8031d8193a802c2227e7ecf8c64d7bbdb9621cb0d82c0f3898c86c96e6eed050

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
898s
max time network
897s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-uk
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-uklocale:uk-uaos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
trubavpn.html
Size 280KB
Sample260817-ythb1ayzbx
SHA256 8031d8193a802c2227e7ecf8c64d7bbdb9621cb0d82c0f3898c86c96e6eed050
MD5 b3ecbaa3cbdae8498be4dac6d05e3a10
SHA1 80af34ddb67a54df04a2d56c6fa4cf08baf5516a
SHA512 3c75e0a261d16e875158a0181c3a8249c7a6ab99efd19a30ec76b6394009be88b1756f45c4b8d59270123cd60f3730e5e5d3afbff56a3b46dfbdea78838a892b
SSDEEP 6144:Ns56cFrKE1LOM0rl2Ydvz++evUiF/elTkapW:ErKE1LOMH+ev9F/elTkapW
TLSH
T16954C8207208FCBE940796ACE77CFF392199A078FC16A35465BC653626C7DF5B963880
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\Dictionaries\en-US-10-1.bdic	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2764	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314706934263042"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{66910A5D-AA81-44B7-B56F-816762450255}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3048	msedge.exe
3048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5704 wrote to memory of 1948	5704	msedge.exe	89
PID 5704 wrote to memory of 5584	5704	msedge.exe	91
PID 5704 wrote to memory of 2764	5704	msedge.exe	90
PID 5704 wrote to memory of 5584	5704	msedge.exe	91
PID 5704 wrote to memory of 5584	5704	msedge.exe	91
PID 5704 wrote to memory of 972	5704	msedge.exe	92
PID 5704 wrote to memory of 972	5704	msedge.exe	92
PID 5704 wrote to memory of 1300	5704	msedge.exe	94
PID 5704 wrote to memory of 1300	5704	msedge.exe	94
PID 5704 wrote to memory of 1300	5704	msedge.exe	94
PID 5704 wrote to memory of 3024	5704	msedge.exe	95
PID 5704 wrote to memory of 3024	5704	msedge.exe	95
PID 5704 wrote to memory of 3024	5704	msedge.exe	95
PID 5704 wrote to memory of 5832	5704	msedge.exe	96
PID 5704 wrote to memory of 5832	5704	msedge.exe	96
PID 5704 wrote to memory of 5832	5704	msedge.exe	96
PID 5704 wrote to memory of 5052	5704	msedge.exe	97
PID 5704 wrote to memory of 5052	5704	msedge.exe	97
PID 5704 wrote to memory of 5052	5704	msedge.exe	97
PID 5704 wrote to memory of 1876	5704	msedge.exe	99
PID 5704 wrote to memory of 1340	5704	msedge.exe	100
PID 5704 wrote to memory of 1876	5704	msedge.exe	99
PID 5704 wrote to memory of 1340	5704	msedge.exe	100
PID 5704 wrote to memory of 3512	5704	msedge.exe	102
PID 5704 wrote to memory of 2736	5704	msedge.exe	105
PID 5704 wrote to memory of 2736	5704	msedge.exe	105
PID 5704 wrote to memory of 2736	5704	msedge.exe	105
PID 5704 wrote to memory of 1452	5704	msedge.exe	107
PID 5704 wrote to memory of 1960	5704	msedge.exe	108
PID 5704 wrote to memory of 4828	5704	msedge.exe	109
PID 5704 wrote to memory of 1080	5704	msedge.exe	110
PID 5704 wrote to memory of 1080	5704	msedge.exe	110
PID 5704 wrote to memory of 1080	5704	msedge.exe	110
PID 5704 wrote to memory of 3244	5704	msedge.exe	111
PID 5704 wrote to memory of 3244	5704	msedge.exe	111
PID 5704 wrote to memory of 1212	5704	msedge.exe	113
PID 5704 wrote to memory of 1212	5704	msedge.exe	113
PID 5704 wrote to memory of 1212	5704	msedge.exe	113
PID 5704 wrote to memory of 2908	5704	msedge.exe	114
PID 5704 wrote to memory of 2908	5704	msedge.exe	114
PID 5704 wrote to memory of 2908	5704	msedge.exe	114
PID 5704 wrote to memory of 1556	5704	msedge.exe	115
PID 5704 wrote to memory of 1556	5704	msedge.exe	115
PID 5704 wrote to memory of 1556	5704	msedge.exe	115
PID 5704 wrote to memory of 3272	5704	msedge.exe	116
PID 5704 wrote to memory of 3272	5704	msedge.exe	116
PID 5704 wrote to memory of 3272	5704	msedge.exe	116
PID 5704 wrote to memory of 4316	5704	msedge.exe	117
PID 5704 wrote to memory of 4316	5704	msedge.exe	117
PID 5704 wrote to memory of 4316	5704	msedge.exe	117
PID 5704 wrote to memory of 3388	5704	msedge.exe	118
PID 5704 wrote to memory of 3388	5704	msedge.exe	118
PID 5704 wrote to memory of 3388	5704	msedge.exe	118
PID 5704 wrote to memory of 4648	5704	msedge.exe	119
PID 5704 wrote to memory of 4648	5704	msedge.exe	119
PID 5704 wrote to memory of 4648	5704	msedge.exe	119
PID 5704 wrote to memory of 3048	5704	msedge.exe	120
PID 5704 wrote to memory of 5096	5704	msedge.exe	121
PID 5704 wrote to memory of 5096	5704	msedge.exe	121
PID 5704 wrote to memory of 3940	5704	msedge.exe	122
PID 5704 wrote to memory of 3940	5704	msedge.exe	122
PID 5704 wrote to memory of 4832	5704	msedge.exe	123
PID 5704 wrote to memory of 4832	5704	msedge.exe	123
PID 5704 wrote to memory of 2416	5704	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\trubavpn.html
1⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7fff90dbc188,0x7fff90dbc194,0x7fff90dbc1a0
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=uk --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,14796922682787305397,904071001705109438,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,3864388936638518352,14178675262111025180,262144 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:2
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=uk --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,10033944139129197928,6155396569197802026,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:13
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,6222652201154730972,8436298800727476258,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,2120357864669569085,8119933438690386489,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,3975559378485137455,14769288187754694404,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,10424516684653263237,13100673845077948250,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:9
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=uk --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,7385096136982964010,2005042669720161421,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:14
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=uk --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,12324477319089507846,16388722264041833539,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,13597207668365483097,9093559326258134412,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,13597207668365483097,9093559326258134412,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6592,i,3081524780897682860,7974565510559556775,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,8586035490894002953,8154934886141848716,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,10783118480242417910,13764906358832602650,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:14
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,7648891172502900217,10124959204653194181,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:14
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3096,i,17133817317873829142,17265877371083074616,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=uk --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,14260799459974725893,18232922761183269820,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5144,i,17646269903491392051,14899012730301711625,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5472,i,289430003841142078,16615095481162161705,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7072,i,17021624536999421806,13724548966037688881,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7144,i,4237735009880570051,10095199564334283129,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7252,i,10622183261843942871,7290181975019754347,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7476,i,12607571552365543618,6056014548382001653,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=7568 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7448,i,7625373980659302143,15821889920317285079,2097152 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7604,i,17545945586031240430,15839089173035500752,262144 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=uk --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,4135332521018318021,6257655535930836659,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:14
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=uk --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,3955122481658580154,6712955079296212862,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=uk --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,13460041346733646786,2899730255214329694,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=uk --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7504,i,4142207812650204162,15616186048795692363,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=uk --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,7488945849622649999,12524480757306551107,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=uk --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7828,i,3900790252339314279,11027967513680073855,524288 --field-trial-handle=2848,i,4449282612523236006,8388629439796643222,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:3256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3112

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5680

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 78c22f4104b8544a9b80b28878ee030942febb34a87226614ab58d71d8e59193
MD5 a3dc267635ff0e23c64e59f485532ef1
SHA1 27813bb6f188527abae89a3ef13a10d1e14ba97a
SHA512 a19b110fbed03c6519cf00aa56f80342a911954fff3b91324997848d7b04afa029d9ccbf4e105159b87fb063913efda305a5e0a330f82da8512888c651e751de
TLSH
T11EE020D418C5C2AD9B55A6C7517E530C8180360B96CCFA5D570484C8F546F40A287F50
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 466d80bb9df9cb23e6980220aca8c9118ead21d4554ab2e06715a1fe5acff1ca
MD5 2b49c0394a9426237c77397e5fb1070f
SHA1 ff7fd2b851bf5c4c1618d52e3c467a4f6226565c
SHA512 8e262bbfed84da7aa83abbda31cea2690ad976dabc5bc0cdaa9cbd05f2a0fa51d7fe0248eb86651a814b6954e3f93389f5d87d5d07857ea5ce5b49bf4843a1d4
TLSH
T119E07DC446CAC22EEE5264DB5168574CC290370FD3C8FB0A2704C588F687E84B3E3790
MD5 SHA1 SHA512 TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 16KB
SHA256 790f401bb46296eab6dfc19654760bbb4d5381ca4e4105b3d2e273421d893e72
MD5 c87389488b3f8f81123b93a11e4d8050
SHA1 959fe3637259f06462183e854d1cb0cb9eb8cac7
SHA512 b786baae17a4391fb8691ea2ef99166f78c3eb53bc9c0338c5689f7756ab3cf8f07e2628571125bfffa058c88fba181032388e80384b622d534eb8f909ff6217
SSDEEP 384:hBY2AZuTIsgFL7orwn2qNVzlAgceYlZRlovjW0Of59nKUnpE5:hBlTIfF6AtVzl+RmrWPFtpE5
TLSH
T13672D028036DAF6AD89D383D57D8B026969FC4778CFF168490DF8C6C6044F56E07589E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 37KB
SHA256 a1b8fd310b65008ed8ed8dacab2ed69addd619511f51671ecfe5bbd082489f44
MD5 cf2ed8ab0f27489024edf36f95abb610
SHA1 a494bf7443bb487979c4e17bef96842403d65b3f
SHA512 da45ec536c2ac9e5372b880af9b27a8290e8777da1664f6b3a29b2613e4da4ba1a25cd318872857039c68ca3b6c0c08761360d9953e30d094cbcf646006a8969
SSDEEP 768:RhjoPXJAUqrFJj/iD4iN/WJat2hICxcVL3G7cHI09NlSklcSoH:cPJNqf/iN/oaOclGYHIINlSD5
TLSH
T16A03E13542F532A6F80F16967F315A1B2F726B5F2EF84E43C29B48A1D23730994220F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000db
Size 38KB
SHA256 3370f2e33b0f3a2dae282f78a6bda56adacc76aaf06c7b388db4fda41b90b92c
MD5 b06c7a8dd8ad214e1f952bfae09f9301
SHA1 a0ab87119773fcc0720f1732763c28db8200f802
SHA512 9755d8ce26ab5b0d2293f00285d2334dd48e4c1b6f78a452758821133bd3d7aa3c8134cb2fab12eebb7120e00feb0b719cacacea7c12eb977c937d5cc50c4c43
SSDEEP 768:MS2Glq2FZ5dIEmd9C/imy3NUm07IARvRqLI:dSYfydk7IARvRqLI
TLSH
T16003F12EB1C51EAC510CAB3D92B74368952353063E6952F08DC297CE8584BD06AEF3F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
Size 24KB
SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
MD5 8b62cb77af08af8a3c92a15d0534ad07
SHA1 a7d15c6d6a8177b229297c54df57bd344b794513
SHA512 3ecf677f8eff0dfd5920b9d2ab8b8de21f7eee62ab429a033b0fae624a6a88718e595a81bfb5dac841f1d67bef8f0d786ba57a5096327cf959689dcecd16a823
SSDEEP 384:ziHP8fq520czx05WRFDagKW0LGE5zX9twpBqNuCxQSBx7eh9nAj751HDdg8Y:zcEfmY02FDagn0n5rbwvCCCo9o51+R
TLSH
T151B2E17C040ADC4CF924AD5E751C3B7B29349AB31FB4A499841A1F09612A0EE1ECB1B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 72281f9d0bd9c4749b2abbd058e53224b790cf95d5b80d70bb2ba95a10bf6e4e
MD5 2596bea3869efc1bca980debf87f6e53
SHA1 f3e2e08ddc0354905e80bdab019f388cb9ade52e
SHA512 fcce975b166448cb160ee48c8475a5a22e4f7ba561c0c37ea46c86028f7eed1d7b49c7a38ff94ed1e9946df45a5ba59fdad4b16da639c7553ef0284f01b32f83
SSDEEP 96:lu8Ir9SVHKw8ThGR0SfEqLF9Mw8LukQHpcrxlx9C:/PMEsqXMZYirxz0
TLSH
T1DEB11F7A02AD98F5EF367AB2A1D64C04A161C1160CF3FF47843B1EB495D368BC105B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 1e36b335d8474216cbdf0df663b1e99b25345373ba89db827dd577cca652f2df
MD5 ce4182d2a73efd6e24bbbc7e6b616570
SHA1 c5556893123eb0711fa2c485d282a96ac28ff83f
SHA512 9b10d553306ada7e23e8a7aedf3ce53644a0e14d5c5ddf0603af7731cd35b8b6445965f21d13ba810c45357a130b17fd9559014b2ccf0d5447bf7ae74a9ab216
SSDEEP 192:udFWy1G1HO+kEHePTGYklDJ9ukWRvMCMpxeeQxj0OUWLMgmrx7Vcz:/RKMeUkWC
TLSH
T1F5F10BB542BD58A4EF217AB1A0DE4810B571A0824CF3FF47963F1E74969378BD206B53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5a163875065626fd6469a419e0f121bb0f87c7a149ea730c99b1a7374f97b6e7
MD5 928df4fe02f0e7bc59d1e938d358fd81
SHA1 66a088fc96441d9c0e951faf6b9d8843704f68ea
SHA512 813709b3b6902351e5a4f52ef5bb75e85c5a65b3eee716c9e97069fa174709cb2947fcba7a5cbbd02a5e8bd61011672c9ca12de1240427c2900af49a0db1bd07
TLSH
T1166151760726C9F1D36AAB72E0E95448F1B486690DF7FE13044363F59AC6B0BD001363
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a57d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a57d.TMP
Size 3KB
SHA256 324ff67109bbbd131211b34d76b59a2faada2e622d5de16c2adfed3a3b2893b2
MD5 2962b84be6d05b9d9b6c6fc56f0aefe6
SHA1 462619bce934de7eeab1b3fbef44702936b3ad5d
SHA512 e8d4a91b569f8e190852352a2343e325cdc99518907d6e79e551af03e6f6ea662b3f2e5decb897019fe7adfb19f937d6f57916b95299e195444a6b7a03f9bcae
TLSH
T1CA6151760726C9F1D32AAB72E0E85448F5B486690DF7FE13044323F59AC670BD041363
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 b9c5de805f386fb4e25a603df8c4a10128bae1cf072fac6af3bff9c479628dc5
MD5 aed05a25fbed098790d6e92604b3e9f2
SHA1 1e3f622cf759b3572edb76859514774cd060fde9
SHA512 90feb1f819106e2a2f9fd96a0a75587fc7726b67540ba1330cc4bac223bb197617e4073e04c5df854e12306ff6643fd32af275265d3055cc42c528ca648542b9
SSDEEP 192:DUcleXjO6u1RNfc2XyOfc577gxz/U/tj8QdvgZXVbNlik6jdx:DUcleXjO6u1RNfc2XyOfc577gxz/U/tt
TLSH
T149E1A8F783F1866DD911A1F0EA186F1BCE580416436C3C5689E4AF1BA3F24B1E142B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 8f1823b66f2de22b6e6605f4c231ea394c172f4df6257d82a27cf988e49df07c
MD5 1d21c6b50c7442c7ff613fa29ff7d61c
SHA1 e29c9269710dc7346f24c38f62bae3c3fdfc0c7e
SHA512 fc26254db16a6e344a3bd7a63435b4142a7dd9a4251a9078895114d2bd5f668e7969e6832257ac5f522c96a218edc9661aa0e722d1a2244828a06a13d016bfaa
SSDEEP 192:DWxd5Qv1LX1RNfc2XyOfc577gxHtG/tjIzivgZXVbS6+jlimj4oGT:DWxd5Qv1LX1RNfc2XyOfc577gxHtG/tC
TLSH
T1C1D14AF743B1876EDA11A1F0EA086F1F8E590017436C78A685D46E17A3F34B2E042B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 3107e3bb957450d30a855e0effcd8552663a0c0171c68cb50f0624274b2eb1fc
MD5 87af84c9a497229df0d3b494c3b3c519
SHA1 2e1ab9ff683bcd047f0c8696a4fbff9937f03985
SHA512 d9a0cd9d7f12aa62e5ef534dc9cc8cfd76cc99509ce8794db1a190a31f789f17681917c34e4d07954c12ad2415ff154d0c2df8cef657caf0efae855cc5802393
SSDEEP 96:DhOchTe3zBR4Ofc2XVweOfc5GO7gxRp/U/jcx:DUcle31RNfc2XVjOfc577gxz/U/jcx
TLSH
T14D919AF683A5466DDE11A2F0AE146F1BCF190057436C3C5A89E46F1BA3B24B1E052B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 a7e7001383acfa6824e3bacfe18e37e56ada77963a9f65a2c1a1ee1eef5ab453
MD5 012b7be54f39c1e66b7ec6d569205010
SHA1 9beb91c12f71ae0e6058ef67716f37fd5665bda5
SHA512 235b6f8dcfe09d73fae7d3f64bffbaabf6b19dfc48530ba312a65cb7ee4fa5bb7585986319cc47a7d3e43076fb785522b5abc39551695ac94365cca090700082
SSDEEP 192:DWcleXjO6e1RNfc2XyOfc577gxz/U/tj8QdvgZXVbSk6+PliQ14:DWcleXjO6e1RNfc2XyOfc577gxz/U/tv
TLSH
T186E18AF783F1866DD911A1F0EA186F1BCE590416436C3C5689E4AF17A3F24B2E142B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 9cb09ad9e3a1cbfd0b8481430b53683bda289bed00bb6a9c46d2076a00c3ef77
MD5 4157360fffc6a2cf415ae9f9fd19fe31
SHA1 6abb304e70706ab286c65f9f058a51ff928c1354
SHA512 926016b84f7df63615b98cbb8ab31159006790e9513cbd5e1b0806851722600126f59e55b227ee9a2ef5a3eece3b5be7a079839b3fb798092e40f1ca6d6430db
SSDEEP 192:DWDxd5Qv1v1RNfc2XyOfc577gxHtG/tjIzivgZXVbSk6+jlimGj46:DWDxd5Qv1v1RNfc2XyOfc577gxHtG/tz
TLSH
T12AD12AF743B1876E9A11A1F0EA186F1F8E590017436C78A685D46E16A3F34B2E042B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 3c18747e442b9d93886fde41b5b0728c249c6cc1460ab3666398d5224392f8b9
MD5 29b3f5c8159799e4604d2e215040fb7c
SHA1 ebdadbd746d0e11ed6d698591a616cac1d5142ca
SHA512 e8b13f08f6bb1bf195d31d2f6ac34ee2002aef7c21dd37ae1326474355c70e7f2b96c8d4d5911314c3f1d7fdcc0cd744bcaa12ccb9454bdc3132e609016db4dc
SSDEEP 384:sxRzv0m44/fSshxmhnWXM/519XVBCZfxMG:sP0m44/fXxwgM/5XVE55
TLSH
T15882D8525524897B8CD7D619FE367F62E7F811329C911E8CAAFCD91C00EE2EE1217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c09ee97dca674772dbab0335682676960cc8b080d341e6350bf8417dcf859ac8
MD5 bb67bf7c0264fbfdb9a418a9b3837e03
SHA1 715f94f39d52cc6760a95452e970c5def4bab9fb
SHA512 4a4a0674a66c1b88ddfe1a9d9f98d2c6bb2acfaa903a9e6117991e3af814d72cd8dcaa6bd91e99c95bed90366b6a24c991f04aa46ac8b3df97641fd6211635fa
SSDEEP 192:sxRmRob4/fSsoxThsmZyoA8p4A/g6+WNIYx/lTfJLG8IgIJ:sxRmk4/fSsoxThvB/5IIBs
TLSH
T14532B7165A68A93B9CD6E21DFB657F53E3F91032A0D11E48EBFC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 51b45f60a661b103c5562aeab36e9e0fb5adfd4ea95412a6da4823b54672c9f0
MD5 3c858ca3d0dfadcd3c7165bcef839f99
SHA1 fd7eafb84682b39de88ae9cc5042eb75492e7f73
SHA512 f859e876dbfbc2e6465e3a724a64249acbcb8e509ea407d9986502a4d9bac9acda11707bcb53f1db67c77a510e48de0afb0a7a510f806ae759f9991ff521255a
SSDEEP 192:sxRdRoGO4/fSshxmhsmZHoA8pJKA/g6+WNPT4/YxSlTJJLG8IgDWfJ:sxRdVO4/fSshxmhw9/5k/bBCh
TLSH
T1EE42C7165938A93B9CD6E21DBB557F53E3F91032A0D51E48EBFC9A1C00E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a89025e31e4d9a3c99896f96a9e7d01382f59c9e48ef225e93343f656fdc19b0
MD5 4d00e82eb92e2dcc14228cc986467573
SHA1 e37e3e272c337d6728804e7229f747f9e465169b
SHA512 c6d189635d1c3a52818c0f9065c8c7893b644c1728106547713ebdbd61186912e5e4c1ea09bafaa1d97d328420adbae5a801b9e6946502e0d26a4b788b2c7582
SSDEEP 192:sxRdRob4/fSshxThsmZyoA8p4A/g6+WNIYx/lTfJLG8IgDiJ:sxRdk4/fSshxThvB/5IIBq
TLSH
T13642B8165A68A93B9CD6E21DFB657F53E3F91032A0D11E48EBFC961C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 396996e06a84be45144592d03a2f52ca0930a11e740a595bc6e65717c7b91503
MD5 fc2647cd83e9b16dd76ae65ccb2b4672
SHA1 5d0e9a1e49133dbdc107b777017f2fe179d1da1f
SHA512 2cbd8df8062033b3c7700685f83236e059024510353083005a8e3bd694123028f186ac26ee3951ac0fffdf907c0ba71210cacbe4224ab821bd829ddd13e94fbd
SSDEEP 384:sxRzM0m44/fSshxmhYW3/51c/mBCqQfxMG:ss0m44/fXxwJ/58mE75
TLSH
T10E82D7125524993B9CD7E619FE367F62E7F850329C911E8CAAFCC91C00EE6EE1217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 dd68cabb432eeee1a3fad91beef1e8463e26b254fd5101682f32568692aff93e
MD5 cf7dec52301b89eb5878ce671f9bf4a4
SHA1 7a4df0a4607a26df5bbdbc294f51f1c4ac2cb954
SHA512 657b40a6dc16d3f91935f1840b370bb87333805f078d33132d2d40161dbe07fb6f341aa07d77f865ad6f0bff3a7079c1362429e26ea06251412cfd7a08765843
SSDEEP 384:sxRzc0m44/fSshxmhndMXM/51V1X5MCZfxMG:s80m44/fXxwYM/5J5n55
TLSH
T1A282D7525524897B8CD7E61DFE367F62E7F911329D911E8CAAFCC91C00EA2EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2d706a92e96853b651ffff1234817285bec4395f5afc5761a2df3913cdfd4f34
MD5 ca4bec3d47d82201b1a091436f6103e9
SHA1 fb9fa694eaac6d9b7917b1f5a515b510d128d9b0
SHA512 0edd976490f26958ef7d554b87f9e72282b16f8d686e7c65650c67ec309e405611dfc1893a2698db396c81b918044ab4387b0d1f2cac6ef0ce51cd6d8c66b1ef
SSDEEP 192:sxRODUMRoGO4/fSshxmhsmZebVcoA8pJ+A/g6+WNPT4/YxSlTJJLG8IgDWfJ:sxRzMVO4/fSshxmhyvZ/5k/bBCh
TLSH
T1E662E7166928593B9CD7D219FB167F63E7FC5132A4941E48E7FC8A1C04EB6CE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 9ed62a22fbc3c3ccb63004f70264322fd9e20170b87f9ba27054c53c2debcddc
MD5 0f65596c6dfd10048422d661ab3cc13f
SHA1 9498934c8c12a98a6d58c39e3f30b6dd98faf97f
SHA512 5ea73c1bd15363d0ef62ae1ce7bb862e3a664c19b16ea291192610ed1c872f641a2f42b88636a765f803a1aa68fa47a64eae2eb3b612f88d790065fd8a987338
SSDEEP 384:sxRzc0m44/fSshx366s8qMpRiYnazAW8pZS15posJWeT+8hndMXM/51BrXCMCZf5:s80m44/fXx34Mnc7WeT+OYM/5vCn55
TLSH
T10DE209069524C8379AC36D1CA93D7E33EAEC50625985DEDE5AECCA1C00EE1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4e46adc6db6efdc9f91cb7424b1ac8534c8d2e9384fdddd53fa9df954e95e674
MD5 de1c55ae40ef5f96ec195cf26713a607
SHA1 a8e886d2465e98b631af411dd82e70fb14b0941b
SHA512 52c744d214d80371eab55e92a724a89bb73255f186cde0e52f6c4f36126e17b7cc19b351ccd059bf6f6e20ce763e10d147f80f576bbc6f84bde5f7e23ef1c894
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3RkFroru3:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0Vb
TLSH
T1CDB2DB3B604CC77E9F800A9DAC596FDB7D9802C796988D444BFE990C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index
Size 360B
SHA256 ee7c17a0a7bc2d38c37f85f050baebaacc63f4ee43406f595461fc4833071748
MD5 75623c296817b2293b4918d3fb282f82
SHA1 6491e300486fdecc3c1d5811f3b8cfdcf274a4e4
SHA512 21bfb3a8d8108029bb026ce91b651ce35e4afc2f8ebd20760a85cf15944e06945a9381c1eef164d93e4c66e642d3d3fc40f736984e695028d6c7fa35bb927af3
TLSH
T181E02B9A8C424857CA263D7B4D76221F333F0BFE29029B3710BD412AA99627C4505749
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index
Size 3KB
SHA256 0fa80c281a8a77c3a8c52bb9fedee5805a8210012d3a56d0b9a236303500b6db
MD5 f84c402e296a848790b72e9063774234
SHA1 7124f2ca2bb662fc8b3bff82dac0fe660510ae6f
SHA512 d4ab9769d71f6a489add4a14630a154149a8704d88df16c95c434855eda27f116212c99763331b1b328fb483060080149e094709f210e9cdb604c4c468e4c35d
TLSH
T1DB51CA8DCC851A96DDBD11F318BB1481337229CDAB844E175E9CA434BCC337F2C15615
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f19a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index~RFe59f19a.TMP
Size 360B
SHA256 d1630cf5347136cfea7a6ed4e2c75ee51143f3556769c5f6c855c70519d19fb4
MD5 086ae0ffd0300194e95e6042e52d55bd
SHA1 370afc5f7cc15ec6507fb04967f88ab4e452fc48
SHA512 077536513ebb3c0ff4dd92218feb0116ea0028529248ded55effd03b568cf761d9a8129032c7d8817c2ae1f03c36140f13d8895b13a50ddb535870ed61f25e93
TLSH
T1AFE095DF04801CD3CF2515795503931E337F0C373915970710DF186E955179C444578A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7f25de63-2aa5-47c3-9175-acfd1b9ed14a\index-dir\the-real-index
Size 96B
SHA256 910260d78c17b16d54c55fecf3e2b421922232e5fd6f1126340081b1262bfc23
MD5 faa21328dc621527be1474e3bf846963
SHA1 fb7449044df926f7d7fcd25788a4e37bbb2e07aa
SHA512 b4c50485704e7a7d2f25e5d549f345b816e6662dfc41bd279159776bc3c7d5046515649e7f4de0ed7e1e4136931360e562eed10a57a28fd16a17b44bee9b537e
TLSH
T158B0220083C00A2BC08F23B2A2EAC80233808CA203C2230B88C00802CCA0A888C0A02C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7f25de63-2aa5-47c3-9175-acfd1b9ed14a\index-dir\the-real-index
Size 96B
SHA256 d9be9b06bfbe00d8385cd7491f3d39f13f1acd562c9e98584a7bdf3b305e2efe
MD5 739d48bff6e3977cb7a5d269afe6d596
SHA1 cc3c0c2e40135c2b582e90ba72ce562b4acb2d46
SHA512 a4f8750ac1fde666412ca8e46048dcdac680d19cd19bd5138143cbead12f90e264a0e1dc82e00a5a1c6d8b8b98942f277fac37ec20d1c526dca4a6f0848ba6a2
TLSH
T163B0110038800222E00B22B22AEA080B22228E000323230382F200A8CC08B0B8E0A008
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c6552e7c4c8de51383b270ec3495b57443b184849a446ea01c333d96cf211b98
MD5 d8dd4073cc3d60a4d01814e0b772e14e
SHA1 ddd7e2649e4ba7fa21e6f2b04f2d3d2b1cd0256e
SHA512 377c576fee7328df98d126228731bf1c81920a8c17c82e5241fbce3d6b18999722f40ff8cfaa05a1909e2c66109257d4fd5ce01ba475ce731b5633d361e19a0e
TLSH
T15CE0207B3EF62634F97FE3D218714AF1454279589900BD4F6425D2C75071350646AC22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 5ad32994c93dbc6d8258a30010d218f8d98299d14e853b83dfef844a5cca7d87
MD5 ebd490888c8700ea4a27a425344db9e0
SHA1 e66ce7072f488ed772235ba00e6e5556f47f20d4
SHA512 09f6cdf2a98c171ab3155973aa4158a719f254a2b5e35fb89a1f017144f275ea6911210a7255a16bf565d0be7ecd47ff06f4e5c820376aa311d6ee735c41a473
TLSH
T19DA00253C9699685C518027091F605883211CADD0B15321340BCC158AC50189D5FA018
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a4864.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a4864.TMP
Size 48B
SHA256 042564bd39caceabd560c17db65fc55072c20b895778f1b877d3323cee84834a
MD5 686f6e96499e4ff918b1160ae6cb3cdc
SHA1 1c895ad660ae44e3c6c0edfe46334cfacbf8871f
SHA512 e70fc542a061b98cb4dc8ab77ee03d0928eb55c953e5503d74c3b419f122225ae97afab263bdfcc06bf499b0672a645815460f1fd434208133b82052559aac77
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 1522024840c0e82a1f19566d53d819f37f739d420f92731d3d845d4acf6146c6
MD5 80b41df3a1e487c9adfd04df421d8f5c
SHA1 654bcf36e866d65b35baf4b45b3814e4f426b201
SHA512 8c581451e8fcd09569d53aa152b229f0e0b9475c569ee31c0588ee4e1ad692c42171fed23c40efd5f800ff2d616af7d1cea3374b10c45be9d79bef84568ad776
TLSH
T1BDA0022413841101E90A437210CA874023105C50E5060283499A46D898541805E86002
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

94599d58-6202-4aa6-80be-fbd1576e0dd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\94599d58-6202-4aa6-80be-fbd1576e0dd7.tmp
Size 22KB
SHA256 6e58e69a07fdfb27891cfa9a663b1cd3f76e4a77ea6f312fab0beb3b92ffb513
MD5 0e9aef861dfc449f7c41490bc0935a6a
SHA1 415c9a9af8ed42ea8a4b1c1714d8ffb40ebd3d5d
SHA512 56b3c671441a5ee97333d065bef62a5294fccb6e759bb5436b832e1cddb040fbe14977a7faf64eeec68ce7a321ba6230984dbe5437efa8d5ac6ce8ba03b4515d
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uo:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAR
TLSH
T12AA2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 52a7f94cfd1e513e9403ac6522094a74e5825973b2a7f649b7d906492261e496
MD5 128eb5cdeb132b4c0c71d0877d4b747f
SHA1 53af4267fa6c85ae0b765b35c3a977a9c5ff832c
SHA512 9847d849a05337a3c1e046ee59a0e9bba7e0a5afd84a97e7ce9f2f1718a13b40014022ac7bce8581e2b4874f11146655c17e2cdde0985755d0e3d6a318ec3c72
SSDEEP 768:E3Izh83jv1nkKL2oKwjF669yrqUjWiIwwxMtxTX9m6yMuj:E3Ia3j6hwjF66INWZTM/xm6Vuj
TLSH
T10CF2BFB4BCA06ABBCDE6E78162233383FFA0416781D41E9899DDA70E058F4DD574B819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 55bd66b90711607c963fc6737b2b64086d488bd5456caba6d867bb923233ec2f
MD5 708e0a17855a9706b172d0c4b2a84f9f
SHA1 7cfa5a488ec69b4829014221b906368dd710966a
SHA512 f52cb5f910b4aa86ba277a82fa42af011d51bb98451154d42c989a31afe984f5a7e600b04259d55a1b0dd318a590f7c232ad175bb66bb7cd93234b6d7dc1417d
SSDEEP 768:E3Izhn3Yj1nkKL2oKwjF669yrqUjWiIwwxMtxTX9m6yMuj:E3Id3Y+hwjF66INWZTM/xm6Vuj
TLSH
T134F2BFB0BCA06ABBCDE6E74162233387FFA0016781D41F9899DDA70E058F4CD574B819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 246e1b3bee5729cf4f1167114094c189aeaf7009dadf3dceee3af08ccfcdd107
MD5 f80b9c2e6eb790eab70f3adb1b2eeb7a
SHA1 37f4215a02c4acac1cc89589cbcdab522f6b6cf6
SHA512 f620846196b8e73acaab8bc9eb70aac9a0080411c6017a76dea4d7578c0c41852a0ec8dbcf12cc7e3d9900b9d5b0a5c7adb257bb9a119f172a4fec1852b9de0f
SSDEEP 768:+FZ3Izhx34wgDn1nkKL2oKffF669yrqUjWiIwwxMtxTX9m6yMuj:c3I73iShffF66INWZTM/xm6Vuj
TLSH
T12303AF71AC9096BBDDF6DB81A2233387EFB00167C5D55E98E6DDAA0E018B0DD134BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 a80e209ab9bffc4d8ae08a521f694631700257032c8a5c920cbb3d2a3c95e497
MD5 3367b2143bb7b0d989ca7ae9b7f82bbe
SHA1 05e3424b93d4efe7871a99ebc165f76b0420bf2e
SHA512 94ad1166c8d55b23eb09f5772028ceffd347868ecdf9050498ea065c9586ead22b39d908627e94df83cbb58edd8d3b3fdd0d6792fcd6c0fb15f689e42eb709ed
SSDEEP 768:/3Izh83gnNkKL2oK1jF669yrqUjWiIwwxMtxTX9m6yMuj:/3Ia3gah1jF66INWZTM/xm6Vuj
TLSH
T190F2BF74BCA05ABBCDE6E74162233383FFA0416782D41F9899DDA70E058F4DD574B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b44356270ecf17c5ec97368a8380dcb319f7964639990d565069333339a479b9
MD5 8b6e5fa02366bd4bfceadd1d16b6f540
SHA1 d8182fb23ce4aac4718377291f0eb2776c644ecd
SHA512 5cddc2331377570dbad1ad32f53bd83e571e490762570ffef393cfb29783d08fed8d270d678a09cf8e7bb083369bfbc4c55afd9fea0ef51e3694a774d5a48d2a
SSDEEP 768:arv+4UNbdl3CPkKL2ajF669yrqUjWiIwwxMRFUiler:absbX3JyjF66INWZTMXUsQ
TLSH
T1ED03CE34AC589AB7CDF2D28672533383BFB4109396C50B88CACD630D469B0DD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 c3ba43d33aeaa2beaaf8fdc683cfa9de3fc8d5a3955be5aa7965213c9ac9088d
MD5 586f74c646b88208f2f02e7768074b3e
SHA1 5f9211c4c97f0341dcf39c51636cfe5c96e52212
SHA512 3bca2974f1f4a08ac87c4aca9ddc72bc9199a369c5df7e3806369a40b2fee7ab2fb065284b86dc6abf86e108a6f4b9c362e5df64de25110bb9449682eb6b3441
SSDEEP 768:Yrv+4UNbdl3e7kKL2oKKjF669yrqUjWiIwwxMAxUiler:YbsbX3VhKjF66INWZTMwUsQ
TLSH
T19903CF30A8689AB7CDF2D28671137783BFB4115392C50F98CACD674D469B0DD274B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e23dd76e0d166a97bc025879ca65fd5315c792b508dc54cfccefe35079d19f31
MD5 cbf26ec8f7aa723276b95c75a7d1ee46
SHA1 4bb88fee24e34d56805b828b7c2760daab0d9216
SHA512 e5a6996c1c997bcf83eb4262e8dc5758422152683c2df16bdf93b48aef32c7f7c874b75d2f9d58fb20838656f786ecac683191de062af24c55b182f914d07c58
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7443bda1ccec5baa4fe26f2a5fee7515183a403ad7505069dc7254d1487d871f
MD5 468d892e874725a4fa74102b8c634a12
SHA1 9fe0c4cf902a737f6ae9771da51ca0556101f981
SHA512 51308ca9708662ff1f4c564dcefe9943def06f0e2ffe5a5a7ac8c709c907435806f35bfb85581dcbfe215fbc79a081ef8281ad11417c899a4b4f6bc1c7d6d0c3
TLSH
T15CE00200D314007FC43D0632419717743B60C60002D1138F671001753D243062F30DC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d4c9c26b7ef7224db32f4fe50dc81907ecc80cd189d977457a51b5a8c3cfe057
MD5 3b6071a79e3fa3e0144ff4c39d18fa54
SHA1 94f59f34d4322a4821d41d413b071c69bf9f009d
SHA512 b2ed9f90013c3845f247bc65ba25c11e030ab663eb582f06556525a4b2496f26f0b62c6dd88c62092322ed4e284b39e13221d07399dceeef461c3f613882a7af
TLSH
T119E00101D31400BBC43D073241971B643BA1C61013E2128B6A2001793D2430A2F30EC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f873b848ee7dcf7abdf81fac1ffc79af5717f74c0d8d3cd66b1c6e1822d686e9
MD5 dab9df8d01d5de4889a76cdffe9704e4
SHA1 220b4b3f0acf99b57561a200a7a23b106b22500a
SHA512 fb4356b97775a1c75db6676351983a51813b13e27d57e142ed96261a8bbeae8f5d5939a357ef4c22dc941bb3f2894788d12c056c54f76c5c2d6d2fcc71f387c1
TLSH
T14DE00102D36800BBC43D0B3246971B647BF2861513F2128B9A1001793D6A3062F30FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a832b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a832b.TMP
Size 392B
SHA256 911a5beb649869f8ce9519806b93bc74708e3c5ca672ba4c68965f31d225814c
MD5 ac0073c7d456b7eed325437d970a1a96
SHA1 035bce9fa61126677f1aecf8c6b9a07194ebf234
SHA512 22629834038df86d2943d22ad208d874377273aad5e06097e772dc4dc2dff9d1d70eb462c8c96da509dcd3424154df58d6fc494bac61bba1512181f519baae75
MD5 SHA1 SHA512

Submit Download

cbaf9d6d-e73b-4602-9dcb-f571d3c86ac0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cbaf9d6d-e73b-4602-9dcb-f571d3c86ac0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download