
T1A382074666208977DCDBD609F9227F63E6F40473DA941E58A9FCDA0C04EA6ED2313C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 40ababccbc1b4fc0569360a387ffb9a0013af3bcb124d6ab39ecea3d7a7c5ec0
MD5 6f936dafbf0be075208e151bf53d43d9
SHA1 ea9c68582ba4d4bc366b66f9638dc55bb4878695
SHA512 cdcbbf1fd9ec146eb8e8005ce3e42b8099304a9706450af36daacf4ab407e2864d9c279ec9247a6ee3558bb800fbf3c1014873ac9df72d1ad5dbbcdab7a782c7
SSDEEP 192:sxZvRvyM/jK1Ml8MkG/f1sGweIdpOvHW6+WNdLp/YIfpjuIg5kJ:sxZvtMG/f1sGwPIHbL/SO
TLSH
T18052D6166A345977DCDBD209BA45BF53E6F50472E2901E54AAFCCA0C04E6AED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a3423bba18c2e79ec7ab8fb295bb76daa7ed2b9c8498a5213ffdb78cdbc8bc56
MD5 1f1e11e01dc583721708d360aa311ba8
SHA1 7933018e959f45e0631244729839429590cbf431
SHA512 2fce4d69b5578d3ade31fc50c23565a782e89ee7c0c256bb5188b0d18108f187d0e4dcac667a10794c17dbe9e61f4ec0afbfd17a49f81f3c88305287461507aa
SSDEEP 768:uQsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9uCroGXc:uQsqxXlWvJD6Tu1ja54LAs9uZGs
TLSH
T13CD21B3B694CC77E4F840E6DEC266FD76ED801CBA7988D5447FA880C02CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\623cd082b6202da0_0
Size 62KB
SHA256 87903779ddef17dab2500794fd81cd7f44b77f09a44be3a804333bfe3c679ae8
MD5 c40880aab65f94412a39b3a44d97c092
SHA1 be0a6294556622ada29fa6789b07583b3441d7f4
SHA512 e4d56e415817d576c481fc7f6b6f0de3ad6bdddb78b0a052ee742f8fc980585601e0d32e3046939b6fb92746f1ee4e462586b4998529035ca69d14b682825e06
SSDEEP 1536:939VjJuBHKut3JWWOQ7Dt3/YdsllqtyKdq8OpGj5HPwqpzGT/j:TXukgMgDtvYdIYDDu/j
TLSH
T1685329A7B16261358BAD21D5A49A7F00F12B13461444C9ECF0BD66953B18ECB63B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 da7b5e2fc592d77d511f21f4904fd2aa5b32f9d92895f93d0ebdb95a0d58adad
MD5 0984c289f01dcb951cdc8ed533ac10e2
SHA1 9912450504885ea8c26b4708c37dfe3a1e12c636
SHA512 426138f81af9545264de494ae6f194b459389bc0b7220303b6d87b7711c627bd023da2989ebe928999f708bda533842ffe689ee5468604c60c0249c646b10c19
TLSH
T1E4A0025C43880405C122A6B115A302421726D8503D48530B44A17845DC704568D4212C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 87c85462bee08060ca882a9151acdc2342bf08a79b0c4bc52925408593b823c6
MD5 4c9b10158e60b0ad3eda78460a2862a5
SHA1 73e51243182ccb43ae5f53033304278c87499b57
SHA512 d1f3216439f12a65a4657065256b3b926f671af231bc59a3c35bf82a9f82dc957b42d21b1d8e9f498e3a4133273b91cc6be82cf27190ca092563724561c7391c
TLSH
T16BA0021E0385C04BC46313B12ADF41452612CB585212234941E09054C8509954D7111E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 fc4ad726c3463b708ceed9dcbe9d769c609d4eb9ebbff7c55adf4f6f6e7cf58f
MD5 7d58a697d0da781155ca1eb9013724d3
SHA1 290aa32b29610d43e5b200dbda87ec5601b50ea1
SHA512 c2cbbe8afd2737c1a16c3fd827436c122198381e2020fc16b2c84fd9111fc815c21ae1393b35f0f14426b7ceb8788e8125321716d4207429147e0fa21444e2a7
TLSH
T1F7A0021B1388040EC01362F035D74141625AC97D4606134941E08045C854D996D6104C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a899f9fc-e3e9-4154-9c6a-afeb7dd15d1c\index-dir\the-real-index
Size 96B
SHA256 6741a13b61fb1e9bec97637610f93c22326ab93c0ab7174e28178f74e97a20ff
MD5 de06708efd442af05be46f7d4276e403
SHA1 bd8c3bf329e4b299c5b408d8db8b346db58e1875
SHA512 9fb805a49b041ee0434ddde6e68b118c84e36f5d3b957cfd47d6d326bbca03f1c1e0325533f734d153fb147b4b4811e9e4ab1adfbecba00db1f2ceeb46d34bfb
TLSH
T1ACB0120C3527045FF506127112C30050301D8C41020E351186E011F6D8017810001011
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3ff8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a899f9fc-e3e9-4154-9c6a-afeb7dd15d1c\index-dir\the-real-index~RFe5a3ff8.TMP
Size 48B
SHA256 7affb868bf9cb581d72fae904d727ba15b74609e6b649884fd3bcfe363268f6f
MD5 eaf3df2ec96399ee5437ce4f94a1a585
SHA1 ccd972eb82aa4e0cd35ebcf298ddec5675bb3701
SHA512 9842825bd833728988aa2183e6225e29ec8b43ec6a9ba1b30a8179129a7dd81476ed12e1b48e0db2eec5b41918c8bc79e11ee846eff2081fab9db9a9a980f835
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bbfc1693-6097-454f-b94b-dd68c4f3ce0a\index-dir\the-real-index
Size 72B
SHA256 480a402b9c0b48cb77b9b5a3746ef09129f6cdf6f082c46f619923dd54900c25
MD5 c3092231c848232e25b47b2f10a058f8
SHA1 1c87c0b9e1b209cba25ddc081132864739a13927
SHA512 03a635bc613b1e1a4cb146f39cec01934d452a63335896fd54b31ef88eeea8cb30d9bb441cddb59ce1ec238eaf446df6249d54bb55837f37deeac2869bbb1efd
TLSH
T157A0027526D84062C50606BA61830191275CDC150A0943464CE90C59895A2DC57120B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d768f175-d5de-4c33-bd2b-2837c3903e08\index-dir\the-real-index
Size 72B
SHA256 0548973d6c33c8c6bb743b68bcce52bb5716c729f0950cfbae2dcc37061d4556
MD5 34cd938c9c67dd654085f49f28c9590a
SHA1 b84c09ea8e5d3d5fc77ea1a13064842709f8bd03
SHA512 1cf61d7888bfffb5dcc0580f32371cb1ab59413303221be1e50739285cd6d49116ec41a85a847226450c5c00766b507552fa515795377fc07237b2de98135d65
TLSH
T155A002510A881032C17057FA50CB818433588C154243060A8AA4F8E8ADD83F4D101250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3ff8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d768f175-d5de-4c33-bd2b-2837c3903e08\index-dir\the-real-index~RFe5a3ff8.TMP
Size 48B
SHA256 4406a44da40da3861b6d613bd3707c413f807a58824059392a77cc25e0fcc17f
MD5 a4f9eab4e8b5e38e07e3fd0ebd7b7e87
SHA1 175bc6a0d951350396d5544b5fac8c2b4f12942a
SHA512 c06c407995ad4f4d4395ec15131c8d400ca22f555f6c767ee920519fbb9a68b9575df794201defac9127c57eb58dc41922438ae8635a215226b1b5b7463ad2ec
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 3KB
SHA256 715ac8d0d62b2c41d44cca7e4de07b1bcaf5cd867bb7a5253933bef6ba8a31ab
MD5 76635a835f02010f47228dfa3a29d1a0
SHA1 54c21f9f95c56bea51f801e16d364ba5bcd142dc
SHA512 816e767ea01b94eaffed32f5746a3feae902de9c8cb4be75890442a3fb34c36fc1fea82277b2ed8b5d8fdb8fb231d9aefe77e95f641a7c7c0150e5302adbd669
TLSH
T1DF51C70E4D4B7B6BCD9D15B32CFB1885333124FE56888A17E59CE5306CC36252D7EA19
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 31e5420364dfa07a2592de58b7a79e10ddbdd223d781f23181e30317c25cd782
MD5 b46a1bcdb9b556585ac65c9f2ef429c5
SHA1 b3e5c30b3ce987983ae3eedf09b97c427f30a7a9
SHA512 8a374d28e75f8ce55f19458fb52f4f6ff3e7932afdc0307bf16cb67b24202e641930682c970f2f64371def4a8fcaad169b1725baa6e135c34464be36969aebf9
TLSH
T1AC3175CD4E54999FEC9446B200B2657437B498CC2F15E2178C7C623A7C6336A2A5F1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594cfd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe594cfd.TMP
Size 1KB
SHA256 539153c0e0df466f7d1b9d228a7b70c4f9e70f7c5fd015b4e6bee8093ae43598
MD5 7d8d735e5213a92d09d91e8d1aca0227
SHA1 d12e9563c34745ff683fa0b3a409a43dd58b269e
SHA512 1dd1059cfd07202379ce5b19b11f62f555a673ef11f00b3836ae57fb147d1d6f824aa28b7948a2decf94e0a7de390591d64f4af212cf0fde2c5f9bf6540985bf
TLSH
T15931B78A4E558A1FECD400B20593A4B43379D8005312B78794BC563ABCB57BD1E5E1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 4a8d4689a405130b44d659ea31362dfe2b5a4af00491e833b4da60414ae18232
MD5 eb64fc8fc8af4c51a5eba4003ff6c0eb
SHA1 39d11cc36e1dcc68cf02f58dd9523eb7b4ddb424
SHA512 2634ae1d41260c9951398459d4d799c8abf21f04812d54085d5dff62dfc2a8c03835148ba9c8c5a559e25c1dcea5cf4a44c152fb7acf1961249779a23966d5aa
TLSH
T1BCE068B72AE70804A8ABC3DA187264960410F428C851EC5F0029968310722602825C26
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 d9fdd845fc9c3cfcb18996b60ceda30f8ac72fd2fd28a57307f9b8b97f505137
MD5 cff2887cafab2c7ab588365c6547ca6d
SHA1 264b835cd23756fe6804c6665d40ffcf3c7daa4f
SHA512 c238fa4a809a9f33d646ee4faf98ac4d4ce9fe720bb432679b8f10b774b9419fade8b9bfd880ab1ceb82b725ec69fa82b8f8b052346ee7662bd861271f53ee8f
TLSH
T16AF059B66BF71804B8ABC7EE147254D64424BD18C841EC0F0116A58714733616869D23
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 fee62b6259d2802b9c1a863a1a87a3d0c8ae7fa64581be105adf59c1d64232bb
MD5 674b0767752d43fffbc7c1e6ab99b5f1
SHA1 51eb6913f29265e5819020bb3e3c9511f8c9ebb0
SHA512 7555029167e8c303773800bf160c8bfbc37aefb62a1d3f9261593fa4c5f6c36da4c2e2a523f3981754d7a7dd96552b8227b5def8c3ffdd1de8e27c5b781bf383
TLSH
T19AF046B37FF71848BCABC7EA147A64A64428FD188811EC1F151BA9C794B3721246EC63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 619B
SHA256 42e2142f62228ff14db2fb2db56b00f3723dc6e538aefaf79e38f616e4211337
MD5 6da0f2e6b7df710e228c0d438819e031
SHA1 85681a71fb26f451af430ae7a65f1a6ae8330e42
SHA512 9adaa6fbc976c5a70e795ac07da264f4d87af857880330266cfe29ea4fac5510c31ddcb32c573ac5d3a08e46dc158d460a0bfce0ac6c6bfd8a602658936f89fe
TLSH
T1F9F0ACB36FF70844FCABC7EA107654A64514F9188811FC1F141A99C74073321146DC63
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6c9afd2e53aa3ad5c348190c46421bc522a34e8613628717a53e7f205bb6da51
MD5 5b277a7d5f0b2507489e9480d5002fb7
SHA1 a18ca20302117cb3187ee2a8599e407725c9bfb8
SHA512 b4ac445552f7ef58c2b85565532fd46310cd897400a41a731706b547d216a6b370fc487891232933debb166915ffa35861277114e380120c66d6067b211b8e3d
TLSH
T120A0022DCA98C191D0400670DA6102C4BA918EF94A05371296AC00D489781809993119
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a648.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a648.TMP
Size 48B
SHA256 4195f433a2fffc0c1fb3ca9d5cff4e79e2bb942b03fce1acf084a5c3a9fafc91
MD5 713a510c7d7b67318d7d0fea5a0d6c2f
SHA1 44dcbee28b7b4c22ca0cda4158a1992c20dba2d9
SHA512 a65fd4271f4a8b88d6c4e71d1a9fd2c2d951b7ecc0e03ff1a83c690bb08e6679e8a8c80008ac556884d0a2a5ec87f4be2869764de55bd3462726b27e3681ebf6
MD5 SHA1 SHA512

Submit Download

3a5574704f05e014_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\3a5574704f05e014_0
Size 194KB
SHA256 12d7d906964ffbeb6fe17fe352194296011405c917f4ea5af3fa49092289fc0e
MD5 59ea003df6e2df69e3943711590b943b
SHA1 1d84a864ec7036e212d24236e528cc536c52ae8b
SHA512 d24ad8b051acac0159b52e07f16775b9d26b189b8a586b8239392f8a11c4269af9b1521d41dafc74e49642eb035d848f8e4dd7215635ac0f62d365c1d4d5d274
SSDEEP 3072:megF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:megF1cc9zByRIZa8HlI93h
TLSH
T140146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 f9f578be5e0c7cc9a279dd097029e66f7b39a83e8c364c44be3b3235c5ec6fc2
MD5 137c138dd5a9dc7ab3784958564dab02
SHA1 b8b2364243205cd0b693059053702a340a671575
SHA512 5fd795969cf7978ed55fef08ad2ea7629e0ef1cbc0e3a5563cf87dbd5122f0835be2092aacd1dd2f62b2382729d141971ccd431888cbb0649da613541d7c708d
TLSH
T15DB0112800808032C08C0B3238C0080A3A282C80238BAAA2A0A820808882AAEBA2B800
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 dc3a4304aef1ef8980d0a4c034c3cb5304ca3afc28f238c9173cb5c128e363cf
MD5 0277db54e21bea92c23ab8032c940d2e
SHA1 640f282cf8514ebf811404eb6420db0e32cc4346
SHA512 e2708d840d2328ed21ba29ad1506098821a6ee897c5db102f10e71bf14c251786843da859c6352fbe5d4f1963c7d759cf692d1f73c78498a925f0c2304aa8d47
SSDEEP 192:ExN9uzCnTRZZEpojzzrhFYbzg18ldo4/aOI+Sb:EnEzCnTRZZEpojzzrhFYbzg18Do4/aOS
TLSH
T1F1E13B12367B1202387E6908E39EC5779E5376633418E46F3B7850614EA7E212DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe591236.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe591236.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1de5127176885c4ad30cc688ef0df8b906c889d674625a9996f9ce35289dd751
MD5 b5b369f476ddab5cb2a2a06cbd782189
SHA1 6dd3bdac1f89435249116f7e1f81757c64b1674e
SHA512 5ba313158f0c513967d31b8cd73eeb8814c9daff143d57acf14b8193c36ed7992b33b91cc3dc16dc63c197d1baada6e31a47d15a56c950bf6de0025125193f0a
SSDEEP 384:yZcIhsNSr7bLFBVRNNOE+l9R+2KXOObjI9G6w7yc:AhfnHNOEI9RlKX29Myc
TLSH
T110927E326C344D369AA79952F48B35275FF85037E7C91B94E0D9AF0D06DB9AC130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 fec7bb07daa067eebcef44ddbbfef859e0cb99c0f9bcffea482a539a8cf5dd9b
MD5 532a69dc3ea17c47bf8fc19f68b3684e
SHA1 19ac280b07c0ef5619152ea5341b9f01a5a0669d
SHA512 113feba54c95e3528dc9a03c8b534eafe6e9aff01df071526ec733a1af43fcbb095a4ac95d82bdb953f91290ef5d467bd4b49d5053e76468304c04742ca2d608
SSDEEP 384:BZcIhsNS+7bLZBVRNNOE+l9R+2KXOObjI9G6w7yc:JhEnHNOEI9RlKX29Myc
TLSH
T1FF927E326C344D369AA79952F48735275FF85037E7C91B90E1D9EF0E06DB96C130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 691d4b784a40e0b62950cae5b8366a4f116e1476c42862038b2d714006dc199d
MD5 fb4ecdbea2cb6f04f8b2ab8bb780a347
SHA1 f44323c0b99ae4ef272b3e898a1aa242f74ed45b
SHA512 8ddf566b3724c528f84c62ed9d779b02a2549a232d1fe3efb34f9020bf835dbbc9c6969180af6cf273f0286dae037869772bc15f59b7ff8ddcac91fe5edd148a
SSDEEP 384:MiFiZcISzsNq8TUNTUlIl+7bL0BVRNNOE+l9R+2dXOObjI9G6w7yc:3FQ6DwglnHNOEI9RldX29Myc
TLSH
T1A5D239F258D74936E9AE4B43A77E2D134EBCD027F6846650B3C89A0DCD964BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d6c6646b7ca742a7d655f01701ee5abdbb09a2893599df73d13e3ae005cffdbc
MD5 799a52e02552b91efc315b754e3742d1
SHA1 60429460574f56a13afa44870b54aa48259764f7
SHA512 98ffa0fc90202c0251434d00655fc840799775cb237fe6d08a0b8338a014d952cf57fa1ec448483f6cdde43692ad9199f6fab627a2f86276740cb83fff531f9c
SSDEEP 192:tON16JkRtQmiUyLJW+RNNOmz+ih3pRIU6:tON16UrqW+RNNOE+6AU6
TLSH
T15002D8356D382C7B9EE26E05B58B27275FA9203BFA856F80D6D81F0D01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b5cd632c7c8f5e6991791e798fc2bbf2cd67f4acb2b0d78d682c9947dedbacc2
MD5 c0c2f02a72b6f7658181ca116ed227a0
SHA1 860c354aa30b5aaf2450706ec3d2e68324e83729
SHA512 24c9adc91957369e55a38d0968f53759230168bcfb64b194c43aa29c2e559783ae1f9a09828d59d872837ab875a654b34f391911997db17dd4bb3d5dc411859f
SSDEEP 192:lONJV6JkR6QmiUyUJz+RNNOmz+7R9R+2RVc5qTmU6:lON76U2Xz+RNNOE+l9R+2MXU6
TLSH
T12C120936B9285C375EE26945F48B31175FA91127EB8A6B90D1D81F0D02EFAAC134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b57dcc166b0fc5036bdb6eab60ea3c863a15f714c998eb007c1e90f4209da396
MD5 e00656d7495c4b8f251d7f9bf7224152
SHA1 e558909285a3b6c2c65f0f0a101dc75fd020b18b
SHA512 350668f5202077563e6957ac007a708bbf8485c76fa9252c885c68cf7fd26e3b7e3ca82e589e07e4d462426d5d54706e6cd5de9d79fe7d26e0db154ced4ac4d8
TLSH
T148E00146E35158AEF13C533005C31B7166E6966182B24A094A6046A97C76336AF20BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8e14085bc80a883fcbefd3c70768c823366c8a380ff583fc2ca78cf205171295
MD5 614ce22b3ee0d6c3b10f534700e7d9e4
SHA1 d2bba47a9a0ffbbe3575edd04536757e43944b43
SHA512 aebcb47b286c88796ed20cd4f1b9f515df18a35f36987388df4cdf9aa9b12f38114b88cc5135ba3b54b32941f9e7159d538de618066725889f4418cdfb82e930
TLSH
T1F1E00203E38118F9E03853310483172005C6542041B101084B5001553C333316E20F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0b021ab829ec4b6b00ffb60ba0e75b3569e03fb448164afb943657176e0dac17
MD5 7e87d3364a187f0e58b7bdbd6d62f468
SHA1 6f7582657857870e0eb840a3ab40bd902171b809
SHA512 83889c40cc213df2616a31b58ba04c89b9788957caec0e3c9091d8f975a29dbe443e9500f24e2f2a8c889f81b77c368ec2783caad37b43dd04a59aae50c7a2bd
TLSH
T1B9E09243E34010EAE13C033004C31B30A3E3CA7042F303470E2001247C732125E50B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d84b435092ec691f286dc5fa0f7bad0f6f06454a2cb39de8633ea85e7279b16d
MD5 408e0377d7c2015fe0544d5d6c21bf6f
SHA1 8cea219ce63662d5903148bafcf7ce7b4f3b9ebd
SHA512 7efd398cf017e6515150ac6678dfa1390067b257cc20966f58448b22458a4509f809c3441b6d6cedad654cbd963c6a17b7cbc6a5cddfd4323376a52cc5e10cc9
TLSH
T196E09242E30010AAE13C033004C31B20A3E2CA6042F303460A2001247C232225F50A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59b4a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59b4a0.TMP
Size 392B
SHA256 b6aa1c0cadd921b0294009075737e3378a889d79ba5d2a18fa9dfd6799245be3
MD5 dc1221d3b7bfd3e8e9e41b5a871b1ec3
SHA1 3295b5cf949e7fd220097c4a5f65f4079573788f
SHA512 1d0e3ca108b43f6bd34397cc8a23e5e2f6c616e5a0168016f110ced929fd93854b08a486a8b965972d1b745cf3bdf92c6ee92790b60fd2dbf4bc6cd700c10944
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 446975d7d09a83ad9aa5637c9fb412ec587c957659ccf91a7fe79e21da9171ee
MD5 dcb7c48446123846cfafa9bf558ef39f
SHA1 e7516b67b93eb29cede3bab5b73a0458884fa6c0
SHA512 a47e50a44574e2cd911af438b5a784a849f0ab99e8757ea10b6ebbda5073e42d3c3c4c1cb5113c96b36eef2cdb1c610f6a8c112ea0cf711a73959cd5054e2673
TLSH
T1D0411C58BAFE1148B3B76F5A9BF6A56D487EB8371E06945D00110E4F0A23B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download