hxxps://modrinth[.]pro/68-mod-na-dzhenni[.]html

Analysis

user interaction
yes
max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 09:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://modrinth.pro/68-mod-na-dzhenni.html
Sample260818-lc438azzft

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315186614341544"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{0AA9B3C1-FC01-49F8-A902-776CA40007C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe
1912	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1912 wrote to memory of 2272	1912	msedge.exe	85
PID 1912 wrote to memory of 3060	1912	msedge.exe	86
PID 1912 wrote to memory of 1864	1912	msedge.exe	87
PID 1912 wrote to memory of 1464	1912	msedge.exe	88
PID 1912 wrote to memory of 1864	1912	msedge.exe	87
PID 1912 wrote to memory of 1864	1912	msedge.exe	87
PID 1912 wrote to memory of 1464	1912	msedge.exe	88
PID 1912 wrote to memory of 760	1912	msedge.exe	89
PID 1912 wrote to memory of 1296	1912	msedge.exe	90
PID 1912 wrote to memory of 760	1912	msedge.exe	89
PID 1912 wrote to memory of 760	1912	msedge.exe	89
PID 1912 wrote to memory of 1296	1912	msedge.exe	90
PID 1912 wrote to memory of 1296	1912	msedge.exe	90
PID 1912 wrote to memory of 4888	1912	msedge.exe	92
PID 1912 wrote to memory of 4888	1912	msedge.exe	92
PID 1912 wrote to memory of 4888	1912	msedge.exe	92
PID 1912 wrote to memory of 4784	1912	msedge.exe	93
PID 1912 wrote to memory of 4784	1912	msedge.exe	93
PID 1912 wrote to memory of 4784	1912	msedge.exe	93
PID 1912 wrote to memory of 4424	1912	msedge.exe	97
PID 1912 wrote to memory of 4956	1912	msedge.exe	98
PID 1912 wrote to memory of 4424	1912	msedge.exe	97
PID 1912 wrote to memory of 4956	1912	msedge.exe	98
PID 1912 wrote to memory of 4640	1912	msedge.exe	100
PID 1912 wrote to memory of 3996	1912	msedge.exe	103
PID 1912 wrote to memory of 3996	1912	msedge.exe	103
PID 1912 wrote to memory of 3996	1912	msedge.exe	103
PID 1912 wrote to memory of 3412	1912	msedge.exe	104
PID 1912 wrote to memory of 3412	1912	msedge.exe	104
PID 1912 wrote to memory of 3412	1912	msedge.exe	104
PID 1912 wrote to memory of 516	1912	msedge.exe	108
PID 1912 wrote to memory of 516	1912	msedge.exe	108
PID 1912 wrote to memory of 3684	1912	msedge.exe	112
PID 1912 wrote to memory of 1192	1912	msedge.exe	113
PID 1912 wrote to memory of 4580	1912	msedge.exe	114
PID 1912 wrote to memory of 3200	1912	msedge.exe	115
PID 1912 wrote to memory of 3200	1912	msedge.exe	115
PID 1912 wrote to memory of 3200	1912	msedge.exe	115
PID 1912 wrote to memory of 624	1912	msedge.exe	116
PID 1912 wrote to memory of 624	1912	msedge.exe	116
PID 1912 wrote to memory of 624	1912	msedge.exe	116
PID 1912 wrote to memory of 3600	1912	msedge.exe	118
PID 1912 wrote to memory of 3600	1912	msedge.exe	118
PID 1912 wrote to memory of 3600	1912	msedge.exe	118
PID 1912 wrote to memory of 1416	1912	msedge.exe	119
PID 1912 wrote to memory of 2612	1912	msedge.exe	120
PID 1912 wrote to memory of 1416	1912	msedge.exe	119
PID 1912 wrote to memory of 2612	1912	msedge.exe	120
PID 1912 wrote to memory of 2612	1912	msedge.exe	120
PID 1912 wrote to memory of 4672	1912	msedge.exe	121
PID 1912 wrote to memory of 4672	1912	msedge.exe	121
PID 1912 wrote to memory of 4672	1912	msedge.exe	121
PID 1912 wrote to memory of 4640	1912	msedge.exe	122
PID 1912 wrote to memory of 4640	1912	msedge.exe	122
PID 1912 wrote to memory of 2592	1912	msedge.exe	124
PID 1912 wrote to memory of 3732	1912	msedge.exe	125
PID 1912 wrote to memory of 3732	1912	msedge.exe	125
PID 1912 wrote to memory of 3732	1912	msedge.exe	125
PID 1912 wrote to memory of 3208	1912	msedge.exe	126
PID 1912 wrote to memory of 3208	1912	msedge.exe	126
PID 1912 wrote to memory of 3208	1912	msedge.exe	126
PID 1912 wrote to memory of 2816	1912	msedge.exe	127
PID 1912 wrote to memory of 1980	1912	msedge.exe	128
PID 1912 wrote to memory of 1980	1912	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://modrinth.pro/68-mod-na-dzhenni.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffdff04c188,0x7ffdff04c194,0x7ffdff04c1a0
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,4248161474214463780,8632940110996959777,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2834900299742263850,3745645985702091381,262144 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,6047421306033668070,6576952058069752063,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,14900725392009656108,12797013976689187206,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,18011212496220407828,10341579089487805718,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,6998387165216098549,17480262286190199494,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,8741514383309919945,2721587348069522599,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1540436038968991409,13225904387430783091,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,3872419895324079108,18337763380117526292,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,12371530569687454317,16972326313468478210,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,12371530569687454317,16972326313468478210,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6320,i,7048534956539274750,13182002109164665915,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6444,i,16833616155766167324,9446173217319240167,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,5470220909934558792,10604618570640229915,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,14708973703050298051,5310918827664643515,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,22534683782369880,13527649573016337667,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,31393155652386358,13146151413791460251,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4244,i,4562385586117550737,5093630398961506352,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4032,i,5580347807739250973,10921687703254657560,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6260,i,10937773750770009575,16878312857507152420,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,15344344311032959935,6847956670390607571,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5132,i,16253781968727249469,11095463305072993899,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6384,i,8060647168565543444,2189503654120477990,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,7014376028543623528,13197555686250421612,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,5076011365878452585,15897841987544829842,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7044,i,14990062908788146966,10025947685975572611,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4240,i,3226066422305942841,11990960141203399610,2097152 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,3119235323298985536,3552596005873671566,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,14055468261231880153,3350080225241538034,524288 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5200,i,12975614137100517504,18089149601830947204,262144 --field-trial-handle=3004,i,8283224596806544355,6683770995694394358,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2e24e08605c7cfca52b6d268d14d7afc67a5d9586b645c6f44aa25690cc0e303
MD5 4f4cd3ded1d1752b942c3addbebf89ca
SHA1 5fc0017fc251880a23bbf0593cb282f9a57583a4
SHA512 97c207a1b02c7e1049bb472d38ca09950697a0b231fe72a08ac3be1dbffb50841a7a605c2c037794a7e6a9554e1f3c8a08fff73a8459871d52d522effc66ac0a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 41KB
SHA256 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
MD5 d5a61c749e44e47159af8a6579dda121
SHA1 3b41b3bc956685015a347a2238e71db29dfa0dbb
SHA512 5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e
SSDEEP 768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
TLSH
T1E513A549D205276285D721E62105C40EB3F7FB3CBA22C0E475C9D3EA646EC4896D7BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 87KB
SHA256 80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0
MD5 7c14a783dfeb3d238ccd3edd840d82ee
SHA1 ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b
SHA512 fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858
SSDEEP 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/
TLSH
T16F9309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 79KB
SHA256 f7a002aef05573bc71ec20cc46057a32c8ccca62c892112538ff1ad2c3d4765d
MD5 f6e41f08e316bb10e0506e67f3621a8a
SHA1 96845b6f2315934de27f7bf1208824ebde870a8d
SHA512 e7718de13668d199dcc99ef61384ecbca5f650afba9176fba5fe0335867f14a5ab6922436a0238999c7a70e13b16bc551bafce47daff92a3f98044711dfd77c7
SSDEEP 1536:BE5jyzvv/VJUai3i+pRReomh6IKzhdr+joN6+ntp3HZB:q5yvv/VSfSsXeomhNKtdr5N1nv
TLSH
T16D8312430B029D801959BEC56689B5A3F6D36CA3AB774B81436FE1BC31343731B69367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 281KB
SHA256 af89e9db75e4ff86a6ad8d06b293d08d5c070dc5a7d434ca71b0cbfac14f26a5
MD5 864d2f388f7e28cfabac4782b15adbc5
SHA1 7c18b22d875b08e36d58bbaada5464f56b8a3d58
SHA512 1a4b0afabf0fcd7c196bfc688632f4938314499f74a506947ba7cca3667955669a7dc7bfc6efb4deb71a12a56c405dd5cfbe2aab15460eb8858a405ffd2170f1
SSDEEP 6144:pJIlmTfyVT29vksorS73+fjAEuG2L4uNF5KHYd3Njd:pJIlcyVxrSTiGdNWYRNJ
TLSH
T160542394A71DE3943DD8FBAD6644C0C394C298DAE723F95F1F861F1FEB629A89027014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 25KB
SHA256 a1c72b8f90132e4f9e42f216301c1cd056be22e580906d8902fb959d02cde703
MD5 d9d7d588e14925ca810cc3ebd1c9d636
SHA1 06323b5c9dd5658f52d1058068f158794cf7075c
SHA512 dacccd455c1d05bd126b064af7b0cf627e2df5917bc60390fd33ea79e808ee9c545217d82ddf24519045e9466a2f0db1bed8538248194e3f63c66997978497e6
SSDEEP 384:CM1vWMqleliYIWQEe4HlSKfGYkNAkj1dUJVqU4Z4B+28061XNDI:+leliYIWQELMjyVq4dL61ZI
TLSH
T119C285D74944793D4A238B0483CA880DA739EAC7EA2567FB214EE95643C53D431EF7CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 37KB
SHA256 3d8560b9f003424146176254c8bd42041e19701bfc64403700540df6b0bb44c3
MD5 4c493c76ca691189fa54b5d6ee1d5a90
SHA1 f37fc0325f1d6c58fceeab1409d4766a416a5e1c
SHA512 df9b2d3864d2cd4fd8a551291f82b9f3f45f44c4330d80884dea47dc041f9f5c78616e9ea15eb6e72ecc96efccc9daff847637fd75fb14612a297017efe956f0
SSDEEP 768:qSaSN0biHhk+Fs7oqIMBM3odeSLF8bIpid/PaGIDuPifnz90VQsHjpq+r62o2qC:qqHg7oqq3oUSL+bgi1aGrifsXHjI2h
TLSH
T19E03F227B77F353D045FD3CBC22E984EF25C970B81E600D3D995AADAE3A1A5D0911B10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 104KB
SHA256 a14d27b3be6b950f66c13db2bf914d3bc2526d2e985154794e5bc0687f3b834d
MD5 4740d882a7c50b36fb4507757115b9ef
SHA1 8b98c5249f331d9006f44f893d73e18d9775b68c
SHA512 d576e3cfa6bfaf9b3182daa663ccb99b22239d2a0604dc0fe61c1755a194ea4e302ec066c29a88d31e18d5c00c06043c16461532181190f1fb89d4afbb551008
SSDEEP 3072:J3/t5hvXZySqQ0Gpm8UMNru582MSEShYSn6RZ9:t1nvXZz0G0Ai8pkiR3
TLSH
T18DA312C78B8B15684601177DC3F90D9E2A39B92CFCE733B498DD114A57192A1EA3B378
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 25KB
SHA256 033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
MD5 7f0cdaf91230f9789ca4162aedff612e
SHA1 965de571aa794dab64076c3cc64dc8894b843f23
SHA512 444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36
SSDEEP 768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs
TLSH
T137C2D0A5E7112B92C93556A4F6CB4849BC25B0532C56F3825FA9AF80344BE8357EFC3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 27KB
SHA256 d55cc243b22acdec9b82dc8517a6abfc67265a294eead7f452078e7f728af923
MD5 d34f8524ca005d108e65342a56adb065
SHA1 7909b7d5e4a38f60152ec3d7cf4fa475df971fde
SHA512 c8df701a8f39e44a57d538a1db8404118c34d58489304b6f4cd5081e5e196d94a39a1f979ffed289ced079b3e12cbde7cd6b9ad2dd90a58382af6f744b9cb0f2
SSDEEP 768:fEv+5c68W68qOoZRBNPnRk/FCWly+wNUHKl1dqRp:fEuc68WPDoZRjfAMei3qL
TLSH
T108C2E1EE2F29E3E94E80F20C20AC1AF1D6F372E69081D68E502B3B7655B081B473150E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 43KB
SHA256 6593c44a3530f508f5d1bcc9bee7ff8a3c7dab88d534f916edc061f623c5c666
MD5 f0e84c9dc13c60b7f85fb5ec13d7117c
SHA1 6c96ce05239aaeecd7cdefe1b7efa12166ff1683
SHA512 d38e1b784a31d5cba2a3a817dd80e77275b41d5b12ee6134aacb7c7f6967b26d2ddeb43e7382d12e4893284921e5b8ca7fbb1c5c66017ada2fc70389e91e2d3e
SSDEEP 768:NP5EAttu2/aml1HoX2ldkrCe/27GSdhxPtHoHMNSfFOTrJT11imuyKxY+NNqoGyD:NREAK2/L1IWkrpO7GSLxPtfSghLimr+7
TLSH
T17913F16D69B60331D453766AE44177394EE4B4D28390CEF7FA25AA814BD92D223A03CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 128KB
SHA256 0f9a067f9bf6a12bcc7434c35fbcbcd84991e0c557d25cb9a823984b5b74129e
MD5 9642c4da46df62f6ef6fdf0f315b8baf
SHA1 260994fdf38d0707f19c8e871cf8e9fbbafd3bda
SHA512 afb0623cc2f7f778576b9f1dc77587fd5a134af19a4b4ca55029ec7dad1497182cfc767d80711ca6a8e9fc9d22903751e5af0e665731f3625cf606d41ecb733f
SSDEEP 3072:T6UplmhFQxALLss+KfxZ2pcTJrRLvDzHDpFLGci+h:T6ULKxLLstKOpkDpFLvvh
TLSH
T1A6D31202B5C4469BADBE4DE65594EE0B7110A13CA7CFB945C0B169CAC0EB364B384FDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 30KB
SHA256 d07f0cd2108476baa20cfc21ec82ccc1d0f4e1b6b69b66aca77d13fd0330af53
MD5 a892e0cf05b7601a5521606545bf685f
SHA1 6328e1528acebe88c29eb1b08f21bb017af881f9
SHA512 77620f60c6302aff0c13ca40b65159f2fd4176f187c508a41cec25d1a4a9dd437a8bb14ed5175386c189529e1e409921f51676165977ef135bd170927c0306fe
SSDEEP 768:PeZ1G6hu/SBxi/DEk80G5s/FzpVq/BCyuvnc9fxYFIay:i1G/qK/DQv5sdzOJovuf6qay
TLSH
T18EE2E00B5A0BCA99EB32402B55C6F4D793C72C797AE97A5FA300A7919E4823E053C1D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 17KB
SHA256 e8a6eb48ae9fb4ad66c6e24f4ddd24692c7fabf20e9011bcbc4400a7b13c7196
MD5 2a73a4318544b1ebbb088e7f21afed9f
SHA1 197636adeccbabc83a762d6356c482f8587c17c7
SHA512 a3e3fc0a23ec6b32c6d7a0038371ce0bf376a331954b1d94d67f804bd46b795984149228722d6305101219312bbd79177b77d93907b2f8933aeae56657f6faf4
SSDEEP 384:ln/wuBBnqlGnCt8nibOFQY2OZ59a9MhXUS82mBTFxji:lW4nCt8nUOFVTu1Ssfi
TLSH
T1F282F13078DA2EA9142204DE7B89245C7695A43024E14CFD0BDFB5F9E0761286764E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 217KB
SHA256 138950bd09f5d0a341c81b17ac661980645c94b7447aed239041d172a183c8fd
MD5 895981a0f182aab8f923211f41a164b9
SHA1 c0439e7d2b3b5289692793c7801e72c5ba033c84
SHA512 a8ad05eb3d862590fc4058675b6f18cab91eb01fa04cb3695a0b102be43fd778bab4373388df0078afdcf999cd849b830e7c52eae24c5f750b725fabc7df70d2
SSDEEP 6144:vV7/wt86WJALyXtuND8zCoJwPPzA5TVUSqLzBtM:himwWEIWoJMP3hLNC
TLSH
T15024231C3ECA25135584A2A31F27A3662D0720AF8B5E9887DE771FA7742184C36D327B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 89KB
SHA256 3df2fd8cb234832bd8d682006241d60537258abe7dd1650dcf593a4bfd5a1802
MD5 19b724cfc0d6dcace592555c887e481e
SHA1 7ee22aee4176b5f00ecb48db31242beb05b37907
SHA512 c6a591cbdb4748287d6764dcccce09096013b7a57ac9c2b8c9697d76240573ac17c30cda911fe7e5704ca7d67c0b96235d0e37169137825b51343e7eefb15c96
SSDEEP 1536:qRpxIxGGb+waW85dQ1Q8JcRuXkkQjq5o5RuSUM2Ef61jCtNGkvjGamQ6ExpC4lN:qRwM3wffvJcRDqORCM36IN/jmE7C4lN
TLSH
T1F493124D176D92F5A880941DE3D7CB06C86C17741CF908C82A14EA4E79E5BDFC96CE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 19KB
SHA256 e6a6c2835f7dc20417675bcfaf9613604d780892d58b2033b3826936f9bfeff4
MD5 b92ede79cd12c91ab78ede7ecc423cee
SHA1 0f5e3ab28a5cdd7befd323a89498da69e9fd5324
SHA512 3f278dd27e5521b3f07ae795baa9db6bc64b220143637276d33cb698e5273c8f968972e4ed6db2ca91508a72780aef8a73c1c54f0add881af7a041fb1cf4eae6
SSDEEP 384:lQTOMwDxmL7+4RbWkvLfQf8Xng1Mvvf/37iR5xSPCCPnpS2LiQq:lQTtf+4Gf832MX37iGDxe/
TLSH
T13492C0C3562DCA7BD21CCD76076F00A045E9E15B1946F60DAA9AEF1CCD1EC0DE8A980F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 71307f115f6651c0c667702eab7896da4e54d10bbb4f22300e31bd1cbd2b3c87
MD5 7753941cd6a63797a06f132155177cfa
SHA1 65e851358f0ae0f34ca034dbd01ac13b9835a24d
SHA512 f91dd83cb461236d344d3e4398d26f80c544e5dd20c4810e0facf8fa6220ff8be4f8fa31c397962b57f1e257ddacf5f50fb5f55994c4e5ac3de0662341bb8711
SSDEEP 48:SEMwSpu/Tm2PzFA1B5WiPD53b8f2/2imTnClkVg4tSFTfsPzuj:SE9SpytxA1ZPDm2/DmqkVge9y
TLSH
T16391C689A1533065EF122139C2D39585343C5CBEC9D75E8AB2C49E7C162A3FA44EA538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 f6700add22a1c192e428cc35820ba1ed96ba115d533cefb8406ffa9c74efdacc
MD5 d8bf744fc7bf9e242f9cb136feaf9a4d
SHA1 4994248448ba655923093e16041aaea7ace2883d
SHA512 aecf1189cc362e16ee13b82561e41e71eb14709625fa4b31b14cfe8e554321352e002eaa8c9f6c5f38a51f3ffdb603656ba9c4fb0fed657416b6910e1b90beb0
SSDEEP 48:LqhwSZu/Tm2PzFA1o5WiPLNtlblXfy/9imTnCRkVKwtSFWYfsPzuC:LqGSZytxA1EPLzPy/Mm2kVK2p7
TLSH
T16C91E689A1533065EF129939D0D39591353C5CBEC9D35E5E32C05E7C160ABFA0DEEA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 80c7fde1291c7255ec6d2d11f2822ff13d3a0f2f551cbdcea6ef0d28e38e17e6
MD5 29fcbc8a39a68aa3d2a71235624c1d2a
SHA1 0d643d40738dd2fc23ab26be5a7760bb54c8b652
SHA512 3ca3ae465556e88d9a46108f2eb1618688a3beb9f07c099ab774edb9631109e68c7986c7d1e1d18a4a3e81373a0bbbe1a473dc0dfb59559a884201e251aa9fda
TLSH
T12F81C4D895A370A1EF111139D0D3AAC5387C9CBDCAD34E4A31C45F7C220A3F908EA578
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fb14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fb14.TMP
Size 3KB
SHA256 4c5d6bf776052c4ba50238f59e8868bf01ae2aa4870af00da751f827e43e0cea
MD5 c6965ee3f3bebb745d38dd744996f5d1
SHA1 28242e52e5e9fcb4ab97ee5dc1b2d54fece5c38f
SHA512 f6ad82e529f1b7b4e6a20375578b0ecf37715e4eb349b8622705025ac96e8209901f510e24711111522f5fbb86cd5fee60bfe6319b941f0da98771317ff9216a
TLSH
T10F61A1C982833065EF22503DD0D3A6C6307C8DBCC9E79E9230C49A7D220A7FD88E6538
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 1f4b5744d4e39c1d15f42f5546c2069e82e14a97486fa313b17b23c4e452c75f
MD5 e970eb33af6a7427aab8aace59f8ced1
SHA1 ab46102c20c6960e81893e2aff7d4c941553be08
SHA512 a9f75ff54ccbbdc4114328c02db8387cc8bb7249d774d31ced8c833fadfb292deb3c028944fe4389d40e5d4c86a751825dc73ebe459cc9229f9e070b7a723947
SSDEEP 96:DYOuxPzBq5sTiGFmBgwBidijKhGUCPT9GhOiaTVyGEsEyeiHigOC:DDuxP1q5sTiGF+gkidijKhGUC79GhOiq
TLSH
T1A7A109F787B49A2D8E21E1F4FE042F5F8E5C1460476C397A85D5AE23A3E2461E00270F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 eea35a498d74392fd078ca5240ea22a42c53d3444f2134d37fca0a89f3969711
MD5 e6cbb42a511480bd6eb14f71d770659c
SHA1 e3b8d7372d264caefc5ba7e8cc5cab5de970f5b1
SHA512 12dfd8836123b48df5a041ee240b5aeaff856a58b35057d6b3986cbffb0423134b02bd11330c8508701a9ef7eb49ddd024808edf1ac1d9f11942c1873b84858b
TLSH
T12681F6F747B49A2D8E21E1F4FE042F5F8E6C1461476C397685D5AE22A3E3461E00674F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b2d2a5ecb93821d26f7fd70398c33e8827ea9e788e4b625ed354ecfb4d067250
MD5 7eb37a48765df33ae5a4ad155dc5cef3
SHA1 3f06861a33b50b02261cca2740d34b4dc078cbc2
SHA512 35c5815b100c72631e5d91384a68470b6fef2ab4622462b3ff69b5f2041ec6455c38d19d51ae66793dcfc042f4379e887c09311c76154d958ed75dc5021900e1
SSDEEP 192:sxZzRxyM/jK1Ml8Mkn/fJs+V2QIdp8glyHW6+WN4h//Y4ZmxaIgU6J:sxZzfMn/fJss2xWHbq/PU2
TLSH
T15D52F711AA34A9778CDBD309FA457F53D6F9057296900E84ADFC8A1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9450705cd5baf1f08b29edcad5320b06050d805222d5ef644a70db429116b522
MD5 c8d76cb8e59b7b0203b46181aeda7285
SHA1 b36d1f4ed248de137251ec409a3b0cfa7ede95ad
SHA512 d98796f8c0bee4e1b46c4f3cbf90495d616e7231034a7fa93f1323e3c0cbee83637b9e84b202875a818a52f4ce2b28760c3482ffe13e23c1b7ee030aa1f82016
SSDEEP 192:sxZ0RxyM/jK1Ml8UQj9n/fJshVM+IdpqglfHW6+WN4G1bY44vTaIg5u27J:sxZ0fqRn/fJsvMv9Hb/bdNN
TLSH
T18852E716AA34A977CCEBD20DFA417F53D6F9417296900E44ADFC9A1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 865a2996d39aab0134e324be2b01e5010c89a275a2ba19f43b47abf6dad99085
MD5 ec68873a2a4274e59b5e05e698b500fc
SHA1 eb85bae180476dfc1d97157fd054adaf74e5e629
SHA512 106270e26befb0c05bbcefdbb43b938884e42e80f4f0d4da9740338fbc60cca76f28341f86641184ec8d9bdae5ecf329663fbbc23657e7c289b20ef7b7d41bd0
SSDEEP 192:sxZW+RxyM/jK1Ml8M9n/fJshVMrIdp8glkHW6+WN4V1rY4v4xaIg5H7J:sxZW+f1n/fJsvM0gHb2rfVN
TLSH
T1AC52D711AA346AB7CCDBD20DFA457F53D6F9457296900E44AEFC8A1C05E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4254572271721f1ef95e94a832dfb49fed4ac931bff8b0610429890e8fe98afc
MD5 eb09319cfa5d059411fe62ca7d9df4cc
SHA1 3cc1f74c960d62f686bef278ba02c347d3ebee22
SHA512 cad50b05699cca5d783dd15d2c93a9a8db29f73680c8be46770f4300fa86ecaeeb625f75061d4e94c55c3d959d3d50c5ab9af0b04ddc8db33e318ddf0dd8d1ac
SSDEEP 192:sxZ0RxyM/jK1Ml8M9n/fJshVM+IdpqglfHW6+WN4V1rY4ZvTaIg5u27J:sxZ0f1n/fJsvMv9Hb2ruNN
TLSH
T12E52E715AA346977CCEBD20DFA457F93D6F9417296900E44AEFC9A1C04E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 81461ea53fa2397d9f67fd5694f1fdc0213ea8d3dc5038303e7ac8e77dbfab83
MD5 ae44c6acf8a39aded7e36ea68b7f2aca
SHA1 a1d83c3c7cc3d043038a02092ed0cb168b161d8e
SHA512 30614c47b10a12d7ea8a900ceec2a179cce152dbc049a2621aec535fa962862b2c0edb12fc2108837c3f5a7c9a68d6576d84d861e8bee7f9e5ffbb9e1a71aaf4
SSDEEP 192:sxZW+RxyM/jK1Ml8Mkn/fJshVMrIdp8glkHW6+WN4l6nY4r4xaIg5H6J:sxZW+fMn/fJsvM0gHbbnPV2
TLSH
T19D52D711AA3469778CEBD20DFA457F53D6F9457296901E84ADFCCA1C04E6BDD220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 986320cec442dbc9c41e106a66d07073fcab758b4816d20883bbe2c394bc6e80
MD5 d878bdf1e7c468de4748d532fc9e14ec
SHA1 917310f65dc9db28aafc4dceaadd67b02a856d46
SHA512 0bd91fa3cdaf7c6a587450c923275e46683d2533e425d8107e02b0841e61e15bf2d4608e732b28861be4634f857cd4b9c10a80f970949bbf6fdd2ef6af255145
SSDEEP 768:f5yk8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdy1roEkWUn/:f5yk8iJPNWvx76ru1jahALocdyOmU/
TLSH
T19CD20B3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 096f3c22b4614231511a251f2f656b1853be35a7a8a263a6c727b11f0d3232f9
MD5 2ac86e3ef171a53e6c2b9c218087ed85
SHA1 008c4b375023ecf258e6eb6bb7af15360c14289f
SHA512 9b00c5ea2c13a0858e554a9ccbcea11fbd205635e1ea0940f2a8249de9af23e9d847333f4dd49f60ce4d715d6fcf5e5e1e5971315cfdb6d767cf0ef2fdffba34
SSDEEP 48:KoRI1KC4gvyiUH4kWymgSKhzINcgKk1cegoswzR+HbI1KYswfyi:KoRmKC4KWVyKmI1bWKYsCV
TLSH
T15791461279BF22422D3E644CA594A73B474271637054A4BFBFE870B60E66E254CFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a005fb6-473f-4d44-9459-f1f430e5619e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4a005fb6-473f-4d44-9459-f1f430e5619e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8497dde345915f098dc5edb102a94d181ca2d08e6f5b1ce17f362ff385ef28b8
MD5 dc69c68caa42aecc6d3925d47012fa3d
SHA1 039c498f53eb796e4a084b8627fb8c11afcc3d55
SHA512 70dbc57965b53b8dc4763e6b77d03cc36f278f2e6f36cb76d286d6c8ae95db8904b2a89ac15dca9bfb2993a2b1932743b087beb2ac63faaea9cf3c79f23d38b4
SSDEEP 384:t3yFaeO8WsNoGj0ke4S2UkjIDKxr2Yq9m6BMMj5kOgZ:t3IzhWfkI2quxaX9m6yMTM
TLSH
T115928D75A87069BADCA3B551F44B3313AFA48037CAD82F94D8EE6B1D05CF0D8130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 769c71ae38263b4f6d1ca1778053efd49e3eb4ffd1ccceff8563a1318a117b4d
MD5 7c09807329fb783e004393f68a4e81d6
SHA1 90b954aec64c0d1c9905fa1d1e48f025d0f80549
SHA512 64d6c6538c503fc15befd1168de6522a47bdb95c53e27086e68accba9c8557442d8c3fd81c60edf54e7cd3aab37ef6b5f4fb219e4fe8b9854db8a5627f274b88
SSDEEP 96:ZqONkaQsjpfmUTmDK5ih/cIPURHl8h4otop5S5D/BhPwivh50xy0SFYKfAxZYJgG:gONu6kDfQmiUysJZ903MiQi/QU6
TLSH
T15A02E83968786CBB8EF3AE09F48737275FA5113BEA952F81D9E81A1C44D724C1743826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f4c1231d165c4f20e4f7e88c6f729469154e350fdf088dd327628d153f96a265
MD5 db1fc497c31c50b4f62eaaa56292bbaf
SHA1 b17ad3889cf5413343c1dfd34ecfd75eaabe7926
SHA512 dfd0879b1d2dc11bcd07b6d56cc69e3249e6f81b5fad50b57d4fccd2361f4697837eec19422c9aeeb8bceddbc1d72e839aaba1d43e6505eec59a4df02a29ba14
SSDEEP 384:o3yFaeO8WsNoIj0ke4ShF2kjIDKxr2Yq9m6BMMj5kOgZ:o3IzhWFkIhFIuxaX9m6yMTM
TLSH
T11C929E75A87069BA9CA3B951F44B3213AFA48037CAD82F94DCEE6B1D05CF1D8130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0439c882012c9c2e1178e3f342a53f67a61967c59b5742d51f65e62810d631b3
MD5 8de41a0f64b16a01718b6fb1aa6c0ca1
SHA1 b43fc2bd35aec63c88b017dfc1a8b4ae12796730
SHA512 4d161afcabfdbdcd5f688528a94ebc67b2e205fcd498ffb5f19d22554ec78f54137fd0a1933f78a0e6cfdf8b7400a2a17e1f77f7e376aeb08e8efd3271aa0f06
SSDEEP 384:KiFZ3yFaeO85sNY8TUNTUlIlIj0ke7SCQkjID9xr2Yq9m6BMMj5kOgZ:BFZ3Izh5hwgXk5CuZxaX9m6yMTM
TLSH
T16AC229F258D3557AD9AE5B43A73E3E139E7CC067B9842A50B7D95A0CCC860BFC306901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4116beb941911a8a3e81cdd0c267c0f7184d929105a38a19da84dcb65527cd0f
MD5 5d57a278dec4d1b288b10f672a9603ba
SHA1 e12e9b4fa69a1225f0ab97c852ec25b477459e42
SHA512 0c97a5ac1ef875d52073da1b74649a64e0535dafe0e16b956d48d6519c724e5cb8fbb0430876390e9b072ec47a507da4fa3ef9d37d582088728fbbb55201eb02
SSDEEP 192:NONx6kZQmiUy2tZJ0903MRItFMcRXquU6:NONx6u3L09jID1xU6
TLSH
T180122935A878AC7B8DE3A955F48732135FA58127DF882F91D9EC2A1C05DB59C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ea51d541a4d5415ec047c42684d1c36c74ca7963a432a5cfb8928b5f4741fdeb
MD5 aa9cdae51fbf4a7b16bfb0f2b0e9e00b
SHA1 60d6405c30767d50af915c0c07693ca869139a4e
SHA512 ee2af3b5819cf1c22d8fa0898911d89b14bc50fe9ec26d7ef11c839d976f77455b1384ef0bd367a81be196935f969ed909d637cc7127b3ea4854e72fbef86214
TLSH
T1EBE00203D34418FFC428023010975B30B7E7C071117247475E1101657C633803E72D58
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cb11480d80582cf5eceb407f1685f62576d84aa516cf3897502d100045e4b3be
MD5 f98ab350d657f4bba14a2a47c39f8a85
SHA1 3e4c240f3c3aaa8e9c21c35d8b577c8a4dc6cdcb
SHA512 637532edab8085773543b58a98558ab26804fb4addae0e7f5ad561a46646862f8c3c4c686e13ce4167c890a079940b94d938082098ddb541e05159611e36f653
TLSH
T114E00202D30404BBC018033010975720B7E6C07112B20747590001657C523402D71E14
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59502a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59502a.TMP
Size 392B
SHA256 78e1040179ffdc4efded17d49a74f3f83c1cf5cdd2c00c7158f5e5c17fe0b45f
MD5 321984686d78f314626064fe1578a572
SHA1 ce990e2a31f42f1e71f81f65edaea1cc57f77571
SHA512 88518c405743d2c2a4b1b17b4c048e350255cd692b5927087e421736813161b9d89bda287617c6b9d81d5342d0459f72250960246ba378ef7e73b1f38ce02942
MD5 SHA1 SHA512

Submit Download

f223b775-46fa-4bfa-98af-3a84eff67544.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f223b775-46fa-4bfa-98af-3a84eff67544.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 26e5ed08b0230f6373d673ffe6f5740864a771c2dce7e7a8e36c4ad1afb9ae7d
MD5 468b079ce29c67bc8ae74db0134bf574
SHA1 ca5f151bb1a89b6e0fe2c3e67c86a6ebf3180442
SHA512 1f5eec05acc32ea91475c058e1170fc05e875898928a9f45023ba595241e8b82e643db141cbca64cc2af3694cd232e71d2a32409a662f332bc9f5cf00833d895
TLSH
T1C5412948A6F9110CB3777F56ABF6A56E447B7C772E06D0AD00110E4F0A63E40C961733
MD5 SHA1 SHA512 TLSH

Submit Download