Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/08/2026, 10:04
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://061yt.mjt.lu/lnk/AMYAAKQWW-EAAc8B7hQABC6QC6oAAYKKXRcAoZiEACAz9wBqhrMGT1IjQJKGR7uLSqwNA7KR7gAeWYM/2/sF8tvukz2uxQILbPmBtmPA/aHR0cHM6Ly9mb3Jtcy5jbG91ZC5taWNyb3NvZnQvUGFnZXMvUmVzcG9uc2VQYWdlLmFzcHg_aWQ9dEtHblNnTHhhRXVTRHBCdGNyZlVKaGFOWVJHckpqSkFwdTZqOEdFNXpEbFVRakZHUmtGWFVsRTNOVkpHV1RsWVRFSk5WRkJYU0RWWlNDNHU
Resource
win10v2004-20260513-en
11 signatures
150 seconds
General
- Target https://061yt.mjt.lu/lnk/AMYAAKQWW-EAAc8B7hQABC6QC6oAAYKKXRcAoZiEACAz9wBqhrMGT1IjQJKGR7uLSqwNA7KR7gAeWYM/2/sF8tvukz2uxQILbPmBtmPA/aHR0cHM6Ly9mb3Jtcy5jbG91ZC5taWNyb3NvZnQvUGFnZXMvUmVzcG9uc2VQYWdlLmFzcHg_aWQ9dEtHblNnTHhhRXVTRHBCdGNyZlVKaGFOWVJHckpqSkFwdTZqOEdFNXpEbFVRakZHUmtGWFVsRTNOVkpHV1RsWVRFSk5WRkJYU0RWWlNDNHU
- Sample260820-l3ydcsvakf
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4872 msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316938569130245" msedge.exe - Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ msedge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ msedge.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{3D5FF401-BD91-4A02-8921-FF614F0E1E1F} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4332 msedge.exe 4332 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe 2020 msedge.exe - Suspicious use of WriteProcessMemory 33 IoCs
description pid Process procid_target PID 2020 wrote to memory of 4088 2020 msedge.exe 85 PID 2020 wrote to memory of 4872 2020 msedge.exe 88 PID 2020 wrote to memory of 2064 2020 msedge.exe 89 PID 2020 wrote to memory of 4304 2020 msedge.exe 90 PID 2020 wrote to memory of 4364 2020 msedge.exe 91 PID 2020 wrote to memory of 2272 2020 msedge.exe 92 PID 2020 wrote to memory of 2064 2020 msedge.exe 89 PID 2020 wrote to memory of 2064 2020 msedge.exe 89 PID 2020 wrote to memory of 4304 2020 msedge.exe 90 PID 2020 wrote to memory of 4364 2020 msedge.exe 91 PID 2020 wrote to memory of 4364 2020 msedge.exe 91 PID 2020 wrote to memory of 2272 2020 msedge.exe 92 PID 2020 wrote to memory of 2272 2020 msedge.exe 92 PID 2020 wrote to memory of 4376 2020 msedge.exe 93 PID 2020 wrote to memory of 4376 2020 msedge.exe 93 PID 2020 wrote to memory of 4376 2020 msedge.exe 93 PID 2020 wrote to memory of 3060 2020 msedge.exe 94 PID 2020 wrote to memory of 3060 2020 msedge.exe 94 PID 2020 wrote to memory of 3060 2020 msedge.exe 94 PID 2020 wrote to memory of 5012 2020 msedge.exe 98 PID 2020 wrote to memory of 5012 2020 msedge.exe 98 PID 2020 wrote to memory of 5012 2020 msedge.exe 98 PID 2020 wrote to memory of 2564 2020 msedge.exe 99 PID 2020 wrote to memory of 2564 2020 msedge.exe 99 PID 2020 wrote to memory of 1212 2020 msedge.exe 100 PID 2020 wrote to memory of 1212 2020 msedge.exe 100 PID 2020 wrote to memory of 1108 2020 msedge.exe 102 PID 2020 wrote to memory of 3216 2020 msedge.exe 108 PID 2020 wrote to memory of 3668 2020 msedge.exe 109 PID 2020 wrote to memory of 3264 2020 msedge.exe 110 PID 2020 wrote to memory of 1952 2020 msedge.exe 114 PID 2020 wrote to memory of 1952 2020 msedge.exe 114 PID 2020 wrote to memory of 4332 2020 msedge.exe 115
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://061yt.mjt.lu/lnk/AMYAAKQWW-EAAc8B7hQABC6QC6oAAYKKXRcAoZiEACAz9wBqhrMGT1IjQJKGR7uLSqwNA7KR7gAeWYM/2/sF8tvukz2uxQILbPmBtmPA/aHR0cHM6Ly9mb3Jtcy5jbG91ZC5taWNyb3NvZnQvUGFnZXMvUmVzcG9uc2VQYWdlLmFzcHg_aWQ9dEtHblNnTHhhRXVTRHBCdGNyZlVKaGFOWVJHckpqSkFwdTZqOEdFNXpEbFVRakZHUmtGWFVsRTNOVkpHV1RsWVRFSk5WRkJYU0RWWlNDNHU1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2020 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8d046c188,0x7ff8d046c194,0x7ff8d046c1a02⤵PID:4088
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,15630134477325110019,14167990480011773466,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:32⤵
- System Time Discovery
PID:4872
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,9269314914090072148,1019234150522551054,262144 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:22⤵PID:2064
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,963349561032360994,3921196360971332973,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:82⤵PID:4304
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3144,i,15689876861799484069,16177024485292588007,2097152 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:12⤵PID:4364
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3140,i,4238199904031782533,12622734936983588639,2097152 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:12⤵PID:2272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,16422888153794516284,10359808422455417631,2097152 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:12⤵PID:4376
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,13243591525890185630,14874753051980532360,2097152 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:22⤵PID:3060
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5072,i,3216326049601891846,12825577308699009347,2097152 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:12⤵PID:5012
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,2084913553106108286,12918941863127049036,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:82⤵PID:2564
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,699816315534182861,9876479856715399347,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:82⤵PID:1212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4012,i,4204612937972826495,7335347760436030492,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:82⤵PID:636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4012,i,4204612937972826495,7335347760436030492,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:82⤵PID:1108
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,8520025572430602385,17545834089800880252,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:82⤵PID:3216
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,6050642499820791140,17010142414272973479,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:82⤵PID:3668
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,3187401281188571242,6841422143373822593,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:82⤵PID:3264
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3976,i,9605023938854524540,428153909630563749,524288 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:82⤵PID:1952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5968,i,2977527425448790513,598130965631131922,262144 --field-trial-handle=3272,i,17923179575398853691,1573337013940663020,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4332
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:4136
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 680ea733e4d93c3a661de50f1ba5f3b70eca0d8b6480c8062eed9f189a600953
- MD5 357d314524c7deb89c6da0431825b98a
- SHA1 ef0672d9f937448a5b9f15c4e64b6a2d226d8595
- SHA512 cc9fcdc22264d381d85fc4586f178876356c1c95cd4f68c1e4e2ef4ce51cd2b00bf8d5e91fc8d8006c3c0129d82cfa89ead4c0f4d9896590a4e10733f00b1cfb
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
- TLSH T191B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
- MD5 7ab616f55807e9de5195a40c50f65e5b
- SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
- SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
- TLSH T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
- MD5 504ce80b644a85a7e68d85bd24169289
- SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
- SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
- TLSH T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 820e67b7604ec0d79f2bba465c32df0e1bf409bdcade7016b0c3f0d713c05c59
- MD5 4d48c5426bc0a9074a95de44e37847a4
- SHA1 d197a8a823e063e3b98c36d846f3b9c1b9f640d1
- SHA512 e09d024180d8b4f6588935a23eb0504391ab76a45bbf19121ffb4f4f33b4601fd66e686d56ce864b89d33bb9009593dd94f1bcae5cca785fb4ed71ec944675f1
- TLSH T10571E83E26034C95EB52083DC2E5C7417AF0A2E9F0536F6AD2508579377AFB2961BEC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588bb1.TMP
- Size 3KB
- SHA256 5f30b081db84f17ee168cd6793314d082bae568a3d28ee0bd9bc138ddc3bb60d
- MD5 f43d3213e0f507413f12f5055fc42561
- SHA1 a15f3acf747dbf460d6c08251b5c4e181b4d6d69
- SHA512 f7c39b055f7f194ad0fffe1bdf7e40b420b8c640486e93100d27c8a789e59c3a408de207f2871794fa24420bc69e2a1ded3b3b855576e39623db87dff91898e9
- TLSH T11D710B3A25030C95EB62193DC1D9C31176F1A2EAF1532F66D25085753B7DFB2A21BE84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 ccd2bdc7c3f9fe524e079975dbbb25c2265972874f1846c3c1e5b65455402c01
- MD5 711d94c27dc06cdc316b0f09ccf4c50f
- SHA1 46a43a5527e9260054fc34ff07f11d1d27a4eda3
- SHA512 0bb4b91bb21d8338a591c8049aa05789204fbc44a20708f638d8271af66d70c68584a44dc7c5a797fc7a52a086fd5822edf30b0ac645158f2cf6dc9b03852427
- TLSH T15A319BF783E4856ECA0516F0AA28BE6FCE2C0519421C7C2985D4EF1797E3471E101A5B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 13KB
- SHA256 44aa0ada3401467d1909fe8f89a6aaaa085df50db402af53f7b264b6ba43c6c7
- MD5 ae4b3ec28194559539f443858832fc8d
- SHA1 867cca623d8b355c7e70e9b8b524c91ba4b2685f
- SHA512 65b347a4c19e7c00ce3d41f122407504176fb3448dd29282fb57e39e1aacda64e0e783b0902994338e09b2b0189a668d3c6da6e154de6fbc0713552dc7dc5340
- SSDEEP 192:sxZdROyM/jK1Ml8MkfW/fAspr/IdpxDuHW6+WNOpG/YI9PXbIgrJ:sxZdsMfW/fAsprwcHbN/j9
- TLSH T16352E9116A346977CCCBE219FA45BB53D6F50972A2901E48ADFCDE1C04E6BED220781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 14KB
- SHA256 b5f51385dced807c5054cd9d3a7cf7248b0dc356435dd10816b92650ea53c667
- MD5 c9cef02d1c266a38310af8ffdcab6ae4
- SHA1 114085e75554efa41bc9d50fe0447f24dc154e79
- SHA512 85e19d8671f211db0fd618540396a657a2a26bd87fd961b81d748c1c381e037a1aa9d34dd3f1f3193a0065c3c70c1b2c36c12a4a327d309fa5773be55b9e0bcf
- SSDEEP 192:sxZdROyM/jK1Ml8UQ5kfW/fAsLW/IdpTDuHW6+WNOpG/YI0CBdbIg5cJ:sxZdsq6fW/fAsLWwGHbN/NRG
- TLSH T18652D811AA346977CCDBE219BA45BB53D6F50872A1901E48AEFCDE1C04E6BDD220781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 30KB
- SHA256 725cf3fa7a115c9555672d74a98e549e8184ba5d71cc1e69d0d49650a63a9c7e
- MD5 1d6634cb17fcaf882001eb2190f8ec52
- SHA1 93ac80a190a610a6cc8734c6643322bb4cf60d0d
- SHA512 8389c27e44a748858a6d30a711ad5d32f0325d89acb938be0dc997ebeca7f34ae3bd7f6f52bc8b85ed8bcad2328d588cba2e24111aeafb0c71729a8f370c215c
- SSDEEP 768:xJsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Croi0j:xJsqxXlWvJD6Tu1ja54LAs9ZiK
- TLSH T11DD21C3B694CC77E4F840E9DEC266FD76ED801CBA6988D5447FA880C03CB2EA11165DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\54eb28b1-cdf8-47ea-a995-f6106c878827\index-dir\the-real-index
- Size 72B
- SHA256 2dfd112fde0d0170a1a7525574ee5e91dcb7553d8832f3390a52927847702819
- MD5 f236de545ee4a3dd51c2b4ce70ffe727
- SHA1 27b893a3c88de845e4a7a83f81c74faac056a361
- SHA512 e1e066a3e9e0c3dca51d38c72d19dad8e10948d33da4214330ed62274a13c70397c1ac795fdf3eb677261ea07fcbe7bc8dac29b28c7911232fa34c7185193870
- TLSH T10DA00238059001E3D82556F1107593C026519E590D615642CE9D055FBFE53454113281
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\54eb28b1-cdf8-47ea-a995-f6106c878827\index-dir\the-real-index~RFe5877fa.TMP
- Size 48B
- SHA256 9ca0a428ab2218c0124e202a6f2813ce96cfa8037e5a4b112705f36292da6113
- MD5 3d49e2773b3ee9b4f64e22cd6770f26c
- SHA1 05262a2abf8162031fa2502ec8014b53f412eb90
- SHA512 d414d481378cc716ea4e85b37d264695dabdc234abdaadc78f53e47fc54ccfe7633e477590ad33da89dcc2a77dfc193aa510844e45a0d3d1296f484b5dec684d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\index.txt
- Size 149B
- SHA256 60735dedaac7dbc75fa0333b401d392c1337b9d3842ffb838eb8c367514fa67f
- MD5 c20df6aa87dc87e426958e2c711470bf
- SHA1 cbba8bffd86935262503ef21d1aa36f3c56ec7c3
- SHA512 98554848793a7dbf57fcdd0cd31b5f23872fb7f512c393349da54e4b916220451f87589906f010d50f5a90d98979ef3c1c57860fb1c4177cafe5b33e42210d42
- TLSH T1CDC08CF6D02A4B85FA7A62938006E264EE07020F1401A11C215B810C405229487C33B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\index.txt~RFe587829.TMP
- Size 155B
- SHA256 5a144487206e8b3dcccb33d4a0c54f82304dd719dcc610bcdab33196f80b9148
- MD5 d903efdc786a9837551d413463caf0f9
- SHA1 c0b5409d100fa3b311c857250c5afc70ee676307
- SHA512 6b16c641fdf679c4633d642be9db5086e81aa583ea6388fb81fbe86cf77fdc7f133c4d418eb506feb7d8f0e30c339dcc5c9e52f8be81da25e8b9da63244bcd49
- TLSH T12CC08CB6C02A0B85FB7A20938006E264EE270E0F1801A16C215AB10C5032294CBC23E6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 67dfed24e93b902a1f854be60f32117e99ac572d815e899bd06ea49951c8b2c9
- MD5 e0b41db5545e3f10fe73687a065454fc
- SHA1 f5eaf3427bede177959a000f0d12dd92eddc98ad
- SHA512 b98bea3d44431f35cc5e5c4a194f6b1c4ce6d1e354e3b0e8ca1b224f167badb833dcd62d5cabbb86ea13dfef80ec2cbe7d2029dead3845d42cd09dddef1cb017
- TLSH T11CA0027541D8C243C00107B4B09207C43E389C642386233180A4D0B98AF038041A29D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58778c.TMP
- Size 48B
- SHA256 7b423d3761bf66ec2367399067bd8bd16a6cc0e5495286f1252b6f5f3c644e78
- MD5 f1ee23cf743327177ded587b086a649a
- SHA1 8554c16c0795adb513f7899aa44dbfb310fd1c75
- SHA512 d0d8f07d6435bdd012ee3b3038335187a87ab6e37da69af7f763c53b85097ff8ba52e995c75b8fb6a4d9807d2506e4f518262483ec3459ad5a1cb8258ac14385
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 7KB
- SHA256 5702d43f3fee1c70c258e0d5ebe6da8bca620cda86b59030b6839f57ad5a0122
- MD5 34e6644a73a1e3436a63cfecd8de957f
- SHA1 efa781229b18f28e656d5fdd7a32e09a3cd40a50
- SHA512 f9819477498b5308afd0c5c39e7aa16ad434cc3ca711e5f4ba6c3371f0be1554d2c9bac20270376388969c798d34a84cdd0194403917df4aab430ab84e3a8526
- SSDEEP 96:KYbaKYIKeBOKy8CeH+KccvaMKvaO21KKGcdK0KryJ:ExBlRXTRxK
- TLSH T17AF13822367B424238BE3818A3AAC5375E4231A3345C697F3B7864721D66E216DFE4CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9f56676f-6e9d-46e8-87c4-f53c92611c03.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 8dd4d4d471c42517f964a4d606f75a1fecdac405801dfd94d38cc758e7e07eb0
- MD5 cec85dfe5ebb766f19c5309a1e931f8c
- SHA1 f5ee6e0b7405f391168f6515cfa508c52413f8df
- SHA512 76886a3a8bfd8c484db3c28ac001c22c3a1aafe7185b7de6d6cfca99e0350cf855084d3df44253628a3dab670b5c82b12ded3c27641318c9b14cb8c3607782a6
- SSDEEP 384:TZcIhsNZHttlMbfNnBQVRN3AaEUivFTo3:Lh9nBmH3AhUit8
- TLSH T15D828D315C341C7B5DF6E155F98A31174FB89027AACD7E40A4ECAF2D01DB99D1307A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 26KB
- SHA256 e24ee76d7c52dacdf16f7d37203f0de346d0102965f3b351e6707703df1e62e1
- MD5 156846cd1a8f7ea885c4fa5a37e68ede
- SHA1 42549ffa4598a5bd090716a7ade1472381fbb343
- SHA512 3f68798f4c81270e60c5c25a8ac7d8912e576d08b605d4851abe9380469847ec9b5f5511ee773b8d34e067251a04d40f71d274af28417cc89047d88a8e164ac1
- SSDEEP 384:POiFiZcI7PsN78TUNTUlIl+ttlMbfN8aBQVRN3AaDUivFTo3:dFQ7PCwg/8aBmH3AUUit8
- TLSH T165C239F248E7483BD9AE9743E77E2D134EBCC067B5896A00B7885A1CCC965BFC306915
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 7d694d174284c5a6900ccca7a6e34b18437b94d9579d886f9c3bd92122a1e37c
- MD5 80ebc993d8357050fd4b56dceb3689d0
- SHA1 92dd5201c7960d814bf64c5248b4262611337746
- SHA512 be3afd772482b407e1e6759ed9a40b0ea52923a874b5e9ccf153fd38946576c46de6e1c058143ec1bffbde6d64abc3c6992b060d722856071675210a9addcfa8
- SSDEEP 384:nGZcIhsNZ+ttlMbfNnBQVRN3AaEUivFTo3:UhqnBmH3AhUit8
- TLSH T16C828C715C341C3B5DFAE155F98A31174FB89027AACD7E40A4ECAF2D01DB99D1307A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 a92423bb4d93282711d7deecc1960b0e4484ca0fa1ca310c38274c6201b9a50e
- MD5 a5997d0b33d0ac94900b079fc14c15d5
- SHA1 666183771a035759600798fcf5f08da94f29e13a
- SHA512 0623b4f0e1c30b68e8b49e24cfec387b48c882e8aded415e085f09eae3661b566ab6f46313e3f63dff604d505b1df7fe934205090be8af8385efcd10aed47576
- SSDEEP 192:tONt6JkRtQmiUyHDHhW+RNoCk1EoPh3HRgU6:tONt6UrYzhW+RN3AB+U6
- TLSH T18302D9357C381CBB9EF2AD0AB58737175FA4206BB9952B40EAE81E1C01D755C2347837
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 6133e41c1b7a34a2cadfabb3a1f2c3f97cf844d703577da3831414d596d295cb
- MD5 9e048ea77edb24b6ed866b7d4992c1d7
- SHA1 f3a52a93c45dc95e689dd6e1166a96a49ca1beca
- SHA512 342ba52321a735ec02bfadd1bb13ef2be01145e284d87d41a022b53b9ea786d934ca386b46308bf30a4312cb4742d505446c5a1340cddb560186e42a9b00ff21
- SSDEEP 192:fON06JkRNQmiUyHZHhQ+RNoCk1EowFVjxVc7qM8U6:fON06ULYZhQ+RN3AasUU6
- TLSH T174121A316C345C7B9EE2A855B48731134FA5516BEA8A3F40E5DC2E1C01EF59C234B92A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 8607aae211cacabc35eed2904a3b953ad7e83ea437d65d2961d9ce15193a732c
- MD5 b78ca4635a837c7876920afcb081b10a
- SHA1 6622ed60a1814de3e23fff9d56ad5fef273b7bf5
- SHA512 64227778e5676a4982f201303329ed662c799e52387ec15f938e0bca41ed0278f7e4e21653a4222b9fe07bc64d4b3b1cf01ad9dceeee43a4a29cc6f737c74403
- TLSH T19241F96CB6FD1108B3B77E4A9BF6A86D847B79672E0B945E00110D4E0A66A40C8B1733
- MD5 SHA1 SHA512 TLSH