4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 19:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gate.html
Size 1KB
Sample260810-yacbmsgj3y
SHA256 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
MD5 8150f458ed6fb9b1db4e5cfa57a1a281
SHA1 6e5726854d28687b560d7fdcb5c782c425c7dfb9
SHA512 4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c
TLSH
T1C021353EC1C1560AE0271164FBC1F7A86669825291970F703B9EB176F6CD0BB56A36C8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1928	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308640979146640"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{D4CF691E-B6EA-43D6-B69B-E95ADDE23B3E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 4684	1112	msedge.exe	86
PID 1112 wrote to memory of 1928	1112	msedge.exe	87
PID 1112 wrote to memory of 5296	1112	msedge.exe	88
PID 1112 wrote to memory of 5296	1112	msedge.exe	88
PID 1112 wrote to memory of 5296	1112	msedge.exe	88
PID 1112 wrote to memory of 628	1112	msedge.exe	89
PID 1112 wrote to memory of 628	1112	msedge.exe	89
PID 1112 wrote to memory of 2880	1112	msedge.exe	91
PID 1112 wrote to memory of 760	1112	msedge.exe	92
PID 1112 wrote to memory of 2880	1112	msedge.exe	91
PID 1112 wrote to memory of 2880	1112	msedge.exe	91
PID 1112 wrote to memory of 760	1112	msedge.exe	92
PID 1112 wrote to memory of 760	1112	msedge.exe	92
PID 1112 wrote to memory of 1224	1112	msedge.exe	95
PID 1112 wrote to memory of 2352	1112	msedge.exe	96
PID 1112 wrote to memory of 1224	1112	msedge.exe	95
PID 1112 wrote to memory of 2352	1112	msedge.exe	96
PID 1112 wrote to memory of 4804	1112	msedge.exe	98
PID 1112 wrote to memory of 3600	1112	msedge.exe	110
PID 1112 wrote to memory of 3600	1112	msedge.exe	110
PID 1112 wrote to memory of 3600	1112	msedge.exe	110
PID 1112 wrote to memory of 2556	1112	msedge.exe	112
PID 1112 wrote to memory of 2556	1112	msedge.exe	112
PID 1112 wrote to memory of 2556	1112	msedge.exe	112
PID 1112 wrote to memory of 632	1112	msedge.exe	114
PID 1112 wrote to memory of 632	1112	msedge.exe	114
PID 1112 wrote to memory of 632	1112	msedge.exe	114
PID 1112 wrote to memory of 5432	1112	msedge.exe	116
PID 1112 wrote to memory of 5208	1112	msedge.exe	117
PID 1112 wrote to memory of 2640	1112	msedge.exe	118
PID 1112 wrote to memory of 1736	1112	msedge.exe	119
PID 1112 wrote to memory of 1736	1112	msedge.exe	119
PID 1112 wrote to memory of 3064	1112	msedge.exe	120
PID 1112 wrote to memory of 3064	1112	msedge.exe	120
PID 1112 wrote to memory of 3064	1112	msedge.exe	120
PID 1112 wrote to memory of 4432	1112	msedge.exe	121
PID 1112 wrote to memory of 4432	1112	msedge.exe	121
PID 1112 wrote to memory of 4432	1112	msedge.exe	121
PID 1112 wrote to memory of 5184	1112	msedge.exe	122
PID 1112 wrote to memory of 5184	1112	msedge.exe	122
PID 1112 wrote to memory of 5184	1112	msedge.exe	122
PID 1112 wrote to memory of 3224	1112	msedge.exe	123
PID 1112 wrote to memory of 3224	1112	msedge.exe	123
PID 1112 wrote to memory of 3224	1112	msedge.exe	123
PID 1112 wrote to memory of 1220	1112	msedge.exe	124
PID 1112 wrote to memory of 1220	1112	msedge.exe	124
PID 1112 wrote to memory of 1220	1112	msedge.exe	124
PID 1112 wrote to memory of 2440	1112	msedge.exe	125
PID 1112 wrote to memory of 2440	1112	msedge.exe	125
PID 1112 wrote to memory of 2440	1112	msedge.exe	125
PID 1112 wrote to memory of 5784	1112	msedge.exe	126
PID 1112 wrote to memory of 5784	1112	msedge.exe	126
PID 1112 wrote to memory of 5784	1112	msedge.exe	126
PID 1112 wrote to memory of 4384	1112	msedge.exe	127
PID 1112 wrote to memory of 4384	1112	msedge.exe	127
PID 1112 wrote to memory of 4384	1112	msedge.exe	127
PID 1112 wrote to memory of 4364	1112	msedge.exe	128
PID 1112 wrote to memory of 4364	1112	msedge.exe	128
PID 1112 wrote to memory of 4364	1112	msedge.exe	128
PID 1112 wrote to memory of 1500	1112	msedge.exe	129
PID 1112 wrote to memory of 1500	1112	msedge.exe	129
PID 1112 wrote to memory of 1500	1112	msedge.exe	129
PID 1112 wrote to memory of 3376	1112	msedge.exe	130
PID 1112 wrote to memory of 3376	1112	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gate.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffaade1c188,0x7ffaade1c194,0x7ffaade1c1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,16048712178162073851,14255276353235329284,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,13443017553107074859,5193547834946738899,262144 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,6862814466928716915,9332080373873622101,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5419111170935129341,8674700110586122057,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,12456689667348011384,4627082734938422730,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,96997901418822054,16321310091034593741,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,5604024809095307796,15406809228197915492,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,12139384921331837096,13300859293433169341,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,12139384921331837096,13300859293433169341,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6132,i,2711436429613056402,6010066758856199358,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6236,i,4574571104600878608,12226770348190191543,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6392,i,6456442781454951103,11707829877509153108,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,15498429262123992192,12034701357254187513,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,12454370168392715893,5877107621197677238,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,8879529028408151312,17072560955928505318,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,12360251736336143179,2536236608327685865,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6708,i,10035559712145230590,17132479503547148265,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6700,i,17564833606113004708,18137784610898450418,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6580,i,18220226572282072632,12873436533012392635,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5184,i,17162248117739249748,3424854431966546,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6408,i,3273942158868571594,9694250487943581096,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7244,i,2838296338303136652,7535439816330917093,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6768,i,15162999305196243835,6758884040050083094,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6740,i,8361448894553066918,7334301811866401773,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7528,i,6315637345681252131,12110438898815630914,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6460,i,11018946220621049083,11544882457578683438,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7696,i,14241195936647581006,11166280281463523304,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7772,i,2586262270191877349,8268842940766151316,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,18298143877436418118,3954320311645789584,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7568 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7940,i,5411778788141027298,4053406202340281011,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,15002595073121792315,15473252337611890082,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5248,i,13201472221560235814,9418786166526385008,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6800,i,18000241910900078686,6334060651962273680,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,7438150799799416277,11044184912079528736,524288 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5048,i,14504375015869862250,5410039409784677054,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7124,i,8393236788625592980,4193814992948205064,262144 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=5088,i,16673275374682231280,17382253567180236382,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=4692,i,15859104388128277867,9333466334297469062,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=3688,i,1083703866340309902,9516322203191082824,2097152 --field-trial-handle=2292,i,8369798275841127902,10593331765840028606,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:1628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

035055f6-ec65-49a0-aab4-1851c7b08d1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\035055f6-ec65-49a0-aab4-1851c7b08d1b.tmp
Size 14KB
SHA256 df13dc12482803228b3ac80aa8683bb1494942f3a78a7942ea741ef87df39615
MD5 b0eeb24850e2db49103a974da5abd975
SHA1 9bec51e353ca609074a1bdcf68e1609dd2fd14ac
SHA512 8210854f26315c2684076781a4e9c0801986e6cdce5dd8df6ab445b5e42b034d5fe89e895bc01619b4389a80b2f7638d593945e12c3bd4bf0e2233b573fb7d4b
SSDEEP 192:sxZ+wRCyMqZjK1Ml8MOwd/fFssJCoaZdszodpHUHW6+WNGYvIud7qWIgjOJ:sxZ+wrrd/fFssooazv0HbGiTja
TLSH
T10962E7066A389977CCDBD209F6457F93D2F91563A2905E4499FCCA1C00E7BEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 aaef326cc7100075d0647189144aacb4b50a2e975d2b76d21812c164f075f3fa
MD5 4dc300fd4b832e5c963f9c47b0f033ab
SHA1 d75e83e1282218abf1b1bc536e9cec118528b9f9
SHA512 2c682750de5343667e550ead021f235a6c0267f111d5ba46f9f04e9a0f7afb90854efd529fe920f6762990faae1d1e4c198e5d60878310f630ff95a878261b14
SSDEEP 192:Hj8IRpppppppppppppKKKKKKKKKKKKKKKKKKKAAh:Hj8IRpppppppppppppKKKKKKKKKKKKKh
TLSH
T178F19E064298CB9FCF1512EB4994535C10B4370AEBDCE50C479E9DE9324E4EBBDA26F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5a5e171b17dfacd42cee73a6d27920deff7e964d71dd1e09dc02e21002243816
MD5 e30bd020df72035f4afb1b63b6cf947d
SHA1 1b10b2059079fc54aa7b5d63346685bd0acd15b9
SHA512 ee5553a6c00b6c05095632de653110703933c6e9e7ebbbe26b624208823dda0cf6596e5d9f9ad409e6ea894c69b7585d7cd9e9e3327a16f15901f919a57cf412
TLSH
T19EE022A6C826FC2759FD2B1CA00D8656F70023172A848E5F3B3E810C8FB073A85CAC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 68KB
SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
MD5 f6709d44783ca7b4b921437ca7dd2727
SHA1 a0c6e731ea03274fd0420c360b5f8079ca719138
SHA512 34b45e20793f4de99caac1c28fca40953d4bc2902ddf4dac70c55bc28ae28cf01632095b20317c8c661832fc1b971fdc2eb05450ef8fcdafe74a5084589ad52a
SSDEEP 1536:GeXJHPV3M/Ib+Npon9pSlmtHf+SxQBEnhB35LsKMCoNx5p1WFK:GYV8xNan/rp+SxQSnhB3aKMCix5fWM
TLSH
T10C6302D8DB1C78A3B3A11891398B31876F920AD1DB0C79167D7F521E5B623EF4071B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 40KB
SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
MD5 63f4bf4c9e4b2f5ac4b1c8a9f4a6d20a
SHA1 40d033d0f716458228ff5ae4c623b3eebd7e8f1f
SHA512 ca748a2e7f54c22bea5b6b586082ca9be3eaf1ee199fe56c7245229ee4f73d99778beb019d8eb33f2aff1800a3233a31d506274259cd791dcf82a994120143a2
SSDEEP 768:rQ0uU6UEmqopa8oTvB6vf26ER+musSjAPWL9f3+dvZDNiS+Hfkae76gpGnueZG:rQ0mUha8Hvf/mutjsU/Ux8S+/5e7FGI
TLSH
T18513F292D7F44C509F5DF2D163086CA1A77A2CF5A388529CB5E08F22A49457D018EFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 204KB
SHA256 1404b1faf5eb6bcf0490993d146dea941eb5cf3d0f04118a2c726b0e9f94ddb4
MD5 3f1c55f1524a0cb8b05ad262aaaf01fa
SHA1 ceae87a14008103668a332cbcfdb0a46096782d8
SHA512 6410a4b54d95eec742606860757722f6b1e6c973d628e147e801b0d29ad9c3599cc5c94a1272a4411fe4ef028fa1e7e5258e5ad531084311ad4c49a83f306058
SSDEEP 6144:7id9oajLgd5Qgueop1B0jNDCs78IgyIgacpsIIDhE:IraQgIub7PIUBIVE
TLSH
T1DD14232D256C0260E72A20701457FE256ADC866FF47CF3A83F81AF65DBC628095D983F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 c0fddff56ae96c2e3dbc00184163af58d1eeaf4be318559ffe22aa1175e82c10
MD5 4bdced7e43b591372666e3e81fc8a378
SHA1 6fa576b41c225b85e211d4d9a465d6f9c5fc3ecb
SHA512 9f53435a774d2af2abd9daee5d28656766e1cb5b40baf2acc4c93e53de8710e1ecac9ff53c3962f9586b3b9a391f92fd92e01361b7e0fcafe1415444d6358c24
SSDEEP 96:JQ6cHrHigQbmI+GA1LAxa5hqijTu39u4pwhWbIUKMDlazIuzMjYUNAQepRX9D6RB:JA9++x1cM7ibUo5YwnSpRNSB
TLSH
T13E2296B5D557A852FB25473017D109C13F32F9D6E903EE7E9281ECF4E807749819AEA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 8382ca11ed1b53af62b55bf7d6f7dd585a91a61cb9fc8e18040c4c7ddb868dea
MD5 7c7255affc20e7c615c441095a2f98d0
SHA1 795581fd5b7a1f53ed879fd14634b48bdff6ca0f
SHA512 4f9de3ca4244341975ed682c8115eb1d9f2c9f826321844c0b5fe968f9c7deeeb2356b6a2a33395ccf5573642a22388623a8a940c33588889ffa93be0f5e806b
SSDEEP 384:D1vjNySTReL+IKMzr+h66DNaaiGrmisqvI6b20RMFtygtWgWLgRFWFo1tkVWx8Rc:Bucr3au+
TLSH
T1CF826AB3E3F4412DDD91A7F1EA586F1B9F2D042C53AC3C8AC5D49E4AA3F2462F14194A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 d55b4519b75d81daf91a5b5cba59e7ffd2198b3973cd533c80351f07fef338f1
MD5 98169d2dfc50ab1d2a81b3c2492a6212
SHA1 d6f9addbadd9d77b9e250466d7185f2b53cd1b5f
SHA512 5e626137a9a444a55788d8612a4e4b13e78650275568ebd35510cfcb66b96e769190d8050920d34ca7e8002986cda3c4d5020b3da2bbe22d877ecfea7f6c4f14
SSDEEP 384:D1vjNySTReL+IKMzr+h66D1qZV85JaaiGr16b20RMFtygtWgWLgRFWFo1tVWx8RT:5tcM3auN
TLSH
T1F49259F3D3F4412DD951A7F1EA186F1A9F2D052943AC3C8AC5D49E4AA3F2462F141A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 23KB
SHA256 29f6c73b59f483fb4474a44df180a56eb3a05f5be23de7f7d1b731b51a05b865
MD5 869d695b04680dcb0da8d19569fc126a
SHA1 710c85b88f8b9000934235fb68f764a1c92d4e4e
SHA512 d8511d90b2d8dd06c51ac86a0662376a6783baa2bee97d0ee51f91eface2561aec04e7d3a039e1ada8359eb9f3c744d040d841c0405311c42f70b465be3ab5f9
SSDEEP 384:sxZ+ynlrqFm1d/fFsEgzPli4J/vWnHbKsCqR4U9tTfnr/54:sZlGFm1d/fFgzdLvOHbKsC4t7rx4
TLSH
T1B9B2E6966520CA77DCDBC918B9317F62DAA81472CD905F5CA9FCD90C00DE6FC2606C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6c93893d0afdc5507d3e4e50ae3a8306ce93e954bb9291a76ff2300483bbcebb
MD5 66b52555953f68973ea5ee320542ec5b
SHA1 c15779ff212b4b8fca28af52842275c280873eb5
SHA512 519875131189d5cc3c0bda040b2343523b814ea22e6ce7cc98401ee12156a5bc655bd736d6dfa53c463e08e2871724bbe4e5811c41bcd2a678fbf4c7a7830366
SSDEEP 384:sxZ+wrzm1d/fFsEgzr9HbKsCcR4n/nTfW94:s//m1d/fFgzRHbKsCZnG4
TLSH
T10A82F95666249E77CDDBD609B965BF53D3F90472D5905F88AAFCC90C00EB6EC220282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b243bc44e93c0c287e0a44b3767957f19e46920a9b991a3d537e7796c492dd18
MD5 306c93b15e08b7b06c2770d6f5a06f9f
SHA1 3043d2ac7b7841de0d7f1bea53acabebf173d6c5
SHA512 ca999ef74106958f367a780c4482831f6c232f43fe6f254cfa47e03ff5d0a352cd22bdbcdfa3b8e79c9d958487e067230c14b141ee76bbafc997f096fa6ed10c
SSDEEP 192:sxZ+wRCyMqZjK1Ml8MOYcB1d/fFs9CgZd1odp9EnoNHW6+WNie+/Yvbd7qWIg5Rt:sxZ+wrXm1d/fFsEgzKbHb2/GTfW94
TLSH
T10D72E8166A249D77CCCBD609B9657F53D7F9047295905F889AFCDA0C00EB6EC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 bc3b5f7a98dd571456d7a88392eecfde7769d1869a31a90a4043015207a47071
MD5 95e59f3686a992e0e81718b35e5bf467
SHA1 7459cf9b345164b89c42f22a6a14800427eadf30
SHA512 aa2d941ae1e6929c10d40d80add9143c79ef23839f544247ed223c30d65309afda20e957dd41d2b9f9ebebb6d063ed62a55dc0d81a610e2342dae3aa23b83156
SSDEEP 384:sxZ+ynCrXm1d/fFsEgzdpumHbKsCqR45f6TfV/w4:sZCrm1d/fFgzbnHbKsC569w4
TLSH
T16392F84666249D77DDDBD619F915BFA3D6F81072D9905F88A9FCC90C00EA7EC2202C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 23KB
SHA256 9409c63dbdfa037c213a2a975c153db86582a7c9dea0af17bb4706a5fcdf97d1
MD5 3da4bd579e87d335abbdb89704aa614a
SHA1 2d334a8e3b46f29ca8e8faeae7f172db26fbfc28
SHA512 3ba97a2950db9d4c726417763af5389ff795c9d07b139742b1882b71897d64a038a975a7b75468169bb1963b71a96cbf06b9ba25b769ee9de9a082264fbc07d1
SSDEEP 384:sxZ+ynDrqHm1d/fFsEyzrIi4J/vWeHbKsCqR4wdzTfnr/54:sZDGHm1d/fFyzsLvBHbKsCYz7rx4
TLSH
T126B2D6966520CA77DCDB8918B9317F62DBA81463DD905F9CA9FCD90C00DE6FC2A06C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12f0e7f1-ee0a-4f6e-8f38-404abbf6b737\index-dir\the-real-index
Size 72B
SHA256 9ed38cdb6262a6b1488b823092a3bb3ae63057cd9c4381dc088a79a7849c8ab4
MD5 1e5e8a473313e6bbbb89996fbb7b14ad
SHA1 6ec932cf42ec343c23e39f69146327a71b9965fa
SHA512 dc5df7599abd9a2767a2310ad081851da3287bd1f43d4e8fa793057bc816bbade4a9e14c4919f9dd3d35c59688f5ed6d694aa3644913af949e39e909a5a8b8cf
TLSH
T13AA0022E1576475ACA93737572A30A8177584C5A355E2E21D4D044C4CCD1E93910321B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8f03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12f0e7f1-ee0a-4f6e-8f38-404abbf6b737\index-dir\the-real-index~RFe5a8f03.TMP
Size 48B
SHA256 fc6e872afc8ffacb57b92916b5d2429cd4f8a44ad17628702a7036a277802a8e
MD5 b5713492a131a3445dd9948f328973aa
SHA1 6c488c34c116f400d4257e360d04e2f0de1384a2
SHA512 ef946a07136c55dd0ab0cbcb73993c66fa978dc3fadfd0162939e0e0d55b677e5582e41f92b6c3231ef8bf2de56ea2a088eba9ed7019cf5d221cde326a168f59
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc34455a-c0c0-4ad5-9d7c-df0e9e63825f\index-dir\the-real-index
Size 72B
SHA256 3b5e0263a21241c62dda64f8a6fe2bb21c552e82531bb846f8dc26e25008e02a
MD5 cab0b622e5b3ac7ba2f3bd707b698505
SHA1 925f60167a3053872df371620931d6deeec129db
SHA512 48eb9205890a3e93c29a7d9933c0b2803d5a2104d574fab76bd06a7d114ab26c6bae08532625192e808a161554e5e0c49ef88401c7c80b6520dc41c8b67eb30e
TLSH
T1F7A0022005D50093D10106B055D2827537689C1EA223530545A97B559C693784583088
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\temp-index
Size 3KB
SHA256 8b873a742b3483b84549b63e5111e07a3354f7ac5378ee8ef9114730be603a57
MD5 087d2eb67db9e2679fddd51a43c42b80
SHA1 1e91eb1d74777dcd3b433f9d61abeabc0badf160
SHA512 6fea5429b85f668ddf5bafa52fc491640a5ffd75889d22cf12b306149e4b3c0813a92627acdf5fdc6c69ddc670beb2028a8fd272867803ad22a7d60e8c99f038
TLSH
T10E51E94DCC824A5AE99C12B318FA144077BA64DDA6889B076DDCB038FCC336E1D5B260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index
Size 1KB
SHA256 e508cbd63fa84ce94fe1e7bfecf72926afee6dc9efbbb3c53b43f940a4ca5339
MD5 f246fdbc0834260242e8074d89246f05
SHA1 012a2c708afee65fb6d8cf1b55649a8a2505776e
SHA512 bbb4c16e73cb5ee0371c11e201a9efed975427063f557c259e5b8ce6af386173634fcf8a12f7216444946c1a25acc7df4ef1fe967ce2d0287cc1e823bbb2d153
TLSH
T1FE41968D4D518A9FED9441B200B664A437B4DCCD2B1192178C7D333BBC6336E2A9B5AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595673.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index~RFe595673.TMP
Size 1KB
SHA256 0c9aea208f8be7e8f3e9d44ba5a7a23bcfdee151a2a61e73be418362cccce476
MD5 73bc4e526a6e1117226c9fc5ca0e0ca9
SHA1 378732d33d08dc402a5896da93a38c0a219d9aec
SHA512 5d61a85032ac4ccc552564a40acab827dd8907fb6aa80b0fac5e167898a1f57545747dd17797946d0292e032af4902d1a08c0fb420f38f4e3d0c3626ecad7794
TLSH
T16441A58B4E41861FDCD440720993B4B43339E90097227B4BA4BC523AB8B17FE2D4E1D8
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\623cd082b6202da0_0
Size 61KB
SHA256 cd08fd93549a3b98254ccf6570c1905d7e2ca6062664b9f2c150d2f509fea75d
MD5 de6e9d15822dc32f5c677579e10ec35a
SHA1 6c9c049afc872d841c463c2b3206a82896811fb6
SHA512 3d65e61cbfa825023b9b7612b70845bdf19f100a312da4f9aa97d66b6dc3928be26b3bfa990e95e1e321ba1571d676adbf4bc0ec3d943f95f7cdb93b543b3679
SSDEEP 1536:U3YMg4JfCS+ksYyiApR+M0DpbarcjztEt7g25HPwqpzGL/d:oW48bC6Rx0DND2a/d
TLSH
T1BC533AA7A27260368BAD21D5A45A7F01F11B17461944C9ECF0BD66913F08E8B53B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index
Size 72B
SHA256 29171b2e2a2139b1d93ba2c2e952fe8d032a2fb66c15f14395a4693b47a2d459
MD5 c818f4b1f944c1a4bbac202a475655c2
SHA1 87e67fadd867ceaaa353bca1d81811bfe9fab43d
SHA512 e9b7e58b3c89b3f9aa3f7f9d95d6244b153af55672ccdac3369cdf5d3a4ecb326b4ce48ef601f14d9743b170055aa2251a863e5cb42d3fb694923cf42f98ff0d
TLSH
T10FA00211C394C109C11711B69DA212813740C8943505134F41990545CC944544EC144F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index
Size 72B
SHA256 3ab4131e5b39f600dadd79187e4b188c5422f64be08db35d6b10c53989e92a77
MD5 54f220dd47406bbd6191642a751071d2
SHA1 542e493852c28c768f43ab686ca118b2e2f4b34a
SHA512 599349ec89610d29b531253a45a0da53f5ecd6a238ca73fbe4d5c13945a78c6427940ef5938715d5d05f2f4dd6cafb05de3a4f8457622da764cc49caca5ba918
TLSH
T1EFA0026502D09206D24327B47997C141379089110201131EA5E154C5C8516C5DA4D91C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index
Size 72B
SHA256 40bdd927d923e23717bd7c237e57288d96b5a8ca41e77fde5a5044d381914430
MD5 09e163e5d339e24e1bd2149b63143f87
SHA1 8cc6b2355870d5ac5844da3b1f0a98115de59003
SHA512 576ba5af45f9d885cf19b1cf6496a5cdc7a0fbdb25a61e497d71506d467e72b41ab48b1c0f3a234b5d3a65f8c39863c284d2d8f862cc023dee0e77dfb60847d2
TLSH
T1F7A0022806D0A342D0835AB029B7C14233914E240201170D63D044C5C8606C56B4926C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 3743698fbeccee7d4924aeb44e0c398754cd5beed52cfdccda47291de885720c
MD5 f3abe32a7eb6e399d43bc4fced244f08
SHA1 145f233a0a3dbb10f13a3a0a541be882d98ecf7f
SHA512 725b50f0faeb5b36b74ba2fc2e0c61adda86e38c77aadf404598b72b2ff8173db5f5902c37a0842e9f18ec04679c7923965837d5ddf01b67df7a236530ed89f0
TLSH
T196F020B37FFB2C50FCABE3D6213118A001597C549841ED0FA816B297A4B132A209DCA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 232fba34795cc92d8736117f85ddd6bb5ae6ec449055f665c67db8c640b56c90
MD5 1ba04aebb00d5117c947462a3132eb3c
SHA1 76a4aa9f4a3258e6a7c98d3e9a3cdb825552195c
SHA512 7278f4db8e240423971b82eac5c99799a45163999c8f28ceeb5c534e1ed17c2b1a03e0dc444308bd8ce41d5cb898ba7db1a09502b6f768c0ddf9ccafae417e03
TLSH
T1FFE068B33FFB1C50FCABD3D6213158A4004979609840AD0F2416A2C324B1319201ACA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 f74e2b3eaff8c50d83eae8a9ceee7eadb08c1c7a7019879315988935afaddb87
MD5 b7f934e2c90de83733051872719929e1
SHA1 ad6a16ceb158abe1a30316da1c758b6e1aab83be
SHA512 42c67162aff0947982bcfdffe1c91096aa4f7aa6ddac4de0d881f8226eb9edf50f2b1c4962d96f435f166472ced310ec081a94888a479a4603abccd92258cf7c
TLSH
T182F055F37FFB2C50FCABE3D620311860024A7954D850ED5FA816B2D794F1329249DCA6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 56756ff4a1f57aec9daa3e2d37fa43f7579651bdd37e5de920cf46c778dd077d
MD5 714bb90bddb528f8b4464b888875b342
SHA1 ec79ba17741b38582f39269ca63dd62263c2c5e4
SHA512 27e001ee176616985b25275a3a069a7a9508a63ff56b8d8a93fdb1b8bd2bebf37d520ad7a7bc37ea0999584ee81f9357ab00aa6a0ac77ed4da1411179b11d61a
TLSH
T1A4A00258CF4DD405D400077260B65158BFA1CCD949151325CC999D98CD9734463C16B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ab69.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59ab69.TMP
Size 48B
SHA256 7db6f7a05dc983a59e00eccc98b91e93ca8948e601eb481c3031187fad9171f2
MD5 e51f36ddfc05878db1b5ca57513466bd
SHA1 74b24420c4cfde9c347b3b18b72fc8a9c1e3951d
SHA512 328823e195db93844eb4fd281ac2a6ab4038efdb2caf5d52c654b36521fc3df0788122ff46ed80f2135b36df9d4366d0ceb8dc5c0899e2598bf5818aae5da15e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 b4dade6b44409fe5a90d8d41094ad7cd3a095a5e4a2ec581c9bf9c497ece4cc3
MD5 39bdfadc7ef821119b5fcded5d925897
SHA1 c3490fd527dd2bb3f8d4164313a62aa4bbe1ebc4
SHA512 d1a57e30bf49c756242762673caf928dcafc2d32ffbf41ab20e7d682d0adb13c199fb0ac731eb4468ca09f1bbaadfcbb5357d7201ac6ebd1c7341ccf57eae7fb
TLSH
T1D2B002F961066587F014137579C1AC893324FC387707565266F11CFAD53CACA8FE1682
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 5acef9790a89b4a92958fe05024ab9a01c50c56a401da1820c8b9cd5e3c8e30b
MD5 bd7387f2f59fdfd28f5a7748180ff599
SHA1 2d989566ca57be7a4ccfc4902f1a58632b89a7c7
SHA512 89121f679b498541bcbfd95e1256cc92727c63a4b28755538b0628cf7447db5f978aff3ccaf8b6211d5190aff1bc4a03fea5b68aafaf3b5064506fe82c9806bc
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbG9:05ppxnY753RNBvRJJdt7p5J9NpZX
TLSH
T129B2695A703A0211393E2988B39696364F4235A37058E4BF7FB814A54F67E225CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 9b3f2deacf837328ea4f99dfece41d5b49666e3586235350f51ea396864788e9
MD5 92e3ecf90b8c8c85d3042ddc826d0319
SHA1 e7cb26b5ca3ed19ad4c7c65173f1c5014456cd13
SHA512 9f3ba7fae61f64c048b4a561522dfcedfa0ee13cb9914950748413a32992bdb23fea79067bd8aeb2d590580c6b613dc870d0c875870a1a66edfe0ebc1af6168b
SSDEEP 384:nTiFiZcIHn3sNM8TUNTUlI4JTwckCr+vOc2phiftGNZO0saBkyrZEG6HlytEDq1E:+FQH3pwgikccooGNElsZEGoy6DqRWJ
TLSH
T187D26B32D8A4DA77ECEB5B85E64A3A03DEF441138ADC9AD4D5E96D1C00C71DD530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 ac49845ca15c211562d4062a7a9983ed56d64859f56fe62288a46c38b2629eca
MD5 c20199d1a2494312647e2fe496e66eeb
SHA1 8af632b6696eaa0b085a0328948aed50725c694e
SHA512 b9ccf3f9aba962e2ccc6f1e89ca22b04416d49eb20dece48612b31c613edce99a21ec2a4c88214d79fd0702097eed70b56384ac039f43f6cecd2e94972379812
SSDEEP 384:np+iF9CcmyWCs3sNQ8TUNTUlIm2QckCr9BUYphiftGNZO0saBkyrLEGe4KV8p05o:pVFccps35wgbkUyOoGNElsLEGI8p0gH
TLSH
T10DC24B32E858CEB7ECD74B99A74A3507DEE05267868C9AE4CADD2E1C00D71DD530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 dfd2f8dba313933d2e341ac6939288f478e3ce8bcf51fcbeedb79d505a3725fd
MD5 b7156ab4388cab1602c03f3c5a6b96d2
SHA1 7a625e188f3942983773520c259a27f4f39c02dc
SHA512 f8099b509bfa57bf86e44d2515e7e55fe65269ca6bf617b9aab26aa904db8b4f6664add7e6d0cb1a0d44e540d332095814f5a342ef3ccc55959a2a96d345784e
SSDEEP 384:nIiFiZcI13sNM8TUNTUlI4JQckCr+vnc2phiftGNZO0saBkyrkEG6HlytEDq1rWJ:TFQ13pwgIkpcooGNElskEGoy6DqRWJ
TLSH
T136D25B32D8A4DAB7ECEB5B89E64A3A03DEF442138ADC9AD8D5D96D1C00C719D530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 f9401b26f7b4105d8d529f0cef773d7be7cdf8d923918e5280856b5b7b45ceb0
MD5 651b8e0b872c5db2f3500765327e3715
SHA1 899ff358e057574d0d1a319e77e2cfd24238805a
SHA512 ea6c2daca9f77a08b028dc980e6fccd6d72ce2e39910d779bbf0a2ee5be4c094ed15380ce4929d668119efc867ceac2882072db230fb1b9dc81f90ff46b4fdd9
SSDEEP 384:npziF9CcmyWCs3sNx8TUNTUlIm2QckCr9ljKphiftGNZO0saD9p6e4KV8p054HVt:peFccps38wgbkUJkoGNEsaI8p0gH
TLSH
T1AFB26D36EC68DEB7ECE74F99A74A7A07DEE01267859C5AD4CAD81E0D00931DC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 41ec3731c0fed7cdb58057d7c70e02936ad376f4bada433a2c40cc1183761dcb
MD5 52fa019d8d557489d20ff79b37fce285
SHA1 61a1452c15b4a2ad94929db9c88aba2ba2c93e41
SHA512 b7a092152e158cf6bae322a9fe02fc51a36e54c75c536ab1e902b2ff43e3c3a5cf1978320b931bd5488c6d0454196a55bc531752b71cff632dcbce77642d442d
SSDEEP 384:npziFiZcI13sNM8TUNTUlI4JQckCrwwbphiftGNZO0saBkyrkEG6HlytEDq1rW7N:peFQ13pwgIkM1oGNElskEGoy6DqRWJ
TLSH
T1F9D25B32D8A4DAB7ECEB5B85E64A3A03DEF442138ADC5AD8D5D96D1C00C71DD530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 893c8f2efd2f28a10eedbdebfa6eaee58cefbfbbc1fb29028514dccc4cb50150
MD5 0cef028dce81f102d33201e82bc5d0f7
SHA1 acd8c5454a5339e7d0b999322868b73e05710c6c
SHA512 116ad19f6b8e8367d5d504ffec5911053118b1d8f9022e607cc97f6136aa210471bdd72ea3f27e3cc8b9ae96b5e911ada2b00e2c7410a244b2544a202128e6a6
TLSH
T194E00102A700407AC21C033000D31B613BE5E16102F30307462002682C23300BE70F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 da83c8c1ee4b7c23180e57774ecaac4d85a4eea444ce71400a2a52f1007931ec
MD5 ed684308244d3561450e41df6b8c84ef
SHA1 f11604515a3f3a0435f969ca02fb9342883cdcb4
SHA512 2cd867ed7bc8223ef30b91f57e50db07ecfdf029b24507cb1effdcc2118113a311c88247bae625048e09072a4969183d19c64d6635c17cd3ee38ac43f5c11265
TLSH
T12EE00413AB0040BED62C133400D71B653BA2E1A246A647475A2012682C22300BE71E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d64145787f79715f1c51b0bc407cdada2f337b6f50695cd0b61ca8c4815a7e34
MD5 3fa40076e30c71687c84503ea21119a8
SHA1 f634f26ca43e6cc97206a4cd383da8c663eee415
SHA512 73b2f303fd7b7cf747d297378a414506f5988cec7ad7697bbd0190ec3acfe365837545d371d6cad042464926adcd668c6c4bd3961771142c11d5d9d304fdfe13
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 395ee405f4ad204074e6859c844f6851f71750e73fa52108656c36d615af1da8
MD5 72abab103bbfe29fb0da54ed0a73a2be
SHA1 6edd19b80d1cc2724876274d660c011f793bbe39
SHA512 a70de2a5bbe659b2884ac8b42e6d8842fb0ab74db42189a67aec284101ff680a6540d55fb6f213f62e6465fb562e99f7b81ba810c897e90e71ae6c65cba3ea85
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 00e33aafe37af701085257522a5e7c36ccdd88abd2df20cab532e6b321f68b52
MD5 72ea0e44864c48af2b4b55feddb6feee
SHA1 e80b84e87112e14dc89909f526265e279d2ccf80
SHA512 96ae30248e1b3d544e7f185d5cde662d56aa0c8b28052b92ddf977dd07d229f774924637811e736f96d382ff4cc0cffc60e2e9be87cfaa4cf90dcef8cf0b4d53
TLSH
T1EEE00902EB0040BED22C133000D71B753FE2E1A142A647474A30126C3C33300BE71E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58dd5b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58dd5b.TMP
Size 392B
SHA256 e0671f338da3b861f5626d6b8e3205d88528fb2279497549dc9d2a8dc1549421
MD5 c107a8512067f6fd3c9059d725255288
SHA1 54567291365f42f5ffef0df9681844860d2f857a
SHA512 253fb5d287188bcf62a4df27396d444878531f0edb6df945ce6700175ef34b1d3323016280d685f5e0bee5dd9584406e9ea62b2e4b9522d6060438ff9d615ad0
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a4b84c6c2378980c1291ec7512a992193d9f2b8e24403587ddcf27335529f6b8
MD5 df254db7c40af7e58f9c8139236923ff
SHA1 d6bf9258606e149e641959472b07b9f9b4f44b19
SHA512 80be9b5e9ca5c69090e15ad788f6735d67d81eb8fca103704dc4d3bb6ef79961534d457a0ea8c78cb86b3f85a15a98746a5a312fb17b55818a318808095f3f13
TLSH
T106410958A6FA1148B3B77E5A9BF2B86D487A7D631F0AD49E00110D4F0A27A40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4804-198-0x0000016631EE0000-0x0000016632EE0000-memory.dmp

Download