7a6bf778b0b58906c5120da0be3de04df997d466061c49f91dc35105c5b41ddb

Analysis

user interaction
yes
max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 15:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1341823538092314644.html
Size 43KB
Sample260809-texqxsbc32
SHA256 7a6bf778b0b58906c5120da0be3de04df997d466061c49f91dc35105c5b41ddb
MD5 81c58596df0c2eed915570d7b96c36b0
SHA1 d8f0aa5263028a3068316678c6228ce4c9c7f6f9
SHA512 a7344de1a14ff2c6eae9c2f812ddfd46f4165292cb1f539c35656af234ffcfdda4fc7bab305fd3ab9a8256005e19255d3abd58e04802446b885f4caceb9d0e68
SSDEEP 768:69H9XWSP0VgQUsTMI6y/FpqyMWOzApO3x/0:gW7jUVgF4SOW+x/0
TLSH
T19C136C599C09C6A870313E87F975F1EEC5C9B20ECC35DA3894FA922D6635FC449A6C32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3780	msedge.exe
4284	msedge.exe
772	msedge.exe

Checks processor information in registry 2 TTPs 12 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	WINWORD.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	EXCEL.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	EXCEL.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307647427485699"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{8FC9762E-C29F-439A-93C3-FF9CEDF0F45A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{E84C245F-544E-47D4-BEAE-49E8507A299F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{3B30EBC6-0226-483C-AB63-25249833C014}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{50A343F8-BE20-46F4-8A76-EAADB67EFC88}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 3 IoCs

pid	Process
4612	WINWORD.EXE
4612	WINWORD.EXE
4260	EXCEL.EXE

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
5200	msedge.exe
5200	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
3200	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of SetWindowsHookEx 21 IoCs

pid	Process
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4612	WINWORD.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE
4260	EXCEL.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3200 wrote to memory of 1400	3200	msedge.exe	85
PID 3200 wrote to memory of 3780	3200	msedge.exe	87
PID 3200 wrote to memory of 4080	3200	msedge.exe	88
PID 3200 wrote to memory of 4080	3200	msedge.exe	88
PID 3200 wrote to memory of 4080	3200	msedge.exe	88
PID 3200 wrote to memory of 1364	3200	msedge.exe	89
PID 3200 wrote to memory of 1364	3200	msedge.exe	89
PID 3200 wrote to memory of 1292	3200	msedge.exe	90
PID 3200 wrote to memory of 1292	3200	msedge.exe	90
PID 3200 wrote to memory of 1292	3200	msedge.exe	90
PID 3200 wrote to memory of 4020	3200	msedge.exe	91
PID 3200 wrote to memory of 4020	3200	msedge.exe	91
PID 3200 wrote to memory of 4020	3200	msedge.exe	91
PID 3200 wrote to memory of 3036	3200	msedge.exe	92
PID 3200 wrote to memory of 3036	3200	msedge.exe	92
PID 3200 wrote to memory of 924	3200	msedge.exe	93
PID 3200 wrote to memory of 3036	3200	msedge.exe	92
PID 3200 wrote to memory of 924	3200	msedge.exe	93
PID 3200 wrote to memory of 924	3200	msedge.exe	93
PID 3200 wrote to memory of 5100	3200	msedge.exe	97
PID 3200 wrote to memory of 1172	3200	msedge.exe	98
PID 3200 wrote to memory of 5100	3200	msedge.exe	97
PID 3200 wrote to memory of 1172	3200	msedge.exe	98
PID 3200 wrote to memory of 4448	3200	msedge.exe	100
PID 4600 wrote to memory of 4424	4600	msedge.exe	118
PID 4424 wrote to memory of 3464	4424	msedge.exe	119
PID 4424 wrote to memory of 4284	4424	msedge.exe	120
PID 4424 wrote to memory of 4724	4424	msedge.exe	121
PID 4424 wrote to memory of 4724	4424	msedge.exe	121
PID 4424 wrote to memory of 4724	4424	msedge.exe	121
PID 4424 wrote to memory of 3504	4424	msedge.exe	122
PID 4424 wrote to memory of 3504	4424	msedge.exe	122
PID 4424 wrote to memory of 4872	4424	msedge.exe	123
PID 4424 wrote to memory of 460	4424	msedge.exe	124
PID 4424 wrote to memory of 4872	4424	msedge.exe	123
PID 4424 wrote to memory of 4872	4424	msedge.exe	123
PID 4424 wrote to memory of 460	4424	msedge.exe	124
PID 4424 wrote to memory of 460	4424	msedge.exe	124
PID 4424 wrote to memory of 4312	4424	msedge.exe	126
PID 4424 wrote to memory of 4312	4424	msedge.exe	126
PID 4424 wrote to memory of 4032	4424	msedge.exe	127
PID 4424 wrote to memory of 4032	4424	msedge.exe	127
PID 4424 wrote to memory of 4224	4424	msedge.exe	128
PID 4424 wrote to memory of 4224	4424	msedge.exe	128
PID 4424 wrote to memory of 4820	4424	msedge.exe	130
PID 4424 wrote to memory of 3904	4424	msedge.exe	131
PID 4424 wrote to memory of 4820	4424	msedge.exe	130
PID 4424 wrote to memory of 3904	4424	msedge.exe	131
PID 4424 wrote to memory of 3580	4424	msedge.exe	133
PID 4424 wrote to memory of 2004	4424	msedge.exe	134
PID 4424 wrote to memory of 2004	4424	msedge.exe	134
PID 4424 wrote to memory of 2004	4424	msedge.exe	134
PID 4424 wrote to memory of 3632	4424	msedge.exe	135
PID 4424 wrote to memory of 3632	4424	msedge.exe	135
PID 4424 wrote to memory of 5220	4424	msedge.exe	138
PID 4424 wrote to memory of 5220	4424	msedge.exe	138
PID 4424 wrote to memory of 5632	4424	msedge.exe	139
PID 4424 wrote to memory of 5640	4424	msedge.exe	140
PID 4424 wrote to memory of 5640	4424	msedge.exe	140
PID 4424 wrote to memory of 5632	4424	msedge.exe	139
PID 4424 wrote to memory of 828	4424	msedge.exe	141
PID 4424 wrote to memory of 828	4424	msedge.exe	141
PID 4424 wrote to memory of 828	4424	msedge.exe	141
PID 4424 wrote to memory of 5904	4424	msedge.exe	142

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1341823538092314644.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb2700c188,0x7ffb2700c194,0x7ffb2700c1a0
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,15578745739068532851,10068182044564796619,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,7425388134527303492,15468015521565814142,262144 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,16275868303207959307,12515332019085472182,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,16211190743827577638,1201404596631945771,2097152 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,13457033874983487842,16605171757377202557,2097152 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,14220668754268879297,2219547254270919693,2097152 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10518797481777078866,14489005404761445042,2097152 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:2
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,534821929307315653,13536428028827330570,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,17028158696434206214,14920973764235757914,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,5298404408504798317,14961067714687785088,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,5298404408504798317,14961067714687785088,524288 --field-trial-handle=2316,i,3736099084426923057,3073295562997878928,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4448

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4504

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\ResetUninstall.docx" /o ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4612

C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffb2700c188,0x7ffb2700c194,0x7ffb2700c1a0
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,12482763091867106189,6169393208482074234,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,6455090009100559933,17060454683158804759,262144 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
    3⤵
    PID:4724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,17293650911293524864,17194406841340765188,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
    3⤵
    PID:3504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,9531868799512670370,16965756376110660668,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,9065232059092410091,3636240218593165639,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
    3⤵
    PID:460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,5889152582820471622,14252750850759543297,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
    3⤵
    PID:4312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,1248083495738793575,2244287581359184144,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
    3⤵
    PID:4032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,9304091873591511063,6343806816009649030,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,7953120841234359485,17787990557995113505,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
    3⤵
    PID:4820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,11354892208154646863,18185328921151262992,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
    3⤵
    PID:3904
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,8051046248547174854,8775065999853546221,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,8051046248547174854,8775065999853546221,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
    3⤵
    PID:3580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6256,i,8603271958325319586,4742285424029767154,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,13948538586545391191,3420799997202214368,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6716,i,6919348954580774812,15916189421669471920,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
    3⤵
    PID:5220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,16710963526887356491,15130641056941097273,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
    3⤵
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,4582937359526794643,14009841586653222514,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4284,i,1729621562837402658,16511938684876219227,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:1
    3⤵
    PID:828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6384,i,15249888417021863994,12219841423660085207,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:1
    3⤵
    PID:5904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6416,i,14640769071702858509,6756168133399938016,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:1
    3⤵
    PID:5984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6700,i,12826198160284018179,4252656133836959719,2097152 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
    3⤵
    PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,16194659177243783846,16132936329371081681,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:8
    3⤵
    PID:5304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7344,i,16357560678177420776,58384303333589997,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:8
    3⤵
    - Modifies registry class
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7592,i,14517302610948112390,4453968088975882542,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:8
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7596,i,16366753397449241327,2778137342073255500,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
    3⤵
    PID:5224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,8345985063255879546,7622726795892863830,524288 --field-trial-handle=2236,i,11847232261731791704,6053186974765536413,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:8
    3⤵
    PID:5232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:5200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x20c,0x7ffb2700c188,0x7ffb2700c194,0x7ffb2700c1a0
      4⤵
      PID:2292
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,12665147416820554666,12101467196821883547,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
      4⤵
      System Time Discovery
      PID:772
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,2493240681142725331,3687970701037988768,262144 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
      4⤵
      PID:5388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,17043063144909987750,11918720346861406203,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
      4⤵
      PID:5428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,17250047563487403890,11377845037802696673,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
      4⤵
      PID:5844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,17250047563487403890,11377845037802696673,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
      4⤵
      PID:5744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4836,i,12863443351408127031,12014497184796188556,2097152 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
      4⤵
      PID:3688
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,3194876464860636909,14846922228598814813,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
      4⤵
      PID:1036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,566913391497002534,8485731860102307980,524288 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
      4⤵
      PID:5312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5516,i,14081900504857565530,10101389881805962204,2097152 --field-trial-handle=2344,i,4682254977469663914,4500850114999793316,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
      4⤵
      PID:3300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5404

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D
Size 1KB
SHA256 e71f3582498f6b420616fe32329e0fe30e109178717180035291d3e7fc048937
MD5 78a8f50da17f9415da786df2b42a4f79
SHA1 f03cc92371eb46cbdacf97b9218fce8fc799aa1e
SHA512 f8c2b1ef0aedec5aa063a371e264ce7c79073a1938524e6f82dd5d06e8c10cbae6dafa04feffd92f5088f2dab77bba8440b8f03a3d3d98045b2ef98bca4bb720
TLSH
T175310B42A17826917E48F549B599DB033C75A9C1ECD40C170E0CE1747E2E7DEBF5490C
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
Size 471B
SHA256 1395b306a22a544eb89ecca54f42ec0a4c067667e57d9b4f68442c9950d3b6a8
MD5 148f138196c042c3e5ec816249f600a6
SHA1 a1458d66db885fdf00142db3cf9a0ecdbb977785
SHA512 1d37489ced9981dbbc7e238cb834ad065858a0fceca5b9970fceb0361126e539b028d134513410c8e9bb965615243bee1dcb845d3e49fb7e01aacb404ba67d28
TLSH
T1ACF0D43695DDEC01BD85D48C15F499256C23C51049E12F04E054D4E914547F9769E42E
MD5 SHA1 SHA512 TLSH

Submit Download

B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D
Size 426B
SHA256 8c624e32d1d5db6e6a771f7ff0cca6e20c58258a3b825e611700b12eb38cb68f
MD5 5225f94e4d7218f2893fd6d2c0e50f8b
SHA1 0fb6ec8e0ffc7c0dc4f736f3dce0ed2c2b19bcd8
SHA512 506658e281ebde83e7b6f23c53fd8873ff4bfc090f198508510e246101c2db440ff254694d4aa30c0b309ab2e70bcdcdc6ce972922ecd8d420f69f8989d9f45d
TLSH
T1A2E0D85029FD5029E732AE7C5BDE593E563EF6570804A7B82B504118260ED500D35733
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
Size 412B
SHA256 6e2a492226161473d782c6692e70cd6eac5af60aade650a0ce78f3a3801dd46a
MD5 4bbc851df5d46acfff5b75968405ee78
SHA1 909324047bc6a69f19616a0b6c61f1a773ddbe9e
SHA512 615197ae5672e77a97acf378a04848c3b005e5b76e4ccfb434c9789ede18f936efc2c70c296a6056a0c24baa49e4ba806928653d84a87b1ec0486b66c5a32ef7
TLSH
T172E0C62025FA421EF4F1D1780BEE7875849AF0620900E2B21EE95708FA06A00EC12E30
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 940d17921bde8de627e1df6a2514c8b3fa162d125a077e8179f39b5b8c9051cb
MD5 8f1976d278f5f3878b71e37366030520
SHA1 2e1a106c74408bccb299bfe5d6c47bfc6830d443
SHA512 8bfb55b62052ebb4ad84ddc2856f84c4fd88e93032fd4fe6b83405a4748dfa127f9c01d819995bc08a7b34a940622e650868f0b9546ac5df1bc6c24f7018fd3f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T1FAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8fc0daac07f1cba5e2be811f2c7da605f08db262b2865fb00c09cca1533fed22
MD5 e7619e69fbf9c7d9fe17c1999fa8b04e
SHA1 575f392ad5a4f23b51afaaffbf2e0b1238e1f1b4
SHA512 1fda98c206a6952201f19fa3f6e5a870c6772631901131a611e7ac3372afd4e6c0c7455ffe8763964b5b3ecf7e6001df946800d571cba6fa8590a382591c5194
TLSH
T1EDD0A722291CF4C0E71802709212CF003B2A14A22553560AF315CC2D98B40C156D6BC2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e0ae450156b83a7a945bcbc57711ff7a7c74484c9a720dbdbd662f4be95a61a0
MD5 389e18b5dbeeb8c69875527e68fd00c8
SHA1 da2c15cd0211cdb4630b2719e76da06952c390f4
SHA512 88097e1500fd7b20a52c7f778b389d323a3bb05e9eb0b211a40f4e6039fc0e1e018fb0f59d93ee4f757f920b364cb1ccbd70356ba31268b066bd2f2b1b0df296
TLSH
T198D0A7B0B644D650C60901309910BE513B7251A030ABDA67D0E5685D58E4094D3EE595
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bea6e90d42f790c6cfd6f71f39976d94822ae471dc7a685a24de1c5db6a8c642
MD5 c8a65bfda5c4ed3a2a6b68d7aa81eb45
SHA1 2296429c216af281486048e5fb9669bcd1305298
SHA512 844dc80cca5f7f97534dcc0edffc9222377bd8c09017b48128496cd21dd8398ad9303608a1ed405ec8f475fd30090679a6670b74559faa3bf97c7cc329d918a6
TLSH
T198D0A7216708E540D7094270A503DF013B7620A030979A16E254DC6D58E80D493DA6C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d075b80eb093257190838b09d52808287c24d3a2153aecbf26465860c0ca442f
MD5 841db2d1b18079b758121ea651bcf31c
SHA1 da3bde3e5a55f1b60fd1c8078a57dac7dcc0bdbf
SHA512 88eab1b44d6e1f933b4bc7273fd75504261d3e030bd625ce7c4e773f01d8f576b7e3b4d1f829e035951d3a7d9b6dc4f9f291561b919c5f76bbf04b6e8a5a153a
TLSH
T1CFD0A7216B08E540D7094270E513DF013B7620A030979A16E254DC6D58E80D493DA6C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

49fdd690-dfaf-46e7-8078-4f31352cbd55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\49fdd690-dfaf-46e7-8078-4f31352cbd55.tmp
Size 414B
SHA256 5b2a50f0c5b040de1a421f789f99125c8e2e7b29d568050fa56cae581471fb6b
MD5 c7c052ffec0f8b13d836d74bc6fd55b8
SHA1 2827e91f19cdaeb563a6f24a7f1aeee3c9ffd7b2
SHA512 1bf74607d5f99e5924fc4975adabb59d3a819dd774aee9b5e020583d5113ea5603708827ea190b4eb5955332273e670e2f3d3532b13e2675df14c2d3579f077c
TLSH
T1DCE02BA9C821FC2B18FD172958D00746EB54232B6691994F3E3D950C8FF263E098A85C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 b63bc4da40b8ff93978a0283933bfeac4ee5676b0098058b19cccc80818dec48
MD5 8cf338ed16ce4eec79590f6cb6a09510
SHA1 24fbfb4dada7b93c77b0490d0e175bf2d2bd6ed2
SHA512 5909b693c1a7bde156f257cfdec4c21a46a3c0292340a73bdde3bb45fa2911694efe2c3e6ab763b265ee8bd02f452cb9ff1c915584b134522c95d93908092e5b
SSDEEP 384:wiBOOe9/SjJ/mGi6tyK5ZKB4KgOgEfNClg0JVpg:PBON/SRxLOKKgxEfk1
TLSH
T17613D53E32A40D6BC2E7483C541F4A32777DDA2AD1E4438B77B3752E5368F869A1E121
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f4ad8d40ee4c5d85fc77cb0f79d3e2d5883f8f16704c7d6e6c5ea209aeb62d26
MD5 0d44e0fc440da38cbc66d90d3e88818a
SHA1 5c2d879b659afccedd8f70a60d569bac8668d4ef
SHA512 7d45de0f4d0a5475df82c82ac01b138fa68476943ee9fd0b0ab559ef7b8d6a36e96034dfb1d4b923334c7daf569c5d7f178bea5b85e3caf6a5effa1cd4ccd2e6
SSDEEP 3072:kIL/DL//fQccGeCsM7ETjfH/vWQJLU0HLvmgST3VL/CL/:kIL/DL//YW7ETWL/CL/
TLSH
T1C7440DF70941A01BCBA812F5E2133E3DD17B065D6CE1F8E9E2790CD51925F21B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 62419ffcc0ec999be82373a5ebe4302ba829b7558d2cbc4e71cc91e8bf75ed5e
MD5 8032befb4da8c06511620c0bd35ffcf2
SHA1 5db600de7fbfa10e6955efb7722b61a8907b95f1
SHA512 9b02ede9c1c96e326e25fd780869ee7371a3502d3e1f78ec191a15e1cf10dc1a8cecdc6a5aeb24473e9c81b005fcc0d511b1b3649f11c7536255ade36e57fc8f
SSDEEP 49152:09Y6Fp7uUxSsn+EvvqQjqeoObkviLj2X:09b7uyp+OikqeSi
TLSH
T18F868EEDCA6898C3CD679930B0F0E9477C7413C3F5A5C1D68898C684026B7C5BBAB769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
Size 56KB
SHA256 5de5b36c5940f7cbb68fdd5d003142ce3cf15cced79e3548cb5f5fdeeedc6f8d
MD5 0dee7621487a97b10956e3dc19a312a1
SHA1 b028fd7bf313f0a975fc13d9fc43c6869b797154
SHA512 7e0ed4948987780d9dc656520ddeda09dbd42757f2ba4f74de2aadc0f6162d8100bc00449c57878990a3b50072fc495c46f8188c258772dbefa11b4cef83ae61
SSDEEP 768:87wUuPe7SpF925AxCfVvXT2KU7Uun9vb9vORvfZYcFbwX7fhog9bAdEA+kkjf88p:gpUnwRX6LUxFbwXrTiAkkjf882c
TLSH
T1064302CA072FBF9647C1A74507D025E1172E6401520D13EEEFDB4E9DD91B6A394172DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000de

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
Size 672KB
SHA256 666946f7d7d6351c55feb8c1e6bc3da39fc19dae9691c59cceb38753b6d56986
MD5 0bfb3e391df576621103bccf22d70412
SHA1 83895edc05b8809962615f9a798ff1b7243bbd81
SHA512 74aa4172b444527595ff90f5dad3f580c3e4a4256ed8739ac073f6d1c01f161a92350302ebbc55a0ff8cdcfd22a26d43bf27d92158faa4fa52937dc6ad1ccde1
SSDEEP 12288:9ch51wrAeD2KcqMBTOS+FKWzUFvaKwdt1ZDCCRyy2DvkFGlR79:uvw2hqYORFKWAJFw1ZDCQalR79
TLSH
T11EE423C748DD857109AACF795BA330E68E24C11246EC612E54236FC997D3B84BB7D8E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000df

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
Size 22KB
SHA256 689c7438b6f665862d1f93d807c202ae38f8a398e4fd15445ef9965104053596
MD5 fd23763d286493062f18bc5b59eba4a3
SHA1 db43ed52d0503af7628ad1ffd3faeb384660e9ff
SHA512 af11cfc045e6a8862f6355f4d656b4e761ae38908b49a0bb3c69129b108e9ef1460eac4dd02c887b9bf0c69e713c04d4f1676ecce949070c56a921a07733077d
SSDEEP 384:1+EO/n/jOH49Pz4CakItKI4qz1mcXoDIHSW7d5yk7Bw/pj8lh8RwvPjukTVWJ1Au:kEO/KYd4EuKI4qz1mc0q5yk7KRjRR+PW
TLSH
T10BB2D1E18C6ACF211BA1274B07D043AD779959A453D3F7106E6F47B987AFE067D22050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 34KB
SHA256 34b51e64f00aa054a3eaa8d8a5cbc8e9d549b972fb62a1828f2f6af0ffac2d79
MD5 f1eefac33a11f3479c3b7ce6de666f76
SHA1 b180186f2b4ce52429b859b40d089d3039b55c08
SHA512 c22ee9b1e6faba73cd091ec02bd9dad91ed22c13b4986b3a1acc49f9bda5b09eb619bb923e5c9fe763128a2a865369706bac255c4f4a396dd6ce9f5e104d1417
SSDEEP 768:AkLO9SEF6lKr2Yo9LYqwN/nTl5GkEYErmUvPLdwqfZ7XMLw:AkAS/l82P9sqAnTfPItnJ14Lw
TLSH
T10EF2F1C52C81F36633E53674F3F2E78FA00A639F6F66221728D22853D5079E050DA9D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 283KB
SHA256 a6e883efa9d52ebb136f3f8d0e9738e165bb8a9456079df43585d69df69f814c
MD5 9c10233c2c6c73ae1d89b007291d3f6f
SHA1 6c2028db0705f49fbcebd59b2ac99d6beebb2f75
SHA512 876c9cf23bcf7c90969bc860940c00ef3cb9cfe66ea05417e9f818131956a5e4cf113118066f16a438d617932f37b21416d59b876364c09a4fc133c964e1a920
SSDEEP 6144:A5+xXb0vBtBmZ77GncGR1+BN9Xh4hzN7fgpXESOcqP4ux+d:A5Eb0vBTmZQyFh4NNbgpXESOcqgu8d
TLSH
T1AE54228B3C1E37C01FCE74934966D554C7E0F6988C0D8B72D8D5E0E88EAE4A9D4229E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 c5225fb4678c299a195b8819fb80301d5dc94aab1dcaab9671e930f1c0186d86
MD5 f95006935d6b97fc5941be05f37f51b8
SHA1 27557d04c24f743aa7d4a119781d5c7ee8ec44ff
SHA512 347b0c90c433caccb8c5e43191d5da9652df3731c4177cf9f6627ad4502132a79162b9cb2ba2f79a75e872078972052ab0a9a7e68353ff30974a7507be5a4952
SSDEEP 96:srjb2vLm2Fcyarcf/H3H5Wsg+VQ3SqYJys1SsCICogZBgupL9be:OXq2yarcHxg+O3nZGCboDu9Q
TLSH
T1F102941576C5554EDBA4EAB9F1E4C8D272FA824399030F83AA9F9DBD5783FA0E335010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a83abec915ba3d71e0695239d4975aafa98dfd47afc7188311358b60afa114f6
MD5 04bf4373a759177e2c589d4e3a32cbbf
SHA1 ac5918e4c46433d4117cd7719fd320120fe46272
SHA512 da0e90ceb27c97e1c485960f7cb2aca8bc1bbc22826d375a9a1191a643190a22758b10767fceee66f1dc3709e13b35e86124a0dae1545620f0e13bb4787ab7f6
TLSH
T17E7193193A564B9FE7514E39E0E00237317AC7A90E030F6AF2735CFC9396F76A662418
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586107.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586107.TMP
Size 3KB
SHA256 4f5ec0744c7eb2904d47d8a702712cff5bd447c19d184e70a59e731d952c8fba
MD5 8b335e1b4770efa909d07269f0d551b1
SHA1 3045a572181383189167aea671e18debd54f4149
SHA512 c7bdc3173cbce4204b9049d9e059af2c780986a03f0431bc4070c6b7c682e6f84f9bd609b67ef7bdbcafd5d28fb11db778c199d2459a5a751c0c7e34ddaa3d92
TLSH
T1227183193A564B9FE7514E39E0E00237317AC6990E030F6AF2735CFC9396F76A662418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 3d5d25511cde23edc0facd4a63ff22b3e96d27424c14a916d3aa40fdb281a8b3
MD5 146bb97ebe4c3134931d46e53d9ca1c5
SHA1 c395d3c93c96f9eac53a5d9eedbdc7a578fa04a9
SHA512 4348d67a318a996608da367132988672b035d9c00ad33cbbac13fda06cf67a9835bd218b2beff788a2ee63c7168a146c65377c4ebfe0590265ee1455be4c8a31
TLSH
T135E0865808CED6A99B1968D3927EAF0CC2E5744AEA89BB46270B98406301645B3D7E90
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\manifest.json
Size 962B
SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
MD5 e805e9e69fd6ecdca65136957b1fb3be
SHA1 2356f60884130c86a45d4b232a26062c7830e622
SHA512 049662ef470d2b9e030a06006894041ae6f787449e4ab1fbf4959adcb88c6bb87a957490212697815bb3627763c01b7b243cf4e3c4620173a95795884d998a75
TLSH
T1661121366E2FC4260AE00698DC51308AF92453ADD380850E35BCE42E5B744FA430631E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 3948cf8434deb01c29a1319af376ec1c6688c993d9bd49b563a6d87fa264899b
MD5 33058352e35a884df5d787f06ce90ee4
SHA1 0bf2e252df33be8602cf485f412a8e2afb7a2ea2
SHA512 c94383aacd109764e0f605beb14f4cc2cc22eca2f5de9c4292a2f4cd5d23d28f04338c65d172a954004c5ee3a92387dd819c46d006b6f569acd44ea046e7317d
SSDEEP 96:n+DIU+bGz83uy3+u4tgp4DLjGQLBze9z3qjBHMsDEuspU0wbtqrOQpPfR4J+MCXD:n+Df+G83uy3Ct7XBBKKH7DXspU3iV
TLSH
T16214101E4F643721CDBD917669E744B35D7CF03FCB1266CA686114B4CEE2A42A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 17KB
SHA256 e0153eae578b32d3a4701209048db3f02e0fb37ead89bf1c37d1b7772fbf4b7c
MD5 c97ca9e1bb14538557be76ac2a1a93e8
SHA1 0bd6409e5cc435f5fee6f8dc49248b564d3e2e79
SHA512 43680af5ce1b106641bcf38411f618218a97c320ef4be182d86e5b5d14ad30ee078de6f60770d9dd40738a555bf17a80121ea8659c29797b059da2d064d7f973
SSDEEP 384:Ek/iTbsauS9SJ7bAB+V80Wc55Te+4TAiJeqeSC31leZ:l6Ua9IBqEr5Te+4kiJehnlS
TLSH
T1D482B0762ED484C7D176567B64FF254EAF21B80E7544F08DA68230CC08637AB28F6B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000012.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
Size 173KB
SHA256 8fec055b78e456bd79654071089d80df7fd6bdc0e65d012254a93a2d516b4a9a
MD5 d5e6fe694f52c1113bd38a5d6da1d787
SHA1 17a3eab2322129b0f44bed9361090840e082d17f
SHA512 fbdb67c5fcecde5289e6101f6c7f25b72521d22b65da3ee7de444efef85fe0233a5549045f3edc37fb183184862e07af2fd55f15f49705274f77e24ee62e3b83
SSDEEP 3072:fpj78BU3i3JBG4PEcoEM6YkZr4D3Ckelpw2ApUfL8xlmLVIkp+UfL80b:+B5Bv
TLSH
T166047256A25692C4F13E83BB0A465E0BD735E5C4C99830A5BDB23A0D3AE7F013F2176D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 17KB
SHA256 55cdf67d6b8fae85f0cca14af74ec2bc354102448395fd056305181981cea709
MD5 8048b0db624ffd42fb17168bc556e5da
SHA1 bb7846100f9af0f42d77c7a568ad28da8fcd6b83
SHA512 32e9ff66dc25fd8fc0d68248fca09325fa222a2f782ce18acd6b4e6d66ce6d9f5c22647287709f054cba42fd6a695a73b24b6bb128059aa3d5a1f1ea238feab1
SSDEEP 384:HhN8EOIASyaW8HTUKI780Wc55Te+KTAiJeqeSClwMPr:BNmIH3TUVr5Te+KkiJeh0MPr
TLSH
T10882AF671BD84486D576927B70FD1A4E6F21FC0A3985E0ECA18331CC18679EB20F5E9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 e992274d91363627f4813bdf06e4da4243ef96994134e0446549e68156ecd4c6
MD5 24d0a3e313d1a22dbde621f294895260
SHA1 3da3cc34a36522e8d998e8ede2d252ba90e15901
SHA512 78d03ced6195e2e68e6328d7465923eebeadc6008fb85949c1a3a95624103df5cdb600fe0d75b670b212a8868c9aaba626478e507f40ca5d8676f23c87cc94f6
SSDEEP 96:ymKQmKCKTa3quidG6snirMTma16QLX8rHy1D6ujmF:yUEqtxshma/wHytTmF
TLSH
T122B1AFEB051C5AA4C48EC053F53CF643C8D8710E5B0DDF74A64CA38B07F2A1B94A6AB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 942B
SHA256 fe4c75019292ad06f9e24f9eec836a9947cd348a97622abd13db3a46bb83c93f
MD5 583c5ce6e009e99bbd66acc75dbbef95
SHA1 dba0dcfa825d349956996dffa173b5b64b015196
SHA512 dda8239bfade71c34e5088a6c53e030a9e912fd601c80dc787894694fe8ab6fb3188684591f658508b1aefc952c73989f780e0d02633814d8195abe38ac285ea
TLSH
T179118254EBE91881F9BA0E70053F3849BF66758E1C67E90F2215206B86B2F418D31A3D
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 1dfe5ac1e0b26de93d50ba755eb0e75a7bc9a380d45be5d61d8069b6c585c967
MD5 697c57e759479955842349b8c04a823b
SHA1 8b634d5cdf32a43f2e8924ec4e6a87a585e52bfc
SHA512 d720582d20c495c80d11d955090e1d45deb90b63e3381defad4a36c715554bc532072180d3b980de28438631fb4627ba9bf4ce2c597b996d21687f3623e7c400
TLSH
T172E0D87555CEC119570438876226BF4CC3F0344FDF88FB851B099841B141444A2D39D1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 5b09b3eae003a1c1ec7ea2cf9bed72e78af533286ea5d7abad33879b94f23e53
MD5 325df9eb897febe7c5c8f78a82c530c0
SHA1 cb43a16e93e0699b51d698475df401ff95644475
SHA512 3112402d836eb9103e36652eaa9e3d8c87fa9aec016e15cb7f3e1c2f62ee96407868f97063f791c05ae1aff93499dee639a528fd85a638c09fa3147bd9bff963
SSDEEP 48:TtLopFMatSaw/auUOt8BMoewZ4AzAwCkAwH:9eMatUaAK4e41+AA
TLSH
T148922F0E5F34A221D1F48BB2EDD585722E7C211ED3637A99D90420F2CE925ABF1051AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 7ce5ee996a7bd6c4f4e55fe74ae2d575ed15604c4c27d81b1b52c33d38206dfd
MD5 7b51f88e402096161b14c5199c142d9c
SHA1 b54045d2fab0691a20b9206bf690bb160e1841f5
SHA512 8f6e6a83d0d4c2818880b58e435daa8987e7b3bc5b12cfe5ed3597927e2ef0eeb9d3914b35d6b8427d753070df7221d46e4be73846ac3436e115ea22a80058da
TLSH
T1260190B7C3D495AEC90552F05618AE2BCE2C0506431C7C59C5D4FF2B93E3479D00185F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 7ac1d5c25d881c47e7b8b65ed279db3b4136a9e70934c07d76084c043249215f
MD5 a1f2103c1606cf3360d84eb25ac90a40
SHA1 c5815adc580114cd8053b25c0c8921fc0ab84f13
SHA512 ae65c3f9e8e57c01969aff9568f4be3ba80b4b05f63ea9351d133d506d88755863c3d69bd0735a60d16c395e6efd3f2d3aae490910471b33669fb79b6dc8a588
SSDEEP 384:Dvq4owpcdZOq0DAAexdk0pw7a/a75c5qtdxijsqAvoR4G0BOB2riWzWsWnWZvyLd:f1TKRW6
TLSH
T1AD42AAF3C7E8863DD81156F0DB183E1ADE2D1D6883683D6AC9D4AF0B93E5471E240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 10482847cddadfa21d153e3e8233cee6bac7613032e569795cff631fb8ad54e8
MD5 eb3689008e79c4f8628f3e366b992f89
SHA1 e88065d22dd5f2b145236d2fc7d78dc597161232
SHA512 7d850f98e8c49ae6263620d3da75c5952160eae239078c5e90f54e101b347aed1b6075ba1a7ca7bce3c6d39d01a82e3f1a0b89b6e319f17cf6fd5d2de1591e96
TLSH
T15BD02223974070F9A66DBE9380AEFC8FC33A243148C2DDD921D0D89E0532A6C4607145
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 c6aeef16802e17ea8304949a646c8ebebcf11bbe6b20ad0931c9ec9c77773659
MD5 756f96f5f43fa13df68cd7482c0a9ba5
SHA1 1cd7a885d215ed763cf5d270e4b6ebd9db3d641d
SHA512 04bfb8bf9e54a02efa4349c2dde848641eaf1807795c2e61e3f1735db949f87309ee6094186622d1ba3b59d9bcbf324bdf35f46a24f4b4daa311dd33dcce9190
TLSH
T196317B97C5BEB46B206CA96F0E88BC05157EBC35539164F8DBAAC13DB0C25F70B1A026
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 61711fe165362368cbcc9e1fdcd087ab947855e21e23d9949a40bc66646f53f5
MD5 a435e2caee9f0ce1aa2d7d2dc1d208d5
SHA1 2f80615f97810d4f0aa0d7af14a584f19ac4fa9f
SHA512 fd5307830e6ef8a9dd95b588e502dca8ddac00e8c328582cad3f93a6c9c75c3b62f65abdf776b0cc795c988a73832e408353f7dce5d5ccd5c907265f3ccc7d63
TLSH
T135C0129280F9E4B2602895BF1DC4B88566B5E934115094A4EAA9C27CB1910B76F25029
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 504b7984e163becdcb072fe676d2484e5c1874c1f5b19c4e1e5f138556156047
MD5 c873ffec433179f02981ae3f58b54922
SHA1 afba165957587c4becfbb20ee642e75a9e9426a2
SHA512 51172b4a83d89dfc2e5dfcb7d8247eb6d5846d421fc90364564c7008e9065e90dd5920db054f24a7bcee68cc9b20897a4b36f049b7a6a484cb429b43ab7b0a2d
SSDEEP 192:sxZyRsyM/jK1Ml8qkH/f+sNWpViWchEdpdBHW6+WNGYLgOZpIgFJ:sxZyaAH/f+sNWviWcqTHbGKv
TLSH
T12152E911AA38A977CCDBD20CFA557F53D6F91463A2A00E5499FCD91C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ca3c65279546cc8acf76773655d41321d24657eddf73e6c89f2adbcbc2d77cb2
MD5 db9b70c861e171308ce08c25d2efd733
SHA1 02d35313ca899c213f3a679bcb8905f2e61097e4
SHA512 87b31d6e14244ee48fb92100f3504d6a9a76eaea22ca2c83c7b0a3e0db6f785acdc3b3be1f0dc01c2b0e90807e4fcaecd507de3085f9594d8b63080454deffcd
SSDEEP 192:sxZXQUnnRsyM/jK1hl8qWOH/f+sRWpVEWcLQRb49dkdpmOBHW6+WNB8K/YLSyLoe:sxZbnnjCOH/f+sRWvEWc5kBHbX/bFO
TLSH
T14672E701AA24597BDCD7D218F916BB63DAF81463E5A00E5895FCD91C00F7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 eadf304c886406251a5ac782e1bfeff79dfab867c4814563fcf0f2f6e386a692
MD5 ab6c075729130b7cbd0791983a89cc82
SHA1 82660fa73a23109d8169b65d37f00d2d83e5c587
SHA512 debdf6dca3f53b7b3db2431701b5de80e9c1c780e1d59cd19409bc275947217dc1301d83494cd7274974f2edec2835e897cc119969f5994b3a7e9e8c0bbf5ade
SSDEEP 384:sxZbnFjom1H/f+syWvEWciKSHbr4/YGsFf:sTFkm1H/foYElAHbO1sFf
TLSH
T1E392F852A5209E7BDCD7D518F921BF23D6F81462D9914E5CAAFCD92C00EB6FD2202C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b5bd940324b183dad50aeb64139a70db8f6a5f9c9118dcfed33d75d4d8e414cb
MD5 c60d9cd0f6348f448d72116063cce674
SHA1 667e9e03aa0b892accfe49b572efb1e056b2cb2e
SHA512 49c1e018e8e960c9187f7a8d7c4f583c64d18ee0ac14109a10766a8f4558f282c668a919b6c5dbeed36494f4a4a594184356bf63b04ea88ace8761100cd1342a
SSDEEP 768:BZs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNHrouQ:BZs6pD1WvxzWju1jahILIsNUuQ
TLSH
T131D2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6b94752d-e52d-41ed-bc0c-23317d2932ed\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6b94752d-e52d-41ed-bc0c-23317d2932ed\index-dir\the-real-index
Size 576B
SHA256 9d6c98d2070b7edd1665f882332711506758040c29a50c7e91de1f446f48add2
MD5 0db4869dbbfb87d29f39f34b873d48d4
SHA1 7964988d8c96b1d872d042c7cb2771dd4a934481
SHA512 2e0c521b52277a60ef2ed9ca9ba134f6e85137b4386f6150e1e4a900c516a4da2029da48e92fd2f99d04a3aaf1b1c9edc349a1b4baf995ec8616df1c2f1606e1
TLSH
T142F0F19063C0985FCD12DAB00A5709C5622BD8AF4685AB0F23B891ABF63F6070C65F84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1493.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6b94752d-e52d-41ed-bc0c-23317d2932ed\index-dir\the-real-index~RFe5a1493.TMP
Size 48B
SHA256 30a22761cacd28aedcf45cf120bf38197b29f750763716175c929f37023db7e8
MD5 fe309454d239bf61938f99185a44c867
SHA1 71135e262efe4a54bced910b991fc601d7ed5942
SHA512 4e2861d4fd751bcc55b3f3994028a06b708bcecec96b18603db9d8c7486ab62ab927ac64949edd5e98c77632a4e9bbd51d72b501bf43dca66cae66acb988c7d0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8a11e262-7337-4064-8502-1b33abdac5de\index-dir\the-real-index
Size 2KB
SHA256 445f40771d60e49911d3c847b47fdc50b5cf3ba7611f00fcb9fe1550881c5404
MD5 0249da0abc2b870cb8241e7b041109db
SHA1 621efa0f22fe54175b2d42c5fa5ea421ebcf2b46
SHA512 44e036a6772db911d78b5e74797226aef9a529b5411cb651906c1b52bdceb84e20f1206d5ae6bf74c333c7d5bc028e9542ce82bb362a7406cec88dcaae958eec
TLSH
T12A41744CC884ABADDC7551FE2D9815F243752D28FC48C3A241A4B6A13403AB41B4BAFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8a11e262-7337-4064-8502-1b33abdac5de\index-dir\the-real-index
Size 2KB
SHA256 f1c3e002b6208331702ef8df8f3b64a66c5da06b8beacad0acd7419f72e8073a
MD5 1f59d28c6462e13be2e048bae76535c7
SHA1 c8b383ecc22269d9785d3804871be18c3cc0b090
SHA512 bf3c769b98e94752a1295c8de4f27e00f3fc9af6626ba7b969d4820f3be27d94642e4bd1feba17d18fd360708061de03495235c1a504413387b4a7a8eb3ac418
TLSH
T1DE51868CC880A7ADEC7650FA1C9415B253752D38FC58C6628194B2B034435A81B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b55c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8a11e262-7337-4064-8502-1b33abdac5de\index-dir\the-real-index~RFe59b55c.TMP
Size 48B
SHA256 b918fc6fca248c889e34f45b44305c269ea4fa8aa1ccc7bb5aa9527fd2f8c25c
MD5 29160a6535c37b25a13fb1f8f32c3ce7
SHA1 c701c59734b30f2ef1a4ba058985a31cae42ad51
SHA512 4c7940ee561f5148b9605700b3353e8ee3612c46aca954695fd9ce13df7463b95cbe91b31bb39db4d9b5d64661482c60650ee9b2958fb236194d9446fee17199
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 0e7c51db461e104ba4bff07707c6642682abb7bc2504ec74646f76ec002a8e3b
MD5 87fa0916b7e0c582b482553da4f1cd12
SHA1 cdee907b6f2f405ef80227b6eeff537b69edb545
SHA512 47c6f91193cb33a5356f983e02c6681d2e497ae6767924eddf278ae1b4d3b589c8fd691ad2ffcf24517a72fc89555e69ec96d4e1bee99920ce3b4be6730ba467
TLSH
T123D022EB2830CA661A30EEAA6038290F900ADE06D8C4DCE89C40F28721BC523CC02838
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 f72398c394307194f8255a15870f040f32ab6c58e77b827d825a55be2f190e6e
MD5 93744f55c9d54897ace68b535e1d317c
SHA1 51b011566df1d38d0c849807fe22e57ff3ee9521
SHA512 e38b85b76ea5f095ad7c2ff0e8cfd2382b1c6fa904094e9f629eade3e4b79ed4edee84e0339bec3a4356344c573942a686aed0721b5fd3345f6a68defea57b3d
TLSH
T119C09BD71C1086960E31EED93038771FD50FD54AD4D4DDF85444B103217C9174C53925
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 410a013484e0b76acba071695893df5b4d26c0ebde0b8d33749f5c9dd01c0887
MD5 3b07ba2aa71081ce1994e16648fec6b4
SHA1 6eb6f8c21f7762c2b3e34d21f1dc5ca059707ac6
SHA512 297cbba4c99981e1d8abf9204da1a5a1c46760fa6e91ad90c672b9c2c742d52545ed5dbcd379814e319c8d87320228d1c436eb39a16d25af924b06c607d1ec75
TLSH
T18AD0A78A3D5045861B319DD53434F15F910E9D49CCC4CCAC0558B20B227C817C862E28
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 78fba634505dab81f549371c96b42f4b3e8ab83ae0f5e977b71918446396213f
MD5 57b8d1204e4a642b13bdc33757fc9760
SHA1 596933b078814740d483d055f7f6379dcac98035
SHA512 5fc3dd2abd0844638614df9af863fb896912972a5e356274d6a0b7404466079170a1263acdd152184aa255c2937efde7d52cab367b91876749170ca71de856e4
TLSH
T1B0D022CA64308A9E2B30EE852038660F841BAE06D8D8CCE85884B30334FCA13CA03939
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 bd35dffb55b51e4d25da309e37f3a60999d421a77048e4a70d555e9b3bc779c7
MD5 f7d5c635abf6e3f2e3d545f4bc4ce390
SHA1 92745cbb5825f3d20156e5352d84938a4ff1736f
SHA512 c1855b08e38bbcbda0940b976b99479ab609db39fb911c4b0fa00b93d4650637b96470f0c98f2968fee83e35205582271a0f9d430bff64acf26c51ce13085f9b
TLSH
T11EE0688AFE9204895E33CED63D34A85F956E684AC840CCA80988721B12B8507EC51D2D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 5bc89331bbc213166dd63b021616a61cd57562958a5380bb5d175804c03cb17d
MD5 02165d10e52e92ca0a2ae68817961204
SHA1 3d4077b2ecdb7050686a05cc7e680d8cb61c8dcf
SHA512 d15cc97e2c3934bf71ff64414a41e3cd3049a78719b4d6beda69431519a9086998fce59e334483b98d9d7b56c0e9fe0bc0f86792a2a42ecec600c70fd5ee02bc
TLSH
T105E0688AFE9144996D33CFD63C34E82F996E5446C850CCA80588621F10B8506EC52D3E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 abc1f507234355a55daae0f4c71f96acaf1073dd364ad4ab2d0ee1a53c9d8a6b
MD5 412a4ca4a1b718544f7fb16c78d796f4
SHA1 4406e72df4cd8c48fd8d6f1a96cb71dbe4ee7671
SHA512 db7040e75025fd82a655352c21253f4ccd1ba835a7b4605970bfcba0133dbb5a90f9357881b8ffad55dbc17baa6c0eddb36e0a5d4d16f3ffa4c1210f592099a5
TLSH
T195C09BD71810865E1935EED51038671FD50FD54AD4D4CDF85054B102247C5134D43929
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe599eb7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe599eb7.TMP
Size 137B
SHA256 398601c667612792f2ba72000c8978bf313ab57eee865fb193f51dc1af55dd2c
MD5 12c8dddb8c1a040323cd582ef6589af0
SHA1 dbef367a959a4cc223af385f76ab7e4ec845a1c3
SHA512 1b616ef9f4a177fbf1a5f93c269271adb330c4eed619adf9ec5bd84c3e5fed2ae0fc675ce71b94569325a228acfd8641d9eabe52a7d3c374c6f4aac769e44fd2
TLSH
T1B4C09BD7181046960B31E9D51038674FD51FDD5BD8D0DDF86045B102307C513CD47925
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 85e9e47debafb9af613db996280aa9705c2083694fe86979cbd1526408be75ae
MD5 177d98212db9be5e998a604853b4d8f5
SHA1 f235dba1c8afdaff7bc21f64ea27e9c4948308e5
SHA512 d0a0cdb87bb5ae3823aac41112851d3c7204cd95315c345fb886eba4b8c6cb0d8514c67839ea78925adb8433e6277289be2e187c846be38d2d4a96eb2e0812a3
TLSH
T13051C78E4C476F65CD9D24F218F71892733524FE96894B07959CEC347CC32292D6A619
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 1KB
SHA256 5545fd7ab56c70aba04edeb00fe80570a02d04e5a377e5c3237726387cee296d
MD5 9714b589d26780dda330dfe6056fae4c
SHA1 aaa8ee0052491d6ad31899a8b746054d8b7745c9
SHA512 6f0be684cab3fd50213e203218edf83ec8c9309c34a5a2ff435543319987dd1f7e07596a9e4fff8ab218447564769c212b2e4d60901cadf46e36a208e8b85b15
TLSH
T185214C8D8EA08D8FF8A480B61573E5E0B33098CC4B22A3235C2C3231AE2634D281B5CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596363.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe596363.TMP
Size 1KB
SHA256 2dbf60949e99fbb303d3c0c6a146d9ee9740899f662cca88a4a968dd67a50a62
MD5 b86001be671fe8691181a876c925c51c
SHA1 4cb48cf26154a051b50a22eb0c372eb9a16089c2
SHA512 4cd21828e7718ad1ce4942e223e6029c0ce07ecbd3953e6747dbc9f30d89f05d61bf8c3183ef79ac222cc13d339552a36f3def3ba9903a6561963226cd367698
TLSH
T1C72112954AD54D1FF994907B1A57F8F8B3308C008722F3A3AD3C22799D35B8E094B0DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 beb4d11872169f6fdf6f243d2640f97b4bb51a433301858bfdf3bf2531a6f6eb
MD5 fe1473d60600af81e69953fdd4bc346d
SHA1 8d1c5949ff57e20abe5228fc1d54f1238b0bc2a8
SHA512 f806d352bb47bc86a4a170f16acdac0a1f89ff30827f140199954499d912adf442d9a254375ba12ae4a01457327c2fd9cfea8f4d77ee5366ec311e443827b4ff
TLSH
T1FEA0021806803402D04712B639DB85F123114A90120163764AAD904DC8F4785854100C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 c4fdc20a02e2046e16a9b6065795ef487a84aaec0609509fed95b1d0b9eccf49
MD5 dbcbe955c55c12ec1f2fa91cdb8d9f48
SHA1 c52b2041450eae64b7be31fd6d3f9d84462234a7
SHA512 2c5da38fbde7ad07cb31261711e0e1675181a848ca41964fb035cfeba213a625c77deff522f9cd9a946757a9b9151c71cca3a3ae46d456f76a5900137629f11a
TLSH
T1DCA002108BD00006C05719B115A743411301CCA09114530790D30048CEB08474E6641D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 af4920e461083eb67ab6819e5b2e4d19d0f95b0eb572ec6cf68b3b201e1cedc2
MD5 e2e44dc526929d20b37d46fbd1404235
SHA1 9054099def67ec7e9c63e237ea46a49c3607b10f
SHA512 77bea8010b60cbdceea466f51d568fc63815d8b11b95a4d04ba8bb388bd1b5c4450a5ab608789d9135af61184c26dfafdb221bba0197d3ce93bc84a4dd10c738
TLSH
T17EE0D8BB6FB76820EDAFE3E7247494750541382C8805BC4F546A96C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 511e76eb179175a549a4640243f544932137c2b8f5425b4075e841e1d0e59c7d
MD5 b6f7e132c468699ecd8c1af7750e8ef2
SHA1 5aaa36ea0634365728e62a62d83e4aeab43e2624
SHA512 85fec7b95225fcc33002a43cc85469b0596cc96c9dbf7b6fd1b7c5c7b450459aa4497bcd3e9bd67c5d8090492e87144822bcc7e5d5f5b0ab545f208eb388d94f
TLSH
T1C0F027BB7FF32824FCABE3E32430617105453C188814FC0F546AB68390B0315790AC62
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 1500edc1664f643107b98fba750747c4ca6ebd18b862a69b2fe79e21b5ce592b
MD5 eeea9159e4a580f6bdc97cc32b843542
SHA1 ef7980ec67ee5bdfca548696be172c0022b9576a
SHA512 3701f921428b1c2d758d78cc11ac8aa124eb039ff42e4182c4dc1ef895e8959d7e157b65a54f778f4ea2de49eef6341542d82d47d5f1dc0f576ba6a5d5bf3c87
TLSH
T12AE026240ACAD17DE16520930A369F0CC3E6740FDAC8BD466F05C8806286548B1D3990
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5f64d42d4480297e9cc9b66a25c9ec737c859e50e3cf1c588d95728d1738ce93
MD5 524936b8c92eb9caa1926ad645304337
SHA1 04be0e0c98c481be2f4068f7b6f4db2b9852055b
SHA512 94f9244df87d31d57f59169f7a45d7ce460732c659048540577cf8e0d814f24f9a6b30945b3e485cc4bdd9d4a6fd165d5be7b06cb05d093a549670334e87cad6
TLSH
T11BB012268E49A400C80C43315A50804CB16188F44B4C335394E800EAD47B0600523702
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0b8a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a0b8a.TMP
Size 48B
SHA256 7a3310090d8112a4d28e6fba1fed5d5f6c03999ebc3cd1c5d0933f12600974ff
MD5 0e60e0c60ae92f39516368d1c47c4636
SHA1 9b76613a195c08f6774fa83a1655cec075debad5
SHA512 22fec8ed8362bdce9f5c0b3effbfe3e67378628d4ee43195cae64122a08a4578bcabf3f5c1db4fd000d7520794180a8fd2753f74190570875be81ea04491e91f
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 697B
SHA256 5b59320b6173eb675c8f96942570ce24dc3d0df104a5b84f9850cfb16e004f48
MD5 6fe0f306bbd1a93b7f6cdd8fa52dadc9
SHA1 532f5a1d1e07746f626490a98e02252293156bc4
SHA512 956f792ebaf81e3024360e4e69f7fe225bd639c7a6437b98e5644fd41621b304aac2f923e5627cf8de78eac85068ff0cc7dfe2f05829979e556c157d148ab243
TLSH
T144012DF70A156418CD6E82F50DC52FF963F7C18C0BC88EC6AA5D5157184277178468BE
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 319B
SHA256 f32f37c40fda8c8a1e4c40e953fb1100ff64f069c3e025957d841ceaabdbf0f1
MD5 c3a464b05f04475863d0ffab6c0d7810
SHA1 244e6adaaa66bec9f2217aee1b50c533f8951f63
SHA512 bee31f0a2dbe58b338c6f971e6462c37bb4dc01abee5b7102d870dbf4d5c99b0ccf43d8d56a05b5def75b70a7ab0e03fc68c09332a9960011c8dd3bd82a04d24
TLSH
T122E086A818CAD5699B1868972276EF1CC3E1340BEB88FD861B0BC4846701146B7D39A1
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13430764742879665

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13430764742879665
Size 1KB
SHA256 dafa93ddc2588e743ea842ec915c3c04d9180956af93c6325e03b14494a13bac
MD5 8d5ed4382c2414654f8066ef52a36c2d
SHA1 2f958b93b4635b08f41a938532a8db58b196beb3
SHA512 71d9d2a52f13dbb24c7584ba90c9237891c6f43ee68e923d9a49087c226884bf13901660551214fe9fa8aa7fa168b2b7a9dc8b4d247ff2425c79323a6042a62b
TLSH
T19811C02895CE0627C1BEC53E91E740A57670A91A33C01E07D1EBF2440D32B473F51E9D
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 a1d3462acc3e05bbf979ef1ec7f996fbc8e7756403c1dfd1abcbffdd463ae120
MD5 e29a142f00a0164e9920a266dbc70ef5
SHA1 cd74f921854791fad4ce7d9f25a1ea33c4406ba1
SHA512 f9f3359371eae841b5d2184750a2b6d545ab537bed1c7bb39b08038cffcd23387aec7ebd8e1f355f020564155f4cb5cd3089b3de91eac962e1e7a8d9f1341a13
TLSH
T1B0E0D8251ACAC63AE2A560D75666EF0CC2E37407DAD8B9556F0A948063465447683D50
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 aa18086318a9478a994be88b8d2232c9bef4d36efaccb4d5c8123d6ae98422c1
MD5 8fb788b90e99aaf96a6cd706f1fa8b3e
SHA1 1c962da3a79d0ef785094b1baba9fee10bb60c17
SHA512 aa5c26ca2ec0efeb44414debab83efc96d2975ae7f7617359e8d22361cf3ff4507d2bd3baf48c345121180b8d408905e2e13e527e87c0940a46ff36df6e8729e
TLSH
T118E086B445CAD6399624B0C7437AEF5CC2F0790A9FC8FACA970C4444A241144B2F7D90
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eba731445a323fdb5c9f7aa4982d1407edfdc1ef609c9e353d227e26cffe9af5
MD5 7eb270e4de3a39a7656bc61ca48ba6a0
SHA1 52a37fe2b989299b8553196e8f1641167f2678c5
SHA512 f6c19e70a8e9aef35dfec2094d8c905c0e88e0a7a180f2d390bce73157c897c70493ccfed16d2be70fa3cbd0581c6b8c91483d1e3426e6096e8a8e71d697081e
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFlIFKe4gfytVIZKGE8Gz:KUAAKtePulWKe4iuV2KGERz
TLSH
T13D915A5331BA13023C3E6E0C9354C76A9A4275A3316DA42B7F9C40761EABE214EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 b1f0bad232b6b8da078fdb22e81f200f7f7bd6ac7c6790f508c5292b6d8be5d3
MD5 9d2a216ecd62c8dbab722be87fe01e36
SHA1 c9c4716961f343b1dde6e1e1070d8afa58425c7d
SHA512 45a27c4ba85678f5dfc4a0c583d9a18070016caea991d71c15790daef8c196a817118c11d5cc6d640540a4b6d21eb0824f1e7351775722fe47834cb458680d12
SSDEEP 192:/+5WcJ+HfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:W5WHfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1D524640A7B747001EDE6D9721CB080771A3CB16ECF22A6915DB254698DB3853A23D8EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 116KB
SHA256 f2fac0080a3e262d62bf8ee2243e076058a9ffc7277302f9c7112e07f3a79f5a
MD5 b5cf093ba98e988f801592587e09f56a
SHA1 918dc4824c3881365e36d69327a0fb0f1fb6e0a4
SHA512 450b21ad48997d9bbc182880330ceb1e4d5a66d39be7971645bbee2f81ba7e97e4544c5f705c89bc760062b577cedef7f78c20ee3d4eb7518c966bb8360a893b
SSDEEP 768:sB0JqaYQDb+0yEWIXHTqIKmxbO9nGQjb92BPn9UKn+TRAkxv+GBepg4hQznzl8zb:GF5ZjEBF0pSEK/BZSM0aY/D5nfgPFzH
TLSH
T166C350F3AC0D81A6CEED95B8D51BEF44447353618620D8E5AA3C08C33B7DA0ABE755C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 95B
SHA256 5b149d68659ebeab90f1116b8704a32dc240fbf85171bd4a4f70d57a3d8d4bb8
MD5 021b8d293c14358bb37b18ba45792aa5
SHA1 22e73b3a1d152734191bf7de9472a54be346b706
SHA512 ba8ed4be209dd74c7e76bbb3f9bc8cfd2965ae9bb927ef44ae7a30498c15f46065f1bed4e6ea544ad6732bc5e7ba71154c0b70e3beff8ecf459cd747038e3f65
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 7241e8bf6c20c970108faa74d088c05ada2406b6e6781c2511f67e6e4ca5d58e
MD5 f330c519513598f7805ad5a6f15472db
SHA1 c1faa0f0980a9a82cdf4a8481297c8018c3b1021
SHA512 d7fca864dfd047cf77148b8a30e32b87137a1a620ece5e3fe82ad5ae40909002d073897bb08bc4bd499e54b7c78c87c362e6ca74d08cab5420beb5af12850419
TLSH
T12BE0205454CDC2DE6A1920C7213A9F0CC2C53407EE847D492F02D44C730310076C7951
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 610B
SHA256 2669af9a4343b332da254f67b62e046576bfbbeddc462055d34558c5855d2144
MD5 21ef054eb435a797902310697f7f79e6
SHA1 c6a52984b6e9134744b190db34814d4b2e5f8cd5
SHA512 9c18bcd1d08c45463242d3ddccc6b94062f03c6d58798b3313fb08e5fab86535aad9f781b8a5f87d467885501179c2bf20b85ce775120af1bcf6ecfd8597f717
TLSH
T14AF03016F329C058E04A827E64279B212379E8279FBDDD1F453A34211E77A545E8F7E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 e763d1c8c94d99098c07b149c6277a6c3e13b38cc39900cf2b6e51262fd4a573
MD5 423d140a0ed85bc55474cd2b36cccceb
SHA1 7fe4328fd5b2415d205a5569f21f6853ae95dd2b
SHA512 11a442eeb1abd4a6009c882db866b09798d67ebf168e213ef3e7c96061da266ed5a32c72e18148f8623a4a1429a34cb5896e8541438bf92b1a897e92076ba59b
TLSH
T12DE0205464CDC2DF561520C3117ADF4CC2D63807EE847E452F02DC4C730314176C7951
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 131c1b265f46aa7600edb09a29ac4d665a4880467341794fe52498c9129d14b3
MD5 b4f0aba7b277f62635491edc2d588f07
SHA1 abcc709a35f0da9c337e58e50906c48c747d4aa6
SHA512 e7416d60b221509fb25777bf972059cdf5420702ae462368bc27bf2e8a291b293e5d349f44ec0155eb731797cafcdb6cad3131c7cba3f8d62e42d30ce3e23a13
SSDEEP 384:n/sNb8TRPXQcQ4a97ORMKo/InTKwBODNZOCwWOHx/7Izx:/HQhJOpo/InewBKZOpWb
TLSH
T1CB824B34693C6CB35EE2A646FA5B2B03AFF41067D4951E94DAEC6F1D10C729C234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2fa26c786cd1be31943255ded5cd3cf24e47590eeeba4da1ccaca15f239c5006
MD5 9fdd7b9ac51e8c2e314a9223c7b317ce
SHA1 f43a817c2564dfef0aae2aaa290dc13cec13611f
SHA512 cbd0c40f693d0c2e70ffc66fe40c92700ee991cd28edd5e1aa5a2c52610c923a2405718f5ed8af0f3218424100bcf290e923e7b973da28938f9624167d9195dd
SSDEEP 192:qONa6O7+3hQmiUynZGttb0aO2eh2dqgGScU6:qONa612Gt97ORMafU6
TLSH
T1C302E83469286CB79EF2AD46FA8737239FA5103BE9A52F84D6D81F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b10070d0dae60e5c51b40b5b1836d6f9101518788a7eb06f940420ca3c260a2f
MD5 fa829bd901b7ba5bf106c2b1c7bfea40
SHA1 cacc0296275bbbe8bd73c9385c29de803297483c
SHA512 0819b9b67ff977dcdea05dfa1cdc89a3870fdc705a13a56cf82f69c2c17e6aa4cd1a1911017167ede591e7daedb17c51a6c66c4bcf271090983556e8d83a3a6e
SSDEEP 384:FsNDYNPXTjy4a97ORMKoezMA8tvY1oKqKkB8nTKwBODNZOCwWw:FByhJOpoe38RKqt8newBKZOpWw
TLSH
T1CCA25BB0E8785CF749A1E9C9AA4AF6076EB41137C499195CE6F8BE3C309F5F81342C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d34e7f28284aefbd0a8078ec2b0d908c9b3871943bccd90d5f0205037e5081ee
MD5 47c297765b36f9d3d48820ccb10877e1
SHA1 92a24b537153a71997e4a3be99d898ebb651dcc2
SHA512 d2ad8c889b9b02fc0029481eec44cbbaae71e4c1708ed948c321f0bdbf6343944162df54dce867e786c89a35dcf3502f66d80753089f077a41b8d93cb9747b4c
SSDEEP 384:nsZcIOsNb8TRPXQcJ4a97ORMKogInTKwBODNZOCwWOHx/7Izd:6OHJhJOpogInewBKZOpWn
TLSH
T164A27C74693C6CB36EE6A546FE4A2B076FF81077E1D51A94D5ECAF1D0083698230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 26ce2e2411c7c08f145258228f0cfca2e84e644a4da4a4e9e35151c80aa2c20c
MD5 c2bd85cc8f7a78afe1d59b35b01db9ce
SHA1 0675e48a325badd2b04353700ef9d2a975f40a6d
SHA512 a96c2258cee9eb6fdff22e914bd346454ce20b08725ee3374c3f39d306f33eac18efd3e77b555be7060591bbc4cf395cdd9d2dbfb46eda0356712c48d07a9d84
SSDEEP 384:FsNbYNPXTjC4a97ORMKokInTKwBODNZOCwWOHx/7Izg:FhChJOpokInewBKZOpW6
TLSH
T188726B78683CACB35EE3A546FA0B2703AFF41167D4911D94DAEC6F1D10C7298234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 329a2ab97de06e1dff3d43b59f09f3a61336db28e3c8f0487341bc279788027f
MD5 f096def779509d3f56629673498cadb9
SHA1 28c0a90352de93d2cf287c0fb40877931d6b9986
SHA512 b236c35b0192371c7ec001574989958206c59d526d5579cfde0b8460a0e950fe7a462e33a102cf99c4e96964f9f4e26d59b1d4cd86ac29e137155a31943629a6
SSDEEP 384:ntZcIOsNbBTRPXec2J2a97ORMKowInTKwBODNZOCwWOHx/7Izd:1OG2J3JOpowInewBKZOpWn
TLSH
T10BA27C74693C6CB3AEE7B546FA4A2A07AFF81077E1D51E54D5ECAF1D0083658230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 ac59e650c59e624287e9203ad80c433a8458db6d6f14bbd5e0d2d0b80260ea02
MD5 d7f5b9bcc8cdc034b7463b8deb912740
SHA1 3836317a6df9dd888ff114e210e5c3ecdb64217a
SHA512 34f93274c02a0ed0ec2ca21b70067550bc199b288c3d60861dcef229323aa7419cc152052970f2296a171f02228f4326d9874dec2ed06cb798d0ed04a4bbb6c8
SSDEEP 384:nvZcIr3sNOBTRPXejhJ2a97ORMKowSrV31RwJkJ9OkBWLnTKwBODNZOCwWOHx/72:nr3ShJ3JOpow23rJ9xWLnewBKZOpWn
TLSH
T1B0D26CB0D4686CE754D2E5C9AB4AE5072EF80137D49D096CE2F8BA3E309F5B81353C65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d6252ac4fb5c27a89085698a205c7abb100015bde1214930232f00420bb597bc
MD5 896bd696472159300aa7a70b68efc43d
SHA1 383a224e0f38fe7ddb73a93d0473d4336fcc0a81
SHA512 24730243be382092262fffc12357f4d52f9c0ec5f7129c572e39f23df05aa930106651e9beec21d564b1869a7c9e10932daf98eed0574c5fd4a19c42b9616cee
SSDEEP 192:RONu6O7+3KQmiUyPtZIttb0aO2eh2dsLEmcNcqdmU6:RONu68E7It97ORMKoHaU6
TLSH
T158120B31686CAC775EE3A545F98736139FA5412BD98A3F80D5DC2E1C01EF6AC234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 b6c0ee07fd2ca9201e7cefab3610c4fd54a2c951892789fd0ff1728eb143cb39
MD5 9643e5ed4b70f56c5241864ca4194f80
SHA1 3a86f230054bcfccd097624cf04f4b8eeb017bd8
SHA512 417b114f5f9ef1eec11c768411a2e46490b04df38013d85dd3ddb0cd435500c2207b6376f375207cc8904a6d9bb356ab23e8a73f2146cf1b92f3518f3694832f
SSDEEP 384:FsNDYNPXT8y4a97ORMKoezMA8tvY1oKqKkB8nTKwBODNZOCwWw:FGyhJOpoe38RKqt8newBKZOpWw
TLSH
T14CA25BB0E8785CF749A1E9C9AA4AF6076EB41137C499195CE6F8BE3C309F5F81342C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5ae99a41f3b51bbbe6b57a8ce9983f87fdbc450613fcc9916d3008a8453de53b
MD5 760a27f89a5270d449e1230ee463c2e3
SHA1 c62c74f82ab36bd1d0def3675e688beb55ef7dfd
SHA512 a33f79e835d8ee14783bfe7180670e3b16049fe17ae823cd892f3c341509594b88c31a8016a0481f3c21f503519a4d2fc812d5006d9d206c20246163e9abbb8c
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2ac94208d657cb06bdc290c002bbe5bc3e059e764d41958528661d0bf386f442
MD5 20db32b6d566833552eabb7dcb3a9711
SHA1 6bda591bdea5757211fca76c304d324105291867
SHA512 55de19fab0cf2433b1af8bc2adb81e901143bf2cf1704b2cd9239b5a73610b2ddaf0b8e6e6a5883959914880e271afd020d7f847958bc49b8a177c55fe6ad7bc
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 81c9465f46a6e4995c3b25fffd7ac4e2b41076ab378d0cb4919de328bd9c05fb
MD5 14ed489e6f172f318d2515f66d887304
SHA1 9476f829fe798abf2e20d62c2cf8fa8fea6d269e
SHA512 f7a8b10eb0f28a783e5272797991171c0ffc7fbd8f0c7a18634647f5b5545d1dd470557fb3eb0f9170f48d709890f5e8bcf3efa97e51d3bebc6514f12f0d1a29
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

972f4aee-e22e-4c84-ac71-730cdf72c677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\972f4aee-e22e-4c84-ac71-730cdf72c677.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

A0894137-653B-482E-BED9-2A1A273642CA

Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\A0894137-653B-482E-BED9-2A1A273642CA
Size 191KB
SHA256 c4ec0b8b740e635193aa8cb19896dad35b56f54f4cca8d4101d435a342536790
MD5 e44c191cb0c0778ba76acdcd608d7808
SHA1 1b48ae05f38ca2022201f0c27ef0ed40e2f0da40
SHA512 0f95394d5e2def61c6c9ff59efdd9e369d2e7ea5b4d66fb10388414ace3d85dd2012f4daafa2f6ac3bee71733c1b9a9164d3f521fc44ace13816a60531900f62
SSDEEP 1536:6rVe3b3yFKTpb8xsghEaIe7HWsDXjj/mblcAZl1p5ihs7VXXBEKD0aO7qamZdGVE:gQe7HWsDXjj/EX257cL
TLSH
T1051412A6B2C75C628B33049D5B57A094FE6E12A708D5202873FAF3578FF2E1CB547291
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip_sdk.miplog

Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog
Size 13KB
SHA256 f7ad4a546a0b27ec6f81189021509593ca668400ce1f0d2e9aa481def9dae67d
MD5 46ee43ec4eff709bfa7afbc8a154d199
SHA1 71bf02bcbec654f23dfe7c44bfd39bb85de3c404
SHA512 69202690999e73e450afe6d51bdc5086eed9e88d66f3042b02a9b65f4d5d3d577a3663d8518ecac7354cc6dd3bb962f81b1614c630bd42158ced263fbf8f6c3f
SSDEEP 192:qjqc9v4zZRZCyjUm9x/azO8Zl9jKA9zEz/nZQhT5VgiaL/jnp9xnzX6aZ85t0jQJ:I4j/a5Esrmnqu+v
TLSH
T1425201A3829DC9EBA8357F0353D727918405B56F26DB74496B0C424932CAF188FFA739
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
Size 2KB
SHA256 879ae18430ff0cfe88f43431268f51f9484042bcc933e00d6f63e7150249d64e
MD5 7868f1756de6c26d15d9235fe1d7af09
SHA1 634aa5d9faae0ac575a51bfd4bf2e7f0cd779153
SHA512 39f6359c57f466dc920f56d70cb5fa29f90f892e927e1d0eccb6daf38146fd3530a93798f2c5626db033434bb8e7d5ddc2e354a19da1c7d3e95223968e236671
TLSH
T1E041F858A6FA1144B3B76F5A9FF7B8AE487B78672E0AD45D10110F4E4A23B40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download

49dbe2955480c7f6ef8cec9c4320c9868d9293fd.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\49dbe2955480c7f6ef8cec9c4320c9868d9293fd.tbres
Size 2KB
SHA256 93015689cc9f209da89b6d1c035c82d5abe394ffbd8b443e01bca1e371875301
MD5 58be091cc04ab50bfcb2ae54e852c7bd
SHA1 4f1d7ca933f4518d3256d08977c323dff971ab94
SHA512 5c5cecf356ffdbbf117354fe709d3d1162c074f6901c69d4809808c8c07dc6a03a5a0d7fe86bb193eeadccfb0dc76bd22067907dcdef4dd7ce19b4caca440dbd
TLSH
T1CB512D58A6FA1048B777BE569FF6646D887F7C672E07D49E00510E4F0623A40C862737
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3e37bb467446f8ea6b2cd6611c99dd10d92b6a87b165bc1bdba4092534c17cef
MD5 1e594c90b7bd008983965b5e4c9ad1bd
SHA1 11fb409ad5452f7cf14d7245dbb8cf6432722f3e
SHA512 8ede1de80260639fcf989931b0c462bce5728f7a9beaa9533a77b1898dc4ecb7f416c5cdf00007c6d09267ebd7df3485988f7511b071c47a01a2eb31ecea5a66
TLSH
T17D412758B6F91148B3776F5AABF2A86E487FBD771E06D45D00110E4F0723A41C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 2ba55c2535641503fc7bbefbdc3f16d9e522edc9f34b8a40a840690b0203b4a5
MD5 fccadd371368ef0844a9787dd3e39571
SHA1 6bacc895c4c39dcab302948b58b65e0de1b5a25a
SHA512 a35190986b3a37128bf34253572c5e16ff12749d25d3072853e615bdef9725b8c1f534b5d9ac57202b4049eb666131bbc5b0932e43d9e5040ba333dc67a07b21
TLSH
T1C5512B58B9FA1048B3737E46AFF6B9AD587A78773F06D45E00110E4F0622A40DCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

823b0a31-57e6-4fd7-987f-63d8fcaee6fd.tmp

Path C:\Users\Admin\AppData\Local\Temp\823b0a31-57e6-4fd7-987f-63d8fcaee6fd.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d28c186f-0ea8-468d-b31b-20bf3974a11c.tmp

Path C:\Users\Admin\AppData\Local\Temp\d28c186f-0ea8-468d-b31b-20bf3974a11c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

064fd6d7-c483-48c9-ac19-33e26b1dd1a6.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4424_1742754685\064fd6d7-c483-48c9-ac19-33e26b1dd1a6.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4424_858574792\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.dat

Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
Size 339B
SHA256 037cc394655d52ded0c2302fd5cfb1a0baae4a0088465a7ff8f69f42cd4dcb06
MD5 e6cd05a7940f41be0eb984824bb4d35d
SHA1 75ecf3c42a18936083de40d0f37d8409f01d85e6
SHA512 3c5256844290e52761c20f56afebe8a8d8dfbab79cdacfe179e76e08680342c6c654403a707f87ab9197ead96820e986ff88dc0f8474aa468fa0efae0af303a6
TLSH
T1BAE04607533ADBF08B7C62F830B08CF843F29818C675043A2ACD0CE50D63207249B115
MD5 SHA1 SHA512 TLSH

Submit Download

CUSTOM.DIC

Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Size 16B
SHA256 a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
MD5 d29962abc88624befc0135579ae485ec
SHA1 e40a6458296ec6a2427bcb280572d023a9862b31
SHA512 4311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f
MD5 SHA1 SHA512

Submit Download

ExcludeDictionaryEN0409.lex

Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

b8ab77100df80ab2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms
Size 3KB
SHA256 8dc9483d21bdefee78b004a4df00ca63a7acc05d3e64beab89c58e12ac16a36d
MD5 d77ec137580a8de4a559d0fbaf4418c5
SHA1 7d5bbf8e81ebe037ca80b449f57347a52978b599
SHA512 0fe226fad22166e915fd491cf8395b9c9318811bbecb5b0965194c0d3f9e1f08be0fc95fe48e51288d40b3abbc3390bd1ebc9e60e47a82ee78c3a9aa5869f094
TLSH
T1708133020BDB2A5BD1288239152A8316D731BC059F25E35F719C722E3EB5304465EFBB
MD5 SHA1 SHA512 TLSH

Submit Download

fb3b0dbfee58fac8.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
Size 684B
SHA256 13cdfa046312195d8c3c5ecb03d89831914b788645c6a9a42ba7f5c44250c01b
MD5 cb505c2da45b318607a9c1ebbd1aca79
SHA1 10da533c26698f157202b1d05fa449e43a83811b
SHA512 de29addc4ef75722249cbc88fd12c13b2afb49ab50a74b3cbd12577743617af99389471bc9ce7036e05e31e4b3b92625aa982d10ac6d7f69e5cfa2635292d322
TLSH
T1A901E1024BAF3A9BE068033E02161309C7717C45DE41E71FA28C723D2CB4E08679AB77
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4260-336-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-337-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-370-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-369-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-367-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-335-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-338-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-368-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4260-342-0x00007FFAF5500000-0x00007FFAF5510000-memory.dmp

Download

memory/4260-340-0x00007FFAF5500000-0x00007FFAF5510000-memory.dmp

Download

memory/4260-339-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-334-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-254-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-255-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-253-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-256-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-257-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-258-0x00007FFAF5500000-0x00007FFAF5510000-memory.dmp

Download

memory/4612-259-0x00007FFAF5500000-0x00007FFAF5510000-memory.dmp

Download

memory/4612-331-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-332-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

memory/4612-333-0x00007FFAF78D0000-0x00007FFAF78E0000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads