hxxps://kits4beats[.]com/

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
345s
max time network
346s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://kits4beats.com/
Sample260804-wsehlseh46

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3160	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303406946762745"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{CB4A614A-64EB-4459-863E-784FA9D1654A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4696	msedge.exe
4696	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 4772	640	msedge.exe	83
PID 640 wrote to memory of 3160	640	msedge.exe	84
PID 640 wrote to memory of 732	640	msedge.exe	85
PID 640 wrote to memory of 732	640	msedge.exe	85
PID 640 wrote to memory of 732	640	msedge.exe	85
PID 640 wrote to memory of 1192	640	msedge.exe	86
PID 640 wrote to memory of 1192	640	msedge.exe	86
PID 640 wrote to memory of 540	640	msedge.exe	89
PID 640 wrote to memory of 540	640	msedge.exe	89
PID 640 wrote to memory of 540	640	msedge.exe	89
PID 640 wrote to memory of 2044	640	msedge.exe	88
PID 640 wrote to memory of 2044	640	msedge.exe	88
PID 640 wrote to memory of 2044	640	msedge.exe	88
PID 640 wrote to memory of 4676	640	msedge.exe	90
PID 640 wrote to memory of 4676	640	msedge.exe	90
PID 640 wrote to memory of 4676	640	msedge.exe	90
PID 640 wrote to memory of 720	640	msedge.exe	91
PID 640 wrote to memory of 720	640	msedge.exe	91
PID 640 wrote to memory of 720	640	msedge.exe	91
PID 640 wrote to memory of 1768	640	msedge.exe	95
PID 640 wrote to memory of 1768	640	msedge.exe	95
PID 640 wrote to memory of 2356	640	msedge.exe	96
PID 640 wrote to memory of 2356	640	msedge.exe	96
PID 640 wrote to memory of 1224	640	msedge.exe	99
PID 640 wrote to memory of 4244	640	msedge.exe	108
PID 640 wrote to memory of 4244	640	msedge.exe	108
PID 640 wrote to memory of 4244	640	msedge.exe	108
PID 640 wrote to memory of 5080	640	msedge.exe	109
PID 640 wrote to memory of 5080	640	msedge.exe	109
PID 640 wrote to memory of 5080	640	msedge.exe	109
PID 640 wrote to memory of 5580	640	msedge.exe	115
PID 640 wrote to memory of 5588	640	msedge.exe	116
PID 640 wrote to memory of 5600	640	msedge.exe	117
PID 640 wrote to memory of 6108	640	msedge.exe	120
PID 640 wrote to memory of 6108	640	msedge.exe	120
PID 640 wrote to memory of 3408	640	msedge.exe	125
PID 640 wrote to memory of 3408	640	msedge.exe	125
PID 640 wrote to memory of 3408	640	msedge.exe	125
PID 640 wrote to memory of 5656	640	msedge.exe	126
PID 640 wrote to memory of 5656	640	msedge.exe	126
PID 640 wrote to memory of 5656	640	msedge.exe	126
PID 640 wrote to memory of 5640	640	msedge.exe	127
PID 640 wrote to memory of 5640	640	msedge.exe	127
PID 640 wrote to memory of 5640	640	msedge.exe	127
PID 640 wrote to memory of 5848	640	msedge.exe	128
PID 640 wrote to memory of 5848	640	msedge.exe	128
PID 640 wrote to memory of 5848	640	msedge.exe	128
PID 640 wrote to memory of 4696	640	msedge.exe	129
PID 640 wrote to memory of 3740	640	msedge.exe	131
PID 640 wrote to memory of 3740	640	msedge.exe	131
PID 640 wrote to memory of 632	640	msedge.exe	130
PID 640 wrote to memory of 632	640	msedge.exe	130
PID 640 wrote to memory of 5468	640	msedge.exe	132
PID 640 wrote to memory of 5468	640	msedge.exe	132
PID 640 wrote to memory of 848	640	msedge.exe	133
PID 640 wrote to memory of 848	640	msedge.exe	133
PID 640 wrote to memory of 4456	640	msedge.exe	134
PID 640 wrote to memory of 4456	640	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://kits4beats.com/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb70f2c188,0x7ffb70f2c194,0x7ffb70f2c1a0
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,43835366417715108,1248233896021923994,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,11975528860001016176,16178667992587028113,262144 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,938377530484663975,7382904668324885775,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,14598313830024759943,17026839473494964190,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,2562803722107079314,8417918177036260998,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,7776453293028638105,10000926808239714526,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,13386409488083481584,16313653424480898649,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,14977653851403105281,6699211130545800729,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,4966130436170095268,10948996231473124581,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,9652023810100307838,2600949654942743990,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,9652023810100307838,2600949654942743990,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5004,i,2923063657147514110,10364409417174102295,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6556,i,6867664712872798017,3307322111973829066,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,15945099617281205712,12541216909238297702,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,1597465043735872173,557125494379473132,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,17539138658973985724,952215879257033163,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,17886819047800524157,1823689964648169758,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=560,i,2202067704605274886,10662260310572307916,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4696,i,314405980551473139,10199722949716145172,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4320,i,10996498335014364158,12321965709832096724,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6876,i,11018392035698753051,1475827039207599989,2097152 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6616,i,12585964370396194777,13422530794983414879,262144 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1493172615600309702,12937818974802263024,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,4371401588645107070,11706773709305903831,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,13814759373665882527,17557458550307506022,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:8
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,8649381513164018234,15937420079258207591,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7100,i,13886767007569461703,15595235285937349920,524288 --field-trial-handle=2336,i,13965559127216624678,12619076971536565234,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:4456

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec09ba5da501666cac506a8e17a37a0b19f2d9712ad11c5ba4ad14b3ce62e7db
MD5 e1404f4875306f456785e26a92aed547
SHA1 053db7b2ab0b6a59f2b44973d8f1751505d230ac
SHA512 a6ccf97239d40b1773848dd7f6ee31e91a3f8b90e05f43c6d7b13ead4ba9896a88cb2a9ebb06880b10b5223c52e29e192ba9e6e80528cece8415c817c164e52c
TLSH
T137D09B203A88F441CB45017195049F553B2654542057DA0BE165585D5CA51D493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 558B
SHA256 fbddcd49696816435b6d97918de9648a1ad6a0c5188c613cdc622cb8a053fd09
MD5 48c67fdc4888bb6c6651f05db965ccee
SHA1 f1e6afd5f0ee54c044b95c2ef84555b4cdec9cc1
SHA512 e3d9f2554882194f99fa8e32d24432a13462a798d625ef4a6c2a6f42a6864249fb280e01ed8c3dee9b5886d82d0d75051c4b951b203be2a22d47ad849b9f3706
TLSH
T1F9F04C0583C9CE754BC05187A155530C80907BCFDF8CE4A9A31CD5C97C43040A264DE9
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 20KB
SHA256 bc558d36a14c6aff1ef8b85396a3e6f6d079292a3813a7534776c1ecafb8fa5a
MD5 e66050f602011df85d0e4dc5f5501e64
SHA1 67454f7b5c33eaf81a2a0f637f58d17543a189a9
SHA512 bed35bc2bf192c9e9b4baeaa2d3d20c3a1917ac2667bb334969a483ebd6a60f6d477b70641e2d586fdc82039d20e1f9a9bdbb366dcf93eb544ab7a7ccffdc7cf
SSDEEP 384:ZAFRHrBsLOoPrY3bE5Fhizr9irSEYobI2A5goQ6x2FGOq7joAFlow:qFRLBsy42WTizr9YlbIVZQ6kXckAFaw
TLSH
T197A2D0950A6BF2BD445C0B1ACEFAEA31584CF43F658C27BA561C1B3E13A408D0E45DF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 51KB
SHA256 cca4c5e0ffbd19c90d381bece31d7dc3674f12583a4b93af395fb50d0bb87d42
MD5 d47926f5cfbed8c2db591c39afb0c833
SHA1 c851ca217622386899877c5a54ab46c8437b77ae
SHA512 08004e9dd4f39f2be843c03a4d61a9aa50451be51ec51603c1232b315af6473352bcc61546fb5b3a2ec483541d3d828744174588c9c7f3168a47aae93d152905
SSDEEP 1536:RlcA2FmEIx4O2GrMbXW5bbESDK4tzyPfexKoxj3:DcPFmEIxZQq5njtzoQJxj3
TLSH
T1263301478764D8BED2F824434B731C41A8AAD51F1E0D290DF2C24FA9E37C991E965CAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 29KB
SHA256 2403e1a1abbaa8f911da32a55052a95352a23250d3caf33cfd9246e4084fcac2
MD5 fc3a54126b60aabb257a03ee7368bccc
SHA1 2a52d4a13d6025b116c7e2670d8f15b00731100c
SHA512 9ad6ed709ca7da4609e33758d4fcfeede77b7a56f5f8fa2919073695baf49211fabf6905be9ef778e0a060cd11260d0e6eadf4fc0f056dedcda23140640a6622
SSDEEP 768:v8oH3TFQ/RFGRvWIjStaNFCQ063vrSecl8Ba5n:v8oDF6RFGg/QX3Dlclt
TLSH
T19AD2F17215819C2128FA6EA095602547C17CC539C78A7AAC837DA452FABF92E0339E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 25KB
SHA256 880367995b3e8008c3b8fd37f6c091a115cc26851578dbf29397c93e6bb3cb5e
MD5 37a54da351843b17fb165d2138443517
SHA1 e5c6cacfbf49d09d841b79bb71dbad74634fa25c
SHA512 fd989d3ef9dc0739efa3e4f1e6d50ee7ee036cfb58386264f4a535149673bde77f76af7125712b810c7b6e81719ce8b48eb8bdb4457cb362b211484f87eb5c46
SSDEEP 768:K/bdLR0K3WlvjqHiGVNQsbQbVBjDcOrMNZYYH4Vi:GTzW7qHijHVBjRrM3BYk
TLSH
T16EC2E0C934E88A02D2CCE133115E65521F98E270BA4E55AED5EFE1DFCD98B403D88E86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 154KB
SHA256 d6837cae2925ad1c41d210e96765ae86791f039a5838be90bb6bb54d12e4e853
MD5 63c8ebcee5641dc93539ac8a3db491a5
SHA1 3a9950bad9d1b100c1bf8aaa8941a6559835480b
SHA512 1f704c6d5824c6ecf0aa30ecaa3d4232fe06db096bc99186ce3c08134fb67686339f6f0c2014dbf60ea6f01910c157013a0dd6d60ffadefbb8622827da9ac32a
SSDEEP 3072:KauSB5F8NIRLpsBSBrJGNG3ECNQz1RvHHqkRLrlj:fuSCN6pnrJGo3POx9Ka9j
TLSH
T1DDF312A710C67D5284A3A51B336AEEB52C3ED363FCB5CD72BE340114689DA9C2E4D590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 115KB
SHA256 d43b11dc9f369ece62b303212ca5f442d9785ebbb405aefab09955c2e4632d2d
MD5 ba8834920e79589f58c04d34b107635e
SHA1 0082e0982ce5a4b1471bc8b7bf11ba994e4eb6a3
SHA512 d289cd7c378576eb892edb66fc9fa57f1e76b75314b83442d0d3005d6d82716c1a6a2b454bd6a6d5e29851d4422162e70a0ccfa197c9dc05714d0850ce97919a
SSDEEP 3072:346B3R64rvd0vDtUynAuWKevoGlQaH1+1bjjCoTnRH:3LRvdiDWynAXKeZQo1uPHF
TLSH
T17DC31217E26C10CDD5FB129C6CCFBA1B348318566974C7F286B8B5287B5666F30828DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

065b928048248ca4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\065b928048248ca4_0
Size 285B
SHA256 ab82c93f84943768f4c74cd06885edc2e79f890d688798c620550470cac3e7ad
MD5 ceccb870a16fb591474fc58222418108
SHA1 39e815caef19be58b0a038d7bf38298a1d61da3f
SHA512 52f1e646dd3a7d61bd88aaa54461268b6a706c0a1b5338b7961bcd8e3f9ca4776eee6319dfd07c240b4bb4a6d5973dc89a391d1c78a713ba68ad0db8ab892ebd
TLSH
T1B3D0757FA809EC47DA0141F0CF01F09013E8B8F99DCC43C00856C02F0B14BF84402C10
MD5 SHA1 SHA512 TLSH

Submit Download

1aebec718009b9e0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1aebec718009b9e0_0
Size 6KB
SHA256 c2b9c43da140cb5eaea6b93c62266d32bbcd02e469bb1e1721c3bfbc4a9c1e11
MD5 394208c9747147902027f721103208b2
SHA1 4a26d8e537f01eac076ef4b739d1e004cf055e14
SHA512 74dea08cc556e226128bdc162379fd59f217050fffe6d35122ece8e90133fa353b734f6e9f93d1863c04b4096885d9a0ebf46b1d2f4cb95f2929fb2309a57a4f
SSDEEP 96:rggZiU+QhH0IVZ28sRrGmQmpO0KEQUBl445phZI0LDsGjJL:rfVlhhs8scmZ0MAqd
TLSH
T184D1D752E392593ACDB71BF84257873B6B709149AF93E34520E153600C29BF70B1EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b1e5bef6afe030a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1b1e5bef6afe030a_0
Size 1KB
SHA256 aa6466cd7732bb551fe6fee1df4a5f60c75958fa6ffc9df52561c4810af8c289
MD5 adcda57265bf7f3fe4e24475096ad1fa
SHA1 dcb98769f84be4dbe6764283784ae21b57da3b7f
SHA512 9c6875915365a25d40787748a8b01eafe4f436ac940e14cfc8a1534c3e2cafa9d8f3d8b3043dc9bcb47249a7dc3021c6b049828c409752e7f939d70d6ae17392
TLSH
T10D1154C3FBA710E1CE3857FC46826BA1FB2064578DCB47860D20603D2C57FB21E44984
MD5 SHA1 SHA512 TLSH

Submit Download

213c9b78f3266dcf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\213c9b78f3266dcf_0
Size 277B
SHA256 3715176e62839c595d96e9a94360ebf5053c2e3f1040dd3152c6a00118d4be86
MD5 2557342e9560c9def631a32331eaea0d
SHA1 af3db4d957e1ef0a6506c85e4669b5c1509ad60d
SHA512 d45c4a4c09a48db9395bbbb1100983ed55421b87b50749a950f43f1e12448971101e4826b34023ff9cc1919ad7bdebe6c5442d88fe0984d6609e4637af07b60a
TLSH
T196D0EBAB403A000FCC6640F4CB0330EC86A4A563FA48C3C4AF30222224225F02802608
MD5 SHA1 SHA512 TLSH

Submit Download

27d2285b621191d7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\27d2285b621191d7_0
Size 280B
SHA256 31a2411fc88e07dccaea8013e4d6c600089ab768e0d832ca6022a1ea80514ca6
MD5 9ce744bcdac144c778bb7e611e5d01f8
SHA1 5b534f85dab84aabac53f5888f348eeeb8fd712a
SHA512 a10423a86a9c5c940052efa2c29801e5bb6e192dd37c70868c6bdc02dbec845220bd2289908d3ce6b6548a7801213569baf57fd3adee949e82b472419cc0d9b6
TLSH
T1A4D02B67A4197D8BCE0307F0DEBA30800749D4B6A084C2D95B21588717057F86401542
MD5 SHA1 SHA512 TLSH

Submit Download

4fc3955503651f46_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4fc3955503651f46_0
Size 21KB
SHA256 22407211ec7538f040bd346b1ace124f155d489d466100912fcb54168a46c97e
MD5 8b96564ebad623f27cc11242f89dfb5c
SHA1 4fa057ab3071a83ee9b6d49667bae6dc89ff68ce
SHA512 27d08ed962466f257bb7444ddb6cdb6fd35b7b97e9c0ff1ba1d82aff162fe18c411707128d670db607d1aa778c20179879c27041fe61910cb513ab9ca06bbb7b
SSDEEP 384:aHt1qUC0QaMzfruP43CbGRl/QCGabUpl6GCUSe/1iw/B+STkYElxIX0:AqULQnuP4ybhEUUUN1iw/BjkNLI
TLSH
T14AA2D718AB40DC59CD3153F5E1738A3BB33644896F87972B65B867322C1C7E38ACD549
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59470a11111ab54f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\59470a11111ab54f_0
Size 1KB
SHA256 8893ccb7e2a959181f49a51e5ae52642ad1f13f173a26c89df3fcad73162c891
MD5 17d18c97da07068f2e05f3c966b5b4a0
SHA1 1f5e114e25721fb2337e78c085c65e918e6e0490
SHA512 137618ffebb68c41a8fdf39211a0ac46f1a7e4f6e4a462004f7c4c1ad1c4800c67953e616fed16f32ef64ab82420a6547600db3a439c7b1640cfc2289963e246
TLSH
T19B419751A7016D6BCC722BF98656A327EB31C1607F4B5344176003351C3CBE2080E4BA
MD5 SHA1 SHA512 TLSH

Submit Download

6d241a6cd2239d45_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d241a6cd2239d45_0
Size 17KB
SHA256 0b616c993c852a16bfc8b6aa8875b09501fb18d6a3c8497ba25154ada034a07b
MD5 2409709ec4240113a840ce26e810d86b
SHA1 66cdc7b45e5882b556b2412d0adec7c0d3e558fb
SHA512 6c57c4c711f293f93be706b5774dbd468d1cb196188104c910a31a813ac8bf09e9097177497fa27f0a88166cead0c19b190d02ec677e14f6fd9cfc20d4a8b236
SSDEEP 384:MTxLxL68aL2JOXF9w5Et8eV553a+9LOQoJTVH24SkKIxWDumrP:MFZKv9wsjbK+dODxHgRbDumr
TLSH
T1E382A6F51B607D26CB371BF801128D1BD33A88447FC3974B29A1A276284E5E55FF4E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c076c6db3b5502a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c076c6db3b5502a_0
Size 57KB
SHA256 97564142aacd134136560ca1b8d27d2060490a3f471a17434118149e9d199c9b
MD5 37c3eaf5013c3d2c6bb33e2ed61ac148
SHA1 caccc4015522f1c1859d34c236022d3cdb35c8b1
SHA512 5bb935c4e7773f312b9903e1d08e03d4d2b50a6a717e5b1dc0f61b90e7ee42d1eef57113c77541fe2e82823d99e5edad69418fd7e0be87c4c0ef2fd70b47dfca
SSDEEP 768:3U5RgKJUZJ5dMDBfwjFLNcEsFl7Av+KJuPLPdABwhQUfKx0igNsbjM:3wgkUZJLMDBIjFLRsvciGwJXi8q4
TLSH
T158430911A3519537CD7643F681E74A2B7BBA8108BF8782166AE133351C313F7CBAD899
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9d1262d4c2613f8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9d1262d4c2613f8_0
Size 26KB
SHA256 12145f1af009143bcb204ce27b4abe99aaba9c966ff7bf75fa7efe1ecaf431e6
MD5 058da7974363bec0daf36e2a2974ff49
SHA1 cb7bd1153f1659b8718ad908d380227b48dc5b7e
SHA512 5dc74f988ad8789d87a615bb174646820c38f2c0c9dab6e60503e358ca1113e42521cce9aa9ddddff14f5ad3994d7bb1c05e0975092fe91f9b2407b72cac2193
SSDEEP 384:VclOnCbvxmEUtsc32MVJLpRZTbbUL3px/bEg1XgA55:VXnCjx4tdGEh9bUL3px/YqXgA
TLSH
T152C23A5BA3394E4FF43E3BF78D928F4DC59A554326C1E179DBEBB28169A00968274CC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc3717b92b1ab272_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc3717b92b1ab272_0
Size 302B
SHA256 cf08ca19d2ee226a27673f4a1d9e8849766505950ecc778cf09c8b74a0bee14f
MD5 fbb08a0a08be78989129faa67db11d6a
SHA1 e705264efd1007f58e215d4b9bc752e5bd62f483
SHA512 4522dacb9850517e5da047bdc9bcc02da7be4f17c4159949bf9ddba8aaa502b0aa4d337eaa222c3943153f848c5e636540f993b2ceab65ee53bac69bfd32e98a
TLSH
T164E07DE764121455C90D45F8C9062288C69154E6F8858AF08D14407D0C129A44540BA6
MD5 SHA1 SHA512 TLSH

Submit Download

d3222a76fe630ddf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3222a76fe630ddf_0
Size 8KB
SHA256 584a95fe2b1d981611f278d2570b92c471cb2f8d8c8cd7202bb21a45280774db
MD5 4fc21fd651fcc886d5fa68912b85bd21
SHA1 950fb220c5a8c824a0a150c6fc20cdb00126ca55
SHA512 f9fde2eb0c1e22bb832f73d42cf4b692e31f3d6c680deb02ffa95f4364190770590095ffa6d96e79d8f9e6cb6d64dbf016da29762f38bcddead547b4aa46daa9
SSDEEP 192:JjMxF4pjCVbLHRTMNioqNLpBSpIB8u/OLJy2ECEMl:JjduPHxF8IGu2LvPl
TLSH
T125023CB113B27039CB771BF892D34931AB3788C61FE7C30729A4233658643B74C89956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5e5bfe5e399dd3a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e5e5bfe5e399dd3a_0
Size 9KB
SHA256 9cd33034b8a002904ea6f05aa60722db1ea7a31345a85e61a8195379941700d3
MD5 418a58944463e34d65a895482405d66f
SHA1 4e89a0cc5a633e81e8c9f603d151023991e2bcb5
SHA512 48df4791a2d25912a198b77812c45c95b613f09ec83e391f5b1d8b3bd2f167560b30874e1bc982e0708ba0e3425236dd26c8236dda5b7f0ac7863d787a375763
SSDEEP 192:h1wVKxmrXmvwerFV0IBIVyjOi64SICqKInYaRgJt:mKlwaFV0IBIVF47DKInYa+
TLSH
T1D81209176385AD7ACE5A13F95189DB327B314508BFC7834362E063382C8C3E555AED9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e929e91dfe10857a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e929e91dfe10857a_0
Size 141KB
SHA256 02dd2ab580a211294dc6cfb0a3a63f6b5dd320238b68028f450d42e64948000d
MD5 d88d5e6dfc58c91a9399ff90ab246c75
SHA1 980174b11dfa58ea2c05082e95a36ce46bdb457e
SHA512 bff033c9efc0786ee7f7f79b43d577d969f0adf7430dd8cd0635a439606be70d14fb15a831b8aeab9d1007587619045de9eff4c2e9324281bb24ceba51e87cfb
SSDEEP 1536:5zWbry3M8zmLVpnfKKN+WF+nAuIihCxQlAUqXPHUJlnTy0djV6wf6W:tWfaM8zwZ8AuhCxUAU4glvdjV6wf6
TLSH
T143E3F9256B60AD95CE7653F540738927B33780483FC3D72B62E473362C2C6EB5E9A44A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0ca1491cc5ebf9f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f0ca1491cc5ebf9f_0
Size 300B
SHA256 ecc448cb778ba6450fe8687ca6fcc3cf69f96f4674d77501f3bdd8996cefe7f2
MD5 79e7f80f02c1fb7b5404a650ac979127
SHA1 fba234983e8107226a9514eec98eed06e05202db
SHA512 0f7f503300c811fd4346c27d4f74460810d48888128aee5c503327684c8ce6c5e3962d15c41599786f6761ecee7177e22d7694d3144a145475836ecda0800e91
TLSH
T1CEE0EBB7300B188AC92483F08F8231C09BB4B07E88D2C3E04E32001E1A27EF11104ECE
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f6a1875c97c3565eed537e0f2393d4c1b24d530514ff91fd7a7b621f694678c1
MD5 fe4ab3dcc851f4db4182d8430bef7387
SHA1 3bb04052e1c4f1ea43297eaa6fd083743d72ce1d
SHA512 374172e686724009a34cd36e9a9bba0c6946dbe5895941ba3e67a35981886d84c9f1a806dc7a1b77b95f05113cfad453ac09d6bad036ea8eb5e191d71d0f0ff9
TLSH
T15A81F7382A02B49DF73012B7F9D03BFE33F120A90D5B8EC6229419BD0A8BF364515D08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8aeba023f3d804c8af5152b34ee1f2c00c38af90dc37e56c102b304965884b0b
MD5 f64bb1ff2cc665c85c644b713e05f6a0
SHA1 b16cc2c7fe201843bed37e7b09a45f8a988640a8
SHA512 c83e924619420b278c2f03ff7c420155682b7a6fa31c9303f6f9914ee57c5f2f16d8b922227aae948a5b0ea1f8b6e40b3e8b6a4b283d0188da6d4d2b72310558
TLSH
T11B81F7386A02B49CF7301277FAD03BFC33F120A94D678ECA119419BD0A8BF764515D08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0cfd9ae1d94e906e2047d1b473019293c8e104e0703e5de592229d2cee28db3f
MD5 e4173ed40846918d3a60440de4d7ddbb
SHA1 b08c4bdbd1e9480ebd79f863168851e543af1a2e
SHA512 e1def07cb74bb86389dba742aa8145f4a5bc1ecc048949ef99362dfc2d22e995770becdcb5ebaad11b635c918c6080b0b17e037ae7e16ef4d6a850fd5acaf3f8
TLSH
T13581B4792A42B49DF7302273F9D03FFD33F120A95D678EC6126459BD0A8BF724555908
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 011f6570b4352dfead9b08e681358eacab8e618567c6eef28282621e4b576157
MD5 b4e79da6767580944a00a464d2576a27
SHA1 a2f07a1bb993c6940e7d07f1a56533f081398aa7
SHA512 c1b42e80f90894c602d18d610d48fdc11e4459c826400d1f1598a7a8bab0a7ad915ea780226b48d1b2e36eccda1804eff3841d41fafa17c52cc423064f97ab56
TLSH
T10D71A3396941B4ADFB31127BF9D13BFC33F160A94D478EC621A019BD168BF724555908
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0ee45d02c5da23880cf6b379163971d9b64a5bd47c8d756b5733a2b12777b74d
MD5 f5e22631e5ff1a795e9dd2143428e1cd
SHA1 df38f12741e3d74915e620791d8740b561ce3b80
SHA512 1517c408fd0b8e515ed1ef39c6ab140b3db4fad3201a29cb2a2cd944b766984327f9405aa6052fedb303a868a9465f7dbe0f2551384001e3e39893d5f6caa9e5
TLSH
T1F481F8382A02B49DF7301273F9D03BFC33F120A99D578EC6216469BD068BF364519D08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ce7b2869334c9979b4eaebb65a362a7aef9acf7fc72813209943a3f9c9f1af07
MD5 73d49c8f103a9aee9b462d9037ad94d5
SHA1 9e16a6dab28a9ef692b13d854d78328573279e15
SHA512 dbded49fcc410b5ea9579ad4abb6fea4787ab327019f57b51762276ca923f051bf430ca1089947e2e58ebfa9530d1e7bda0345d131af8dc4a3ee5676463ee615
TLSH
T1C581E6342A02B89DF7301277F9D03BFD33F520A91D578EC6116418BD0A8BFB24525E08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 39c7b3b089583fd654fa784b9503dad101a4cd535eaa4e9b492ae54659c9fc61
MD5 a3f8f5db25b14de6cbceb65976bb774f
SHA1 cc694d80c7e1988194e44550153b20b3d216ca6d
SHA512 4830a024c507ded14a5ae0772c154c77f2937941c92b80718b3f73c7691b26911676261c29d2754ede8dd689dcaffddb48bb8f5946b4104e0ae8f2a27ec57310
TLSH
T18D81F93A2A02B89DF7311277F9D03BFE33F120A95E579EC6126459BD068BF324515D08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d8f6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d8f6.TMP
Size 3KB
SHA256 aadbe29eecc5d803ea2661af77da998ca9682df24230068c747f574df07bee7b
MD5 c0e0b9c77dcd83d826fe81f59f22a0c4
SHA1 e82ce865d99e2b158f501ebd26f574a1ce0736e0
SHA512 7c288a45af6a7bfeb46b667db25ac816acda93099574f60aea93c57d0cf7fe1297c9db7a6c7627dff344ae4a1d47d2105acf527f404a0a4a0b81eda69dc36282
TLSH
T1DA61D7380A12B89DF3311373F6E03BFD37F261A94D5B5ED951A018BE168BF328656418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 b5e84ed2601d37d0004ea5141d340bbff420a228e817857dd2e14ef567f733d9
MD5 0a4cccc9194b31bf11129486135e13cb
SHA1 e69936253fc9f92f243a87caceb9196c61b2b38c
SHA512 26439561d32d2d7e2030beb768804a67fb1e4adefb7feed5f635b054a358cd154cb565fe1cb81f5131917db6d531bc10f72bc25b2a64dfaa466d2a509b283a81
SSDEEP 96:DkOmY+kQuhuyrzBCOTGCrCxGfgxVaOhX78Iu/RuTuHwQ:DvmxkQ811COqCrsgg3RhX78IKRIGT
TLSH
T141917BE6C7E4866EDD4152F0AB153E2BCE2D0924436C3D2AC9E5EF5B93E2471E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 95adcd5d5a2121226f0e11eaa0e7fe5ceac6fa240f667ac54cb425a1748a7a97
MD5 d14b18854c883f6e8dfdf8626fa58b74
SHA1 1651fd29865de18a3e14805dde8cb71765f9831c
SHA512 884fdf56c92b0ab59c4ed15c644b3891a3c3df7932eaa157c642631b747cbb69c40e9489774d1ef6b2e2fd81ce1dc5f844d377fa25bef40ad91496677914e0b9
SSDEEP 192:DvmxkQ8osVm9vX78IKRIG0JeJ/qCG3GCIjJKQoJ:DvmxkQ8osVm9vX78IKRIGK0/qCG3GCI4
TLSH
T110D17DE6C7E8875DDC5152F05B153E2ACE6D0928436C3D2AC9E5EF9B93E2071E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6b865b96a08d5dc097cdbb53e210dab9524573772472c7172a138f828f719857
MD5 101cba7c1b673433624c76c185c56903
SHA1 8c60d14952749dcd444e3f2ddd2304ea6fbaa8ed
SHA512 678f21a302a2432bdc966ce94737b0c26f370eb6fdf3d4397034e074585403cd46a56844b876dcd09b513981857fdd637d379b7359b20b62d756622b1fde9864
SSDEEP 192:DvmxkQ8osVmAtvX78IKRIG0JeJhiuGCGCfCdRZDJ:DvmxkQ8osVmAtvX78IKRIGK0hiuGCGCk
TLSH
T10BD16BE7C7E88B5DDC5152F05B153E2ACE6D0928436C3D26C9E5EF9B93E2072E20164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 752991fbb76c0c5130320d5861ec5a0887fad19677b6cec5fe5e7931fd218145
MD5 0f7c60081acbc6e531faace95a10150c
SHA1 6aebd3bea9b500b0b4002022f7c8b91069a2e678
SHA512 00f074438545623210fcc489e86cce516b974250c75d1d061a34143905b3b19c7d10626603fafe5e66fdcba9f83bd0dd9f97dec6f0be9c4f4b1b6652d6fdeed0
SSDEEP 192:sxZ4RHyMojK1Ml8UQOka/fVsm4+jIdpwoR600MJHW6+WNSZ0CrYnYLVC7cIg5cJ:sxZ4wqla/fVsmH87BjHbSKnKW
TLSH
T1FA62E752A6345977CDDBD20DBA40BF53E6F9547292901E94AAFCDE1C00E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0fc4e3582df3a34d1334addcead9341c81da140c38a91495d745402121091cd3
MD5 bb21cb627a494ea4bfa5a60a40ec12de
SHA1 b9f325870591f5341f2c85ec084be1053d6a94a0
SHA512 1413fe0adf606373d95f435877d82eef3e62ed652c46a0b647ad8a8380c30e0a65adc41104f006d4ab8670ff81a53c644d503f09354fe61497c585cdca75396d
SSDEEP 192:sxZ4RHyM/jK1Ml8Mka/fVsC4SJIdpAAHW6+WN/52/YLMPJcIgrJ:sxZ4dMa/fVsCvCtHbQ/A9
TLSH
T1CA5208116A346977CCDBD209BA15BF53D6F91473A2901E84AAFC9A1C04E6BED2307C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a57c7cff823da00ea06cd2e70e98e7104e7d1c7fdfd394977b8fa024cfe168ed
MD5 018e399cc844677668e57d0fa3a5cc72
SHA1 509ebec2a936ccfc05b671aea5157024f9d1df5d
SHA512 13390b3bbb5ff2cbddb545a1de999db8bcef4f32fbbd52b2020c2c9bcdfea81d4d1142aa43cb454e38e392c73783329c83757d2975656a5cb4756c2b46cc0bc3
SSDEEP 768:/zs6pD1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNsroRH:/zs6pD1WvxzUju1jahILIsN3RH
TLSH
T15AE20B3B680CC77E4F840E5CEC2AAF967DD801CBAB94895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 716c471c963b48014007ff546074ca583599dd802b04f19220bfe8a997fc7afb
MD5 ed4917b3aa5db7326c0f2882ca9270af
SHA1 642de969c96722097bc5528e9f2ac0142b2e450a
SHA512 fb07b50e4eca91c56da9633cc56bee265cc923248fb3fec54adf92cdd8ae9f63ce5a640f297bf2aca6ef39528874e266678e1075c20baf7fac8a9b536143a3ec
TLSH
T1F2E0DFBB6EA76820EDABE3E7287094B50241382CC855FC4FA86AA6C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 1b17d4f95422049f4c5af338cbfe2f30be459db8123c5d76f4a0b433ce0da2b0
MD5 c184e6d16a6ee67911765e698debc3d2
SHA1 804f506d5fe1f5e8735ab1f65e3a2f99eb320b00
SHA512 fcba2abbeab028b30044e8dab67f380f3d7c1123e7ef8ef66ab7909a0e4c8fc51d0bef1181f206ce04a7f00a74769388685dd51d0600b03c47b929de102a0c38
SSDEEP 192:iiJHohV/lR8hK19XCmbuHPCpxIJLsd57V9GXqW4UIdMpqui1ugF+uZA8Pg:iWHohV/lR8hK19XCmbuHPCpxELsd57Py
TLSH
T138E1315331BB47113C7E290C935497265B82B6A73018EA2F7BA810B15EA7E345DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 acebe67f6fe78e912bf02ff7f16412685581f0d9d09e674cf20380620d1adf95
MD5 e77494f120dced8454267cf9ee71805c
SHA1 79050ef75cb84f33d05b70b728172c22475177ab
SHA512 a4f727a094222afadc1a2a896de6b2b76a3797bfde3c178cd686d8052c3961e3f9d1d89e261f3c9e11270df1ce011f09024d1ae9e8a6b61f1da96bc87295324c
TLSH
T13B31B58193ED5495AFCEB841C2095903A0E27EDB250E9C32E32E95F45F84C240F6ED29
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594944.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594944.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 df0275798b6ac7b1f06e4967753d8e496dbb3d29b237f60b3dff3f9f8062572a
MD5 a4fb5bdbf4208573e849905474a21b1a
SHA1 b2d894fa66129d4bcab5fb477e40a20fd8df6c6b
SHA512 2350136ce4b903d97e408d4aaca0c3d87829e2cea9982ecaa81748e865a06bac8df41f7b862dcea2f9a6de1e80d907008014d3e31861a4e84839b0a2b73e3c16
SSDEEP 768:dFQyLwg9PPJ3dO2w+M/XERPbQEixlWUFBu4:cym9MRPbQ11FBF
TLSH
T155D239F258E79876EDAE5783E77D2D038EBCC063B5855A50B398590CCD961BFC306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 60f2bfe4374c614531d711401251a2b8af2743d52a13b11aafeca005c21670de
MD5 758d6318712f2cacc1be65c7ce33d119
SHA1 b1a53519a3ab1ef5027a281ea79e3fa686550094
SHA512 05ce84df1a5f133701741537d6b32d8d93b2b2695754aa0aa0244e26ed45f7fdb989d28f9d62d3a7ae143c4c994d78a662fc26bcf9581898a494bad78801addf
SSDEEP 192:qONp6O7+3hQmiUyEQGttb0mO2opgGqfU6:qONp61YGt9nOD5cU6
TLSH
T14202E7357D7C6C778EB2AE45F68727279FA5103BE9962F40D6E82E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 37ff3ee864e16d8dabc538edb0eece1b3c936126f900abc2943f2a14a5d8aadc
MD5 404ef630b006b0cd3d4ad59397993bfd
SHA1 ab2509222d6a6438feb44cde3fdecf6f7dc57bc7
SHA512 9aa4b3d039a033db24333cb4bd03eb3f2cc21cb93de12f68a605fe0ce3ad52eec2958ffeebe68f187d38a6927e2d14de8b510e8ca65e1db612b1a442b918702c
SSDEEP 384:wZcIhsNeLsyEy2ApPJ2a9nODawTM/XEKqfPbQEiJflB8UBLBu4:OhJxPJ3dO2wTM/XERPbQEixlWUFBu4
TLSH
T104929D726C38ACB36DA2A185F94A36178FB8507797895E90D4EC6F0C01EB69C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7928eade8a2bda5ed46ff141321c2e29630d63b022fedfac8127d9f6453992df
MD5 652d065518ff035ff8f471220373b2ac
SHA1 eb9c5007b3e5fa8ac79684a838031c266797b81b
SHA512 1d0a2ccdbce479c6e62ffa6d9fbb81d622eea7f2b4ade5cc569a1a513a20dceb2755cf8d3a948e0b01a4e2974e2d35926c81743f0d6e3e06aeebe8471da6df9c
SSDEEP 192:1ONH6O7+3OQmiUyRQQttb0mO2oazEFcN7qZlU6:1ONH6g9Qt9nODawyMU6
TLSH
T1D2120C36797C6C775EA2A584F98736139F690027DA8A3F90D1DC2E1C01DF6AC234B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ad7c06263b691ed3bac27126fc387781262c138e73d5e20b4b2cb5352df3f0b9
MD5 071eb500736a4a0d93aace1a13dd50bc
SHA1 368a37e58046d66efb4d183b8b0c4e4c582bfb2c
SHA512 ef7635df2370512d3358492050a79ea4c9ab8f1d10024a05d25bd13380d689150caec37e4a9be1de138043c5fa999de1c04ec58409a3dda6acf7719750aa52c9
SSDEEP 384:eZcIhsNe6syEy2AnP4a9nODawTM/XEKqfPbQEiJflB8UBLBu4:chOPPhdO2wTM/XERPbQEixlWUFBu4
TLSH
T1E1928D726C38ACB36DA2A185F94A36178FBC507797895E90D4EC6F0C01EB69C130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d2f08abfdd0d59076ee7e433787238c53d345182f7131012247188095cd8c27c
MD5 54fbd5b1ce7722df04f8ce1d201bddce
SHA1 d11ca4cfd59c431a96a62e9ed6a518cc70c3a221
SHA512 841b465ad2d9fb6387a56f02c7c4e05e02b3ec57196c00d9a82c11e4081ee93688633e0f96a86c8bff9837c9ee76444e8e550a714e4b85df77dd71ef4993cad4
TLSH
T1F9E00417938098EEC83D273001C71B323BEB82B14AAA875B5F2401A82D667546F20AD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a56570f21183e9edaefa87e3d969d38e9736597e00adb600ef2f980e20721782
MD5 4db261b7a54304650ae0135fcb8e207c
SHA1 cc9012e506c524f53028d2d5df81f4d7f6de2126
SHA512 3f5cd5ca92dc69f4ee0e180d82eab9b382ba42e2495b97d4aac3fa8d0642d3c535787570add512426eb5afe63e0684989ebdea1aa70ed50ae122095fa8b85440
TLSH
T162E00102934014A9C029223000831F223FA7C1600A9683074B30016C2C703003E20891
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6fa45e216a2f2faf5ea9c78340790946855db31e43f15a5a8ce36e9caf12dd5c
MD5 e5177124e82ec4474daa3a6f033b753b
SHA1 64811e398029fa72a80331d39dcc3fcc581b9867
SHA512 4b7ec58cb147790995d493956b0e83d4406ec4b7ec09345bb3472a49957395238aa50d2d41b1d84622e47e994c289403b7df3d7b2d81f7039b071f209e660c99
TLSH
T191E00117934014EEC439263000C31B323FA7C1B00A9A83075B2001682C747043F209D1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 dee0ffbf3a6da2435081f0a9111804a1b3709fc3a87970543202a3763d5d39d7
MD5 68dc54019ef0bb4db3d43b139baaf896
SHA1 4bec612eef7c04118398c81fc6bd2ce7d9bf7f53
SHA512 55fb2e86be891539d4e937e09440029ccb3c72fb14821834b8f3fa16f09423d2367f5d9fc1e8be14c1a571976012dfcd06473663b30598ecedb0e6407ca57315
TLSH
T19FE00917934014EEC43D273001C31F323FABC1B04AAA835A5F24016C2C357143F20AD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7e80e182a4264d98b4a9e66b58e9208bd04a99c9464a1bf49fa9e1de706a7561
MD5 dbdaf4178911f1fee2ff6eb286b07253
SHA1 877fa25d7db6ea82251a198eee751fb238ade047
SHA512 8ede8e4c7febd66b1087d8189e358fd50d2e6b65cdbffe1ad3801b7be28109cb6db521f91b647d45b8c20930322762816c823ba095fe106db59aa3aa56012f16
TLSH
T154E00117934014EEC43D263000C31F323FABC1B049AA835B5F34016C2C357143F20AD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a9535ca1d2efe58176d649b693250d401424e1b055d9e16e41f535fb8389dc71
MD5 1316e11f1fceed033b16ddab468af285
SHA1 fe260ac2c84d2e56c3c8681aa8c84ab44eafe969
SHA512 b70973461cd20fa9f792854092ddb7a1bcaee3b41e20cd8a9d19eaae4b14d2f4b07ce2bbd0de499a5451aa4dec021409471b7c4822ff2bfaed028ad93efdb3c8
TLSH
T1F1E00917938094EEC43D273001C31B323FBBC1B14AAB875A5F2401B82D367147F20AD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59e17d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59e17d.TMP
Size 392B
SHA256 f7a36386523becdc26b9376d319a8c596cbb39f340a6a4333d1929be628f2f4d
MD5 393a173dadda20a6ca5714a7afafbeab
SHA1 6e123d8a4cf0249acec9954614cca317194a7714
SHA512 30f82540078647fbee64d613ed93397329688b24bcd56e83c5a2b4f48d6bbbb001a73aa865511f1eaf083b4db7010e3c1100409d1e8a5a5174ad03df6a035816
TLSH
T1C0E00203934014DDC031213000431B223B97C170095583074B2001582C303002F104D1
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8a7bf4e67c051e6dbe73e64c7468bb78ea324eeab4ab1a6073cd74b51742319b
MD5 5cdd782621430f34cc573e353cc326a6
SHA1 6bc78c62e44d24a06829b7118b338164a0a4d35f
SHA512 46f61c7c8e380b78d0760b794cb1e5d0232192323b6f09ff72192bfca800d960f5e0c958d7665986bca7604002ba489821ead5d92a8341c1466d4b5aca572ff7
TLSH
T15141F95CA6FA114CB3776E46ABF6686E447BBC372F0AD4AD00110E4F0A63A41D971B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download