hxxps://work[.]ink/2nLR/madium-install

Analysis

user interaction
yes
max time kernel
900s
max time network
732s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-de
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-delocale:de-deos:windows10-ltsc_2021-x64systemwindows
submitted
12/08/2026, 13:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://work.ink/2nLR/madium-install
Sample260812-q76mraycnd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310165256924878"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3054922120-1500138384-519748408-1000\{50F3CE16-EA87-468C-A7AC-0AE3EE446E2A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5168	msedge.exe
5168	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 4620	2212	msedge.exe	83
PID 2212 wrote to memory of 4744	2212	msedge.exe	85
PID 2212 wrote to memory of 4324	2212	msedge.exe	86
PID 2212 wrote to memory of 4324	2212	msedge.exe	86
PID 2212 wrote to memory of 4324	2212	msedge.exe	86
PID 2212 wrote to memory of 4236	2212	msedge.exe	87
PID 2212 wrote to memory of 4236	2212	msedge.exe	87
PID 2212 wrote to memory of 1784	2212	msedge.exe	88
PID 2212 wrote to memory of 1784	2212	msedge.exe	88
PID 2212 wrote to memory of 1784	2212	msedge.exe	88
PID 2212 wrote to memory of 4172	2212	msedge.exe	89
PID 2212 wrote to memory of 4172	2212	msedge.exe	89
PID 2212 wrote to memory of 4172	2212	msedge.exe	89
PID 2212 wrote to memory of 3804	2212	msedge.exe	90
PID 2212 wrote to memory of 3076	2212	msedge.exe	91
PID 2212 wrote to memory of 3804	2212	msedge.exe	90
PID 2212 wrote to memory of 3804	2212	msedge.exe	90
PID 2212 wrote to memory of 3076	2212	msedge.exe	91
PID 2212 wrote to memory of 3076	2212	msedge.exe	91
PID 2212 wrote to memory of 1420	2212	msedge.exe	93
PID 2212 wrote to memory of 1420	2212	msedge.exe	93
PID 2212 wrote to memory of 1420	2212	msedge.exe	93
PID 2212 wrote to memory of 2232	2212	msedge.exe	96
PID 2212 wrote to memory of 2232	2212	msedge.exe	96
PID 2212 wrote to memory of 2232	2212	msedge.exe	96
PID 2212 wrote to memory of 2668	2212	msedge.exe	97
PID 2212 wrote to memory of 2668	2212	msedge.exe	97
PID 2212 wrote to memory of 2668	2212	msedge.exe	97
PID 2212 wrote to memory of 2904	2212	msedge.exe	98
PID 2212 wrote to memory of 4404	2212	msedge.exe	99
PID 2212 wrote to memory of 2904	2212	msedge.exe	98
PID 2212 wrote to memory of 4404	2212	msedge.exe	99
PID 2212 wrote to memory of 2972	2212	msedge.exe	101
PID 2212 wrote to memory of 4924	2212	msedge.exe	104
PID 2212 wrote to memory of 4924	2212	msedge.exe	104
PID 2212 wrote to memory of 4924	2212	msedge.exe	104
PID 2212 wrote to memory of 1960	2212	msedge.exe	105
PID 2212 wrote to memory of 1960	2212	msedge.exe	105
PID 2212 wrote to memory of 1960	2212	msedge.exe	105
PID 2212 wrote to memory of 3968	2212	msedge.exe	106
PID 2212 wrote to memory of 3968	2212	msedge.exe	106
PID 2212 wrote to memory of 3968	2212	msedge.exe	106
PID 2212 wrote to memory of 3364	2212	msedge.exe	107
PID 2212 wrote to memory of 3364	2212	msedge.exe	107
PID 2212 wrote to memory of 3364	2212	msedge.exe	107
PID 2212 wrote to memory of 4040	2212	msedge.exe	110
PID 2212 wrote to memory of 4152	2212	msedge.exe	111
PID 2212 wrote to memory of 2484	2212	msedge.exe	112
PID 2212 wrote to memory of 3272	2212	msedge.exe	113
PID 2212 wrote to memory of 3272	2212	msedge.exe	113
PID 2212 wrote to memory of 3272	2212	msedge.exe	113
PID 2212 wrote to memory of 4312	2212	msedge.exe	114
PID 2212 wrote to memory of 4312	2212	msedge.exe	114
PID 2212 wrote to memory of 4312	2212	msedge.exe	114
PID 2212 wrote to memory of 764	2212	msedge.exe	115
PID 2212 wrote to memory of 764	2212	msedge.exe	115
PID 2212 wrote to memory of 764	2212	msedge.exe	115
PID 2212 wrote to memory of 4884	2212	msedge.exe	116
PID 2212 wrote to memory of 4884	2212	msedge.exe	116
PID 2212 wrote to memory of 184	2212	msedge.exe	122
PID 2212 wrote to memory of 184	2212	msedge.exe	122
PID 2212 wrote to memory of 184	2212	msedge.exe	122
PID 2212 wrote to memory of 5168	2212	msedge.exe	123
PID 2212 wrote to memory of 5500	2212	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://work.ink/2nLR/madium-install
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff823e8c188,0x7ff823e8c194,0x7ff823e8c1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,15453895999241397086,12506281744648476361,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,10836595919471824643,9780143038273126071,262144 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,13852133448822763004,14246004492267189545,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,17300211495822162228,17046202068996267916,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,8085850300087234200,989926240713759653,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,17895304085176527620,2209006534370165982,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,17989989181754353981,18358926914212083454,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5100,i,10526079501646449233,15580471656284077364,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5116,i,223405459701049270,878886618756060580,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5472,i,9203949296782939619,12967667951776315613,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,2717378262525372275,12054827534531030286,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,11260412849576292944,17884371802033117118,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,18391508579493109135,771639833598232793,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,18391508579493109135,771639833598232793,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4784,i,1654020186079292419,6046684421880304818,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5340,i,4822086713771174318,6862500337774054802,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5288,i,10532449784739632226,10842697259630792517,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4748,i,1831436836884380770,128003701293011355,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,11805090324010232807,13729026744042257904,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,14853355837715951904,17226507943606259137,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,738364448306495874,7409013726378468851,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6968,i,6058500274599228853,2778408078468918213,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7000,i,16274786757131720878,16557328423938079957,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5896,i,9004275857456153378,1389863691371995020,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,4348926872476992657,15636580742385802091,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6988,i,566413924343803232,6261144024364380729,2097152 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7588,i,18105383560648900813,6087587564475708311,262144 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7524,i,4121879747731998013,16576189104325906826,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:8
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,6232728890504404246,11708747895917480540,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:8
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,8503913824669687391,4425926169539015469,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7500,i,14496690074311944113,1822066131937829434,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,1039239268058601147,15404810965408024876,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7496,i,14604169707144474307,13543295858022041009,524288 --field-trial-handle=2308,i,14074195193634248304,11724205528275227907,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:8
  2⤵
  PID:4396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce9a45431fb053f46812395470c2ff6c9ccd1803075551fd01e4a51c3c4ecd4b
MD5 c8badd2ef76875dd0b2d479d596fe3d1
SHA1 e23e952ecb4d88e34cbd5328967dec2f0f4c9504
SHA512 049fd794e8c8698f9a3908ef9cdd577b41b7919eab42ac9ba4c6f3c4ba05742d9a6be6ee3b7daed591a94beeef3ba099eaaa2b4dcec22661479634920a672af6
TLSH
T16DD080333B1A7000D7955171D423C715533F446574838611F114C84DEDF51D953C2193
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c0f239c7ed32f1c492df19d463edf2073ad4d721081b4a3b14c372062cca32ba
MD5 c315998145f0e2e943e87f7e58d6d900
SHA1 33d11ba46613900b72e84b37dd01a1855d594067
SHA512 bb251b0b7711a8694b23a7203d473d97a43c26db6edaffb49e2fa8046fe77babe795a833ff93e67f2984697d704d9d6ccd1f8ce0d2024615aa3c0d6e5d7ba75b
TLSH
T114D080333B5A7000DB955171D422C715533F44657483C712F114C84DDDF51D953C2193
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 42747c28801a7e3667cda1cd5bcb19cab81edd4483e4224c004034feecd4ad6f
MD5 ca8ecc7d500c4d2f7e9f327200fd70f8
SHA1 08b4b4072615cae0cbfcd4b9d9268b34d1c8c4d3
SHA512 c89dbabaea7e265df3f90f887d4d86497525bbedec0980ea7bdb449d448ed717ac3acadb2c43162939efbed29e18267eeb8a34d6d0a9249fb917fb97370b69bf
TLSH
T1E8E0268806CEC2BEEF40A4876268634CD2A4360BA3C8B90E3700CCC5B405884B2A3694
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 2907e2a6f7ab2789163be8d96caad72b02f54752432e656ee54d52e7465434dd
MD5 deb45e505cb86e1973463280a17e7e2a
SHA1 723a25cc9b63137771e69581ae42533a14eaaa70
SHA512 0786d48cf161c926f8233f4ee0670c03b88e5b7ca409bb8565426526d6ef4270497954824b33000148bc79ddb5bfb0d7f5554bd1ee33e0078bbf337444b24397
TLSH
T19EE026C407CAC2AEFB47B5C75378A38C8384361B96C8BD0F1744C8CA7086840A78B7A4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 337KB
SHA256 8ad9dba365bf098567cbdf5e86c4afc91bfca9593f3c89936ac26569cc75e912
MD5 de29401dc0707572e6043a13ad37debd
SHA1 9c695e449fa0d0040df59f8ce55c9c4393442036
SHA512 c78d3766db7f49993f96c2e3723bca3ec403c6e4280663bf0dcd35e868b6683e020e3e343a81562ac9597d0d9a538381968c30a45051ef9af67e7d2cc59d41d3
SSDEEP 6144:HbqPS8kZjSrnsBcExLxGmo34lFCsCoA1eJ8PMRgY6preug0SxOF:Hb2w4sBvdrvfQoA1S84l0Si
TLSH
T16474236BF7630B72B7C228863D7B562A0989BABB0010041C34676DBD94B9725CF63D66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 407KB
SHA256 433e0c6ea66a2d2be0547d670cd9585bd8e942933f9be1ad86d5d3e9cd073fbb
MD5 381fa8a8d777a6a6eebd59b572639b68
SHA1 611ba20a9e716144bdce71c5e3984445b94ca76d
SHA512 c4b2c775b34116bce321a4ff8b5d57fc3a55df378b1bd18d222e337335f3a84d3ee6e9b50ec33ca6e86efc0eab5ac3a05713b28216c952b80ada604e20303613
SSDEEP 12288:8AyE2ZrhK+zuZtQKOZV9BWHyMuoma03fvMd1SDdV9ue:85ERcKwjM/+Md1mdVb
TLSH
T13A942319B1A92370FCB9D9E69183E31F3E415E07C5809FE9052BAD69A05A7BD373084B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 68KB
SHA256 508f1bbfca8cfc57a697efa003d7bb1f8f9f163b5a02d92d1594c3fe03423737
MD5 afb2d2605df7f8cd7555497de81390d7
SHA1 820d53f074d37246554e0877be8642fb7aec8a82
SHA512 33adb5e0d109a727313a317a9ed45697ccc571e33aeb2978fc03603a2ec487d4eb12532df9347641e81c862b7d7aad49c47979d427086750d9c6b9b9cfbdb523
SSDEEP 1536:ygOijaeydh66CIF7ZZYl37znub2rNz9Cs/VEYKnek5r/+nX:ygGep4ZYhzub255CxnB+X
TLSH
T17E63027525CEE16DFE4D0AA4BE5511AC8D3BC439041F24C36E18F3C692329574AAFCE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 d079fedf546362b35b86d78e79a9764ba535c8e1f1a399e19250f1fcd8c56983
MD5 513370c214c41291e31ebe3c88e4e54d
SHA1 6ea20406360889504dd48630422bf5d5d79a8917
SHA512 d1d6d1a36d07259dfa9a63e043f9d665c2ea7adf93386aeda3e86ce989f1076ae880ea0bf92d9d0c7c7aad4a8156d58477895766ce9dd1cd7f1b6a51bf13648a
SSDEEP 96:j1Sq1B49T2gekxk6oiRBxwS1WC+KM7jmGi2h7TCw:j1b49bcQxGCweGtD
TLSH
T127D1EA1202909BD4CF59E07411E2F95232BD943B8C57AF2EE712DC7FB897BA1A115E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 993ace5bc518f79e32c7fd1d61ec11407adf8819eeb2aa280a5890b36b975f99
MD5 86395e5fc0205d3cd5586e16d61b8cbd
SHA1 75b3112016b09af1644129ed5c662f15a97c87ee
SHA512 d9aab1ef8d047f20a937b55dbd2be535df34df12c709bd9604406450c8a7a4dd6cd07775db3a3ffe27040bec0e176b14318ed0589bafd1361c9295266bc97e0f
SSDEEP 48:Pg7/XWFep0nCBxumz79FVMGjIHgOWu8+CuUa4r6lQKTKUuQknCIwkCZQ:M/XWNC/71OgqmmlIU7ulCa
TLSH
T1DF9185140790DBD4CF95D13551D1C94232BDA53B8C03EE3EE316DCB7F9AAB65A10AC08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a2fcc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a2fcc.TMP
Size 2KB
SHA256 5f179bcb802410453ecee8a8e4776bd94007c06cb6470d62a202a966d8a17570
MD5 47e20a01981d0f8cc700a9c7cd4934ec
SHA1 e2b2e5209310a8cf2210c815b462326f810d4c7d
SHA512 57303fa91c3765b79627dafe1f43c1c1c02ffd6a56313629f5de0a6c84b4b576be6fc4630db7645111a83a1e3013e2a14676b8edcf1ca5ed265377e07ee06955
TLSH
T12551A5221B11CBE4C7A9E17110E1D68537BE8AB95C03FF3EE167E4733AB9735A111909
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 2f1381a65220209a18247fa6efc404034d667152d05f006dbc479c24ce3c3983
MD5 28dd88bbe0f06776dcb84c3a853faff1
SHA1 5f0e7b13d8d9da7c35820c2c4821c849b1de8604
SHA512 afa5c5a02ba2c2452db85a423c51ae6b6cbe3b43eb2859d1d33246651bdb48435d824fc9e4a7bbb5d6b2b2ecb8ba3b8fd5a4be2349bc97fe507f627c716fbf29
SSDEEP 384:DxNjs1LHfLQKOeTjS+JCJDfwzXzrQO/MXbwX+RfUAXGN7oyH/5kBX/0XWpLJMYr6:kEpkklZAt
TLSH
T16C426BF7C3F9866ECC1162F0AA253E17CE590515432C3D4B85D5AF0BA7F24B1E291A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 c49b995258c97e7530fff039659f2336f480fabd233e3dc4365306a68dd6df3a
MD5 4f261425ec56c9b3de3b65c4cb4b1cde
SHA1 ce27dfe5f8c8c1d3d289643a19a128767d602ce8
SHA512 fc1a11f043278151acdc78e07ce876c9750340aecd504af6b2193ecf6d3ca182bed2ae9548d88524f5d5eb266ddc1c9d879b42c552b6353ca4dfcb84fd7cfcf1
SSDEEP 192:DxNjsjJLHfLQKOeFJj6JBJ+L/l/MXbwX+RfUAGXGN7oyH/3CkJBrD/d/vFl6LKX1:DxNjs1LHfLQKOeTjSBJ+L/l/MXbwX+RV
TLSH
T120227BF783F9866ECC1263F0AA253E27CD591515432C3D4B85D5AF0B67F24B4E281A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b53531540470eddcdc0cac97510db771618a410b24727f421bc40967b05f4f27
MD5 91c54d1c26e9751514f247812e8f1d9a
SHA1 946f1e638c27a9f3cd06f817933a712229dd8bdc
SHA512 958aab6c57d30620393ef3b61c776869b62e2b31774d473acff0d5585a1c2533b8e777cf54406b4f756d555cc034cadcb34749d940b3406e028a3f3d22f7a02e
SSDEEP 192:Dum+rcJO15QTCkeOJLcJIJhJDfwzXzrQvMXbwXImfUAXGN7oyJ3kArq0hLKpLPi8:Dum+r4O15QTCke2L4IJhJDfwzXzrQvMO
TLSH
T1A322ACF783F5866EDD11A2F0A9246E278E581416036C3C9F85D4AF0797F24B1E291B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b0fdba43c70f6cbc80e6953500105a8d5b9decb8a2df5696d3f0268ae0e935ee
MD5 908712702fffab7332761a65478a06b9
SHA1 c87294dbf71bb826e3a26e0c428bba868f5e1f93
SHA512 d4da45cdf6b4b2d7924f867d2316ec8268dba726552dcb9efd3088e818bd2dd974830083e544aa58587c85e2d08684711fcfd5f47575796660bf875cc36e1275
SSDEEP 192:sxZCLkp/fhsFBLy4pIupq95HW6+WNrCB/YnWcYUBIg5BJ:sxZCgp/fhs3O4lyHbo/Xox
TLSH
T11422C9566E38A97B4CCBE71ABA15BF53D3F5503191D10E48EAFC861C04E6ADD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cdcee9a916ae109c8ae95c98f61052299cc6d95eadd217531f2c77eb09c2e9d8
MD5 f63079144a8af9a7cb857ca2193292ef
SHA1 6cf567f80a35e55703d024fce839b28824c09ad4
SHA512 2f9e19540e6b866df39e49acaf2c6b7bfcdcd18cc7d36a2cd8be1707e5e98ad9a3c8b65eacab110f6065c11b308dc3611f6b4b0bb10aad0eef405fe24b9b5027
SSDEEP 192:sxZCLkp/fhs3Ly4pIupq95HW6+WNrCB/YnWcYUBIgrJ:sxZCgp/fhs3O4lyHbo/Xo9
TLSH
T14822C9566E38A97B4CC7E70ABA25BF53D3F55031A5D10E48EAFC861C04E6ADD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 b2993586f8deec7736f9b68b9d9e826b7d09898866f858a1daceec669a38b266
MD5 22b93222602cd9c8ca2b4db839e9d4d8
SHA1 6cc7ad34fefeb5dd4181e7e427c497d60bf38d44
SHA512 85573c396bbe50b1371ae8d943c713f5ee0e8630d05f834e125029689bd94d57cdff55567a13c2f7657fb76850053b41f4b804cb34c2ad76c3e62c66b6f3340d
SSDEEP 384:sxZcnRiOp/fhs3q66s8qMpRiYnazAW8pZS15posJWeT+P+SAtZHbuTZGl2bH:suR1p/f2q4Mnc7WeT+PpOHbsGkbH
TLSH
T180D2F745A814C87B9FC39D19A83D7E339AEC50525AC5CEDE5AECCA1C009E1FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2c93fbf7267d898ad609118a9346346bbc8985af5748463df00b5941fba90f45
MD5 9eede12b1705ca9daa4fb9334dab66b7
SHA1 7923aed3ea74e6b893573b730869130a62a7e325
SHA512 6fa850ae1b288af598f8d3552dcee09f13fe4973b8e3cab5f20180f8a43e5e2fe09f57b90f09cd32f13f57b574625ec9c0d0b2839d58191b178c923d718ad3ff
SSDEEP 192:sxZqQUnRLWOp/fhsFBDyyr+3bkxup4C9rHW6+WNBv8WktZYn+DaUBIg5koyH:sxZcnRiOp/fhs3m++A8ZHbuTZGo2bH
TLSH
T1C562F8566924987B9CC7D61AFE26BF13D7F91062D9910E4DEAFCC50C04EA6DE2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8ce0b4ba918062c08652c2e5153bc8e7efaac63d60565ba1362c4f0d9d228424
MD5 be9e598ef08d7313c0d207b007705026
SHA1 7594f428eb816a558739b5209c42d4c58cc2d808
SHA512 bca571438e94ebfe3fa410fe120447bcfc6f326d4bc6732d3711c6db78eb91ff84b32716df181caf2df1014667638cf787db56b27c0c4e67cba6b6bb17156964
SSDEEP 192:sxZnLkp/fhsFBDyyrpIupq9rHW6+WNrNCXYnDcYUBIg5koJ:sxZngp/fhs3m+lUHbcXuo2M
TLSH
T18732C6566E38A97B4CC7E70ABA15BF53E3F5502291D11E48EAFC861C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9bbe7251a9ef75c6914fcb26e5e260223ee42176814521301f508ad269e63080
MD5 197b4f7eea3dc2308b4c456b6d4d4f75
SHA1 1ef58ba8fba4a4bd23b4bdf27cbc9ea4cbd69460
SHA512 6d34ad59d10491395abd1f30ca66076a7dada7389bfab15950db64f12238620130a8823221416839e3d2b34101d55d0f12e10cf0d795859bba978fb0d94322a5
SSDEEP 768:6mWR+DUWv0s+g8F1+UoAYDCx9Tuqh0VfUC9xbog/OVlTLlTBs/5rotFDp:6mWR+DUWv0s+gu1ja8TLRO/ytF1
TLSH
T1BFC20A3F244CCB7E4FC01AADDC5A6F972ED802C7A6988D5047F9994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6265b350-bfe0-4fa4-9770-1f37078466b1\index-dir\the-real-index
Size 3KB
SHA256 cd3411d69542d4b00a3146a26aee0d5184fe5aa16566e9a6efb0000d7784d446
MD5 409ea3ff9b4662bb00cf3db679c37f4e
SHA1 d3795a53a573a6876e9c86cea74f5d5bdadd4ea1
SHA512 7266c1bd348be832ee9fb500cea7e54c99c03ffae4229eebb24293a1c25102c7f01558cf4e6c1641e610921f34658a3a23acf011893a6f08b90afbdd597faa22
TLSH
T16451188E4C4B6C6DD8AD11B27CFA0841737AA8EE47899B0B37ADA5307CC333E2D10165
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6265b350-bfe0-4fa4-9770-1f37078466b1\index-dir\the-real-index
Size 552B
SHA256 c8d25955af45080e23b7fb4c4978cd8e349aef30eb765c09d34785e3c51a05e1
MD5 bad902818512c1115d87d29857aa0a18
SHA1 c67b6e92d4e17f9db9ef80bbd8dd683c16d4c629
SHA512 e0228ccc17fdac5228c8943a516d29c9a4da9f7cc97ea755391be937d2d89e03ca0e71d04fefcd6bffb3cb2836bc21dbeb08d3380a65ed4e482d54ffc8bd0983
TLSH
T167F0AB158F52442AE9600E7320F514B0B370CEFC7322C9AA482C162A2CA231D64171D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a70dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6265b350-bfe0-4fa4-9770-1f37078466b1\index-dir\the-real-index~RFe5a70dc.TMP
Size 552B
SHA256 5dbcfe3b37831e26cbeb31a2f11d79385b0ae4a08bc19804c73e2d0c60d9889b
MD5 a39ed5c0d452850744c2325efbd3e7be
SHA1 3e19f3161c845c9d6b9d685393e97433fca5547f
SHA512 9279b4fa7e291f3d593a49fc4a00185c6ea7d128ffdf943bd6461c94300a0c1b5df8bb2b9ab00b2394d2ef319595bfff4f0e9736029e7665201b33edc59c20d7
TLSH
T13AF0F199C7D14557E8600AB214E544B5B230C9107232E887602D682F2C763C859130C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b2205813-47c9-4e2e-b786-a2fbd70f510b\index-dir\the-real-index
Size 96B
SHA256 572337ec202def054a8b0d59dcbfe32e452b10be5c0f79a03a03302f1a4d08c4
MD5 f14564482d0ca6a877cd1b969ae5219c
SHA1 d74f9dd77a8e883c4d45ba283b84b125d1ae4f39
SHA512 fda69ad2563b57ef24edce456e48f959923266748c775c92dd32b718842ada753f77c6e53f21f92f606c9804d9c54cae21f03e2c1be7a62bba31d2e539e0baf2
TLSH
T10CB001240AD4C612D09753B936DBA24537A6CA211762134F9AD01C58D9A3A8F8D8210E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b2205813-47c9-4e2e-b786-a2fbd70f510b\index-dir\the-real-index
Size 96B
SHA256 b9b429f9ec77404eca3c0359dd57a7dd2fca92781ab95cb766252a8b3c6a9a66
MD5 bef4ee5c19f2e524ca43fd07930a36d8
SHA1 851324df26b310346195b77c1eebc3f0b1feb931
SHA512 dab65d6b0095bf466941889c41e42da766c076cab0c2210d08062e39c9f7fb96e00955fbbf4ac3a5ad96f457eb23998a5411d2a2352064660ccef72df7657e48
TLSH
T142B0027012A4414BC91213F925D685457261DD743711934B94E29C67CD626D799C140E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 d1bbc2bb72760e52c0c6d0ff3bcae35cd00e586f934fb5510d840d79652f4c01
MD5 0d5fe7d9d295261431ed65abcbdb533d
SHA1 2fe1280773862ae0c7cd46c47585185c3d65fea9
SHA512 fde8705aa6ce55472345fabd92fd7ea159a4bee3b6fc2438eab376bf1ecd313743196034a601b30d75db5a6191d14aa328fd4db1db88b1eafd04d3c2bdfc10f1
TLSH
T106E068B63EE72830A96F93D2283300A901497A189408BC5E002677D3E0B13513801C52
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e4260499109cafbaccc879e9f715faa2947abc90f095b6e1d27b9ca659b142d9
MD5 7ca4e8ee17e9f3c0a0d33b972222157b
SHA1 4b4e98a19103a57816690e946ff7a7a4746265e1
SHA512 bbbd3b29b7fc1e235266e0c8397d5561f5b739d85a7838adcff9c7f92680f8b2a010dbb11614783527ab478a2ea7c78710ce7a29a55206cda1510540f02cd0ed
TLSH
T155A002508F49D405C4808FB022AAA15933584CDA074922695498A49C8CD566BE1C1D4D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac68d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ac68d.TMP
Size 48B
SHA256 3c7fad73f6a5bfdb5e8def151d0efb7fcaa23cbbc85a738da2c92ee872d76f7a
MD5 823bc95ec5e22a30af5547e23a38e268
SHA1 c302b56377ac2bfab1f615d3b437ff5c6b054381
SHA512 4c8dd351e1cc5669fba5aea216feade22701f62782185b14e044f8f2e72a1d1eec9185e2d57dd1e41fe9521caec9f2218116d081aa77d9b86c40286033c852ff
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 12cc364f0f1989639a0f6ca1e07b0d7fa67552d0276764d6b3e7733444a1eacc
MD5 78b81b8cf74f47e6ff96592cc5a1be76
SHA1 b131f9712862a6826ae213a2a8e4870f4864c26c
SHA512 1444e658a74087345cd2b5c8861bf8615acfc711655dc584279b0b2ade457247799c1da3787f3e1bc1e7ba2ba17eb5ad72266fd830c66a63d01b9cb4ff680c6b
SSDEEP 96:KpHyp1vhRFg9E42dFKO02fFanPs9x+rovkou2GGgW1t2oGKOD2aGagItqIGZS20o:Sv9ntZw
TLSH
T158B1161270390242387D194CA2F185BFAE5231E371196D6F3FB912628E67E125EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e482e0287f5d53c3ba44f707953029fd78a279155339825c80835c329a77ac98
MD5 c349164cd27e763456564bba6d4ced8d
SHA1 081af2cb261854522b6712ab8e0340eaeb01ea0b
SHA512 a24eeaabe2490e290180b02f40b4ca6138c60b7e8916b334f2ad0cb5fe1483bb97cfa581edb09860dbd044810cd390d855aa365138be3d96ad8dc1773ca37f7a
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uj:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAe
TLSH
T1B3A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59eb02.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59eb02.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 2fed775cd20267ea38c8f9e3186bde57bac6f138f91f542f8dd9e6facd5bb236
MD5 0ddec41c26f41eeef046275056bc3b44
SHA1 76681e3eebca7655cc02a38914528f3a233b5203
SHA512 681dd58e0579021cb4734027356384f99b67b6439231a64e5c193bb9675f0b95a89e1044a7a0bd9ca8132ba78c4dd6ad0118c93a2305a98b16d74fef2a4b25ac
SSDEEP 384:8ZcIhsNUks7njelsrX54atG805weNMsRnlY+I:qhHjxTxE805tNhn2+I
TLSH
T11D928D36DC742C765EF7A543F48B3A134EB8916B92C5BF84D9ECA70C01DE6E8030A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4f441f7f69aa00afe192aa388ab9c79331804795b602985ea0ae0f00858cf30c
MD5 806488252182480fb032b345fbfe9eb8
SHA1 aba47dad6542937972e2a6f2e4609e7b4322b21f
SHA512 24a2169e54b68b8e3a7be8073f3df10edab7864487d0a3d3cc47c52ecbc397e38f2f533f579f1fe135ed2216a7d932511f37aad82a78a9fc50d2d3b5797b2068
SSDEEP 384:RZcIhsNUkp7njelsrX54atG805weNMsRnlY+I:5h4jxTxE805tNhn2+I
TLSH
T133928D76DC742C765EF7A443F48B3A135EB8916B92C5BF84D9ECA70C01DE6A8030A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7fbd556eb61734ecf8f6f54b2fb183fbc0a68052e3d9a889c0eb91ae36aaa585
MD5 e63a20a34fad6deece8f5fe84fe15802
SHA1 61f005cae3dbc72ba2afc9444b388592a431ceb1
SHA512 adb2c89421abb0f472110cf5e049da7659922073d9ec3588416592681b56ba0ba5a17dfd26695de1d29c29183dcd009f375f854e21e166872f64f6c64fe7fb0c
SSDEEP 384:ZNFiZcIjsNc8TUNTUlIlkp7njelErX54atG805wLNMsRnlY+I:nFQjlwg+j1TxE805qNhn2+I
TLSH
T12AD219F288E75836D9AE9743A77E2D134EBCC167B184AA40B7D8560CCC9A1BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0c6c40fefdc7dd9a3aab217436a00dad9b271627b4ced039e046455f0b293299
MD5 ae4f13d9cc65b98e64da11ad85e0fb5e
SHA1 03e109b45dce5e4a9aa872033f2b09b63393530a
SHA512 fb799c05104edfd352151f28bb7babb954eed852b4d3716aa6e83f98a68c70950df36fb28f5f449e53435dc419e7a111962c9c5d245780cdffa5f0cb30408464
SSDEEP 192:CONO6G+bgQmiUye4yDE54aP1G8yRHL8Oy07U6:CONO6Hg1DE54atG802aU6
TLSH
T1A302EA39AC786CBB9EF3AD45B4872B275F98112BE6C16B84CAEC1B1C40DB25C1307536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 71a2f529e5ca56751fc29138fb38e106cbd93f6b1f0983137fdd2e77136f5229
MD5 32bfdf756c36696fa4f7af9f6be727b1
SHA1 e8e53f917b72940a30875df6cb825e94746b260b
SHA512 1fe7e5cc3249cc0923a72a0458a84902db9c06f5b9bb6ae8e913643600933f501ddda5008a31882e1b19ae8ee65e572ab7985d1f9f1ee3a4655c628793e828f5
SSDEEP 192:FONd6G+bGQmiUyeuypE54aP1G8yRH5wK/ektb8ShoqgUU6:FONd6HiTpE54atG805woNU6
TLSH
T163123C35E8786C7B5EF3A841B4873A175EA9422BD7C5BF90D5EC2A0C01DF19C130B526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

02add2d9-1a4f-416f-98a5-754200f769e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\02add2d9-1a4f-416f-98a5-754200f769e6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e043d0393dd8b1b62b634801aaf1925433e6d64e0308778d40ca0739452b3291
MD5 22cbf8fe37e0e7ab7d14c8e1134d22b7
SHA1 bd694df0253e1def30191162a7d6538456fca9e2
SHA512 4a4a7af229c53696be2ba3b4660597fae07b074b846b34ddc1d929c6a3a5cfe89a7f434fb6fbd18b76842b0a2d76d2d31a59967efa8ba182cd16ee51726921bf
TLSH
T1B841075CA6E91148B3B36F5AABF6A86E487BB9772E0B949D00110D4F0A63A40C961737
MD5 SHA1 SHA512 TLSH

Submit Download