hxxps://getvelocity[.]llc/#products

Analysis

user interaction
yes
max time kernel
359s
max time network
361s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 08:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://getvelocity.llc/#products
Sample260805-kppnmaythy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3052	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303932183735535"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{7B168DB3-32A6-474B-8728-5C14E843DA08}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 5084	4868	msedge.exe	84
PID 4868 wrote to memory of 3052	4868	msedge.exe	85
PID 4868 wrote to memory of 2096	4868	msedge.exe	86
PID 4868 wrote to memory of 3468	4868	msedge.exe	87
PID 4868 wrote to memory of 2096	4868	msedge.exe	86
PID 4868 wrote to memory of 3468	4868	msedge.exe	87
PID 4868 wrote to memory of 3468	4868	msedge.exe	87
PID 4868 wrote to memory of 2908	4868	msedge.exe	89
PID 4868 wrote to memory of 2908	4868	msedge.exe	89
PID 4868 wrote to memory of 2908	4868	msedge.exe	89
PID 4868 wrote to memory of 748	4868	msedge.exe	90
PID 4868 wrote to memory of 748	4868	msedge.exe	90
PID 4868 wrote to memory of 748	4868	msedge.exe	90
PID 4868 wrote to memory of 1888	4868	msedge.exe	91
PID 4868 wrote to memory of 1888	4868	msedge.exe	91
PID 4868 wrote to memory of 996	4868	msedge.exe	92
PID 4868 wrote to memory of 1888	4868	msedge.exe	91
PID 4868 wrote to memory of 996	4868	msedge.exe	92
PID 4868 wrote to memory of 996	4868	msedge.exe	92
PID 4868 wrote to memory of 976	4868	msedge.exe	96
PID 4868 wrote to memory of 3116	4868	msedge.exe	97
PID 4868 wrote to memory of 976	4868	msedge.exe	96
PID 4868 wrote to memory of 3116	4868	msedge.exe	97
PID 4868 wrote to memory of 2336	4868	msedge.exe	99
PID 4868 wrote to memory of 880	4868	msedge.exe	100
PID 4868 wrote to memory of 880	4868	msedge.exe	100
PID 4868 wrote to memory of 880	4868	msedge.exe	100
PID 4868 wrote to memory of 3176	4868	msedge.exe	101
PID 4868 wrote to memory of 3176	4868	msedge.exe	101
PID 4868 wrote to memory of 3176	4868	msedge.exe	101
PID 4868 wrote to memory of 1324	4868	msedge.exe	103
PID 4868 wrote to memory of 1324	4868	msedge.exe	103
PID 4868 wrote to memory of 1324	4868	msedge.exe	103
PID 4868 wrote to memory of 4568	4868	msedge.exe	124
PID 4868 wrote to memory of 2108	4868	msedge.exe	125
PID 4868 wrote to memory of 2572	4868	msedge.exe	126
PID 4868 wrote to memory of 2480	4868	msedge.exe	130
PID 4868 wrote to memory of 2480	4868	msedge.exe	130
PID 4868 wrote to memory of 640	4868	msedge.exe	131
PID 4868 wrote to memory of 640	4868	msedge.exe	131
PID 4868 wrote to memory of 640	4868	msedge.exe	131
PID 4868 wrote to memory of 3596	4868	msedge.exe	132
PID 4868 wrote to memory of 3596	4868	msedge.exe	132
PID 4868 wrote to memory of 1824	4868	msedge.exe	134
PID 4868 wrote to memory of 1824	4868	msedge.exe	134
PID 4868 wrote to memory of 1824	4868	msedge.exe	134
PID 4868 wrote to memory of 3848	4868	msedge.exe	135
PID 4868 wrote to memory of 2176	4868	msedge.exe	136
PID 4868 wrote to memory of 2176	4868	msedge.exe	136
PID 4868 wrote to memory of 2176	4868	msedge.exe	136
PID 4868 wrote to memory of 4748	4868	msedge.exe	137
PID 4868 wrote to memory of 4748	4868	msedge.exe	137
PID 4868 wrote to memory of 4748	4868	msedge.exe	137
PID 4868 wrote to memory of 2920	4868	msedge.exe	138
PID 4868 wrote to memory of 2920	4868	msedge.exe	138
PID 4868 wrote to memory of 2920	4868	msedge.exe	138
PID 4868 wrote to memory of 4648	4868	msedge.exe	139
PID 4868 wrote to memory of 4648	4868	msedge.exe	139
PID 4868 wrote to memory of 4648	4868	msedge.exe	139
PID 4868 wrote to memory of 1976	4868	msedge.exe	140
PID 4868 wrote to memory of 1976	4868	msedge.exe	140
PID 4868 wrote to memory of 1976	4868	msedge.exe	140
PID 4868 wrote to memory of 2256	4868	msedge.exe	141
PID 4868 wrote to memory of 2256	4868	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getvelocity.llc/#products
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x25c,0x7ffdf809c188,0x7ffdf809c194,0x7ffdf809c1a0
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,7414971657934872146,9491546024957786398,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,1006420691637186346,7953294388947021733,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,9741214634991167485,4703853204982592454,262144 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:2
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,3060957192693526487,1021932434743040096,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,9800195236905733832,6200712803075817105,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,11474363362604940230,8426488407863098513,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,17665025386434348806,12405339913354691844,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,6880567540623616378,16487131258929949150,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,14273492533531109017,6133117152135649381,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,11055172124495989861,16309273397194103286,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,11055172124495989861,16309273397194103286,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6076,i,11095150894504601966,10987905579070800920,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6344,i,588380759535973020,7183248648002057758,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6808,i,14567543154980641918,6495259568560609150,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,17792435837561449121,5779400774143039119,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,1620173737927200017,13334258394703815683,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,12678206499932293892,13548388958660824378,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,8316277952812225958,7405748156936715620,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4528,i,14584595120183396107,4121948272537221038,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,10909621173595677319,343002394634943028,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5804,i,4785307188698552674,5741814851411981863,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6840,i,2990139187823844904,2095729339513184575,262144 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6888,i,14198378182806714770,11162460142275755975,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7216,i,10912608206986988907,15344188225306166218,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6920,i,10791182799051230723,870657000794446985,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7224,i,5173760570819286463,5291991766172356775,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7276,i,9336455807727283246,3159700950445364914,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6892,i,1496547331767470994,7023953791482429292,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6840,i,7557710353023729275,15927750240900325969,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6912,i,10225545979150391707,12576317710971123537,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5308,i,17641872280068653968,4205972572521058644,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3380,i,9305049637112179107,10777360251177144082,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7704,i,9966783559582793766,8880772034001781124,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7312,i,11212929433949150061,1936107482203151314,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,14114322609426202572,5671897901253727795,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7288 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7836,i,5592603704693131390,17962810900931338057,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5460,i,7242846665344745673,7317179579493509918,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7828,i,3377457574571049304,2502032204241838872,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7832,i,10551855279390907335,17944804384078241852,2097152 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,10809111718614534781,13555283068819230230,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,318043968114602647,3955619336090987627,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,8956210295817138931,12417514144129158302,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,10790283473074612567,8705214832902482354,524288 --field-trial-handle=2952,i,18333779128945493684,5578572281313453508,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:4044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 4c0b476b2572853f267da3d1c54d70caed566559e2f9048c69f2b0b83b32013e
MD5 8e133c6a540bea0d0d8c032b7e29d9cd
SHA1 f535e295c893da89b97464bd54b3fa55eefb8c66
SHA512 b0cc97f2c6a3256001b0a198d3d9a8da593380583b37a7a7e2eb62385e98ed768491254643a4cbcba3fe3e33f43439138cd97383b7caec6cc1e8c46566926bcf
SSDEEP 192:djs4FZ000uuTYSSSHHHMMMRRRjjj++ppT1MVLO:djs4FZ000uuTYSSSHHHMMMRRRjjj++pF
TLSH
T1B4E1595782D4C7BB8F0910CB49A4965D40B0370AEFDCD608178E9EED314E4ABA4E1EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 21KB
SHA256 de772f8e3ac182a446d62b202a5ad7889b3099e39dcfc0ca5505014c842dc6b3
MD5 3e73b21097fd8484f54f7ae2319c0022
SHA1 53aea255aabf3b4c6f3b83470e2eddcddcfddf38
SHA512 7a2c1b87a79b80027bd3b560be9f5ad11acc4bf5d52e2a54d50545bcfd8d6d7865543374e5e17c5bfd378c0c1cf0f3aa9cd4f41ac7f640b1b73a594f805a3019
SSDEEP 384:BHxam1SlIC1+6y5nkzx6QEZl+7D5FjybwjkXREYlkPfHnqYpba4UL:BsTN+lnkzx6QEZl+f5Zys9Y+nqYp+7L
TLSH
T1C4A2E1283936D4083205C778C1D4304E8B68FFB57DAD27D65A930CD43AB6ACB62ABF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 37KB
SHA256 84186c94c202c6eaa8cdde14e8bcb82ae95f13413df2852b46bd013535425f4b
MD5 8abcb03d6ce0af82f0e2048c440e6cae
SHA1 b35be41ea1f9cf3fe270d01ce78b4b121f851ab0
SHA512 b6ea20bd67cd7fab5703a0e980ff2e338f195fb851cb6eb511c1e750e193d2887580fc998e5c7dad92839bf2ee6209498ac6f9a6aae81fa1f168784bc2085067
SSDEEP 768:frn6Vqe28sAmi/PwOzwOqHgPrzb0JW1bZwcP5TnHak8yIpxTkHDVChA28g:fOVidcwovb0JW1ySnBEHywhJ8g
TLSH
T1E703E173136772151FE5533BFA9B820D4208A78AC06F438D384965F96E7EDA9003FD68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 81a96f8b00a71128ce34faeef2ab8f7c52e58f933156e457d5651de9f62e97da
MD5 35229ca8e577d2d2c19bb4b41ff6b3db
SHA1 f973b23ca4f34d733ee99ab217a324a862e95b71
SHA512 6c218bb8a7fe5c9ed86bdcd1163ba762aa909c4ec0f70259bd597d8c4017a885351e86607569bb125acca7d096dffc97546f53b25af065f8febeeeaa06a5d667
TLSH
T1055170B461922523EB6480B1A2C61F6D3871BFEBFE07CEB780928D32488F7D14359434
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 fc3a632a12808c14e4a6249cb1e56f91f14818a827a98a714045559d70c6f7da
MD5 259a8376e5e6e7cd8eba744af9f56673
SHA1 c0281874e40d25bcd8743ac9857ebc8d6a350e63
SHA512 e286b226437ab6573205d1c29dda8349410d6ee2621a1290e0ccb4b26ec563f8029e8f582ba81dc6afd8dcc449d9336f44152ea088f7ddf5a356c26999507f85
SSDEEP 96:05OYF1lTXYVZ9KMRQfjhr0JXWGMQ96BYsRSyqC8egQZs7rTUpuMRG9m:sFzEQQQfKJ4QUjSyFsDiGM
TLSH
T166F1DC301D9D1222DB26953067E61E2E38B5AEE3FC83EEFB4489683448BF7D042470B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0b16900f7113550f92e1c817974baa23776aacce3887eb95f940a72ff8e3b843
MD5 815165cd27fd98adefedb60f08fcfa66
SHA1 cf1e5333ba8120ed84ea6ecc231a3a6516563bad
SHA512 0298772b9c77f1c9978ebbb6e893efad88277cf8077367602d5294813434a61deed7481e5a13834e169170b942a4df407353eb065acab2251afb8b22ee0b4826
TLSH
T17B5172B865822523E7251030A1D62F7E3875BFDAFE1BCE7740908D32490F7D18769438
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59192b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59192b.TMP
Size 2KB
SHA256 b44ddbe8d811bcb22e54cdcb9e3a3d029ef6fb6bfd03ac634576ca93c7bd9f44
MD5 e87f14a4d396abab0c7e4e014898a76e
SHA1 cc78ab286e705c18ba30b07fadbe8aea3cd850bb
SHA512 b6fd9e9331f79cb4623112c20b2068162d245e032fd20697cddc1874438c5d02e036ab866f6cf9e9287b23dfe93ac0fbf3af4345a241a41b039e81a5937f9c49
TLSH
T1145161B854826563E7251031A1DA2F7E3876BFDAFE4BCD7740908D36450FBD18369474
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 52c07351eee4c322eb1abfed681b9406e8cb3c80e5619ef56acd5e7acfc17bc9
MD5 be9bfbb137ae11cdd1bf093dfffb7e06
SHA1 783308ba97265b04134300407cb389a0460487ad
SHA512 495a33a97a6993c7d1d2d3f8004058ef2005b4503fb658c6ff19b7a3365199cafce6682a26e13f711c62f49501f9148a4efb7a69c9966060850701f880280e65
SSDEEP 384:DEDvFOxG6NzggUKeUSeMJM7tXBe4ze/J6C1qjv3ILEws3PR/Alg+wXIX9Lpbj9Xt:k++4tNzQRD6pnWMk
TLSH
T18C725AF7C7F8866ECC1262F0AA242E27CD590915436C3D4B85D5AF4B97F28B1E28194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ddc86c436fe521d26830745594fd465dfd10558450952379be63258acb0f50d1
MD5 7b99c73bc5902feb4a4cb2346d030778
SHA1 08ac954da8852ce5637646332938956f270c5a79
SHA512 a60b9acb678161e296fffeee0438a9306bd1185b6a3c9c8d519db9e3e8e898bf57fbece57de3719d53d5f94462142237473fd438234f5f333710b0cd546451c0
TLSH
T16271CDFBD7E5C65DC81252F05B242E2BCD28091942A83D2A8AD6EF5BE3E2475E10154F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 5e88cbfcdfb56adfa49e3c5894ce25de6488972aeaf25513d3ad4ead5a3baea3
MD5 b9c88f82062a02fb195c15a16961e79a
SHA1 d9f53ccf43dffd8f9618c57c25220eb5ffcc659f
SHA512 00e0141089bd7246733d96ca61e9a688cda81cab79103f1c1d9f96991d30a164103f729f39ba954c2a24d723f195ecba13d8430117d30a2c2f0ced4248be81dc
TLSH
T119D022231A0030B9AAAC7E8A50AAAC8FC73A40700852DEE511E0A89D05314EC0607248
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5b777e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5b777e.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cf1da437d4e86411ce2a59d578e6ceb29516ba79272d14cd65bce32cbca1549c
MD5 04f0fb0dbda5fc683f9a9c99e1dcf377
SHA1 59709ef819b08efba5731cfd3ad4b6523dec4099
SHA512 a812dfcc227eefb5fa7d9709ec95ed64c9c79ee343a478f472cc241599b519f2b2929a6fef9d13a60ef4cbaced61172d5b08e57d1e57f2cd800f18fd7543df7c
SSDEEP 192:sxZURQyM/jK1Ml8Mkn/fjs2wjG1Idp7LHW6+WNArZ/Y9IT3icIgrJ:sxZUaMn/fjsxjVPHbC/R9
TLSH
T18852E8116A34A977CCCBD309FA55BF63D6F9147292900E54A9FCDA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c12cd836794bc875ed0e8c15ebac51a6e2ff0635a40c35d8d6ab43d9115c4a64
MD5 aace4e88ab7929bba5af6ab09963eb16
SHA1 550dc31485bfa4e73a5b8f09dc7ea11c82d890b3
SHA512 bf7267e9a249e645d29e7c31a61cc5ace06e447cf3a25a8291104b60144a0b4e83bd5efd819a64eb5696fba82e386c291ca55354354dcd672c67013b8086f736
SSDEEP 192:sxZURQyMojK1Ml8Mkn/fjsPcwjG1Idp7LHW6+WNAm/XY9IeJicIg5bJ:sxZUZMn/fjsPvjVPHbRXMf
TLSH
T1C152F8116A34A977CCCBD309FA45BF53D6F9147292900E54AAFCDA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1a1b35c3a1748a5464d6195c00ab626fba9a51111414e4142b1aa147b73588be
MD5 23f861056ade84b82353aa7483740d82
SHA1 99cd859b867ce5338c8f930a279fec388186a412
SHA512 ce921e05bc44bbb1f9a950c6032d2806856ed81283da73107a429dc2aa2f908bd493be49575424d17c5c83d55f774613f623f5d0947c26fb15ab9a812950908a
SSDEEP 192:sxZrRQyMojK1Ml8Mkn/fjsPcwTB1IdppQHW6+WNAipFY9IRa2kcIg55J:sxZrZMn/fjsPvTIGHbzFth
TLSH
T11462E7526A346977CCCBD20DFA45BF53D6F9147392500E94AAFC9A1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e0fdbd0b7b47c9a27737ee847c0340e6e38f6b6f57fc25e2ba7b002973421d5c
MD5 6c8416d240695b1eae8ccc036a426d30
SHA1 6cc3717eec4a337a724e48a695ded1c057fb75f3
SHA512 fea857e71e37ed040224d7c2d445a5882276d5a3f91dcb496934249ace4c16624884b35082204a5298cc1525faaa7c85fe8fe7f4ed05e03cd492daff0c6e0cfd
SSDEEP 192:sxZrRQyMojK1Ml8UQNkn/fjsPcwTB1IdpYbyDHW6+WNACJnY9IJa2kcIg55J:sxZrZqmn/fjsPvTI5HbLnFh
TLSH
T1FA62E8526A346977CCCBD209FA45BF63D6F9147392500E94AAFCD91C04E6BED620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 086e16eef9fe4bf6a28ddf8f4c6d0137fe6fac6ccef2e396b998958201c00794
MD5 4e5174460b8f01327df822503786bb5c
SHA1 1fc4e5667ad845816d806a0c51fc453287491a1c
SHA512 5de06df3c1985b83f86f711a195654a674e123f04c468a677521a915f151494b22a14871079cc27aecb2af5708a76f4c47e4e527e83e57395fc4be38460dd444
SSDEEP 768:ngcv21wWvu+z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNoroog2A:ngcv21wWvu+z+u1jaeFLeRNToE
TLSH
T153E20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 e097b689324e644302e4d80efca9602c2e549e66e67ca1349e0569777c790a12
MD5 17035dcda10f0303c8e5d491ac4c6fef
SHA1 420c7fd4d9afcbd18bfa2cb4b27645e3ef714640
SHA512 30707948ac4bdf32ee406c6f93aa0d5906c89e96e91c7a0f6f8bb5735bbd79779d29860dbd1d1d652d7a8325002d646dce566d3b931bad0a04cbd45e257e1666
TLSH
T1C8E0D8BB2EEB1421E9AFA3D2247114758154B9548649EC5F292AE59324F22C52446D22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f12729b7e140c5b750a84126e93ec44819082f3b97dde455b29aec2f959b73bc
MD5 7c61c2321fba7ce28a5dee0ccdcb77ea
SHA1 0698aa6b04592bb6958660a2c5e578ff808a8c6a
SHA512 6ed98ff07a4ab3cb4ad9272e78e69d842bab439ad6aed3bad76fcc9ee351cca4f979a31a5d336f6f8b7f1f1aee5fcd0a495f61b65f902de800a2455a337f2d9b
TLSH
T117A00261058E51F3C5052AB03A876141B3506C5B25064A43A9DCE19CCD91154A571A29
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba16d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ba16d.TMP
Size 48B
SHA256 91bfbb9586a348693e9b50eb0d1513202058bc828c37ee456bc1d490b1ac2e43
MD5 c5f36d7aec7046c7751a50249ef43276
SHA1 be79c83cfe33ff7e49bf39153dfbcaff27a7a9fc
SHA512 ae1b4c710ba7a083fa04a3a77ae9f4069a5c92c182fab750f556ee6f7385631e74296806ec87f87c812517df752ccb67aa4efb811a0094d990566c95eb3b8a66
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e54297b1f2698fd1b34dcc699caa73fd0cc4ea657aaf571ed81eccaf55d3f625
MD5 897b0472272ff853c136e409d3b65ecb
SHA1 9c804001a62874285805e8a59c294acdce2e3a07
SHA512 a26435e2a1eab1c9e58cd9e2ea7a3d6f2424f12b27b09714b1225a65f1597cd4999ae3fe6d5932eb0050d4f8448bd68e4dde382f5986b9f221317c40e6c64014
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKAIKZSGON2KWwCnr+JFTBBdI9UQqtdKCcb:mT3LVxnr+JFTBBi9UBtXcqzs7z7ctPK7
TLSH
T198C14502303F0202387D7908B36A8636AE4172673914A9BF7BB910A15F27E225DFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599d30.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599d30.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d7b57596822e3115b4d312e0e6cf5c8a830a68154d25cf34937dc51706615991
MD5 196dd5055df191a109f8c92e36ca7fce
SHA1 7a29173c5a94ed55123c80ac8034b8f71fc599f0
SHA512 7233ef5a8235bd002607c7fc893ab09e6890d4fb924279d189220aab62f4181254ae96ceaeab54308e1cd996cf6f4f8b50ed102e617a40b29249c89840c9e3a3
SSDEEP 384:WZcIhsNZZC6KRziexdpe+CQdi++JqBeRs9JKgqijUzw:EhuYDw4ExJqTjKgqmUzw
TLSH
T1BB928D7158382C7A99E6B681F58736135FF89437EAC53FD0E1ECAF0D019A59C130AE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 356efead788923a060f85820153aeff5540e6da18fc1cdc0f0f045ad3f3db062
MD5 3f0145f5b3611d2883872b793abff4f9
SHA1 05c555207092b2331f00aadca0fded0f708daaaa
SHA512 42d90a1a363990fa4550704ea73c701e9859f3b908aa7a7680a57ab2ae36db0a925475aed80bdddd5f6afc093336d6a82f12ae0ade25550344b54d4f6a6e5f78
SSDEEP 384:khiFiZcIezsN78TUNTUlIllC6KRziexdpe+CQdi++IqBeRs9JKgqijUzw:kIFQ+2wgNYDw4ExIqTjKgqmUzw
TLSH
T1B7A27D724868997FA9E6AB84F54B36138FF45077DAC1BAE0E2DC9F0C01975DC130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 92346ac975ff932c63ef9e51698de6b4ec91f9fa608c23759065ea731b53f552
MD5 0a563675894bb251f4afc9293038972a
SHA1 325617c91681f705d6a10644a1c26753e1dbd663
SHA512 ea5507a663ce70edddff65251bc4be94f87fae3eca09e810b4b83b0b1cd2d8a21a8d2fcacf1e2ea5f577b4adee6d432ce1fb6e6290a8c4ce49ccd3301ede842a
SSDEEP 384:fZcIhsNZlC6KRziexdpe+CQdi++JqBeRs9JKgqijUzw:3hsYDw4ExJqTjKgqmUzw
TLSH
T13E928D7158382C7A99E6B681F58736135FF89027EAC52FD0E1ECAF0D019A59C130AE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0121bbc891f0ac31dd51a6fdfbde6c04cbee1959939ca09d9e047b01aedea978
MD5 33e0a7e5af2cdb8fba435d0db7f3b3b6
SHA1 396223eb38e8173be353140d541eeecd4d1c4777
SHA512 38fa70aa1ef036e769508d629a15d903c0ce473f06b50e81ecde3e1b59d014999119203d8e8759c90cdb718f31fec83e16c37177cf60ae25e89d55e4111cec1d
SSDEEP 192:JONB6v+YLNQmiUySlZh+CG6+FdetRLus3LTU6:JONB6vz/dZh+CQdM/U6
TLSH
T11902EB3568782C6B9BF6AE05F58736235FE4203BE9962F91DAD81F1C01D774C2306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 041684b7963216373c6a4ac17586aa3d89c6941c31138b895fb016dcb017023a
MD5 c33942e7035002ad805e2bf3e76ab8ae
SHA1 867726fbf3ed0d0754665777da3073a7f9a12c55
SHA512 1b3219cfbab7143d23e7dd3500998adb74ec1ecadd0fe3de0bc787afdbc34bf23e8e2e1d8e5179cf58f5fad673dc3f1978d5e2bb20b134c4add4a7636a50836a
SSDEEP 192:DONE6v+YLqQmiUySlcGh+CG6+FdetRLXx++dCHsqIU6:DONE6vzibLh+CQdi++KqU6
TLSH
T188120935A8785C6B9EE2A944F48735135EA45127DACA3F90E5DC2F1C02DF69C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 350f921d0c5f2de65ffdb7c22e1716a175ee772099945c092c7dcdd7208d4319
MD5 cc584109579e3bf9f92e30afd0e1d05d
SHA1 053b1bf3f885519bd5d8045c9f3a42e3664b1cc5
SHA512 c2fcbf30fb89fa95e92a75c4a6e50bb5fa8db8f0911d21c3ede218df80575bbebd5936de27b42c714609b915b187e05da8ee3cc7a5605d175c850731d5e6bc85
TLSH
T1F7E00142931604ABC464073040C31B6077B6D036036313074B20067D2C323109E20A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 11a50f5e02bee44101c6e700dcd5e8c83c6765f9231ad35b31773b8be5a8c59c
MD5 1fb0028bfd869f1888e62825c18a0ffe
SHA1 726b42a9d468257bd0bdf273e5a174b000d23bc4
SHA512 eea8b4efba950a469f8ad90fae53e71e4150e64e5ac176af0da7ae658abab52e1b0e5bdcc15400cbb5b4be0b9ad6867f94993241f888eb26f48ebeb21803a596
TLSH
T1B1E00142D32604ABC469073140D31BA177FAD23603B3130B4B20067D2C333169F21B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1e39c78493eaafa7f49248bd707dfebf21ef4b4a2703efc3651f755ea0b00302
MD5 4b5fc52a77434bb271df0b7d7c487018
SHA1 80433d35d89b7bef6625212475b27b21d149df3c
SHA512 2dcca1f82abb82987e63c59499442108e7d8b0fe03497053e89bc0b45caf14dbf95eba150a55f6365e09d9db5ba5f6b4f8521a68050e16bd2b59e190d1a7cf90
TLSH
T1C2E00241930504A7C458033040C3175077F1D02603A31307471005792C32310DE20A40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f8fde8fbf05193803d81708bc424a582737027cd5ba63a468faccf7bb08cd230
MD5 c14683d4cddebff0c1978d70a3db49b4
SHA1 1d210ffcb51d686b8fc965e7b18ddd85cd736ad2
SHA512 65ab01a08615197b385bc53b02f1a84255776f29d2ca50490518325f81754d2274991aafa89dded8e28b1cc299b2e993b206731832aaa070f75ec802b3db4797
TLSH
T12FE00941931604ABC469173180D32BA177FAD22603B3170B462006B92C333159F32B85
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5ac082.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5ac082.TMP
Size 392B
SHA256 bef45e0020a4a74d50d132779dd1f455f5909d70e80ba540eba8a368070cfedd
MD5 778b192437db9d0fc62a866093ea5a0e
SHA1 4fa0ef3bc546642a7914221e037df0e1288e9c1f
SHA512 2897c2f349999f95cc71686a2e57c085f88ee0a89774c4a7c546140205a9b2d87e0136cc34b6c160d9749bfee27f92f2084c4001f6f5a63f7dac9efb6d1edd3c
MD5 SHA1 SHA512

Submit Download

0624b322-108f-4411-bc59-d4c044fa6f0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0624b322-108f-4411-bc59-d4c044fa6f0d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ddc8cfd960f892faad588e17e77cdb179ee02ca6c8dfa461b246a95feba184dc
MD5 994baec3590bbd3b001676e9a8901efb
SHA1 fcf3611c0848d72c714a3ad709b96aecb3b29786
SHA512 39306904e4646a220d82faaf96733d4b2ad862c6a29404fdb6f4c52ecc1bfa4a931169b5e1bb3c447ea2aaf0b5d995e44b9f44a6df1bf7a30c3b7307415e4ae5
TLSH
T16D41FA48B6E91148B3B77F469BFAA8AE447FBD772F06905E10010E4F0A26A44CD71737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 ec0c4ccbe083c264b6431f426234843babc0758a9bfda1db87b4294d29358997
MD5 2b863ef46336ae915dcb2488b62c42e2
SHA1 71177316014add461a4c0d26804ed53caa752230
SHA512 a51f7ab33379d769d8f793e9b6a623dc568340861f7060afb9367cc8deaaeb556cfe43020c449bfaba10e1dd6a0e0bce81f3cbfe888945c3e80db23b152f3036
SSDEEP 48:XLBndOyd+0vJ9zZ9mczihhZDbUIqihv43RsLgndOyM+0vJ9zwucCihfrpZDbUla7:XvJ03wk5LJqfjwEfVBJruDYgJnIu0
TLSH
T13E0200546BE92B12F2F7A971ACB27711BF3AB9155A088A0E418082091C73F01DD7DF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 b0a5f53629ac496d9621c2408f68a47cf08c550ccf76fd0a2b69ba5db45807ca
MD5 c47984c7b840bf31d220ee18d582f1b1
SHA1 07a2ab86fad162e82305730e1cbd215c29d884de
SHA512 76893ffe0bcaad9d376d7f88171c0f5e844b04009c27dc167fb1918ee8e58ff76e0e4205b30997337cf097812d71142a416a3f0529c13b9590bef56b7fde2e28
SSDEEP 96:CLJSVafgwd8NLJ03wkJLJqfjwEf1BJruDkgJnIu0:6koABr5cBIV
TLSH
T19C32FF546BE92B02F2F7AD71E9B67711BF39B9155A088A4E4180820D1C63F00DD7EF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download