hxxps://cdn[.]discordapp[.]com/attachments/1516759056478633984/1534994028334944287/gaysense[.]exe?ex=6a76ced7&is=6a757d57&hm=eda83b31dbb84b7c2cbe24262d2650df50a997b4d3ebce04c01519d5bd3dd9e9&

Analysis

user interaction
yes
max time kernel
12s
max time network
13s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cdn.discordapp.com/attachments/1516759056478633984/1534994028334944287/gaysense.exe?ex=6a76ced7&is=6a757d57&hm=eda83b31dbb84b7c2cbe24262d2650df50a997b4d3ebce04c01519d5bd3dd9e9&
Sample260807-ppdnksdr2s

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
16	3452	msedge.exe

Executes dropped EXE 1 IoCs

pid	Process
3300	gaysense.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3452	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3300	gaysense.exe
3300	gaysense.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe
3364	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3300	gaysense.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3364 wrote to memory of 4504	3364	msedge.exe	89
PID 3364 wrote to memory of 3452	3364	msedge.exe	90
PID 3364 wrote to memory of 4552	3364	msedge.exe	91
PID 3364 wrote to memory of 4552	3364	msedge.exe	91
PID 3364 wrote to memory of 4552	3364	msedge.exe	91
PID 3364 wrote to memory of 4460	3364	msedge.exe	92
PID 3364 wrote to memory of 4460	3364	msedge.exe	92
PID 3364 wrote to memory of 3484	3364	msedge.exe	94
PID 3364 wrote to memory of 2560	3364	msedge.exe	95
PID 3364 wrote to memory of 3484	3364	msedge.exe	94
PID 3364 wrote to memory of 3484	3364	msedge.exe	94
PID 3364 wrote to memory of 2560	3364	msedge.exe	95
PID 3364 wrote to memory of 2560	3364	msedge.exe	95
PID 3364 wrote to memory of 3896	3364	msedge.exe	96
PID 3364 wrote to memory of 2412	3364	msedge.exe	97
PID 3364 wrote to memory of 3896	3364	msedge.exe	96
PID 3364 wrote to memory of 3896	3364	msedge.exe	96
PID 3364 wrote to memory of 2412	3364	msedge.exe	97
PID 3364 wrote to memory of 2412	3364	msedge.exe	97
PID 3364 wrote to memory of 1924	3364	msedge.exe	99
PID 3364 wrote to memory of 4804	3364	msedge.exe	100
PID 3364 wrote to memory of 1924	3364	msedge.exe	99
PID 3364 wrote to memory of 4804	3364	msedge.exe	100
PID 3364 wrote to memory of 4200	3364	msedge.exe	101
PID 3364 wrote to memory of 4200	3364	msedge.exe	101
PID 3364 wrote to memory of 3680	3364	msedge.exe	102
PID 3364 wrote to memory of 3680	3364	msedge.exe	102
PID 3364 wrote to memory of 3680	3364	msedge.exe	102
PID 3364 wrote to memory of 2508	3364	msedge.exe	103
PID 3364 wrote to memory of 3924	3364	msedge.exe	104
PID 3364 wrote to memory of 3924	3364	msedge.exe	104
PID 3364 wrote to memory of 3300	3364	msedge.exe	107
PID 3364 wrote to memory of 1000	3364	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1516759056478633984/1534994028334944287/gaysense.exe?ex=6a76ced7&is=6a757d57&hm=eda83b31dbb84b7c2cbe24262d2650df50a997b4d3ebce04c01519d5bd3dd9e9&
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffaf81dc188,0x7ffaf81dc194,0x7ffaf81dc1a0
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,7903213014261023466,1940938446457847124,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,17752834756342629313,10626573878357751422,262144 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,4181634571132528942,1251045360994149508,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,17918530584019141861,12563084474076944925,2097152 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,17496427892105422328,6288193875776943339,2097152 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,15816173199655650584,16843034454530270830,2097152 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,13283729761103412314,13901828852214088483,2097152 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,15180334220072622564,5070831449569152667,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,16663968762005670343,12152050381071514379,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,10018212345286821790,6839169402275378485,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5840,i,5601025077700869098,6012721445700179422,2097152 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,2146705479267569108,11533678983209062618,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,13916794156737716580,5174162672383136977,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3924
- C:\Users\Admin\Downloads\gaysense.exe
  "C:\Users\Admin\Downloads\gaysense.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,11679766139141030773,15056916932490021601,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,11679766139141030773,15056916932490021601,524288 --field-trial-handle=2256,i,12355135950738414011,905968168039358546,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:1000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8fc0daac07f1cba5e2be811f2c7da605f08db262b2865fb00c09cca1533fed22
MD5 e7619e69fbf9c7d9fe17c1999fa8b04e
SHA1 575f392ad5a4f23b51afaaffbf2e0b1238e1f1b4
SHA512 1fda98c206a6952201f19fa3f6e5a870c6772631901131a611e7ac3372afd4e6c0c7455ffe8763964b5b3ecf7e6001df946800d571cba6fa8590a382591c5194
TLSH
T1EDD0A722291CF4C0E71802709212CF003B2A14A22553560AF315CC2D98B40C156D6BC2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fa91c6986995c8750490d4a09f6e95542bf71178fb524181a15e7038c99189d2
MD5 b90e75411c4b55a6cf84ee1c56051efb
SHA1 4b747c209d7b3d56cd160d19a507552888bc6901
SHA512 7d244faee966206aef33944a8359dddf63471437ee5c251b7cdaa1fb7cf56dc87f8f326b35b8f4e4c8cceed7aa232b3028fbea57e5ed98c858d527bccadd51e5
TLSH
T120717F59C65D0C91E7601CF9EEF2B27130B285C809A3CED5A61049FF670ABE98C6F807
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58144e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58144e.TMP
Size 3KB
SHA256 3653ae972ce06c70772fbb3815f18b5185ee2873e34178a5d9e1d8387c5ef2e9
MD5 d0397f986d604d03856bb00eff49c378
SHA1 54e44b6c71756802c310c5ca988a159f8430179b
SHA512 b31b830827dfe8c29eea9a6e859de199268b62aa22c2a4e8578c9c6599dd7f9d47da482bf8a04e0784a8bab472e33ac68dceddbaf65409bc7731648c867e1893
TLSH
T1F9717F59C64E0C91E7601CF9EEF2B27130B284C80993CED5A51449FF670ABE98C6F44B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 985B
SHA256 554b29fd01ffddbeab42339567b49dd60c0413ad48531ee18ee7483f4803018b
MD5 11fe0aaa4fc596fe2fc373607f85a50b
SHA1 f848a0d004f408f8f1ca43545084ac227c8d444e
SHA512 2493cd7f51667e57a83fa1fe097fd5878f6234ccf697805d1e64dae9d8f0c50c40311b7d586447b0b9ef96ddf6cfc6c9d4b70d84fa8ff7b08cbe94bcfa0d41eb
TLSH
T17311CEF3C3E4996EC90156F06A146E1BCE2D0906431C3C2BC5D4AE2BA7E3471E00088F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e45802090ca11e776c2318175ae00065144c3303e04ab8537af7f81a4dc3e839
MD5 874a7b8be69c576154128d0a00513615
SHA1 916109244f9ae0f4ad5aac65258fefe6167a34e5
SHA512 c2d5a545af558f976b7bd173aa5eee71d3e37f7d85302336a898ad18d68bf06d73bfdde6ec22794e2ef79f3ece4ebd7c97e29b211f014eed7c07a5cf1247991b
SSDEEP 192:sxZmR2yM/jK1Ml8e9k/fnsVWpVRCyXEdpJHW6+WNGYLOMruIgFJ:sxZm89k/fnsVWvwyUJHbG6iv
TLSH
T11142E911AA346977CCDBD20DFA557F53D6F90463A2900E5899FC9A1C00E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b124d1b30efdff0e825bef94ab4a3de20113becd2b83e9003ae8793cb2fbcd04
MD5 c49480a8eaa4805adae0cf4f1393a558
SHA1 3320053cb000f8d3b04a9a1ad332a9f78092809f
SHA512 de422bcc17212a07e1415b18500b9475fbd764586609a552d3f9318347994e5810822a8fee2ec4830ca4d48c964e422691d17995e9478ce1e34adea2c064607e
SSDEEP 768:ZFs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN4ro2Y:ZFs6pD1WvxzWju1jahILIsND2Y
TLSH
T19CD2FA3B680CCB7E4F841E5CEC2A6E967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 344a75bcf6cc99b1d64fa934e610a5c4f47977c997c4cbfa122f15183a47647a
MD5 2b159e1c62ff930f335d0d407c6b8c34
SHA1 108258c723fdbea6ed6687f1f7eae27d72b81b7f
SHA512 10719fa1a863224b1afa5ff2ca286dc25de52cea0b139a0c77dad7379cfa5c53d795825f3a78a73d9c1a9c2b9de6920df2b1b4f08738a60d776385034ab37196
SSDEEP 96:KUAAKtePiwQKFWvC6EKfKuurmKA8VjK/DVNN+z:iiDqHzpu
TLSH
T1B8C11D02717B0A023D7E2B0CA255872A97427273305CA92B7BED44754DAAE394DFC6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 70f7af8a24a91b1310f8ff7ad2efa741da6a872b191c301171e00cc8a8663125
MD5 c8ee61c11ee40be12573bf2b08addfda
SHA1 6a725aa439f2998c3f4bedfd8a112abe33fe1b16
SHA512 3cc4ec7276d7f9d6ecaa8c76d74de112d55298b9279173a0f868036bcf0f5ef305e5820065de78d0562a854d95ee7372c1884c46113ea166b932852dfa075063
SSDEEP 192:qONt6O7+3hQmiUyPvGttb0j+Fd/9UgGx6W8rU6:qONt61YGt99d/9axt8rU6
TLSH
T12C02D7356C786CB78EF2AD49F58727235FA5117BE9962F81D6E81E0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ead6259e7cda5efc2b2d7ab9baaa095c5ada5da0248153205375cf84fcbc1bb4
MD5 7bd8047a0df9671f850a38dd2fe7f598
SHA1 caab197d86b5b65b16dcc0aba78b69edec18eb01
SHA512 c9fe1c0dd8eda473ba813c58d9b9849f9fe993926f9f214a40d5d3e7e596efd2d97bdafc73f0580e083ef9905087d48bb2e2aec39353bd1be625eb38d1929588
SSDEEP 384:CsNf2bi1gcua99d/VfMC9vFA8Bvt1oiqKkBn/:CJ4fzM868miqtn/
TLSH
T1848229B0E8A81CE744A1E9C99186F6036EB4013BC95D0E5CF6F8BA3D309F5B81353976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 92aebbfb669ceb402c0d685e6deb790a88289712b549e6ab36be44943c3a4aef
MD5 b77c7aee1ae2c558000608d8c66a9648
SHA1 3092b2f2378e53dd8813e5e22082ca58ce3e1b6f
SHA512 cd903507b201f73af4fd4d06bead2eb87dbec29b9c9707c7c243b08f9eb01d6fa64397145bb5583fe14bad3fa7a3940d530f49b7e7e8b9826876109dd5dd134a
SSDEEP 192:HONq6O7+3jQmiUyWvnttb0j+Fd/cQzDROcNHqa9U6:HONq6r/nt99d/VfhpU6
TLSH
T14C1219356C686C674EE2A045F58736139FA5813BEE8A3F90D5EC1E0C01EFA6C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

gaysense.exe.crdownload

Path C:\Users\Admin\Downloads\gaysense.exe.crdownload
Size 678KB
SHA256 9dfc7dbdd0dad97b4855997d478a936c6be34b35c7d3a5b2bf413d6f0a405cef
MD5 dcf29b4daa33608be0cfbf031ee44378
SHA1 de5f70f30cc63fee880ab2c7c49fa5c9a8b2aec9
SHA512 04945ae4c3961e4a8146230bd90a358005791bbbd3bcb224eef5591f266c1bb146eaed56473d36a9973351e067044afd724376cf152dfbcdc725c6aaed420b4f
SSDEEP 12288:+SKzbXzTRNtjr644Og9j5ry/J+72dtdPp/YiVnMCiZM2pxq2:qnRHaX5G+SdPOiVnMCiZVpA2
TLSH
T1E3E49E45B1E881F8D07FE17AA986B61FFA753808072045D723E04E552FE77E19BBA702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download