hxxps://protect[.]checkpoint[.]com/v2/r02/___https[:]/oyakcimentocloud[.]sharepoint[.]com/sites/UyumPortali___[.]YzJlOmNpbXBvcjpjOm86MTFkNTkyOTdlNmYyNzZmMGYyNjNkOWM4YzdhNGJiZjc6NzoxNGY1OmRkZDY4MzM2YThkYzE2NjEyODc0OWI1MGZiZDU2OWQ2MTk2MGQxZDUyNjMxZTZlMWQ0YThlZTE0MWRkOGY0NTA6aDpUOkY

Analysis

user interaction
yes
max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://protect.checkpoint.com/v2/r02/___https:/oyakcimentocloud.sharepoint.com/sites/UyumPortali___.YzJlOmNpbXBvcjpjOm86MTFkNTkyOTdlNmYyNzZmMGYyNjNkOWM4YzdhNGJiZjc6NzoxNGY1OmRkZDY4MzM2YThkYzE2NjEyODc0OWI1MGZiZDU2OWQ2MTk2MGQxZDUyNjMxZTZlMWQ0YThlZTE0MWRkOGY0NTA6aDpUOkY
Sample260813-2b1bmsgp5x

Score

7^/10

microsoft discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Detected potential entity reuse from brand MICROSOFT. 1 IoCs

phishing microsoft

flow	pid	Process
376	2268	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311335522767661"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4FD429A5-CE7C-4E92-BDE2-92007DCC0FC4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1236 wrote to memory of 4080	1236	msedge.exe	82
PID 1236 wrote to memory of 2268	1236	msedge.exe	83
PID 1236 wrote to memory of 1776	1236	msedge.exe	84
PID 1236 wrote to memory of 1776	1236	msedge.exe	84
PID 1236 wrote to memory of 1776	1236	msedge.exe	84
PID 1236 wrote to memory of 2364	1236	msedge.exe	85
PID 1236 wrote to memory of 2364	1236	msedge.exe	85
PID 1236 wrote to memory of 1584	1236	msedge.exe	88
PID 1236 wrote to memory of 1584	1236	msedge.exe	88
PID 1236 wrote to memory of 1584	1236	msedge.exe	88
PID 1236 wrote to memory of 4176	1236	msedge.exe	87
PID 1236 wrote to memory of 4176	1236	msedge.exe	87
PID 1236 wrote to memory of 4176	1236	msedge.exe	87
PID 1236 wrote to memory of 1976	1236	msedge.exe	89
PID 1236 wrote to memory of 1976	1236	msedge.exe	89
PID 1236 wrote to memory of 1976	1236	msedge.exe	89
PID 1236 wrote to memory of 2300	1236	msedge.exe	90
PID 1236 wrote to memory of 2300	1236	msedge.exe	90
PID 1236 wrote to memory of 2300	1236	msedge.exe	90
PID 1236 wrote to memory of 1772	1236	msedge.exe	94
PID 1236 wrote to memory of 1772	1236	msedge.exe	94
PID 1236 wrote to memory of 4508	1236	msedge.exe	95
PID 1236 wrote to memory of 4508	1236	msedge.exe	95
PID 1236 wrote to memory of 4404	1236	msedge.exe	96
PID 1236 wrote to memory of 4404	1236	msedge.exe	96
PID 1236 wrote to memory of 4404	1236	msedge.exe	96
PID 1236 wrote to memory of 4864	1236	msedge.exe	99
PID 1236 wrote to memory of 3860	1236	msedge.exe	106
PID 1236 wrote to memory of 3860	1236	msedge.exe	106
PID 1236 wrote to memory of 3860	1236	msedge.exe	106
PID 1236 wrote to memory of 3596	1236	msedge.exe	107
PID 1236 wrote to memory of 3596	1236	msedge.exe	107
PID 1236 wrote to memory of 4576	1236	msedge.exe	108
PID 1236 wrote to memory of 4576	1236	msedge.exe	108
PID 1236 wrote to memory of 4576	1236	msedge.exe	108
PID 1236 wrote to memory of 5044	1236	msedge.exe	109
PID 1236 wrote to memory of 5044	1236	msedge.exe	109
PID 1236 wrote to memory of 5044	1236	msedge.exe	109
PID 1236 wrote to memory of 3360	1236	msedge.exe	110
PID 1236 wrote to memory of 3360	1236	msedge.exe	110
PID 1236 wrote to memory of 3360	1236	msedge.exe	110
PID 1236 wrote to memory of 4992	1236	msedge.exe	111
PID 1236 wrote to memory of 4992	1236	msedge.exe	111
PID 1236 wrote to memory of 4992	1236	msedge.exe	111
PID 1236 wrote to memory of 4548	1236	msedge.exe	112
PID 1236 wrote to memory of 4548	1236	msedge.exe	112
PID 1236 wrote to memory of 4548	1236	msedge.exe	112
PID 1236 wrote to memory of 5544	1236	msedge.exe	118
PID 1236 wrote to memory of 5552	1236	msedge.exe	119
PID 1236 wrote to memory of 5560	1236	msedge.exe	120
PID 1236 wrote to memory of 6104	1236	msedge.exe	121
PID 1236 wrote to memory of 6104	1236	msedge.exe	121
PID 1236 wrote to memory of 6104	1236	msedge.exe	121
PID 1236 wrote to memory of 5576	1236	msedge.exe	122
PID 1236 wrote to memory of 5576	1236	msedge.exe	122
PID 1236 wrote to memory of 5576	1236	msedge.exe	122
PID 1236 wrote to memory of 5964	1236	msedge.exe	134
PID 1236 wrote to memory of 5964	1236	msedge.exe	134
PID 1236 wrote to memory of 5192	1236	msedge.exe	135
PID 1236 wrote to memory of 5192	1236	msedge.exe	135
PID 1236 wrote to memory of 5192	1236	msedge.exe	135
PID 1236 wrote to memory of 5644	1236	msedge.exe	136
PID 1236 wrote to memory of 5644	1236	msedge.exe	136
PID 1236 wrote to memory of 5644	1236	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://protect.checkpoint.com/v2/r02/___https:/oyakcimentocloud.sharepoint.com/sites/UyumPortali___.YzJlOmNpbXBvcjpjOm86MTFkNTkyOTdlNmYyNzZmMGYyNjNkOWM4YzdhNGJiZjc6NzoxNGY1OmRkZDY4MzM2YThkYzE2NjEyODc0OWI1MGZiZDU2OWQ2MTk2MGQxZDUyNjMxZTZlMWQ0YThlZTE0MWRkOGY0NTA6aDpUOkY
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffbda2ec188,0x7ffbda2ec194,0x7ffbda2ec1a0
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,10331739982441283757,17671273004958322334,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,13976702887647608088,15678870484145207209,262144 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,2551420979927121597,10944326116843140411,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15804379875979029276,5742452193819844472,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,2107161803523483185,13721936422224393058,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4108,i,17732443291073609643,176508633554563134,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,8650805476288935503,3118163956993157893,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,4351343400607793164,6174658318346324060,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,6249923977776346422,8908502539716012253,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5552,i,15515911750873370402,3437003889086517956,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,4186378705940954398,9334572385930881481,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,4186378705940954398,9334572385930881481,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4276,i,9280061856334776455,2405915026235972982,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,11848164089136268042,17932024413656346489,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6436,i,12773286059917649590,2662893657930382427,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6024,i,8875773778907034890,10540102988467618165,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6892,i,10044029879314164360,10772442275374695029,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7052,i,11169595106135260331,11172128869837883916,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7020,i,10722288987261455707,14783823075970905396,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7260,i,1786351935563722343,1367620187072912208,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:8
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7428,i,1720663020023150440,18087193427381877279,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6996,i,11032666178634211128,14482140943973086647,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7520 /prefetch:8
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4928,i,3767443835559748404,5469439324311840795,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7708,i,7957326512862371961,44987133291904695,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7684,i,9666416503762522815,5072750639501686812,524288 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7536 /prefetch:8
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5984,i,10640791068555635407,18438154833727147208,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8088,i,11797187786916396355,15253195160073517274,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7916,i,5992819093296274328,7320441308531487692,2097152 --field-trial-handle=2172,i,14916057148897875296,1176470236375070182,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:6000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bb198c81963e699455b64b9ce7875c63551bac1db146ac9e8b16246add4890ae
MD5 e5b55006b588cbfd0a0c4801b2c1055a
SHA1 ddde08e8f44660d59ca273351189083ac43d8809
SHA512 453a760669986555d9c71b4c1e974d6f1c226d7ff4ac867acc428d6346dc81990eb139eda65972c93abd04637b774055ff3725b789c9ae8f2d1492ee6187b2dd
TLSH
T1DCD023707D35EBD6D11E10F45420494112374273315757B5B155584EDEB4081F2DFDF6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 68KB
SHA256 1320e0aa029e30007c083bafbf425419154b115c017e70d5256277ddbbf06bb1
MD5 d5219c6aacc87fe1a16350a1d6410cb9
SHA1 f9a1282e79533d4a71ff338aa249ace024a1c263
SHA512 f2c620b9eae06382d178c973b9d24ca71b25aa83b5907a18c8972c81b02a55eb516a2e9155c084dc766d4de6376b2f89ba1cf8e250290be6b4c85c7bc6f87ba3
SSDEEP 1536:dMoyb7qEBUw9cDi9epe617GlOIVSWezvC:dfyb7qr4WicMEIczvC
TLSH
T144630244E3947A47D63BE6002B6BA5DEC498538254D0D823AD33FB2E64BF42A73523F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 407KB
SHA256 b8d511b5631833faa6bdf354ca905d5fa78a5d2ed7ed09598f1cd704e027bca5
MD5 1fd36fbbe1e38fd1e2406cf97fa75750
SHA1 98d7fec8ad3a8fbb223b40f50de75b7cfd4aad8d
SHA512 ea96ed9c3b230e90aaed9778e41ab538e1477d2e87b9b514c0caf7ac095a5d23245cd200f660470463dfb9a0aee20ad56b794c98b707f9ed7a9b5f414d59e88a
SSDEEP 12288:cOP0AEwf7v3cEbRTNkUYA22gZcr2ZhCVNbV25A+rF:DPDfoQkCb6XCZ6F
TLSH
T10294236D0E5DFF2322578913099A08B6F0F3D1B469DF8AF9835417F0CBA2DAB684544E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 59KB
SHA256 fbbb0cd75dc18e5e314c00d47dd655d4648e7517e8169e9cd1faa3fc60d6b280
MD5 6f7162f706d969b9878e34c72f0f7ea3
SHA1 7e01b1a3e872857f211735088addc23654e4887a
SHA512 7fc21af78cb91d343f6dcc317bbff0727cf9428d6548a6d2a5c5bf989865c5618a5aec21c95bb76660064e39f7ceaf510c6cf95a1e881c7ee04d74407d4fce86
SSDEEP 1536:VOawbI1L5aJfxDN/JJGLlGBUCMNeFmIB39BCLFrsOuM:38Jx5OpiMl8UJTuM
TLSH
T189530248D2A20B5E9CBE88CCC39C72D996D915EF1352880BF78B6E4611E4D7D503745F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 25KB
SHA256 77a476f43807cbc4bf32dab58dacfa73e19ab8cdf89470304030c8abda9f558b
MD5 bd0b6196fcd26a67378dbd008dab118d
SHA1 71c8c4007f8067f699edcb41fed3aa588596e001
SHA512 6e687dacf92b3167921dca2cc31a910b6debb1c1eae2adb694faa9fc793688c1315072139e4bf0e92aa749b418fe9891f9914ac48ab9641efe1b240fd71bf550
SSDEEP 768:Xymm8AzOxdqkExdChQWY/JdrGip3Cew+XeQ:lAKxdz4dBdrGQyeHXeQ
TLSH
T11CC2E14519F63E77CEAD0220DB1A9162022CDEA7F6F5AB9F400E166460C204738F62BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 64KB
SHA256 26e44eeebb73c49e1715302040e3f264b22f508f2ac0fd2242b27170f1c0de68
MD5 a53bb47955af6ba02bbd4475be89d4d2
SHA1 08edf39183a1acc31c1ec6df2970115b50084541
SHA512 fc19f8b8a581299b938a0eb8ca7c37643ddefe8545b9983a6af701c93dd49d1ce498ddf67d8956119f96fe35e222a345cc590cf07f16199293d2124f1b22e49f
SSDEEP 1536:555av52odYrSF4oBr7QbXy6KqEPddlBY84guSQ:5Hax2odNOoBr0bXyxPduAu9
TLSH
T16453020D6A256056FB624D9172DEE3452C96637E43FE2337A6A31E476CAD3528CC8B04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 156KB
SHA256 298ae6ed46aa7aab3b40bf7c1718ed32d77df7ec9bd39d73e98697373e6c9501
MD5 51907153517c8f7233f756e02b127d9a
SHA1 8b7c736104e60540605bfdc0c2d76ea88b552572
SHA512 6e27573b0d5bdd4381193e969557b53527a17252cf07372f5a5b20863530ab4c5de85c89ae81b2f068588c7f3f2ef5c7e1bf643e9aedc3d982b6cb055354526b
SSDEEP 3072:Xmep4l1oTi4Abf2E6SzU3oA3lcdUT1OmaPtvq27XfJGSnavdKoe:q1xzsTojdypGNna10
TLSH
T143F313AB08263A33B7D020B9C1A5A22D194F9C4D297B5319FFD06690547692F1D4B3DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 39b3cf7e9558259933c855479fc004270bde87a78b9ea12aca3b6cb171b46057
MD5 d9ea28efc67a7ce73fe47524d73d5988
SHA1 c692526b3d6e3421a842e9664fc31b98e5439692
SHA512 08171609aaa971bae4e0db0fc509e79b336788e383cba743a0534902290d024ce627e7d2d7e05e5fe3f10a4e52086326289dfa3888ecc7f48d1b80e2119abbc0
SSDEEP 96:OP721ZxGIsMSsk/5M5SkLodDBeTQ83kyzr7dYAwtHmsABRg6sDW6sXDjGOP8n99:OP61r1Ssk/w5Lod1ekar/xIArmsnlu
TLSH
T1D3020A3440D40852EB89253392FBEC74767158CBFF47AF9372222E785A6B39B105D8B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 ef8d3aa88d47c987c1c19c79132baa9f016a88b1669fb0bae10b7e6d66be0c9a
MD5 62d5b932bd1b91fe26c1f194dfe7193c
SHA1 adb9b627730baa51c3240785e76cd67abd33d016
SHA512 16cc506ae92d609c8a34ded50f4e3f2ce0e2143fb9c3d5746aeeb268c041cbbb88a72ad4ea9da1ba3036fc55365e86f7789bc55b343f88ee03605211d5dfc8cd
SSDEEP 96:lP721ZxGIsMSsk/5MsSrLodDBeTQ83kyzr7dYAwtHmsABRg6sDW6sXhGOP8n9q:lP61r1Ssk/xSLod1ekar/xIArmsRlF
TLSH
T1BF020A3440D41852EBC9253392FBEC34767158CAFF47AF9372222E785A6B397105D8B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596f98.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596f98.TMP
Size 3KB
SHA256 83d5afbd6a3c119c132011dd366146882a6f674f8f2a2725b34030328c727de1
MD5 ef2964eea6d81603a6a35ef8367c60e5
SHA1 6e0a667b971466f0e83f624ac20f56e47e79cefd
SHA512 4e14b3ccbf84f1fc354a958e1d80c0ab7d8df3d92ad57a5f13678bf996d92c0ba4a8c9344691cb7f6599222256d220463101d05c7adc0a4165a0b63e326d9623
TLSH
T10E613D3800454C53E7C52133E4FFCA4474B985EAFBA3EE2691376CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 f68b5260f83162385da5bfb7bc26ea905224c8b1660e310b83f777f68ea3ad69
MD5 65107210c2e41f12ba91cecd8c2c9071
SHA1 aef8617d900de3c01851282a0870a1d822f892e8
SHA512 9a6be44c24b0b6cad5b94328733b43bb869a186592c4a92edf9ecf6dd792ffa67427b09a96ed86e490c5b10f997f51709ce524e2b085f41f92c4b11d33f58e47
SSDEEP 384:DdGcgUCMTupfhh+Dwz7n3zlbNbJZJQcmdXi9z6icMTxbhVV62sDDgmtHGDEHw2t8:oDbr8pchx
TLSH
T109629EF3C3D4862DC81162F15F283E1BCE6D096852683D57C5D4EE8BA3E64B2F25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 fdad6ab59c3a1623a41b5beb3db1803c35b6a0d71d7b29f5f7d1dc3cf812e9c2
MD5 e655104270351df654393532ff5cbb5d
SHA1 308d4171419131aefa1b46526fa6579d59572371
SHA512 1d00595e5197e4ff821624f9ec51274d633bb34a1d335c6ebe6e60466aaa9eb42d192d78bf413059e2bac1aebd91965a72e7948d7dd74ed81a67f84bb60ea6a6
TLSH
T171D0A7572201E0F96A582F9581ABAC8E832610220802DDF51190589C092689C1517281
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe591a74.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe591a74.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a2aaa603a3356855cf22403636f628550c68dbe6ba4dfb306663715d0624af62
MD5 a572e6cf8f638439ddfda0f511b88727
SHA1 d587f64d1fc218a55e1de098cd6a0663aa1d30ff
SHA512 d66761de1d2faefc609ad4a0c9b128c830cd7ddd0dfb18dbd898882289b4cd94fb805d8724cf46f8330b1e5a2930f7510075798c1315bc98d82a501a1006b47a
SSDEEP 384:sxZFn5m1R/faswXf4KTHboOW/A9R/Z4G2Wa:stn5m1R/f6XfvHbBWoz8Wa
TLSH
T12C72E952692499778CC7E519FA35BF52E3F910638D919F9CEAFCC91C08D66ED220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 ee48280ef13fe5f8c8c89c218a7694b6db25d4e3bbde82109a235337396b60b8
MD5 0431a3453f4fbdf4c03fa5f6680177a5
SHA1 91ce273088495bc3cce9a3aacf26c0e73c560716
SHA512 584cadead81648a08808896c7228247352fc7cb3d5497d2e862ac5f8be28dccf9f0e61b35df3b7976c1f5bcd25c94bb4297a3a03c6b79db7f32ee56c4276093e
SSDEEP 384:sxZFnOm1R/fasiWvYXe4KTHbtOW/A9R/OO02Wa:stnOm1R/f8YYXevHbQWozlWa
TLSH
T1AB82D9526924987B8CD7E119FA35BF52D3F9106399D19E9CEAFCC91C04D67ED220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 f7fb4b219e04ab11d1f4a17fe4a2680e08f29299dc5bf380022f9ea628521ed6
MD5 2426dc2c2043d60203f94f9969e69f2a
SHA1 fb4bcf5929841f980999c0c2151bea7600a61bba
SHA512 bf7f2ae0666f0a1be599df9681c8aedcc5cf557caa28509938972256f2a3d35d2509f0a6d7823b891e50df5241924cc8b3b7d136625c7d62e6143d5c2f1bf9fe
SSDEEP 384:sxZI5m1R/faswXg4KTHbPW/A9R/c2G2Wa:sQ5m1R/f6XgvHbPWozc4Wa
TLSH
T1F672E952692499778CC7E519FA35BF52E3F910638D918F9CEAFCC91C08D66ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c0e96d8da45e99fefe4b6bfb0371e7b3ca0398682626bdfd26a9e0c67c0a5bea
MD5 fb1186eb9e8ec9dae1a59d75585de766
SHA1 bea22a71623a244475cb7e8bb9faa3011b2c470d
SHA512 64d8469fa4759d81d73da641c8543fccb0c7cc87d01bf66a826b3608e2ec15ab778d801a61525693ebab601e41b38506d21db93284498c25fe85818b2e50d3e4
SSDEEP 192:sxZIRc0cB1R/faswXL4bzEddpU1qBZ5FHW6+WNuehRqW0HSo/Y9IityPIg5xX2Wa:sxZI5m1R/faswX2exHbvUR/d32Wa
TLSH
T1BD62F9526A24D9778CC7E119FE35BF52D7F910629D914E8CAAFCC91C08D66ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 891058f134350106ee733c7fd03c64f7d69b0919021c0288c924f5a72dd14a8f
MD5 cccddc06326a3fc8109c623e578ce523
SHA1 fd83c00dd5a762b67b3c85193d2c3de0aeff0b46
SHA512 d7aac5b8bce22ebabe7b69a87a403952f6783bfb0ef3c75f7930504e897be316e57a64559b27fa325a22534321efacc28600c788afb45c7bfc19ea1872a3d24e
SSDEEP 192:sxZBRckR/faswox4bzEddpmqvcDHW6+WNuehRqW0HSo/Y9I6zyPIg5xJ:sxZBFR/faswooeQHbvUR/Rp
TLSH
T1E642EB026A3499774CC7E219FA15BF53E7F9507295D05F98E6FC891C08E67DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b528ad3227da6fd28e9286f9bd0974ddaad5fd0a41d393fb1e9928e7b3558dd0
MD5 12958673c1593ad920953d67c62a9bb7
SHA1 c93bd19701f9dfe27d06a962b0b5b59e18e8a00c
SHA512 2aef0ac3be54498f534e40f5b2de619e3501c9cfa40c2aa205db298a18371446e51efb450fa4c79c4622cf2fbebcb5c7e7f143fe0cde59a485fa138e4cd83a7f
SSDEEP 192:sxZBRckR/fas8oxXIdpLDHW6+WNfhR/Y9IdzyPIgrJ:sxZBFR/fas8om3Hb3/M9
TLSH
T18D22B8126E38A9774CCBE209BA25BF53E6F9503291D05E58EAFC861C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a93a6d87864a07f200b9d4d9177cd527f5a9cd744f687804ad67155730e66888
MD5 ac84f5fba23b91823e8342b90b63f41f
SHA1 0e9b58b8c92d49bf2caab6795651367542cc1d67
SHA512 76501db29982acca4c65cfb8436ef9b53e6377b408a5dd1b105dc5bf2b6fad0280642c6953952b165f57a15d81a241c35ec7a9b1c28450ab94064aa9fdeb2cd5
SSDEEP 768:rZyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7Erorzbq8:rZyvIZwWvu+Q+u1jamFLeR7Prz1
TLSH
T15FC2E92B240CCB7E5F801A9DDD5A6F9B3EA802C767988D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f8caa0f-7232-4235-8ea8-e8a7ef259fbc\index-dir\the-real-index
Size 360B
SHA256 54ae3594ceedc8e75e31437c3ac97f3a7c51a21fa738e7427536ab07af616655
MD5 6894127ae7a37c6d2546ec65d89437fd
SHA1 fde0872a6c3c79837f52cd0961e6da8a17a4fc5f
SHA512 e427c775e10d4b8dff90f70304b482b5de07cd600b8eae0467c241bd9cd12942ca5a4a8ff41efe420e0c00c84c373d3283a8c6551d91c3215c4f0419b703cc15
TLSH
T146E02B150E511C2ED9600E7614330299B3B08CECF711984A243DAA6B2C5634C91552CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f8caa0f-7232-4235-8ea8-e8a7ef259fbc\index-dir\the-real-index
Size 3KB
SHA256 38456dfb55b705522db8ecac6bf036659d6321e710dd4d1641cc659f9338bb3f
MD5 acdb3d181b9a87c4ac01d15c51572244
SHA1 bf63f1f93c2fcc02249789e2ef3ca90ef9b2824e
SHA512 e4ccfec569f017c309c1eb3b9d7d8f8c2e00b50f84839e818e307ca5d0bf617146ab1c976c561211b7b6254bf78b3aadf769da53a6a9e24e965c299aa39d8a47
TLSH
T17451C74E4C4A2CADC86D05B258FE18827379BCEE97C59A07375DE130ACD333B2D1511A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c83d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9f8caa0f-7232-4235-8ea8-e8a7ef259fbc\index-dir\the-real-index~RFe58c83d.TMP
Size 360B
SHA256 9837bcb5cb430d79cb5d17db1f5da7ebeaa95630af6041bc21c99158a19f0db8
MD5 cf9cd9a0d331e9097e0972a6617e591f
SHA1 3e872aaa7e6ce5d23c551884541772148f233181
SHA512 87a86320f8bf50116ab7f46f042d313ee9663f43a0c0e2e8b0317a6ce307ae63d95fe1adfc9c9ac75a2ed724634a8cf192802d9433e16031752dbaf2c8e6b9d8
TLSH
T187E0955587530422ED100577141344DAF3B4CDA07535F986347CA93F1C2A74CD5521CD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c80ed5da0a85a803120e3671d20f842f34b0129e477fc99810cf6fbf7da80c47
MD5 306d37901997273f6549af906441b668
SHA1 b457e4938a00d600b02520df6a76f8491dbfbb7c
SHA512 cf686891d9e7f64756259a1cacf1fdb1177040ba5cf2e5db62ef67eca102898e6e5c715f64aa3c594f32b6f2bd2e0a0277f385567d62357d0c0ed2c66932e51d
TLSH
T1FFE0C6B36DF70810FC6B93C11472A0E00881BC288902AC8F202EE08790B03B8384ACA6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 43199a7f5548987b8b6236cf594617f52b1e7ae3c79cd6637192cf7a9ca61cdc
MD5 6766932f0b7327478d0f7d9355b87473
SHA1 eacec731df0be85fa282f95a088084a013c09acd
SHA512 11a8daa3f872d6c1c9900da4604bc8ef18307c8e480aa1efa065c86df7112fdba1bbf64a1ed0ae7e0756b6bcc5ef1448582d9a90be580f32858e84dfd662fac5
TLSH
T1BFB024C0041C3043C4C43F3154F740443134FCD00107330445D4F0744C5131350C300D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5939e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5939e2.TMP
Size 48B
SHA256 8eea8d6fc26faafd4cea3443b6a0dd01aa3c1139355c66a8c6e072ac0c8a7ef3
MD5 e5f716a6564b89d4932512ef40b65e4b
SHA1 e0352cbdd7027c364d812db39e56ebe25d3c642e
SHA512 f833fe7c2e1a96fff35252d5c6dd06c2aefe94b4bd1d4e3de9df94f8e8c35d99954e38797b4657c7add9fc7788ab5afd75591ae4751f56782c86891319cb4e7b
MD5 SHA1 SHA512

Submit Download

90f515e0-ed35-435a-90d9-3494cc729d5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\90f515e0-ed35-435a-90d9-3494cc729d5f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 46547452c646c1c4b4645fc451f133f18970a84a0becac21b8b7ab882f989219
MD5 cdbc3b8ad5bc2188c4b45a939d1842bf
SHA1 d9bc7a1f5e81d9c45ba577d1a9e9fba3fbc25685
SHA512 77c401613153165ba5f27fa277f2badd5bab58f263a16d6d90a9460e8975c128d0323d9177febccdac035f1c003893c72c99cac5149389378e6b0c7002215022
SSDEEP 384:QiFnZcIgsNq8TUNTUlIleTHzij1+wue+CeODejhKPOOPrXLpe8C/1Nl:rFPgrwgO0+wp2OijhKPOi9Pal
TLSH
T1B6D21AF159E74876EDAD9B43A77E2D128EBCC063B5806A80B7C8590CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 901d7f1a7aa730949f489f59f405a7b64d7fddae168f2c24160618993619237d
MD5 5a42bb0c4e8db1517a7a69ce44981d08
SHA1 fd6260d125f63376cf8b090fbb7931237c7d7a9f
SHA512 d3f5ef1f8745e62ab201e076dad8a5d4e7e3dc29df7e58a4d5159a0e3790574b1cc96c9e13294ecff149afa4d11cd788315e393ce72ee223e59d495830ffc81d
SSDEEP 384:QiFHZcIgsNR8TUNTUlIleTHziMV+mue+CeODejhTlXNrwKu/SOO8CNPGOOPrXLpS:rFvgywgOZ+mp2OijhTPrR8ChGOi9Pal
TLSH
T193F23AE198D64CB6D85D97C397BDAD026ABCC073B048595873E8A92CEC8F0BFD316814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7ed3b03b05fe621741d32343b9820a9ef800e582258faa09b771fa4a287b2b1d
MD5 2f9765b6dc2d77a8bd380ba35c4ce6d5
SHA1 4d728546a34b78dc07289aa2ec77227ddf90b881
SHA512 50d50e317d3f2184be94f2b15ab51ad26561f4d4e110de170278aecf0b3a1262113d9865321cf97f33ddaf31604e1ef3c301a090e831510ce40b787d6363b43e
SSDEEP 192:JONj6v+YLNQmiUyduZh+CGLOD9oqushZU6:JONj6vz/JZh+CeODeM/U6
TLSH
T16202E9357D282C7B9FF2AE45F9873A139FA81177E5552F80D9D82B0C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 37b88f4f37f45a2a45591a2561afa3d81986f8e2a53afd0af47a212bb0d7425e
MD5 8626d2e48149676b3add56c3381cec3f
SHA1 b029797c55668c01aea41cfbcdc4c8fb1a0b9733
SHA512 82a928029cab8fe4d45775329f7c0c78da7e0ea03a8aba0d82a630b1f7dd14a04305a283870f42fcc7a1ffc40b13a95d42d443916c4f9af9c7dbfb25e75c56ab
SSDEEP 384:5ZcIhsNSSTHzijtue+CeODejhZPOOPrXLpe8C/1Nl:Rhyip2OijhZPOi9Pal
TLSH
T1E8928D71BD385CA76EF6E695F58736138EBC9073E2C52FC494DCAF0C05DA598130A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 757a98818fdf0caa757f3714d54870923b17d5d455a2a6ac3edba0a1bffad0ba
MD5 0dc4842e9ed7cc160b76e44b1884f2e6
SHA1 9303e79edab81937c05bb7daadb63c23f2e5b035
SHA512 d7b43fc281f98f886832a09b47ecda9256ab4cc7abc17108421b8f428aa6cb775e55a353b09a1da466ecffb30e7d12c6d499d16c8273cf7293529bb772a6419e
SSDEEP 192:oONr6v+YLiQmiUyAu2h+CGLOD9ojhdCHGqjU6:oONr6vz6W2h+CeODejhKPU6
TLSH
T152123A35BD385C675EE2A581F48735138EA95177EA8A7FC0D5DC2F0C02DF69C234A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3f53e8d4787cca6f44475b15076e06b72bbc451b9ae8e75bdeaf47edc345da98
MD5 11f73b27001af09c075f42258575c00b
SHA1 75f21558189be1483a28a276f1ac619291c818d9
SHA512 7707b41d45eddf524389ebad0e73746593a16912f5a60f5fde5cde0308853e31f564ee82b63a1d3e9550bcf6c8602dd153d73bd4c3a2ab9f3848504d0d847ca5
SSDEEP 384:CZcIhsNSTqzijTqe+CeODejhZPOOPrXLpe8C/1Nl:wh0St2OijhZPOi9Pal
TLSH
T16F929D31BD385CA76EB6E695F58736138EFC9073E2C52FC494DCAF0C05CA598130A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7fa9dc1ea554e7173d0e3f0c5504e98b014232473f3d5d9996ca940808b9bd15
MD5 82f5305cd369e1776720b75bf4142409
SHA1 97afca666862d1a31a37009f5056d419269cb598
SHA512 ad4f4189e4766170b6dabf63c72c531acfa37dbcb5d4fce6d93917ae177b6005b09ef0465e8c53ab2e3dc103305c6c02ebb7fbf2f39b3dea3ae684e2aaefe2c0
SSDEEP 384:QiFPZcIgsNq8TUNTUlIleTHziM1+wue+CeODejhTPOOPrXLpe8C/1Nl:rFHgrwgOh+wp2OijhTPOi9Pal
TLSH
T114D21AF259E74876EDAD9B43A77D2D138EBCC063B5846A80B7C85A0CCD861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c0c24d97d37db62a4793120e2ae193373a6b33a6ecd4c995ec5c73590d4b0472
MD5 299f974b9fdccb2f650dbe42614d00e5
SHA1 274a9663f89394541c44b43a355b71fa3447285e
SHA512 8692d4d3e04927eed20005d9279c16a2422f0fc48bf9d7e2a837b431f140a3962fb883f6e842cffde0274760162a46e74a4f227c3e38f8761c5cbc970a5837fc
TLSH
T1B5E00202571444BAC02C473100831220A3F2E12012F60346590205605C437400E30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3cccd47b0c2f576151aa816de807c2010790da24f2086e50c782d2b1d0455caf
MD5 5f6043b1a1755f868b1f4c36a98b6513
SHA1 a8347aee03cd3e0261e98f4b184eaf2ff8e5d971
SHA512 286f44c71c6ca043387f9dfbfd4da446888fb5fa0617765fa3da7d1a434c3feefc03ca9bed26aee0fa2954ed1da53e45f1fe723a6f101d8223f9da2ac652792d
TLSH
T1A3E00211971444BFC03C473200C35730B7F2A12013F703455A1309786C52B841F30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f74bac74f962fdcad3f1d97874055bfaeb22b03a86212a76428be61452b7b352
MD5 c0a246623c0a5c9a8466d063fa95c50a
SHA1 b925666ad69d30975e9e8f4c6591dffa86a75205
SHA512 5f9a73698c744a0e3de5a3a132524be9a5968a14cfb5a2377db32dd835952371ee7a58f29166cc509626d1a7891fba3a6282d965b15dc133548c4e7b99a6679e
TLSH
T1A6E00122D71844BAC02C473610C39B20B7F2A12052F603455B2209687C52B841E30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58ee82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58ee82.TMP
Size 392B
SHA256 b5c44517a53240c468d7a7a78689842d614b07118faa26e965b68b96e70462df
MD5 d704e14e2f32889e153e280a1671bc16
SHA1 0857660ed94399221257c953cc577777037b21a4
SHA512 2fa3e8901a22665fd6241c26f881bfeac82c42f791068007304d5bbde5d8331fc99c46a00e8f93ff476245156ac7733a3e6b3bff9958f9c01b07017339b3d5cc
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 4ed4ed4138526b29990ed8e0529c5c01746a51acaa55f3f93fc67ca5ae026fc2
MD5 cca1c08db655beb4073cfd795dc7f906
SHA1 8bfb7eb12086a4f4ba95d828e060ef8fbc7d5eca
SHA512 fc14736b056bdca9108c9c6244b1d5e7b72c51a484a61191c7c5a46c18b8c394a98e11b69f6caa5818737ec5f89cdccef65908de7a9274244ece84a0b793063f
SSDEEP 3:MsEllllkEthXllkl2zEa4xl:/M/xT02zaxl
TLSH
T1EA4402046BC00885C9005030402287600760D4500A11974334611C526E865810D01010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 df1b91e3fd59209cd137f593798a6f525d0eda84ee904864e77cc075c8ea066a
MD5 4e843e6f86bb6afee9c3260807457825
SHA1 fc786a5273bdda55b0d7b8b455ded61f0ea7c38a
SHA512 580c8cd26e4fc8cbf61b1bdb4e892d9af220049ae9d7c07c275ddeeeac0920c1707bf755a36a3ca8819bbadeda91f868101b6af7b51769e574b7be82682e0073
TLSH
T1F341F758A6FA1148B3B76F5AAFF6A86D447F7D772E0BD45D00120D4E0A22B40C872737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads