hxxp://fern[.]best

Analysis

max time kernel
599s
max time network
600s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://fern.best
Sample260818-raryrshf38

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2356	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315352034165938"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{CBAA0667-5BE1-4373-AB87-2CF4260B0BB5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1908	msedge.exe
1908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 5328	2812	msedge.exe	89
PID 2812 wrote to memory of 3224	2812	msedge.exe	90
PID 2812 wrote to memory of 2356	2812	msedge.exe	91
PID 2812 wrote to memory of 3224	2812	msedge.exe	90
PID 2812 wrote to memory of 4136	2812	msedge.exe	92
PID 2812 wrote to memory of 3224	2812	msedge.exe	90
PID 2812 wrote to memory of 4136	2812	msedge.exe	92
PID 2812 wrote to memory of 3208	2812	msedge.exe	94
PID 2812 wrote to memory of 3208	2812	msedge.exe	94
PID 2812 wrote to memory of 3208	2812	msedge.exe	94
PID 2812 wrote to memory of 1760	2812	msedge.exe	95
PID 2812 wrote to memory of 1760	2812	msedge.exe	95
PID 2812 wrote to memory of 1760	2812	msedge.exe	95
PID 2812 wrote to memory of 308	2812	msedge.exe	96
PID 2812 wrote to memory of 260	2812	msedge.exe	97
PID 2812 wrote to memory of 308	2812	msedge.exe	96
PID 2812 wrote to memory of 308	2812	msedge.exe	96
PID 2812 wrote to memory of 260	2812	msedge.exe	97
PID 2812 wrote to memory of 260	2812	msedge.exe	97
PID 2812 wrote to memory of 4572	2812	msedge.exe	99
PID 2812 wrote to memory of 4572	2812	msedge.exe	99
PID 2812 wrote to memory of 4572	2812	msedge.exe	99
PID 2812 wrote to memory of 1284	2812	msedge.exe	100
PID 2812 wrote to memory of 372	2812	msedge.exe	101
PID 2812 wrote to memory of 1284	2812	msedge.exe	100
PID 2812 wrote to memory of 372	2812	msedge.exe	101
PID 2812 wrote to memory of 3660	2812	msedge.exe	103
PID 2812 wrote to memory of 5684	2812	msedge.exe	104
PID 2812 wrote to memory of 5684	2812	msedge.exe	104
PID 2812 wrote to memory of 5684	2812	msedge.exe	104
PID 2812 wrote to memory of 2584	2812	msedge.exe	107
PID 2812 wrote to memory of 2584	2812	msedge.exe	107
PID 2812 wrote to memory of 2584	2812	msedge.exe	107
PID 2812 wrote to memory of 3824	2812	msedge.exe	108
PID 2812 wrote to memory of 3824	2812	msedge.exe	108
PID 2812 wrote to memory of 3824	2812	msedge.exe	108
PID 2812 wrote to memory of 2596	2812	msedge.exe	109
PID 2812 wrote to memory of 2596	2812	msedge.exe	109
PID 2812 wrote to memory of 2596	2812	msedge.exe	109
PID 2812 wrote to memory of 3480	2812	msedge.exe	110
PID 2812 wrote to memory of 244	2812	msedge.exe	111
PID 2812 wrote to memory of 3480	2812	msedge.exe	110
PID 2812 wrote to memory of 3480	2812	msedge.exe	110
PID 2812 wrote to memory of 244	2812	msedge.exe	111
PID 2812 wrote to memory of 244	2812	msedge.exe	111
PID 2812 wrote to memory of 2476	2812	msedge.exe	112
PID 2812 wrote to memory of 2476	2812	msedge.exe	112
PID 2812 wrote to memory of 2476	2812	msedge.exe	112
PID 2812 wrote to memory of 5580	2812	msedge.exe	113
PID 2812 wrote to memory of 5580	2812	msedge.exe	113
PID 2812 wrote to memory of 5580	2812	msedge.exe	113
PID 2812 wrote to memory of 2952	2812	msedge.exe	115
PID 2812 wrote to memory of 5144	2812	msedge.exe	116
PID 2812 wrote to memory of 4304	2812	msedge.exe	117
PID 2812 wrote to memory of 1144	2812	msedge.exe	118
PID 2812 wrote to memory of 1144	2812	msedge.exe	118
PID 2812 wrote to memory of 1908	2812	msedge.exe	120
PID 2812 wrote to memory of 5956	2812	msedge.exe	121
PID 2812 wrote to memory of 5956	2812	msedge.exe	121
PID 2812 wrote to memory of 1596	2812	msedge.exe	122
PID 2812 wrote to memory of 1596	2812	msedge.exe	122
PID 2812 wrote to memory of 6064	2812	msedge.exe	123
PID 2812 wrote to memory of 6064	2812	msedge.exe	123
PID 2812 wrote to memory of 4324	2812	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://fern.best
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd8df3c188,0x7ffd8df3c194,0x7ffd8df3c1a0
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,9079105144694676974,6903179067216660733,262144 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:2
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,5102958505653879471,5455531714356056765,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,16521015724447312275,7179168777659320352,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:13
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,3337782496897391133,12156820129688583514,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,384566378252675122,190305935437804806,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4360,i,10833163311606240491,7709168783723497290,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,16197954966875628903,3496796280075069464,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:9
  2⤵
  PID:260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3868,i,7351240024763502476,1758052256892442350,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3960,i,17304755633543872428,3307616544739572971,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,9747456985119532549,15518346065611885583,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,17393003211978842285,5231784545015383062,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,17393003211978842285,5231784545015383062,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6204,i,14626100009918728684,4397968388505230452,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6128,i,16932629869022890000,12572065915451519404,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6544,i,6939813266949200901,3718273852120580077,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7000,i,3627764670007114696,7247964285561731702,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7176,i,15425058969783933779,4466193582207752437,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7196,i,3173098136828276015,7520144846979194525,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7504,i,18265340042805322391,272144000296912469,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5408,i,15829955553451000687,15869990552025348197,2097152 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,10494954491197963211,2722208392066010526,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7952,i,13327784220067424624,15219695196916331636,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,14281635708216430708,5468049422662668090,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:14
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,3201065759943768961,2820926137815355334,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:14
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=828,i,3032096953311413419,14087254336437719481,262144 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7840,i,12009207543256889605,9717782438325551362,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:14
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8008,i,17215157051356095,10851756267428818038,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:14
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8128,i,10385957685158042641,17530450437372717585,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,10760062871269983153,14678152081346585882,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:14
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8008,i,18193795908770130974,15308588187483892299,524288 --field-trial-handle=2632,i,15774573054788788790,6370143186155453668,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:14
  2⤵
  PID:2296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d33e87805f96eeddf72d1fe0951cbda34c3eef99b6aca4adc7cfb85d0ca22ffe
MD5 f9b878e984ca64c4b2802b0ed463f6da
SHA1 07a51000efde0f329783f67445c5d64236a5856c
SHA512 a14ea5591aa5cdd24f6e1a0e6235e1d56338a1560e9f3d74a3fd2393384f64acc72c355385b0a8566a28843b69867ea6456a570150761ec3d0cbc86c2204fbcd
TLSH
T114E07D8938CCC66EEF407747926C530DD2C0360AD3C9BD4B374088E57401944F2D3791
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000040

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000040
Size 62KB
SHA256 37c834b184239a99f8f585bb9a9e6b9c4a225826d0ef7a23f6a8500c4de999c1
MD5 1397ebe8fb712ba1b5d28faf45f74c2b
SHA1 2672128cddcfbfe83f098908bb6afa6b745a141b
SHA512 d377a63b07fe081a37df9fce4b343c6ca1790dae46c2200414563b7d4964586e0c737b458c8843975527a99abae54ac407e1458f524277cf8de5c6a774acdb71
SSDEEP 1536:8oiBbU1CpDuLqCIvytrE0LJ/zhFeM9muvZJu3DgHiBzL9UGU:hiBs2viE0LJ/z+M3vKDCiNCGU
TLSH
T1EC5302C698729F09F636E42DEDFF8B68B4A815F9B70DF446128460394471D4382F4AB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000045

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045
Size 104KB
SHA256 9d1c361d1c8a28a97bb868a776aab0ff66c15ad812c55d9de87c4d52c6ca48cc
MD5 f3a48dbe16b1a757c14e8fb875628952
SHA1 660fca48e5397a5cd1660b710942662773434ab7
SHA512 2bb0ac607d13d627090066278951486f1c318ad62491a0b0a1dcdd9ca6c2eb88f708b79b2fb117925f27f4d22485deb701b73180e745b24c96283413001d13bb
SSDEEP 3072:/Y6nJbPQa9CVpgQu132lXHvhlxqJ0FsbBr:/fnJcfwH1mlXZlxO0FsVr
TLSH
T149A3123A4314B7A5CD09E923B6C2159B216E49EAB34E0656794F3CC2C8FF7CB827E404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
Size 99KB
SHA256 1339b345381ecb5d28b651125bc6b2b4e427c1c704963ff2756a5bbbef633f4a
MD5 8888e55585d06cdbca3f7ddd9d923a1b
SHA1 9d35301b3bcd6cf7048d0cb10f45376f37082f8e
SHA512 d72d14db04f88928cf3b67e77e47f7572394d319df03ebb9a6b057c4d95f81270924f068163a2e820991d5935666046841d3f2023aa277c42122e5d538c20277
SSDEEP 1536:CtsFsdTsBAKS1VObimOMMuaBjwC6anhSFh5Spc32YjY/am5zMJQ8bcha9l2OzDtb:e1doBI1gmCWjw3fr5N235UdlnDtPT
TLSH
T156A3D0058798A17EC23716CBAE2D4FFB63411D254E4E6F5B768C375EFC798AC0960188
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 368KB
SHA256 4562707231e67b98d299ca2cea803be63322b4b6f600c8133cfb57235584ad73
MD5 6c16d2bd44af131cbc62185283e9b58d
SHA1 9056c0530e96c39a22d6cc05cadda5039aaa8f40
SHA512 c9197109a7df4e3fb9770e9060c1741a4dda8dd3b95a3d9da46a03e3335439f40d628a77804533daaeca782f78fa161136fee0dd9c32d1ad447067e58989d6c2
SSDEEP 6144:wKUoO26uAaAkWaqWCpR/2im9tDTtJtq4nC6wSIlpsZxHoRaNJYbErpRXkT2R1:qoO26HacLF2tD/tq4CUypsHdYwOm
TLSH
T16884239C9B9E379E016B496319AD3FE22B010DDC5DEC5E63E68CB60849FB1DF5C21800
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 152KB
SHA256 89e31b9f5975656d1d69f2213300479839748d327daf8af150d42d2455cc4d18
MD5 930606d2742672801e74649365894566
SHA1 c2cd2b25fe3fa2c4f5c24dc371fe6efb781c6070
SHA512 3eb50ce929f79293dec073993657e3167136118a334f32361b7aca8c64aff6c3c56bdad7b02c9c5ff7dda87dff4379fc0524e8d3142b02a7bb194089e334c5fe
SSDEEP 3072:gk085rHRHsb2oJ1sKKXXHxDYDUio3scKMmzV12uPqDqOII85:zX5rHRsdtmXRMD+snhp+bW
TLSH
T143E31250534CD6B4477729BF1CAE66F176837C5AD8649BAA2DE0350F2BB20874FB8390
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 175KB
SHA256 628671f80505622468a530cd6f3cdd0a3e7ee97b14b75988a12701468eada869
MD5 d595ffb5eca6c9681c608dd00e4ec31c
SHA1 07187077b972a3637a444afd451def00051660c4
SHA512 485bd13ba9cd27cc057a8f05e20c93b0ce419f5834392152c9690198c1f17440299fe8f3c6cd77d4da0c688715f6c88791ca356f3be9e58497138ffcfe3b272a
SSDEEP 3072:CDBHSGvGgtRSaPVSCxNpxASOKL+yjenqnIENR1rP5dVs9W55ZvyZwyk:CVyUGgqkVSepaSOKiGen4hR1NDCwyk
TLSH
T17804E0041BA8D4AE153B6FC39F0C8BFA7B495C544E4C2E1B7598338EFC755EE8852A81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 452KB
SHA256 ece85c0a950f60d73e6fb0dd74c9682de41508495ef25dd39141cedeaf9765b9
MD5 41458508e0cf413978092ad137fb919b
SHA1 80cf8d522689b91a22780cd25f9d2463a9fe5042
SHA512 12c9061a08e054577a791d4262b4b573d1f5d4e82760d395deac6723d79bbc425fc2ce2930b5d403145686dfdafe1f9aa645fd3efa770c671389e4af3da1249d
SSDEEP 6144:UGgbOEG7rZu7f0xargVLBzdgNunRXFM04knMowm6GrrffOD+oz+HEUDIHrpgJSNb:2qnqgVLBzdHnDIkWsaZz+Hz8Hr6ob
TLSH
T1F4A412041BDC627D4A2A26879F0DEEF372564CA01CA85FA7658E374DFDB248C48B0E84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 213KB
SHA256 78a8e8239ada785a2b14b275590a728498a8444d2dd00c95066a0c0736870ff9
MD5 0bac5b7da79a9ec60039c4f126294d4a
SHA1 0a044a09c0ec63344e7fa4c3947eaeb9cd770be2
SHA512 b8ba9d30b757f934765ce4ecfbdb6d16e56554b1679a308c6900cf4ba8eb4a2d05558f547e2b054b5381a2a8a0525b0027796464b5282458cdc4695eb634a91c
SSDEEP 6144:V8ZSCGSVG0sYlc4PtnswEJTkdJjJf53OcERH:3zYG7KnswuIhB3ONH
TLSH
T17B24F1081BEED03EA4432A820F5D5AFB77011C296E4CBE63749A375AFDB19EC1D115CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 143KB
SHA256 140161c71ae24efde0b828d44fd657ee5e8a223db3ca015e6847c1ae8b637528
MD5 7329907974ee9ae69f3b8c57d3a836c6
SHA1 31b253c6a9ae29c5734cfe65c80796e2cd4fe53a
SHA512 55e5c06965c501c03f738080efb36dc649e481a42ad2c56690954c58005e03cb23f1b425996544ba0264c9e67bc572af0124b62515357888ec398da2c80ccaac
SSDEEP 3072:I8AOPGnjuW6v19tFSXJkVMEwxRrwLqJTDh+9NKlgZZQxkVjrHe9/:NAOPeuWe9t0ZkVMEwlGTcgZaw3g/
TLSH
T135E3024D1BCD54606E33A6574A0E7AFA6B494CE49E2D0DE726CC36CABFF70190C44B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 167KB
SHA256 c2ffbfc1fbbd0e3d463c89e0d17a1f75372d09dbd36b8769af88e7d6af94e1ca
MD5 c4081b61e3268adee0376526d7980e29
SHA1 d5cc591d2781df8395074fbdd8ff31e2f969ea90
SHA512 8f1e62afa0936dd44cbfe91fc901bac9b6b262c3b897d52f45360a0afc81a6ba319e9a6fcc56c66f6759d38ad4fe89a7b9037aef5abc507ebe741956b88f035d
SSDEEP 3072:g7Ps9dv+hpQPHcymKIdXEGfNOWInMCs+2Vw4vZCAVgCt0i8Rkkv4GqfcC1F:O0b+Hg86IjnpCuS4xCAVgZi4kkv5qn7
TLSH
T186F3F1444F99897A043722834F295BF2B2961DA92E5C3F9F74DE7A0CF8B25CC8D522D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 245KB
SHA256 5f93d552046db87e6685cc93dc3b36a814e1312aadcfd4980f6b63d3ffc62559
MD5 d3d8b9039ec8a5ba6ed0e2c6f3bfeb1c
SHA1 439d9994f467c3b9f6347ccb16aeb1db12cd1c84
SHA512 48c011b7cfdf088c78acd55478cd62b7a663bde0a2f82a7adad48961f8e061d251d823679b2a897c3a839d58a8035d3c0f396b608296aabe40dd1bedbe6108b2
SSDEEP 6144:gYbpka2A6hqh49YBWjV8I+HrOSOKb0mCdYH7nRER+/paw:gIR+hqh49sKh+LOuTCgRbxaw
TLSH
T17F3401585FD89ABEA5271A634E4D8BEAB3212D614C9C2F43B098330DFCF94D81DB19D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 138KB
SHA256 646c001d3b7ac67b93fd4d0f5eafb54bc84adeaca24d23c1db9426b6a3e4380f
MD5 415f38ded3b7c4b54c6b5f8472a94afe
SHA1 0c473d780f60e3504debf9dd895b86286e415272
SHA512 57b70ea61e5cbf10675bfdeff88883cecf8d2681ff91302f8ef8f10488005e54623b1e06d83078c657495846c1ab6ebf416410741d4a7f66819c31e66f62c0fe
SSDEEP 3072:TH97lNwicPZFrW+/nRV44Lty1z43d6136JY9r18NI4CuFCcchnor+:TH5lNwi4ZJWuRld611/eIzlor+
TLSH
T1F6D3E0042BD4D2AAB9D216C39E0AAFDE37461E419E8C6F57B11E370CF8F95EC2C50589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 84KB
SHA256 c9f2afaac3951df52fe69aef51e1d40175f7616d90572bdf410c2d90fee2916d
MD5 b5d00ad74d54680b3c6eb7e7646bcd0c
SHA1 59603b13b3ab618086ec50c717b3ebdb1d965f68
SHA512 81dddc9118b0083c367425d07c2ae4db81b6fdc6cc1529b109d797ef529a6a9e8fbe4340f9094c064b9e3ad2c112bf5add1184a2eede9f690c4d6e05eaaa6bb5
SSDEEP 1536:m/mu3cWuuzPDNHrToz3zhqr0JTktu+/GhcCS4/8vvGG3d/ytKvmLT8j1/Wvr1x:m/NshuzJHrTo8r0ZuGCTv3d/mKvGg2rD
TLSH
T19783F11027B8F25AF1224FB10F1E45E86B412D844E5D6F3BB50FB70DFAB52E44AD2682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 351KB
SHA256 56c0c6449a3d4b11680fca2d04d06ea98f92c49bda4389ed63385da1b8a2a1c4
MD5 342c844ff53615da078a4c3401e0478e
SHA1 7d8c7f77925944d2017c18b927600d07e2c6db55
SHA512 573847759ff2d3e1c114c89d83403eaedafce58e0eb6e4b024aa979e035b32ce9c3a6f8a1c29cc2631882c28ee15e5865750d108349e71847fc8660e2d6d6f18
SSDEEP 6144:tc8atnFezrfRuVf1L3g6PVyIECv6zr2dPn1LqkOPrl4RFNC4trozCp:tW9FefJuR17g6ctPI1Lyrl4RFNC4ECp
TLSH
T14E7401045FDC202E23131A9B1E196FF677850CA55E8C3F97A9887308F9F64DD9D2AE90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 62KB
SHA256 72e8bf4bdc0a65e77dd868f8d13dd714e5e8e2a77add72c011d7636269279115
MD5 59822e9f73a75c453220cdd259b3fd49
SHA1 17d57da6b4479b3aab67affb9a99c3141c2605df
SHA512 bd3f9b377691d018e9e7500ca8af09751dce300b74cf14251b9b9a45fcdf8f1f983bcf85dfa059f4065e174c27eed37e73df2114e1f254c2f4cc750c5507f6be
SSDEEP 1536:L/aYKur2MmIEQe0GBAs2MMFqI6cVtNAynSHL40:LAurPy0GWMctVtivr40
TLSH
T1EF53F1059F6DA0285317096BAA07A6F1F2C89E544F08AD3BD6DF3259FE734C9CC91A48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 298KB
SHA256 83bec33b2a507851d30f6bfbe020f65c4b225fd7ec1034841e3608cfbb915983
MD5 bde9a7bdbc4ab798760a69ad00f1ff80
SHA1 45fba8a39365df93ac08a4f12b43d605a6cc2b25
SHA512 1923ed0948d7bcc392dd4c5bc8771735183cc561666db2353e4d697450a22bae36f662f96aee296f95d0453f2cf4e87ce69ad6a274a3db683618fbf7c9311d1e
SSDEEP 6144:kg91QykH9NwjTNvh3+8BSn9F3x3WsxOofYmCPnHwApESO8ZFEtMkC:k898sXun97wG6Q5dG7
TLSH
T1EE5412048796543D043367162D2E0EE673429C90BE8E2F5779EA372CECF35E98E19AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 166KB
SHA256 b69653ed5310fa862d8e1154afad42cf1a2358ff4b41250ab3969ec361d4b3c6
MD5 ccfa6a76197635624698427420693941
SHA1 f092ffb8cf0f0a24a7d8d4f06fbdb673f4b39631
SHA512 4771f7b2623fef37f68dc6ea2904abf790309a9012bd44a1b643e48cf79d5d3969a4793d88d431e202ebfc0cb6b154733e08b66a50c067c204305e5baf6d0a8b
SSDEEP 3072:z/fSzVZGW0B1zpQQrIUgrZil3jlY9HGTnq18LwPBTnn4jKAIKq/Mo:z/fOGTz9IUuZ03RY9H3BTnncq/n
TLSH
T1CEF301484FEB453A510316E72F9D5EE537425D884E0CBE57B8A8334EFEB689C0E61AC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 52KB
SHA256 d2ec8c6d8bc5eeda37d3a66f1cd7f973fb673518b286f203a3fc77018004232f
MD5 585d9ed8694ab3a91e06134bf5023d99
SHA1 e46a930a8215903727dc0c599e06722c225ffc55
SHA512 a51e726efa0e937a5599fc0bd8ea66529c9a6e808cfa9c4304d074bb0592927636b96d7e2f2a7b49a1d69af60362d50ac92a6bcb65fc6323a7002c55a44d48ce
SSDEEP 768:FWJdLMdJ7MHSI/Gm4V71uWs98h6cBnoJ/DEufiEaJ98DP608NMdQtzO:UMdISI/IpuW6M6dPfyD0xQo
TLSH
T1A233DF15035E64B8B06A56CB3E0D2EF16B636E621D0CDF2B759CB32CAEF21D80C6D594
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 179KB
SHA256 ce7b6784387dacd6fa5c6860fa056e4b13c9818d2e8b9fd637f5bd2a7cd38b87
MD5 52d5910391ee11d7f76b83ed9a8e32d8
SHA1 c5bcfaf07d187bab022d1d59e68cc14c6a628eb7
SHA512 5f68a7f7fb607d2720172e8ebca8f99490fa47891832ca984d50fdc0988fc6504cb8095127bd6831fdf7a84d1c8eee2c25ed29e40cdf21daa94630508e6ae151
SSDEEP 3072:CuAGG1LfGjCDPwGX+5RjAKkqnDCN2dkrCRAPHMLPsl62sIubxnUEgNoyW633kOtu:hWbGtCk+Cww+CmHMIl62sPUlL33N/LY
TLSH
T1DB04E0009BD9843E65631E830E4E5FF177482EA44D8CAE5BB09D3B1DBEFA5ED0D50688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 39KB
SHA256 ef8db5f32a74c159502b54a3a8f14a677b2f5f602d1b856c22aeb7261d2f40ae
MD5 77293f5797e1198d1fc38ce37f5314a3
SHA1 2f8650af1491fbd9ed7a6ebc7ef8b76265c11947
SHA512 20ff46759c9dd56ca92187c522f05f3d21e3cc39ab3b26a87ad8ddbaa174684607c781eded47925122ca779e989b266b2d23dd655dd47ec953892f9995c69c63
SSDEEP 768:GHiByTUw/5M9YFfMSjSzgiZAPki6FHrKdM+iBoW:7wD/3+QS88ski6FzV
TLSH
T14B03D08A078590AE2E132E177E2D3BF5670A4D51AD4C6D2BB0CC3B6FBCF74649814B85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 83KB
SHA256 2ef20be4a13ece949a8ac17ecc81d3bea0b1525ff003698ed58cc815864cc7a6
MD5 658651e700607a4af513a12ea9dfdd08
SHA1 6611a4c9378ed908a38e8d207c484f035668f02d
SHA512 632c0cf08e4e2f52e1f4c7b821a9a96b565a6f18cc12e0f729d600ea06066f02da305d073b03f3d0ab55666b0398f7e248204b7ffe6dbbccbe89873c470064c9
SSDEEP 1536:7GHFoyER4WdECI4Uqiiag7eIyPtYnewgFWLZNDKTKqr/:qHFoyC4WdEIF+Ynewg5Kg
TLSH
T105839D840B8CD1BF91236BC75F588AE677002D94DE4C6F8BB488734AFC7A5EC0D952A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 594KB
SHA256 2cd49e56fa5659cf8a958353b9912446ea1430ae89a53c6d13ce53a36fc25099
MD5 160424b9abf55365332dc915bf8877ec
SHA1 5df1ae039c899e138944a609a22caac3ade094f7
SHA512 8fc95652df6bf404bd02fe69e6d02c4d482dcf8d649f1f3bdd743d9750cad3aa5712984ead5294dc2901eff121575a2f67d83b75cb8330ba22feb2d722953220
SSDEEP 12288:jtb+be9yh0BhUDWVZbleRxVOxLUiZH3YnUHc2q0O6W6:jtbieYhahh7O/Ox/jp/O6W6
TLSH
T193D412292FDA447B5827416A096C7BF3B76A0DD1AD0C2FB72A8BB30974F35940C54ED2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 204KB
SHA256 03f6ce6dce18e9cf462db224131b20670a0b7aa63f699a500ceaaa3fb10d01fa
MD5 85d97650b30b7334c1c55d225f06fe40
SHA1 1ba96df5d2838c28b45e540a9a6982ab3989717b
SHA512 bd289775036b2d2ca7ce599361ada5119895bf48eb3e632dd1b76071842e8820f7138beed6767b2029fe1d73bedad6d4b206959d378ce2cb7adb3f4ab9dcb627
SSDEEP 3072:xAPsT/h5YkeAJ/912dVkQblIamp4amhRYknY7abhDxgrMTSnliKNLYIGptbaJkmp:+Ejh+cJ/ufIa7hnQatDCAKNLWIlnJT
TLSH
T1762402892BCD516EA1B27BC35E283EE473124D690CECDF577206374CA8F69C80C64EA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 189KB
SHA256 2eaa1b2ed031e87a67bec3a2b88466635913132c60c0991e39e8a1ffcbfe1c6e
MD5 0f69c111cfd8a16aebad1167636fb9ab
SHA1 c5625a875411986ba5eb4e00989d8c2c72873988
SHA512 e9331e80f88bd1041ba283f81e7655911dd20f2fe10c81824e9487dac85b31833fbc6fcf00126787d62dd8c9ac22b657aacc948666ffe08327340e84d0531e29
SSDEEP 3072:xTaTqSfSXAT5D+Sx06dCJ41aoYj5kCpHhflu6yX9cGxTKj2x4tXeVI5p6278Cn:hoh06K41Kj5kEVyyGxT34dmI5p6y8u
TLSH
T1BE14F14A179CF16AF13256C72F6C5FCAA3090E844ECEEE13B50A331EB9BC1D95964784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 170KB
SHA256 8155d899e47b830831b3f543caf03e7af8ff66e16be9cb8618ef7df4170852ea
MD5 94a5881bbddb26abc7397e9bfc9787d2
SHA1 b4cb7947e8207c0c646ae1d46699a54aaaeae8de
SHA512 a15369388f361c1cb3fcb1111b8b83e36483f13000b16cf44242dd6285b7ba0312ce42940b191a0cccb16b70cf85a019b7bd006d802d46fb55b7c3c283b35051
SSDEEP 3072:rZLT3Qevpy6D7vVIVlhK5aL2s29z6AWF3DbxjvFLDQBjo/bSJk9:rZLT3ZD7vVIRL61QxjNvQab2k9
TLSH
T1E704F1495B89C16A743B2AC37E28DAE737501E944DCCAF2B302E734AEE790DC0D856C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 17KB
SHA256 12e15ecd6fabfcc0a87d9fd8d47592d58f4973baefb0d7ce08c02afeabd0235f
MD5 4f16e76c847e4b08b7dd900f1bcdf5dc
SHA1 ee24cc6fe83f08c00f580520eb922487b66c1649
SHA512 178c82c6adc7388b63b41c8144a828d76b3e1d59dcbf8b042653501bd47ab5070af563596ea1d1e7a5c41d7486bb7010358981826a73b3c831828e64a0c408e6
SSDEEP 192:gEdIVABojRAtLayGEJTnFst2deQQkZch7sVv+Qs7kMKh7htnoBddA7sq/Tsvg:gEdIV/jqxJst2deQQkZHvIoMu8BddW
TLSH
T16272AE5587DCD36C44692D5B1F6C1AD5E31A7C1ABF8C1E1FD40AF30A72BECE81881894
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5176e6eadf240bac540b2621e567d4b2adf61d5640c0fbd83b2c45e8df6bf3de
MD5 1e0e13ba1b370572908811cc59263326
SHA1 b0f6a51088ea30def6ab2b07ebcb6b04c6b95892
SHA512 874b55d2323a8f06ace1706c4c60c4ed7abf685b201fd389286d8546e47b43d914971a9f71406184790b21d00df4c0a01717da0c7948138a73f7eb1856f4646d
TLSH
T1CA71544243A453C3EBA988FAB4FCCA7831F2D50E464F9E0553544D729942F9888EBDDB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 6f2940019ade04485d349348dc9cbe1eaa4b1dd0a58ce29e8363be7cac82def5
MD5 6ecb6e124c43d74b967fbcf709775e84
SHA1 36deaca096914996e3ee5c251787785ec46c2a17
SHA512 94f343f6f7ce03df7711caf6c54c2b80348d87e12f745cf625a4f704703bbce4e8ade752336bc97d8f2ca32f6746496ceca213f0a400bdf4e8139a925832c43e
SSDEEP 384:DDVmmVANeyeQz1J/NERyMZb3WPJIezaVaiZ41iDCkNgl9ycCuzN2NAC+rGRzBtja:Yfu+4r95ZURfzKI/
TLSH
T1AF92ACFBC3E4862D882572F09A2C6E1BDF580525435C3F66C9E55E4B93E2471E301A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 4a8d4a9fde689a4a063e7cbd87a7a1aaf9d98d122c6dd720e6d73d75d4bcd314
MD5 ec85862e6b7c16914e8778f5da2dbbd4
SHA1 f64b5ad24baec47b89c95422b9842ab967eab7ca
SHA512 089b3adf9479526e57446f9cd82780904c38acfe6c8cf7cd687dd684fc006e9de623a0d453630cd43c0a5bbb7ac5ac0b22c63ac9c2a55e5af5072ce14fd31a9c
SSDEEP 384:DW0Eg6Z4eueN5LJqUJb8pU23XJRBM72aVaiZ51iDCIPgMyACuzN2NAC+ORzBtjC4:I05+Xr9NZUAZzXNOq
TLSH
T17182A9FB83F48A6D892572F0AA2CAE1BDF580422435C3F7589D15E4793E2071E341B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4afc2f374b6fbfcf56aa7a5935f67ad5d39c6dd7b5962c8e511e5f7afb6bb6dd
MD5 07a372eca6cd027fe3a57aaa8395fa7b
SHA1 df19be3525d0c3a393f2a17e8002dcaf0f7bd40f
SHA512 c219cbcce1b0185a02d029b3f08ad2e91816451e37439489c1b1d23bca346bddba8dd2fa403ab3dbe69bb6569a8a5c8546977589826fd975387d5d014f493341
SSDEEP 192:sxRzR2b7/fVs+4Dde5lSZzoD8pJWb4/g6+WNp3d/YC0v4ONGGIgEJ:sxRzS7/fVs+4c5lwws/5v/ApI
TLSH
T1644298155E28A93B8CC7E71DBA56BF93D3F95032A1E41F48EAFC861C04E66DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d5b94dae01fe1353f5abf7fd00c650d6e7eb260f054cc74269db60aa55b4ec17
MD5 c2d1394f518edaa5121e7fbea3c1ea8e
SHA1 90599ea235f80da6601f7b0eba8e69c1f5612968
SHA512 31e15f353af24ed14db855d8f70a02ddf59bd91f26f36c9068d3bf20ed32590754637cb3a40d19f619fb08ac280596eefd3598f863a91cfb3f31bc27d1184635
SSDEEP 192:sxR4R2b7/fVsgVDde5lSZzoD8pJWb4/g6+WNpvd9YCbF4ONGGIgD8J:sxR4S7/fVsgVc5lwws/5H9fpM
TLSH
T1E342A7155E28693B8CC7E719BB56BF93D3F95032A1A41F48EBFC862C04E66DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 46118c48c69c95c842e7dd4aa4ee29bc44b9055592d066918fd0a61a2c0f9fe8
MD5 c3383253cd3ade7f0a92228d0b5df4dd
SHA1 b637b7e6828a0ec30f61892d8dd550bea79ba008
SHA512 e7a649bbe5696bc7085ff09fb3e7bcabddb1e30e6ce27f10fac2c61d8e22eacb834d4fe381c26dbdaef3a90f2123ae9f6a700b24f197ad14536b727103f778a7
SSDEEP 192:sxR4R2b7/fVsg4Dde5lSZzoD8pJWb4/g6+WNpR/VYCav4ONGGIgDaJ:sxR4S7/fVsg4c5lwws/5bVOpS
TLSH
T10642A7155E28693B8CC7E719BA56BF93D2F95032A1A41F48EBFC862C04E66DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 27KB
SHA256 5f9dc32052b7d2f9369a42d9677fa9d7c8388f25fbf3682438b3b7cfc6eec3e5
MD5 6caa25ee4ed8e372c430f135fed7a099
SHA1 f87481764dca78b953e9ab3d8287bf152026c692
SHA512 9f51fdc9c8c63b50c808958c44fa8706143d9c71efba3dc41a2ef5213dff5b55cff81a571baa8d614b90c5f857d1b32dd7240e590028bfa89eadc85827537b07
SSDEEP 384:sxR4S7/fVsgZ66s8qMpRiYnazAW8pZS15posJWeT+pc5lwus/5KNH2pM:sUS7/fTZ4Mnc7WeT+pElu/5KH2+
TLSH
T1A4C207059924C83B9EC36E1C693D7E73DAAC506222D5DFDA5AECCA1C019D1FDAB07413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 d2d9233628f1b5c7c6b7053223426886d35a4967c082182a1734ba1ccdfc2fec
MD5 24871150367c70de8a6c2b928212c2da
SHA1 304f327f5d66af668f283e53b624bf7b48483dea
SHA512 8cd53381086c04be9aa895bedc4e20ea5f1309070dd451ef4494dc3ddd0d302e50896fc5f4adb1c271f8939eb02df7481ee5bdf46f21f44b526100dd11a5a9a0
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvzroZSe:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vp
TLSH
T12EB2EA2B600DCB7E4F801AADAC197FD76DA802CB97589D4047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88a78015-9324-4e13-a0dd-4c0a3b65ba7e\index-dir\the-real-index
Size 120B
SHA256 ff05ea2819a455bda0829748bb73f2f19660da00c7e7cd449b6d95ceb5b6e751
MD5 b939f7157a75fae5818635d3e9b73824
SHA1 264d4efa2bf6645a74f960489a5f7ad4f770b048
SHA512 a2c1a3d6a7edde013bd11ea4eacc26b67ead4e62fd77b3612d646ea8380e5b0ef7e96d0f0bc39dbe650c31a99e478778f517daed2763f897fc4d4ec6bbd54cba
TLSH
T1B8B012444ED41891CE0A01710577711427350BFC08154B0360DE1027D8E12EF9045681
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d75fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88a78015-9324-4e13-a0dd-4c0a3b65ba7e\index-dir\the-real-index~RFe5d75fe.TMP
Size 120B
SHA256 93565afd7a0e63741fb473d5c2f2164dcca99540b503641c06a21a2d2a5392f8
MD5 6da8c41e7f0dcda127807cd05d6c6bff
SHA1 4f20c4fe2ee3a5627ee086c9870032a4ffdfbfcd
SHA512 0d710b5121fe846338dc0b0aba17f4211c4ce5576eefc9a810cacc308b5cc56ed91c92caa52fb0b52efaa71f88c8f77f78a6a00c2a2f9ae842f5bcf2fec44318
TLSH
T133B0127102D00CA0CC0E01701163D20433260C180464830370DE045B48A1AC84081545
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 84fd871884fbafe877514a7efeaeaeb316c927302b00d5a4a9d933084748ac83
MD5 28715b2ce6a75745e7f692dd00fb60d1
SHA1 9920c4099835e57b401dd0a0b01153ac5e2aba0f
SHA512 25e7142fa3f9439161c0a4401cdfaa332570e88e48d76ac1553a315724058f6a82fc5c53cf027839ee3a9a37f80b59a42001c794c8bddb4913086822b15f5898
TLSH
T15EE0C0FB2DE32814FC1FE3DD243184E802057874E905ED5F1056D1D300F1303241AC62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 19f96ea1dcbcf14413fbf7a78f3a33d17cd6a5dec69601f76d218ebacb793656
MD5 2189cbb1950760cb6d32dff6b0dff110
SHA1 61c8b28326a43a6815d885be3d48db749c5116bd
SHA512 d073bddb1db3a78c236197316afc0345b4a3edf4b0fb5380f87c980bae413d9f47e0c9c3e677558e556cd594cc902ec4d93405291d632c4efc069d8f69904e94
TLSH
T1F2C09B49455F2151CC544679F54D42B85114666855107753557C9275ED270208493306
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59483a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59483a.TMP
Size 48B
SHA256 ea6af411a030451c23a65dab00c4ce9001ade93e0956056a1b57d0db02f6d9f6
MD5 fdc81b4616c461c1c54d0fa6f80aeded
SHA1 cb2948b39f60b4df3f699e130ace6195265828e8
SHA512 a49a05cef9bc517a179601ae8e65895e2d7f1d559bb58c3701e0555e404f44eb15f2da69e769f64f7e4d749ce5d4ff8e38904af5f9818754b46bf4c01654c9b3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ab1edcaedde1b8703b8b97097917c04c979b2d837cd6473e6e169ce7ee709ea9
MD5 d95bce7c032cd9afa02fd6d71cd19370
SHA1 62e8638479590790f325091f2485a9111e213ea4
SHA512 7437dc7a16384a24e1a0f4f877db2fc02de346cb977f458e5687bd815f75964ce7dcf30ae89813970a9ca5e1ae4360d5857c77d3a99ed6f375f3e17258daadf9
TLSH
T16FA002204B505112D0118F7170A91F54A319DC2096110B4351916044AC643C34F16084
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 898916214018ca32b37e96304fc4b9dfd5de4cc7272458b962535f2aa7812e69
MD5 404366649ce427c28b2287b7da78fc09
SHA1 997337b130b92f0fd2e0e5c32b49e2f3f3c26a59
SHA512 3ee63778f3df35746229bee0070b30166907e10cb39ea6497f32ce6674f471ae38759d2965a4504dd6eed590dc00e806d05dc5bb74c31bd6ace380717d5dbbc6
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHWLa2Q44eWIdFgWeK4rgEec+W10m/Hd0dW:CbEBVj5JAdSp9/EgTK7j6dJOHWLa2Q46
TLSH
T166915A04343A0650B87E771C81BD8C2E85C574723619E62F3FAC42960F6AE47ADFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5c297f4afdcd5f719898b980e4d3db260981d737ec49a1a511dc00a0f1b148e3
MD5 16a01a147110c7cbfa827380291eb1a0
SHA1 0a87e6d654aca0d42d2fa37cf56b334ec448d4b2
SHA512 bbaa080f175ebcd801d67fc90a5bf44b24c374e8de26ad748b054874bfd6306b4c41a3041a8025222fc8f62cc58fe8fbe0d0ab9b77e5d2eba60b1db521590a91
SSDEEP 768:srv+4UNbdw3skaFmUp8+p3bd66j+4BRv86aLIWQqw6:sbsbe37i8+p3Z6n4yaqd
TLSH
T1EC03BF72F9A9E9739CF2D684B1473A437FB4506396C01ED4D8CD6B5E029B0AE130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f04805429df299adc3144974fcb9f5e7c8fec1d8734c0d1c53ce81f965ad93f1
MD5 e0be7eeba5d6cb3f0fdadde0a79e8c44
SHA1 0db58e7f7556c8d9885593293d5b7b1e4d27845f
SHA512 b509f20e1ea22a17d5f08482dcc215e84027d3df30a84e9027b0d88ebbbbd1e136d5ee4c54ed2683d475a978ee6bd5684aab17d8c4b9f921717e660397efd29c
SSDEEP 768:WX3V2aFmUp8+p3bd66j+4BRv86aLIWQ0uTHnWBus:WX3Gi8+p3Z6n4ya0cHnWBV
TLSH
T105F2AEB2E8A59C739CFAD748B6463A43AFF4916383D41EC498DD6B1E01970AD430B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 1f498c962ac5323c7ac8551b6157f6ae4da73270895a25a8a8514cebf11cb898
MD5 ddd1bbd5d8fabb994bd930fc12c37e0d
SHA1 02aa3849f35c8c14cbe3220be81f484b267d9d47
SHA512 114f22d95277f0b4103ab5dd2b4bc5ae292009dd9c24e8e82991ae8463378065600d577d8af034e9f8ce2bb709ca03a518fccaa8e005904f9835671032c399be
SSDEEP 768:brv+4UNbdD3MIFmNp8+p3bd66j+4BRv86aLITQ2bwCl1:bbsbp34L8+p3Z6n4yV0ww
TLSH
T17503BE72E56899739CF6CA44B1467A437FF851A386C10AD0D8CD6B4E419A1AE630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 604c2c055fdc915d2a5dda4a740ca4bc3d08d437eb6c5d81de4bcc49ba14fb61
MD5 7de24996f613e7a596c42c0a91418a4a
SHA1 d1701be761ac2f648bfe2aea4f44f57a412507a1
SHA512 c4790d9fa879c89af5da560b7fd30464abd2ce819e42395ddfbf5e985ad0b7e0035233a699ae917370aec3f5e0acd60b7f155a108127e16d6e10dbd41f9bd16c
SSDEEP 768:bZFQb3Swg0gaFUp8+p3bd66j+4BRv86aLIWQ0uTHnWBus:Ub3q8+p3Z6n4ya0cHnWBV
TLSH
T133135BF298D78477D8AE9747A77D3E425EBCC163B2945980B7C85A1DCC560BFC306822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cf0f8dd5cf8fda8e2ac803acc96b2e109cee8937d3b459e6d997979ce84e0458
MD5 f2d567ad68b4d17781c4bc4fa9c6d658
SHA1 0da6a691aac4b26c11f7208338477b00d5e7cd06
SHA512 6fa16f44d192b10a591b6b75aef9875a635cc432c856dd2da96db20bb3474d6cb35ef0c353596324aab7d6d521ba075c5545c88031494b907d74aa1124147445
SSDEEP 768:IX3s2aFmUp8+p3bd66j+4BRv86aLIWQ0uTHnWBus:IX3hi8+p3Z6n4ya0cHnWBV
TLSH
T16DF2AEB2E8A59C739CFAD748B6463A43AFF4916383D41EC498DD6B1E01970AD430B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fa41149fe6ec93dd0fd881d7522214d456a345dbc97e6dae4721c9cf86d790b5
MD5 6af7adc2a85617f9e22e2bf4f243e232
SHA1 fe3347c359777ee96e326007f6e687165c75595e
SHA512 80837e6c4bbda87b2ddb3d0a6e99a84b7855a98f874510f5227c56d5c12d9b4ebc6291a2fd68d16da11d6efa97a2e323f9bdd3b8773c0de7b54e7ef7fae8f2d3
SSDEEP 768:Irv+4UNbdD3dczNp8+p3bd66j+4BRv86aLIiL2bwCl1:Ibsbp3sL8+p3Z6n4yd0ww
TLSH
T1DE03CE73F9A899339CF6C644B1467B837FF851A39AC00AC0D4DD2B4E415A19E630BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a53c752-dfcc-4202-bf66-a65a81b25497.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6a53c752-dfcc-4202-bf66-a65a81b25497.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download