hxxps://www[.]ipxo[.]com/organisations/EPICGA-1/

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.ipxo.com/organisations/EPICGA-1/
Sample260815-2cd5ssvbmf

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2080_595685239\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2080_595685239\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2080_808641362\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3664	msedge.exe
4232	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313063685788915"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{27ED3C62-A538-4023-B1BE-90E778CAFAAB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{2B572A9A-C945-4B21-8DDE-D6EFFC371790}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2080	msedge.exe
2080	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
828	Process not Found
828	Process not Found
828	Process not Found
828	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5604 wrote to memory of 1176	5604	msedge.exe	89
PID 5604 wrote to memory of 1020	5604	msedge.exe	90
PID 5604 wrote to memory of 4232	5604	msedge.exe	92
PID 5604 wrote to memory of 1020	5604	msedge.exe	90
PID 5604 wrote to memory of 1020	5604	msedge.exe	90
PID 5604 wrote to memory of 2832	5604	msedge.exe	93
PID 5604 wrote to memory of 2832	5604	msedge.exe	93
PID 5604 wrote to memory of 1136	5604	msedge.exe	94
PID 5604 wrote to memory of 4856	5604	msedge.exe	95
PID 5604 wrote to memory of 1136	5604	msedge.exe	94
PID 5604 wrote to memory of 1136	5604	msedge.exe	94
PID 5604 wrote to memory of 4856	5604	msedge.exe	95
PID 5604 wrote to memory of 4856	5604	msedge.exe	95
PID 5604 wrote to memory of 4640	5604	msedge.exe	96
PID 5604 wrote to memory of 4640	5604	msedge.exe	96
PID 5604 wrote to memory of 4640	5604	msedge.exe	96
PID 5604 wrote to memory of 4384	5604	msedge.exe	97
PID 5604 wrote to memory of 4384	5604	msedge.exe	97
PID 5604 wrote to memory of 4384	5604	msedge.exe	97
PID 5604 wrote to memory of 4800	5604	msedge.exe	98
PID 5604 wrote to memory of 4800	5604	msedge.exe	98
PID 5604 wrote to memory of 4800	5604	msedge.exe	98
PID 5604 wrote to memory of 3168	5604	msedge.exe	100
PID 5604 wrote to memory of 4776	5604	msedge.exe	101
PID 5604 wrote to memory of 3168	5604	msedge.exe	100
PID 5604 wrote to memory of 4776	5604	msedge.exe	101
PID 5604 wrote to memory of 2612	5604	msedge.exe	102
PID 5604 wrote to memory of 2612	5604	msedge.exe	102
PID 5604 wrote to memory of 2612	5604	msedge.exe	102
PID 5604 wrote to memory of 2368	5604	msedge.exe	103
PID 5604 wrote to memory of 2368	5604	msedge.exe	103
PID 5604 wrote to memory of 2368	5604	msedge.exe	103
PID 5604 wrote to memory of 5024	5604	msedge.exe	105
PID 5604 wrote to memory of 4848	5604	msedge.exe	108
PID 5604 wrote to memory of 4848	5604	msedge.exe	108
PID 5604 wrote to memory of 4848	5604	msedge.exe	108
PID 5604 wrote to memory of 5864	5604	msedge.exe	109
PID 5604 wrote to memory of 5864	5604	msedge.exe	109
PID 5604 wrote to memory of 5864	5604	msedge.exe	109
PID 5604 wrote to memory of 5444	5604	msedge.exe	110
PID 5604 wrote to memory of 5444	5604	msedge.exe	110
PID 5604 wrote to memory of 5444	5604	msedge.exe	110
PID 5604 wrote to memory of 2896	5604	msedge.exe	112
PID 5604 wrote to memory of 2544	5604	msedge.exe	113
PID 5604 wrote to memory of 3484	5604	msedge.exe	114
PID 5604 wrote to memory of 2408	5604	msedge.exe	115
PID 5604 wrote to memory of 2408	5604	msedge.exe	115
PID 5604 wrote to memory of 1428	5604	msedge.exe	116
PID 5604 wrote to memory of 1428	5604	msedge.exe	116
PID 5604 wrote to memory of 1428	5604	msedge.exe	116
PID 5604 wrote to memory of 1792	5604	msedge.exe	117
PID 5604 wrote to memory of 1792	5604	msedge.exe	117
PID 5604 wrote to memory of 3424	5604	msedge.exe	118
PID 5604 wrote to memory of 3424	5604	msedge.exe	118
PID 5604 wrote to memory of 3424	5604	msedge.exe	118
PID 5604 wrote to memory of 4488	5604	msedge.exe	119
PID 5604 wrote to memory of 4488	5604	msedge.exe	119
PID 5604 wrote to memory of 4488	5604	msedge.exe	119
PID 5604 wrote to memory of 2080	5604	msedge.exe	120
PID 2080 wrote to memory of 4552	2080	msedge.exe	121
PID 2080 wrote to memory of 992	2080	msedge.exe	123
PID 2080 wrote to memory of 3664	2080	msedge.exe	124
PID 2080 wrote to memory of 992	2080	msedge.exe	123
PID 2080 wrote to memory of 992	2080	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.ipxo.com/organisations/EPICGA-1/
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff961c1c188,0x7ff961c1c194,0x7ff961c1c1a0
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,10174762272632683725,13066909199237877720,262144 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,7582313523244068778,10666427001213581896,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,2717338292255097853,9694725981714764589,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,10633565119436550775,7047654620973345463,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,7709003941567606162,3828769787876949120,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,2780829399013403040,13626183306494565029,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,5786226364983149255,14426816870061690026,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5336,i,3252291346341876375,501791118537887250,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,17836433731970917915,8401314495386476079,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,11553893292273047911,2139013060342767085,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5900,i,11663217202275686433,12764198461757570672,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6204,i,10255603076843882417,16037523566700554116,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,2918224193161498160,7385459979100745421,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,2918224193161498160,7385459979100745421,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6464,i,6056074583212362291,12225034866924112551,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3724,i,13746467482772337482,18062367985556739191,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6752,i,4835200453370439461,15875304865642530898,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,356745478474620278,2752117784820510016,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,1570129392387658831,2213864995071586682,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,12389436082619947345,5273236488691250096,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,4955159662468244151,12136782206282780299,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:12
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3920,i,4229515276419134227,3727844104679418434,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,10962164592956617682,12173666126831837802,524288 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:14
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5356,i,6397719412672404160,17268492260573379718,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7312,i,10801425604630550657,14107189737816480756,2097152 --field-trial-handle=2308,i,14816505112031526657,11161792959112256706,262144 --variations-seed-version --mojo-platform-channel-handle=7600 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff961c1c188,0x7ff961c1c194,0x7ff961c1c1a0
    3⤵
    PID:4552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,14872886957627201100,13352773350545753375,262144 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:2
    3⤵
    PID:992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,12660257563365669070,14567545574906739568,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,5725570257472791548,16998224321414304945,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:13
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,4914474629817010429,6423661140680078242,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:14
    3⤵
    PID:1760
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,4914474629817010429,6423661140680078242,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:14
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,6408947359226893168,851391834219227713,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
    3⤵
    PID:5312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,9080789255425841764,5580075884648562209,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
    3⤵
    PID:3100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,7959643358376663986,13709722324638552491,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:14
    3⤵
    PID:4144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,8064850666759875457,5495108418323872198,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:14
    3⤵
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,8619475609879598161,641119645636748167,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
    3⤵
    PID:5416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,10605275267493046362,7760587279001848246,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
    3⤵
    PID:3288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,3294707941577846429,10206926404760937080,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,15508332317901112113,3177252039681091930,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
    3⤵
    PID:5256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,17003602367844144930,10208915601183334416,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
    3⤵
    PID:5388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,1114587411609248380,4463057834628082237,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
    3⤵
    PID:1104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,6537335081665200132,9501014689743769481,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,3717459356385475803,17346706897824475550,524288 --field-trial-handle=2672,i,637876202935882316,960484439163939925,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
    3⤵
    PID:1760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4c82e91191e16b9713d45c696389de033872c26d5db7ac2c87543d5846608999
MD5 2c82317858ceb1223e89aac054c2c84d
SHA1 40bf0c7275b17f7bbce4235968267fb9d47afd04
SHA512 193f5f0a372f06d21a84aeddc29a66018a197a4cedec746f42e9e3bd677280518350afac1c8f1642335ebbac8ff1cebf966f8c5ecab62a814cb999e6791250fc
TLSH
T1AED0A77A754A9645CA460032649507527322443039DA9E2792EBA41A5B9504473EFDAA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 637c03a72f1b76decf326ca68c98c2743ec3d78362934e4c43b3f7963b38f026
MD5 4a1c0b9935ef29c6afc8f9a94a173cb4
SHA1 417b2fb2320182e3ec6e4bc65821782debd809b7
SHA512 579966907a07666af1b0c6527ed251e5a6f03039272ca063235728747fbddb9555d2b5554358fbf29903ba51549510992c692e5710770b5ce88fc35da14f50f1
TLSH
T118D02335741AA6C0D31A0031006002026221453336C347175257A40ECEF4044B3EFEEA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 8dbe262b286a123cd6e67bcbd415ea6e8bd085068853b6b60077e84ec3d03181
MD5 649994848a0e2a8f3d993f29d260d8e9
SHA1 b612bd5756abcaebd06574cce3f134299e800ab4
SHA512 a78ec743b2c53991f4c611829d527287551db307075ddd3430b747c4cf3fa0066db981a4bc075cc49c8baab56ee9b020cb57e76dbab35d68af9cb6f67edecf40
SSDEEP 768:oJ3i52uMDyYC9mbs43xGB0541l/e6wfXr:oJ3iKRwU4n/ebv
TLSH
T175131DBD6AA08C06D6C398BD490F4F7C3334E5AACBD066375321B526162AF5E44DE34B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 65b3af8ce87d928fb9bf42ab6892e73d2afa7eceff1c2785daa0ee7091fee37c
MD5 a463ecd2347c8b417eb70f1dea54fd49
SHA1 b4307d75acc433a5c7b4fdc2372bdab041d474fc
SHA512 4fa2c445a17ddb410f87dc5189b2f82d2c4fd0b0f30727dd0ac1da5c4117b6ac14ab6f51b02a3db8a70a95468974bc372de5ea523c5f77f454c99791e47c8257
SSDEEP 12288:KtL/OL/HL/uL/2L/YSL/rGL/+HDE/4roWO:mqTr
TLSH
T10FB4C6F30952A40ACFA802F692063E3DE177460D7CD1F9F6D1385C912929F7266BAEC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 f8b78668a0bbd26d59719fa7c0cb51040d1f6653c2700c63e1d2fb8770ef8459
MD5 ae017afecec1fac7351e15be0f242d3c
SHA1 beac7b75b72ab673dcb7109ea10a2e59e101fecb
SHA512 072d1aa44d2b66ca5730a5d929a168400888baecc5acf16cb360cea81bb7b3da3530877a6cc312f5e5df0b164461e6dd1d4980a26a9417142ee8973c7c0b68eb
SSDEEP 6144:EQMu4Q4W8n3mYf/nFvOmLiWHog0uUQ8r2iFzpQFhjvqFZFHjydoeJ1seLZ:EQv8WYVvOWEL7mhjKZljioWLZ
TLSH
T19BA56DDECB282C43CF67CB7574E0D9163EB41182BA89E0D39445C5E96AC2BC07AD927D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 12.0MB
SHA256 e1b0fedfb57d4bc0c29da32beb51d907beb0b41966253ef54c598df6d8d28c24
MD5 2b566426a7479732470e4333703cb860
SHA1 8947181d7fb51641b99b52c147c5d6e16a35e8dd
SHA512 d86d1d07be82b90cb5031ec6b069695b7c40b5388268d73326733cbfe6a2a3a2e5d2e6044f5b4c03b6407402898544e743c3868de0a4fd46bfdc8bee8a1a916f
SSDEEP 49152:PhHYKMK2TNQtKXyxa15IdSISwHTZOqbimXsfh3CBMKo3Gp:PuKMhTJJ1qSQHwqb1Xsfh34
TLSH
T1B4C66CEDCA785883CD639930B4F0E9577C7413C3F994C1E78898C58402AB7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 1a88d02c5f327fefa4eb1f8f3857eb4f56e71fb4e61d9fd19e546dd6b0d820a8
MD5 23b9d9ceb41c2e20de50e8cf89aae584
SHA1 570a66e3d2849878071556017b19b0826d615acc
SHA512 6308d364fb5c7f8cd1520923b181317dd43e7520ffc227533ab25ef9cbc3b534e5a88a3c6eab193c0176238ed4551c169f72427accda91429ad8805a9c80a45a
SSDEEP 96:WXWGSyfWPKwnBxp+vgKXUvAlSV45vyPuV1ynjVrfP8Lzoialf:6mnp4bUYlP5K3njJfP83oiQf
TLSH
T151F1EB4016E28499EF049EF706CAD8CD7AF87CD642831FB30B509C746AA3F9456E8753
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe598ca6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598ca6.TMP
Size 3KB
SHA256 33f3df6f1b5cb44b5573f2d308adf24434d1005f92a67d104a7d75038973f36e
MD5 9fb95e00990ec2df971813e7edd8eb09
SHA1 9b2f5a816b1d4255d59e1ad0223139392529dde4
SHA512 e12d4ec065f7aadc40d1a476e8f30b55302eea134071c9ff115ecf29e98314c32647484c9237e109762fea3dd0a2b7b1704a86102013e6c9d6772b3f360849ef
TLSH
T1906154501773D4E1EF29C4B151D1EADA39FCBCC5C2C75E2240805D746B26E28ABEDA13
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 0da1bcb7a01bb495ac4022bd25509001472cab33e80ce4adbacc4286e74a287b
MD5 5a02ce0e9a391a0581c184bf81fc107a
SHA1 79ea533cb2a595b92a7f1014297952153fc70ab4
SHA512 468ec1ac151ce3eeb8cb3c2367bb27e4b4f97f44c75e2aeeacd576c0db9d9c4b11da3dda3836283c8192b2fe6503f4c9cce2e00156d7b039ce3a4fbec98c1fd0
TLSH
T1F5E0260409C8C26AEC94A897C66C6B0886E03C83E3CC39429B4C9C60B101E42E2C7A90
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 4e52573614033073919d338be988adcf71f867b3f357dfb075edfed75dc2b9bd
MD5 4b8ac96744f0b9b62ae56ebd901a7235
SHA1 fa295aa40beddf28ea86d7d23a5150d9d638cf36
SHA512 fbc715b62a211729c40a11c594742c1c2c340ff39ef59bc2060723e607409b54d55772d55493bd575c7214004d984894663d6bc1226fee52992349df5bf7ffd8
SSDEEP 96:BBCJWX0W7hYW42C960ftsV3voe42C960LIsV3vgRH4w4:35XRlYQCkxoICkEDQ
TLSH
T1F2D22A539E747C21E78828FA5C1F6851DE33F248AFE45CCD6A30A57489B45960530CFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 67f20af72ee2b0f0d2feeb1fa2ba5f3d5d81d67ebfecb5a55e3896ab31db2d90
MD5 0c1f2a25a6e9a49c0439f40657e81fff
SHA1 875d3724ca5f996689ba3943fd88b9c222caaf71
SHA512 2fe583fe30f1d86f7a1e782cf43279ab0f2ebc0955dac6673e85f902d727a1066a46fe4e510f4dad6571aa32240eb33d83c6a1e567f92a6ea5aaec153b893c23
SSDEEP 192:J3i2jFa+lH+bF+UI3iWGVoWN3qL/w4AxJeWPA7VVV63:J3E+lIkUI3ijVoWN3qL/HAxJeWI7A
TLSH
T19B24545F8F302711CABD91761CE759E35C7DF02ACB1229DA6C755474CED2A82602CCAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 25KB
SHA256 1c7bb955f175ec44c2a95848c8bbbc4bbfa7a9d8f46f737b317cf45df4c00024
MD5 92f576396718d6e7276d4f456b9d9fc1
SHA1 a75a4c17a117081a10611fc91202565f4e7f0619
SHA512 8921bea339ff35b457072ac232ff8d4b031ff374c608e0d33b13fa232fa449b9afedb1897682af0bcbf69ccbe01a510a3145a1c12c72f34ca8c1aa23c9f167e6
SSDEEP 192:MuJABa8uH8igguzkQEwbJwR0g2SKtXWJnrHotnsnIh7OZIptxXxcxIx6xdOxOx3H:MuJAE8uZ8qMJwRWm1mnwIh7OZTpv
TLSH
T14FC2C5BB1D08D416C681AAE78BB7FE5CD3875D2F9CC4EC95D2A8CD6D06EC0383166845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 f788f2e236c56e4c388c068bfd9e382d1680c22a320ed43ac2e26175245c2510
MD5 963f5b758eff8797866d7e8c8702eea0
SHA1 6aa154058d1701618898da4cb74143cfade6e804
SHA512 849cff9207edc4185a9dcb1b60a17122c62270547ca26678a2ddfd7f3daf202f7315eef37790cacfc9d20af4969b10671571be349b925a15f704854b596442ff
TLSH
T13DE0D86144DDC699A94C71479618671CD7A03D47D7CE7E515B44EC81F445444E3835D1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 32KB
SHA256 134c1ed9688d2b832420f3b1f574d2a15f15ec4ef9d291d6610b52e77f88d579
MD5 d487131e6ad3ec6e38315cc523a643b3
SHA1 ed5004505f4eb748b49aa667a47237bbd7bee22a
SHA512 41983f66132c42159c08f15110dd60e1e6cb10523568c2f8edaa12cd4ecdbe2d7e7ff61abdb75097470165672ad61699bdd451d5ed557147d81b74c76cfd885c
SSDEEP 384:Giq2RI1d8UkCvAllI1bQOuGnJezK5YJQ2M2j/6:KkCvskMGAmYJQ2hjS
TLSH
T134E25C2F25011004C1DF6273A47A9D837764245E96C3E5EB5C7C46658E783AA7F339E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 81f958008ff24fd0005dc5708470a713874b96ffc1948ab80098e75e23654874
MD5 de4e58176242a2f162b571b4f08a861e
SHA1 642611e8298bd0c36a327090317ae95e64ecaf5e
SHA512 79e59158d67e8f79d508b9a6b9e979d40703596c6317b1e98ffc48ee433eaf44fd3efa3ff7ea31bd731e919e7e031956284d0181160a50a9dbbf8cb178efe273
SSDEEP 192:DTPZQRgVoaUaVainF+dLFURbv/zSVSych0Gk19iScFvEx:DTPZQRgVoaUaVainF+dLiRbv/zSVSyc8
TLSH
T155E1DCF7C7E5826ED91151F0EA142F2BCE2D0946436C3C5AC5E4EE2B93F2471E241A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 aa18128eb4dd5f148711f4bc6ab59fa9333027ad8dfa3febb944b966d9a591dd
MD5 b528f22ac3db64af42fdb900a65efe2b
SHA1 8938d4395931e5b73939095e987beccb920ca179
SHA512 271574430e0511fbfd0a14233d0a11d2615abe26a29cdc31d5e63821022f9f8f2b2613145fc2703b4f897525ce01e4016097d8dfa41ebfc9dac37ccd962039e3
SSDEEP 192:DMxGVOxwNDfVnF+dLFURbv/zSVSych0G19iScFvDa0J5l:DMxGVOxwNDfVnF+dLiRbv/zSVSych0Gs
TLSH
T154F1CCF7C7E9826ED91151F0EA142F2BCE2D0945436C3C5AC9E4EE1B93F1471E281A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bc32db12-130f-42d4-a71a-05f4c85b49bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc32db12-130f-42d4-a71a-05f4c85b49bd.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 84cd6284207a9aec0d13f5e54cbeb63b7e3c5c20bb3161d353556410961f6b5a
MD5 5dcf9db182498349159822209ad4cf2a
SHA1 f977c67d411488aec843e1fa395178a8bcff2d54
SHA512 ab0b8c215495c1da9c751e5b8f36b0180498235f06823c9e652493ca682a0073fd6ebcec8851a4a3a668c42b14a41ff1f6d3a150517961134cb18b417ba8fb78
SSDEEP 192:sxRgRgbT/fdsoJTVY6dYCb/zoA8poCf/g6+WNuM5gS4ZYE328hU3EGVhIgDuJ:sxRgwT/fdso9e6dPWb/5XmS4ZjGXW
TLSH
T17742D8566D28AD3B5CC7E21DBA55BF53E7F9603261911F08ABFC8A0C14E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d379ce42669f0a601e708a13967755504f87a4938cc0e8e8f82ac45f39d2ba7e
MD5 84f6fa4b0217b5282dc7378c0965221e
SHA1 6dd7595b28860dfe54a96937b4e932828762ef79
SHA512 e4caeb37ae55474c7ae08698e2149194a8d45ca51c18865f38592127be9029dcf47017856954aa715a771b2eafa1eb67c20a8bf27903d83999048430e5161fb2
SSDEEP 192:sxRnRgbT/fdskJTVYqYCbSzoA8poCC/g6+WNuBf/YEnhS3EGVhIgIJ:sxRnwT/fdsk9eqPfm/5c/sXs
TLSH
T17B32C7566E28A93B5CC7E21DFA15BF53E7F96032A1901E48BAFC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 b594e54e37a3cee780ff9dd889458d48945d29f25f14a4cf2d6290614873ec82
MD5 86858c607adc8e3d602832328f350c7e
SHA1 f35ce08ad4d5c02da40a4ac13356a161f882b516
SHA512 555ffcb675eda3e466be5803c13940a0c77ccaf7c630aa87d7bf95cd71e25f665c5d5eb8e55c44bfc66904dde7d73ba9eb5d167b49154a8420c58c0aee84584c
SSDEEP 384:sxRMKm1T/fdsoBWvKe6dP1/occC1/50XIylycRKmS4Zd1bXlP:sIKm1T/fJYK/PRrh/50XsgdVlP
TLSH
T11582EA525924987B9CC7D65CFE35BF22E7F8202398915E4CAAFCC91C14EB6ED2207847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f7319d7190d85c83124e34c36b7890ea809a7320aa4e0b8094e2a41b4a2ba798
MD5 c56ab2961f7deff4fe127c4e17d1cf16
SHA1 d2b0fcd3599ad342f5604abf997ca67dd3a43612
SHA512 a60d07590a93ff005e621146ba8ef31e3ef720be7c8382ae6f7dfa5421d014b350b53cecdc3c91bd42c5e77f2542eef6f85d38f4ba0b259441a9e5fada8edcb4
SSDEEP 192:sxRgRgbT/fdsoJTVYqYCbSzoA8poCC/g6+WNu/NXYEphS3EGVhIgDMJ:sxRgwT/fdso9eqPfm/5gXaXs
TLSH
T12042C7566D28A93B5CC7E21DFA55BF53E7F92032A0901E4CBAFC9A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 2f1d904cca4f1268fed84e3cacc63311f233b9679f4b6d6f284edd411170bdce
MD5 52b6cd481b361c34b7bdb738c99b503c
SHA1 93bbbc2030f7f67eaba6e88c89d67d16a14131e9
SHA512 144fea3673842aa2a46ff87cbc82a302b507b2c6d30427d29a326c5ce54456688fec5b1e640ddf2502805496dd27d609af5481c72d5d5b2cdce9a39a6b5c82d2
SSDEEP 384:sxRMKm1T/fdsnWvHe6dFh1/occC1/50XIylycRKmS4ZdekXlP:sIKm1T/fIYH/Jrh/50Xsgd9lP
TLSH
T14982E9525924987B9CC7D61DFE35BF22E7F8202398915E4CAAFCC91C14EB6ED2203817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d384a577b890ad52d963be8d6df5810c2aaef6fcd12b31597cbb1fd81507f685
MD5 915c211f48f5fd95288b27b20e7dac76
SHA1 455e7c8b6a2a5c1ce661ee75d39bc3bcc01e8ebd
SHA512 f41be69eba8e3ac1f1c2c0ea1e2b80013c59afef082098dc4e8d7faae2192bc1dac775e5b211ea88039a77088d8952ca98b68f979c40806ba112d79a9a21edc0
SSDEEP 384:sxRMJOT/fdso9e6dPS/oc5CC/5UylycKmS4Zjy/XW:sIUT/fF/PUrl/5+gKm
TLSH
T14C52D8566D285D3B6CC7E258FA16BF62E7F82023A4945E4CA6FCCA1C14E76CD2217807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 da9833fd4ad0a77245ca259e9179d588a544a0719ce30a2a646edadc2e6e72dd
MD5 d85b6e513cd73904ab7783cc4be7778a
SHA1 49fa95ddb99608b7025fdcb3e0022b987882d1a6
SHA512 09d98351e2dca9d8265ca9e9fe66f1d03ad3d450c317165fa148ca35b1e9bd0c46adad74dfd685a7f51d08ae3a6f1cafc6bdb0f32966cd5dd09046424d489bc8
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfsQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO:40Dk6DJQD810DbWgQ6DjfsQDF8F1+UoL
TLSH
T190B2DB2F640DCB7F5F804A9DAC19AFDB6D9802C797988D8047FE990C02C77EA91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\temp-index
Size 360B
SHA256 47a6b1a30b4ed78e94df83a3e3b1fb4d92529420dacdf83bbd45e1c8112651e7
MD5 9e165414a8adba8c8e5c889112b5585f
SHA1 1082dd1bcd5e183a7c4453f1d2b34e0266370cc8
SHA512 943c7ccbcdc4da8f3c6e0d98dec2b7159769df809345738f40a0b4b082c28142d675e49504240e6045c50121b49772d00997e25793cbcd47df617c1d7139bf8e
TLSH
T1FAE0EB4A8C924C07CA337D3A0633502E333B03FD2501AE6600FC001D9A15E3C4A06209
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 360B
SHA256 d1818170d5ffe842f8685286460f016b7e7a5c8da08d98b4559e3972c40abb37
MD5 47e65ccb644e7dd9bd380d9ae77a3f0c
SHA1 7f87c189f278a74654e8556710a346e6e6e6689b
SHA512 127345592eabc63b37c947eb767b75fa4c7ee029ce322bedf98721d9c31eef6b56c74f07c6d42b9a0e9cd27e7dd4c3c22b75133dc0f12f5b06a5de9d73bfcab0
TLSH
T16DE095CF40D15E52DD269D791503911E333F0C342505F62F10DE645F59617FC894960A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 2KB
SHA256 84ee0cfbfccb0a545e9c0da469ca06f17511255e976b65b9a0562e2dfa2a8b0c
MD5 37e837a5395bf3ef7b0e591a33ffb253
SHA1 199db9c160c2754ca016677262fa18bf9eb3a21c
SHA512 b0639ac000169f2bc8bf9b9d8cbd6b6a9c462a5afdfe1608f7f3c51edf2c2d9588062b705ad5848a22792e4f3e0b8320d8e95d3d2386e7313eab3b69d2f002ca
TLSH
T17851D68E8C840D6FCD6A14B219F71442333638FE9B89DE0B19ADA1349C8332E1E4460A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 72B
SHA256 ebd0b10928f4082e63ab45d6bd66aeef35cee0b0861a5dc3a64f390aae81c8ea
MD5 1d1dad7eed7d706d24a4999819157226
SHA1 8baefdf8bf5e8d698d659c79bc0f8e57a16d68af
SHA512 0e0dcd39d59ff30f176b7e2e6800ee3f50606a2580d932e86d6e6ff8f0ca95442cc13c4aa415783f32382948c42a924845402435d25b30dc1fe0bda2ac7528e1
TLSH
T1A6A0025442C04406D01365B01DDB816923445914A1411B2940D10349D8A45665D5311C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598c96.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index~RFe598c96.TMP
Size 72B
SHA256 7832e7cf21a746a45a50e155675094c9c5ab337616db83bbb2d6fcedfd6810db
MD5 dc450d40c1ea8f827c4ba5677a5ed040
SHA1 4bc3e2a65f4ba00c79030df08e0d412c1cb68835
SHA512 f8a6a938c616aac405a3a78291fd32258e3404e15f4589178925c0af16183d247625668533dd2c6c17153fc1ed0d22af4f020ff62e34c5e01b3a28de50604b4f
TLSH
T186A0021023C08245E41225F91952C64136D398101210130E71DD9144CC548C045C510D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c5b91122a593433e57618200e9fda9da2189dd39e25dcfa8612804d37ee00eca
MD5 8c47dc1760b1673f88ff2031ff0d60a1
SHA1 d5014d2896958b7c6c9177e9ac2ef774724610af
SHA512 1da6cbd9964aa6b56d3df2cf9c293ce34d348f57c556acef67ac69957a8252dffb8b1f33b2c0d50259679c90183794f0a53d05c687276ac67d830e3f1c7a467a
TLSH
T1F5E0C0FB2CE71858ED7F83C32571C67101017838D148EC4E011692C700B1375A88AD31
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 542B
SHA256 53cd2e45afee4fae0b5aa81de559904e7451b9a0d863752899410c5bd4283f81
MD5 b5e0a77761788396f860bcde01df7459
SHA1 843b58abf71e36922ff7183416c3fdcd221514f6
SHA512 743e1c0f0f1d19ba00533f76560587a0a88f5593f2b1636dc004e2fdd882349043a3a3bed8a0b11f9866db884e6dcd148046b321faf6f4f7b7cfb6135aaaa275
TLSH
T13AF0125A4B185313E55603F768DA73842BB1C5088BEF9ADB954FA1795ED864834151C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 dda9fd32ba58e3c595bb33a9b0228a9acdf698fa38ac503e8072deaf77479695
MD5 4c525d6c1eea124f8a52e53fa214a4d5
SHA1 f17072e5d4d55337f04f6efc26d7d8c531efa663
SHA512 98191cbeffd1f293267e97a97d8bba7280379ca3c150d5ef7454902904a0ce0451fa1f1b68df4476b30e662ffc3ef48f0254ab1d96542094fb8e05651f68dc19
TLSH
T1A8E0DF1046CCC3F9B89520834628830CE2A47D47D3CCBAC62F889C64A182D85B1935A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 79fa14ece435d600d28baa2a8328728f43adb41cce69bc4fa69b252c1edbbb8f
MD5 11a01e4325fbb792c53ed8195772bc63
SHA1 cb16c12a25610244a635bcb0ad974952802f6b04
SHA512 725b87216394c3d352ed7f3af5db57357d411c6cfaf5ebcd8920dec9a9002539ec3c4602b81e6495b8b393eaa4f91b01af3b2e1c4c7844f838dcd7daad2f7913
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe598c67.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe598c67.TMP
Size 48B
SHA256 80d2a3e863c2e4509b9aac39602bb8c0bee5b27646c3a77c2d3f44cbfe90a318
MD5 418a634b65790b43ff3e38c90fb9c6e9
SHA1 6ea42a8eb7eff5adc8d05c071707ea5db7785e68
SHA512 52e51569f6e2a042bf963aec487f61851f684d6f4c5540f3a59e5274e6f9dcb9cc218780bf0b645e3540df278aec5e24575abf03761ff1a3e0470319750a8600
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 256B
SHA256 c4f12d781308b42d4d10d13e119b9987812a92c781a09d54324f899392d64304
MD5 07f2e5ed31f4123a284c57d37c9dbf29
SHA1 3f2a5be5e84518b8888324cb0a3b083562f776fb
SHA512 04dfae61528f171e44302c144dd08bc35db61971c1ce5f9fbaf09bf42abf039e77bed388df47c964b3d1c3236db668b6c255521d54f36f779f2a8303ec1dcdc2
TLSH
T14BD0A72877686B93CC5F22792BE05309EB55D54510008E97E50CAE575D475641E03094
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 78368b9359c5c83b1fdec9bf0f774abd477d0efff0e74584818dad22f7041d45
MD5 6611198dc364c082e2ec2ce0f22c65a2
SHA1 677c05ec5c258cf52fe445f51c15367496092c1d
SHA512 ba8177f58012ba658ff7d9e18bae21548b11b430418dae6106ffd7c2aae13b2b4451cb445431f45ba11ea245141e06245dda851116ab789e472721fcb59fb13b
TLSH
T1D9E0D82416D9C7EAB5952087A269E30C81A2BC53D7CCBE953F09D880B246D80F683960
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 4195253cb22d5fa353233439adee47fe24fe0bf1694b7be2e46eee828d12c358
MD5 05b48bce771e4dfee064d8f49a53d479
SHA1 ba1697385d7f5f5b504d5239fd05b64ab40662e3
SHA512 0b0c673c46ab18b3c67242aa3add5916976c8eb6987f8b28006adc417f95b2a1baac78e1d67b35c424af6eee16bd65569723d89a482f1d4a12d4e51000b50aae
TLSH
T1C5E0207145C4C7BAE88160879268975C82F0BC9793CC7BC1AB488850F141941F2E7DA0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 547ff93440769b8286a3198a684dd4b57fec457ef6d35ec2afff1bd0bf113ab8
MD5 a6a6f6b18040174ebbffe0ff85bc2cd2
SHA1 1e8257fc947cc4898a66f84c9cd583c35187ac53
SHA512 08f769061850b3a66a9edae7b5a27398977e4613b7c615b22186fa6d916e314ba515ccda313cf95b3884e115b9a3de6ff6591ae2065fc576c194124fb516e36b
SSDEEP 48:K4NIJKeE0ryltIxKWkUOxIRKyMcTyJYIm:K4N2KeEy2tKKWkpxSKyMiqY9
TLSH
T153A1250838BF02416C3F790D8D5D86669A5176633094ACBF7BA984A64FA6E01CCFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 1561bbb39a1784682bfc2b92598d6fc96746a6e37ba7f20a72f99658ccf69526
MD5 648e67bb9df22422a4b5d0521e091fca
SHA1 c751438eaf76dee0f95cdf25245565ae9e81b092
SHA512 4ca8e4e76968e6211f01c43b447159b350f4906cb0827a1cbb3a831be7ed7ee46b2e61cdfc60eba50d17c610205fdd6793ba23bd724c154a651ec988aabc4871
SSDEEP 384:DNrRZyCSDnxTICWRpacJMEhIKyll7svbFKfk7:xFZJSDni6yI1l7svbF9
TLSH
T11A44740A7B747001EDE6D9721CB080771E3CB16DCF62A6916DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd0181ee-eba6-4683-a98c-19a9f212fafc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd0181ee-eba6-4683-a98c-19a9f212fafc.tmp
Size 414B
SHA256 edd288160f7ffbc5c6e5b74ca620929852d18036d038e3b64a9e526879a4d4dd
MD5 af9f15d70bfa8763e0ec6acdadeb6dc3
SHA1 3109ff8749a3d27ed6ec1413e0ba22dbd4f1873f
SHA512 83374a31ac4158e024653119bd2aa9e066a67929277e769863631c02a431596b8635f8ea595b6094fa372ec2920aa7855d7506ada29770b573a64358cca4381f
TLSH
T1A0E022EACC21FC3718FD175CA0454B49EB89534B2A62880F3F3C81088FB067A098AE5C
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 aa1dc42de62950c28a5d9751d294c29f9bda9261c0aef7b90a275e62a30634e1
MD5 51897ff05630c9f33dd1a2dc77ac2cc1
SHA1 a96bb2dea4012eca757b654d6ababbd7ef003573
SHA512 5764dc7f5a5e22a5703abf0f2e9fad793058e723037088929e2aea612157b31acb03aa9078bd985777661b55d98aeda30cc4272ea6353d09690654531a3adb05
SSDEEP 192:LJQvIIIubuMIMIpYcYU7DOrIAsOli0Tss6FwFXFwlFFk:LJQvIIIubuMIMSB3erxsM4s6SdUg
TLSH
T1824262AA26451B77C09F5F3A13BB87405AD84C828432252D72666C0FDDF3F9782D62F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 3e2a66381a0ef58e9020cc1ba7ecefd7a3ccd4167f113e010aae8b21d83f56fa
MD5 dd55e0e30c0153bd1f3263f177e0095a
SHA1 620293c414972eda5e8bebe7e479954c38efa3a2
SHA512 eef711fc1fe2a2d86f0cd0ebe1b6e5b33464688fcad23cd79c14a7581570b35aec1e82a6789608bce4e74a799e8d2bb546f76691b8455f44cf7b44c197d743e2
TLSH
T1D8E02694A8CCCAEEF864608B52285318C3C43C83EFCD3D862F04C888F009901FA87591
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 81dfe86cb4037d09bd164410b050b67df8063b232b87f5ebb3da41a2020d37c4
MD5 b6a9c258ecc43a993dda3e8665f6d9a9
SHA1 b75c6f87a2f21f06747c12a7f6f886d2d304c1e5
SHA512 ba31ceec1efa4a3def3a2a1294f43361239176282fb0852b195fb55749b08ba45146e0c4a815fb49ccc90dcab70973279d3538fda47934516a8e21907c056a4d
TLSH
T1CD21C295F330C159E14A927A647A9B291334E8458FFDEC0F457960356EB2F080E4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 665a7b16059359faf8b8fd1df794687ce5acaacb4d85ac624605a1ca4b781d94
MD5 8eff510e22e7578a6dbbcdcfda4d835b
SHA1 c972e97fe15fe13f9241aca558fd21111ba6e45b
SHA512 6aa5cd4e3184fb13679006a97f5f9323e5704c934d33d13326a02e66ebae68040b5cf81acccd103d9704bd7ba8153093883a4dd2e9bcda0f2d042ee02cb4bdc7
TLSH
T1E0E026D0A8D8C2EFE86060C3557A9358C2D13D83EBCC7E621F80CC44F142E42FA8B591
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a7cc3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a7cc3.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 7b43c4523504e7c4b3e39f8bb4dd2bd909f964e22674ed8e29b71237b6dc7096
MD5 ea1f9d076a551bc7b797da6526dbaea6
SHA1 df6e8e1cbbbe88debfcad3a17bd5dad05795c05a
SHA512 07ac159890ca119b70d60881692b1e1efd98803ebea9cf52861f04b7fd84203cff95bfba22948df7f9520961966871c6ad56063b982f6f3550475b2c7bda36c6
SSDEEP 3:MsEllllkEthXllkl2zEelfgaSKt/:/M/xT02zNr1
TLSH
T1F944040D7FC41405C5141C314011C35C3374DC5005755F7334530C137DC75400C10744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1bc1871b45bdffd0c0330bf947709bd32550d74e9527b418adf5c2c551334612
MD5 48928bdf0888cd339c0a188ddc90371c
SHA1 40f33f9018722f695ae7e8c26e5df0ccc8be7880
SHA512 946c0254948c05e8630c64d91ce592a6e0bb9679505b79431b513f937568ad2f5fb58ecd091e1f3ede5ee290521cfc68ec1f2a307591f22474ab05a38c6e6baa
SSDEEP 768:A93LfaDTd+ZDrukFeX6+qTko0u229a4vsTq5Pi9PsM:A93DnzkvVTVKa4l5PU
TLSH
T169F2BE71E8655CB78CF6D781B2172247AFB92173D6C81B88A9DCBA0D158B16C170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 cf2cf61da446b99a62c7b68d9e176370bc2a4ae4086888ae71fcdb105d00c617
MD5 75ffb5158baa90c3fea08260300aaa42
SHA1 5d982c3a065af471fb0bed3b5bf945f8745adcca
SHA512 e2a081b53a6395cae5f50b963a133dc9e0ccd17d1ae71320bd44e372ba46bcb921d512feb290880a7859018cd488eeecde14b87aa2086951b27e6d663d1e4d42
SSDEEP 768:krv+4UNbdG3LHaDTd+ZDrukoeX6+qTko0u229a4vsTq5Pi9PsE:kbsbU37nzHvVTVKa4l5Pc
TLSH
T11313BF32E86899B74CF2D784B11B22477F7825A3D6C41B9499DDBB4D068F4AC170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 9c8db182adda7c8da81576ce7a33accabf1c7737160e2ff29272186768a9477a
MD5 c7b28c501005ffc16c5c5ed4f4052a29
SHA1 551cadb9982a5f14858a97db0afb39b6371c0f0b
SHA512 48b0974ac8324c474a78aab634d7c99de3c075ac080275841bfc90e0fcb2d4268c7f6dd01b262be8f17f2948d9fb1ea035be3aabcc4dfe818242f0cc1fa9d906
SSDEEP 768:L93GKb2DTd+ZDrukCeX6+qTko0u229a4vsYuYPi9Ps8:L93rnzxvVTVKa4mYPk
TLSH
T19EF2BE71E8659C6348F6E78172672283AFB52173D5C41F48A9EDEB0D158716C2B0BC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 27d1a56eca7f6239439c82e8f29a7b2c5a8fbcb9b63bbaa5fbdb52a0115892ed
MD5 348bf9b39835a0779a3a0eca510caf61
SHA1 0d70149c4dcdd2c83e3771a1e10afb35f5a0ba7a
SHA512 356d29e641d2081ce359013b736d6d79715db513ef7a733f4b93935651bc78ac6777c5d6b7c8452e66b6992b2997d2d17eb2504184504bcf275eabd2326f5172
SSDEEP 768:n938lb2DTd+ZDrukFeX6+qTko0u229a4vsTDqFbG8Pi9PsM:n93EnzkvVTVKa4koG8PU
TLSH
T1A3139D3DEC60497F48AEF744221E26266E781273D2F41A98D7DCAB0DD17A42CF706826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 61KB
SHA256 452b0e55b69e168298d36769e831d9240e4c1e184c98616de365bc16fe6acb38
MD5 74fa6eedc2880cba41a79200ca742204
SHA1 7ea705cb6334d26db98db4640ccd7d6eab09c53a
SHA512 6042c6dad626e7242e34f4df1950f64d99fc40ebaa6c5def75716aa18d0beebede7d368bce862be41e5c26499946179148d29d47961451eacac22b2751d58160
SSDEEP 768:MFH931wgUYbQXeX6+qTko0u229a4vsDk2cz9M+OcOhk7mmallFc2ZDTFeKR0Ruid:693NvVTVKa4p9ChammaZc4eKaRuk
TLSH
T1F1536BF598D38937D8AEA747237D2D069ABCC063B0D85998F7889E0DDC9217FD306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e001a736561d20c7c841912c1e585cc013338a1d120c7439846f4a49b93f9a00
MD5 dd77d36b0f8336734eb4fd34d70d71a3
SHA1 236b4b72fecba4de5c90a0244a2ce2d8c26c13c6
SHA512 8c4574a9b46b76c773d02088ff80ebb4ff3783627d412bfe05a4fff711e4cb25da6aead14a569c557e23e900fd04ce5a3d4f447be37549f774a2b6d5aa8980c0
SSDEEP 768:V93GKbQD0V4XZDrQeX6+qTko0u229a4vsYFeKR0RSi9Ps8:V93un/vVTVKa49eKaRSk
TLSH
T10103CEB9EC619C7B48FEF384720B22436EB82173D5E41A48D7DCAB0C145316CBB0B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 114f7360a642b101ff7c30b564fc214902d73a19ee2350a3d05f9b8e86fd3eef
MD5 1c1803d87ef82e5004177e1afed319eb
SHA1 11348047e2e38f6dc676a0ca16f4ff149c5860a0
SHA512 c6454e4c2fd1111a5a4776b86fee53f66aec32554921dd83fe84f2d6bc62553a765e79096377d1c6cb6c4a7d881d1bb6ceb022c420babb33c73884819fa76fd7
SSDEEP 768:prv+4UNbdG3Es2DTd+ZDrseX6+qTko0u229a4vsD1eVH1SdW:pbsbU3/n7vVTVKa44EH1h
TLSH
T13903CF32E8A989778CF79784714B75472FB92163C6C80B80D8DD6F4D068B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 a56eff8edd4d0da6e3e2433d91e19ba661c0544567c63c37f68a73c8a04f9293
MD5 d22557b510a675adc76c3c3dd03b5b41
SHA1 bf4f4a09ed0ffbe0f4940b0c9b23dc85c9594d27
SHA512 250124bf030e3ecf3b908da59c27931c1c174fcb521871072dc3b0e67e8d82a063d105ae50cb0ba0a90ac0d24561069a8e64431216c2fc3207bc86e7ac552ed6
SSDEEP 768:w938pb2DTd+ZDrukFeX6+qTko0u229a4vsTq5Pi9PsM:w93KnzkvVTVKa4l5PU
TLSH
T146F2CE71E8655C7388F6D781B2172243AFB92163D6C81F48A9DCBA0D068B16C170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 5901143f75cc162423679af1df8d2ab5f04584c40491ab4c350e5386f95110c8
MD5 bcfec40d6030767db1aac326a8f44815
SHA1 a9cf315455a1b23a38394d1ffcca8b952ae3a044
SHA512 d73588e1f24c1aeea646521e696d15d3815358176bfc146367858f7ddd971878cd1a44c0eff9675c990eeedfd1a49217f4281b9548142994127d825449903e6c
SSDEEP 768:arv+4UNbdG35nYDTd+ZDrukgeX6+qTko0u229a4vsSq5eVH1SdW:absbU3TnzPvVTVKa4s5EH1h
TLSH
T12203BE32E86999778DE3D785B14B72472F79226386880B94D8DD7B4D068F0AC270F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 b152f315253c1fbb64a509aa82bd69f09981d7d0fb9cb13da3b1161c5e7d3d5b
MD5 2fc373bb281045c49ba3a88ceabd84c8
SHA1 82e2b9230404de6e5fd4dfca5b6a99a33211ddff
SHA512 bacf320543848886f62a29415346e24c78b5cae7d7a5b210af2547115b8c0f7646300f1bb95d9a4737f8b8f7c432a8556615094c18b3d8c28ee53ac74baae789
SSDEEP 12:TL0yEJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isJGyzA7dKuQQtAh:TL0Dj0afDdWec9sJVUObse3PgXkGVjy
TLSH
T10F92EF21B9302067E8EF0B76F9434CA00DFD12AF8DABB50099944DA15962AC67A551F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 02102598347fefa6996467b91a2292eb8f6822740cd57cec4f93ee26b29c06a2
MD5 42dcf8d8b831928127370f5058048e5c
SHA1 71995106bf6686bb8c559b83bc279d0ab1d930a0
SHA512 b552a4f6fb6cefdc0df561041a193b0782d76a8b44cfc1af71edd14a451a5d4ece8725d3fdcd375b94c1daf73a4bbd2faa84a2ef203ab067c84cff43f13be8d7
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d25385ed59677f38a6596d5f19a435ec512530cee122803a1815dab15472bc7f
MD5 5ab45558988881cbc6227998613baf41
SHA1 688c6b4644d4d876aea8f2ca06f7e230e0a57075
SHA512 a1028bde45191566654c1ac794ee64bdc4da8b0543fb1281e0fb5eac540957cab6fce3c1537550c90f5c821fa22837e398ea9ad68cd30f30bbb32ca899fde5f1
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe59622b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59622b.TMP
Size 392B
SHA256 1ca35f8f9026c2306bc2c48836f4b42bbc85c62e3ecfd7b5239a1b60c7c6048d
MD5 bf4507ddc5440e5a9dcc5e65c2ef0045
SHA1 f74d633fcf4c78c5b5317f0e02be9186b714b20e
SHA512 6c1addab5067d6022105140a77a45440ad5dd01f425884651f9caf981daed75a37f325f756879afc87d44c5e36cb6007d06b001d0fc5325f86d41c23643291a5
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 70e8969137618179649a771912bc45c8db6d0a7deff155d763a69e7a31949e68
MD5 a22518984f608085c9f711464766ce51
SHA1 2d835f262c5e4574a1136a7bd667507f0133a0d5
SHA512 4dd9b3455807ae98f88acde48d28a27175e9f6373b13128eac7586fef2919c49a5d7909912f693b432c26a98aa97307aacefd1a075a3ba751d1f5522e2328151
SSDEEP 3:MsEllllkEthXllkl2zEelQTW7//:/M/xT02zN5X
TLSH
T16C44044CFFD41505C51C14314031D3543770DC500513D7D33C554C135CCF5400C04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

a9a1642a-9a6d-4419-ac02-ad68ce141929.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9a1642a-9a6d-4419-ac02-ad68ce141929.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f0818e9d-1034-427f-964b-7b64006634f6.tmp

Path C:\Users\Admin\AppData\Local\Temp\f0818e9d-1034-427f-964b-7b64006634f6.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2080_190574400\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download