204aaeee3e737ff9537bb77d9b736d38332e9bb09e0f24a835c21ac774fcc00d

Analysis

user interaction
yes
max time kernel
29s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/09/2026, 00:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Hub.exe
Size 274KB
Sample260909-azyn6sam4y
SHA256 204aaeee3e737ff9537bb77d9b736d38332e9bb09e0f24a835c21ac774fcc00d
MD5 e0ba9d989ffb75acbb0c18d0de139cb6
SHA1 9856747c56d782588723ad7678570649f8f54445
SHA512 5ba7befffe2e732dacd8f6f46155be58dffdccd83fec00eec61c33dddb128e67bcdc0f95c9c8e8771f26ea8ce02ec1750098fda3a667c5458d846c939ce31d50
SSDEEP 6144:QTTpIFubmKlAhZRxbWimV+jiKhfg7Gl8ukR:ZFHKlAbRxbwI7hfi8T
TLSH
T1C6548D58B3E505F9FDB3923DC9938506DB72B8124730CADF03A4866A2F236E15D3A761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5444	msedge.exe
5500	msedge.exe
2716	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333879977081106"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{BE6B9877-453B-4586-97DC-B24656E411B0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{60A68513-118C-45EA-9B45-06E0C35ACA96}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5568	msedge.exe
5568	msedge.exe
5568	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5840 wrote to memory of 5060	5840	msedge.exe	88
PID 5060 wrote to memory of 5404	5060	msedge.exe	89
PID 5060 wrote to memory of 5444	5060	msedge.exe	90
PID 5060 wrote to memory of 784	5060	msedge.exe	91
PID 5060 wrote to memory of 784	5060	msedge.exe	91
PID 5060 wrote to memory of 784	5060	msedge.exe	91
PID 5060 wrote to memory of 1724	5060	msedge.exe	92
PID 5060 wrote to memory of 1724	5060	msedge.exe	92
PID 5060 wrote to memory of 1452	5060	msedge.exe	94
PID 5060 wrote to memory of 2388	5060	msedge.exe	93
PID 5060 wrote to memory of 1452	5060	msedge.exe	94
PID 5060 wrote to memory of 1452	5060	msedge.exe	94
PID 5060 wrote to memory of 2388	5060	msedge.exe	93
PID 5060 wrote to memory of 2388	5060	msedge.exe	93
PID 5060 wrote to memory of 4380	5060	msedge.exe	95
PID 5060 wrote to memory of 3004	5060	msedge.exe	96
PID 5060 wrote to memory of 4380	5060	msedge.exe	95
PID 5060 wrote to memory of 4380	5060	msedge.exe	95
PID 5060 wrote to memory of 3004	5060	msedge.exe	96
PID 5060 wrote to memory of 3004	5060	msedge.exe	96
PID 5060 wrote to memory of 4488	5060	msedge.exe	99
PID 5060 wrote to memory of 4488	5060	msedge.exe	99
PID 5060 wrote to memory of 5028	5060	msedge.exe	100
PID 5060 wrote to memory of 5028	5060	msedge.exe	100
PID 5060 wrote to memory of 3872	5060	msedge.exe	104
PID 5060 wrote to memory of 4120	5060	msedge.exe	105
PID 5060 wrote to memory of 3872	5060	msedge.exe	104
PID 5060 wrote to memory of 4120	5060	msedge.exe	105
PID 5060 wrote to memory of 1756	5060	msedge.exe	108
PID 5060 wrote to memory of 5272	5060	msedge.exe	109
PID 5060 wrote to memory of 5272	5060	msedge.exe	109
PID 5060 wrote to memory of 6036	5060	msedge.exe	110
PID 5060 wrote to memory of 6036	5060	msedge.exe	110
PID 5060 wrote to memory of 3152	5060	msedge.exe	111
PID 5060 wrote to memory of 3152	5060	msedge.exe	111
PID 5060 wrote to memory of 5584	5060	msedge.exe	112
PID 5060 wrote to memory of 5584	5060	msedge.exe	112
PID 5568 wrote to memory of 3944	5568	msedge.exe	114
PID 5568 wrote to memory of 5500	5568	msedge.exe	116
PID 5568 wrote to memory of 592	5568	msedge.exe	117
PID 5568 wrote to memory of 5888	5568	msedge.exe	118
PID 5568 wrote to memory of 592	5568	msedge.exe	117
PID 5568 wrote to memory of 592	5568	msedge.exe	117
PID 5568 wrote to memory of 5888	5568	msedge.exe	118
PID 5568 wrote to memory of 5772	5568	msedge.exe	119
PID 5568 wrote to memory of 5496	5568	msedge.exe	120
PID 5568 wrote to memory of 5772	5568	msedge.exe	119
PID 5568 wrote to memory of 5772	5568	msedge.exe	119
PID 5568 wrote to memory of 5496	5568	msedge.exe	120
PID 5568 wrote to memory of 5496	5568	msedge.exe	120
PID 5568 wrote to memory of 5536	5568	msedge.exe	123
PID 5568 wrote to memory of 5536	5568	msedge.exe	123
PID 5568 wrote to memory of 1980	5568	msedge.exe	124
PID 5568 wrote to memory of 1980	5568	msedge.exe	124
PID 5568 wrote to memory of 2120	5568	msedge.exe	128
PID 5568 wrote to memory of 4156	5568	msedge.exe	129
PID 5568 wrote to memory of 2120	5568	msedge.exe	128
PID 5568 wrote to memory of 4156	5568	msedge.exe	129
PID 5568 wrote to memory of 660	5568	msedge.exe	131
PID 5568 wrote to memory of 2620	5568	msedge.exe	132
PID 5568 wrote to memory of 2620	5568	msedge.exe	132
PID 5568 wrote to memory of 5056	5568	msedge.exe	133
PID 5568 wrote to memory of 5056	5568	msedge.exe	133
PID 5568 wrote to memory of 1032	5568	msedge.exe	134

C:\Users\Admin\AppData\Local\Temp\Hub.exe
"C:\Users\Admin\AppData\Local\Temp\Hub.exe"
1⤵
PID:1036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\ExportRequest.html
1⤵
- Suspicious use of WriteProcessMemory
PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument C:\Users\Admin\Desktop\ExportRequest.html
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
    3⤵
    PID:5404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,9430959293195511469,1532465159015138085,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,8532164755131916366,6141198571534436841,262144 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:2
    3⤵
    PID:784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,7634210047621130010,15901606022670954442,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:8
    3⤵
    PID:1724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13450168386771628859,18219775044429286749,2097152 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
    3⤵
    PID:2388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,11232783487166778926,5351013740438636741,2097152 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:1452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,16706048720527111893,17494598052970098627,2097152 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,9292860827813571870,7827362124560115792,2097152 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
    3⤵
    PID:3004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,3746084370875901747,2848995836548154944,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
    3⤵
    PID:4488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,15939255334272258295,12574043348324526077,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
    3⤵
    PID:5028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,5142817908665560588,16869196466232239145,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
    3⤵
    PID:3872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,17486644423690294180,12405304240873273593,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,18067951544166585950,5844293526180181609,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
    3⤵
    PID:4136
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,18067951544166585950,5844293526180181609,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
    3⤵
    PID:1756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,4573864785521263505,17259179314120004900,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,13578002412314088070,16670119016636679923,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
    3⤵
    PID:6036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,13174918231075280937,16332045946653812620,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
    3⤵
    PID:3152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,762761049280881330,17874953647321958057,524288 --field-trial-handle=2756,i,11041512571331151223,9293221468742643779,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
    3⤵
    PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,3932247370513688188,16695201940192262692,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,5481155142149652032,12402821622817313753,262144 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:2
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,18275581579547751120,7545734268334368998,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,14225346619317376626,7155056425214951386,2097152 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,15761821591753107385,4842476602217578221,2097152 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,4146898053886444062,946167179327979534,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,1342925316233904721,936151719158909684,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,1577205169950764916,1454001716927685486,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,7935753820931262952,8364637622320072143,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,1552556439996862009,17779014220231320075,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,1552556439996862009,17779014220231320075,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,8659552108058327073,113320120888862947,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,7885503877481273529,8534421542238911757,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,14837672744282049634,5693146632600021395,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,2300958102432413784,14423855183841922816,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,11187690600925849457,7186748462272953767,524288 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6500,i,12933968215831955227,2471035002451289444,2097152 --field-trial-handle=2816,i,14662769868008142586,10268699158980040148,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  PID:4356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff4709c188,0x7fff4709c194,0x7fff4709c1a0
    3⤵
    PID:2812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,5517346598635208512,12628720615906564254,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,2738274262349824476,15412520397550345842,262144 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
    3⤵
    PID:6068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,14819198971967888711,9280095409043934428,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
    3⤵
    PID:2540
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10303285186064562131,4605669795249277672,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
    3⤵
    PID:976
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10303285186064562131,4605669795249277672,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
    3⤵
    PID:4688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4752,i,16109262420100828737,3640725378794183073,2097152 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
    3⤵
    PID:1984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,10631935082756158671,2725214687226991090,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
    3⤵
    PID:392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,12421655929886801567,12841685695785348944,524288 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
    3⤵
    PID:5484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5496,i,1456369514816510375,13345116512966481672,2097152 --field-trial-handle=2244,i,14440756236579507721,13656779239371740344,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:1
    3⤵
    PID:1872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4a302129b10cf3ac8d6fd58a3a115f3f386534b351087f5a1cace69357f97312
MD5 77728a4729b6fd40e598dd660abe576a
SHA1 68496608431a924a2d7c2121e8150e4f311e8140
SHA512 f142cd9419f9f0c16da905686ab4285a9458d6c66c5b6488e9a2585b7c19e4585467885a2c2b0f98da0edcf3314d34c539118044e770f5666f21a0196dfc6daa
TLSH
T1D6D02330A9DCFCE0E0360438813103027DCD8A893483A307B000441E4C753C373D94B3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3862a407b265b08b632909044bed4d74c69ece0ddd398226111a386ca0ddd5a4
MD5 5f60ba8de68ccd7fcd1a6861af2f24f5
SHA1 5cd5854c0d58e0eaecf8f558b2e150579dd2274d
SHA512 3a728fd3d43b9fe9e151824f76b6a3dd768158e30c4cdfb85582b173aba2e8d206836137026183c1f1f771625e0c43a5a7b6d87270ac827ca81e509244425834
TLSH
T18ED09760B3CCEC20E40208709122072A7AEACA08284BAA167041019918457926398036
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fd9eda379eb641f78ddf8b3023d993eec7eff54392a4af72181676fafe305bc1
MD5 07a58dffa40a8f1ce727263b50fcd274
SHA1 dceb8ca33dd2ccaf85f47365ae18778e990b3f0d
SHA512 ae2f90524b89154973c92c2dca02441cd6b314c6a86ffd16d3319d900e847cab8d152c1ba52c27035a668928fa4e40ddd1bbb134502f6327d577af80def2368e
TLSH
T194D09760B7CCEC20E40208709521072A7AEACA48284BAA167045019908457926398036
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 f25a493d39433d7fd0d0c72c429f1683ce3c2a2ac9202ca4e652b8fd02fab903
MD5 0629e5a2731dd1957421f1162899242b
SHA1 4abc8bf552ade52d545fe9623b2a2d2434475e8d
SHA512 636d48015bbd66e3e75e1a77f342be421a4efb2dc5369f772ce4ade0f7a881f8edec6e6e39c9ae834e7c5a0012dda39c272578104a97aee88f2f9576a7d756f8
SSDEEP 384:TL4Va2RSQCI19cfYn8ZeRc1AUhMicp6YQ:TL4VuQCI1Lie+AUf
TLSH
T1C413A63C779CADA7C2D6813D115B9BB6A33ED4E2F0D69A1F3A36B51DD6023418E1E900
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b164fc5d0b9333f0b708863a4354a8154f79c1098113845cf7e28d40c5cbe2c9
MD5 e7eb91d7664c4bea54097243101a4d63
SHA1 efcce43767e6b3697f1ee199b12375c562f8d59c
SHA512 c7de9a5592dbdd7fffae1ad1686806d77b38ddcda02b011817cd0b534d4ceb57a46aa86b036bb1f9f5e37de2dd7990121da2e4e46c743513048fe2caf78cbcd9
SSDEEP 1536:3L/9w3L/w6du3zAAklN8/ZWzslf953A2OeNIL/JL/Q4:3L/CL/O3/RXNIL/JL/
TLSH
T1D5441BF70941A01BCBA812F6E2033F3DD17B455D7CD1F9E9E2784C856825B22B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 142a9c3c2df91bccc8d807715e5559cd37be27be668991286dd9f2b98f6ec973
MD5 a3fa54603f3f1c57d4d8094096e2d5fe
SHA1 7be690aec51eb9bae3bc90b5af644f3c973ace2a
SHA512 229bb648493ceac944f7f19b5badeb54f87cfe49454f8b1a5cbb7db49d9522f8d79c25acfdc593055bffdba6b4d332ebd2317fb3f957834144a19d1e46f03553
SSDEEP 49152:BY6YmJVY5Oaab2xYY1lCTIfNKphRscXoO:B0sV4Oapf1BfYsc
TLSH
T1C3168EEDCA6898C3CD639930B0F0E9877C7453C3F595C1D68898C684026B7C5BBAB769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c9e0a68bd0b23b608c62a649416fb4c123307ffc7a9291ed74aeda15547dd376
MD5 245ed121a0d2598cf23c3890a2e371a7
SHA1 a2f17ddc440dc337562c445fda492a87c1de6541
SHA512 ea1be617c008b819bbfc65bfafb8ee1082efc7ba1549e8fc2a2b9cdd023736707604d480e49f9f6d7112da9c41c431e1f3a12865678e8336455344f118b2939a
TLSH
T13C613C1836CE007EE7538EB9E1EBD2013FF191B47A0B9E01E6C4F8BDAA25F354465804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 9af4082cecf7aa81825c49e4ee5ab304f7a082bd88ed9f9f99890e6f9baec369
MD5 9394e74f8e2056d7a5ee21cf3792d0a3
SHA1 79e4eb2ce218de95c08d23c99d80d6bbfba0ca74
SHA512 7abc7ffefff6afaf85a99a185defa9b77ca24c010209bf45e4a010ad459884a9ec7634724879a18974d76a20bb6551ef83f1a64f6f42aba7647d29c34bd3c8fd
SSDEEP 96:Mqaw2Kx7iyNhwT77EIRhICbuppvTzamWcYsm:j2Kx7iyLqEIhzuvvah1
TLSH
T122D18586AACD60E8EF574978E1DE4E023AB400B079176E03F9C8F53CDE12BD279954C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592001.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592001.TMP
Size 3KB
SHA256 d834d8cd2ede3ff3a0ae9417dcc15e57a7756ea4dd54e172d628a84445d788e7
MD5 f2549f42b7e30349b14da61b1765ab4d
SHA1 76da9f3d0b8c58eccc111a0bf622468476fd4670
SHA512 96b8f462419430998b54676bf0a934dcd2400bde2fea6f2bd0b465d7d78e7c8c76293eed7e2eb6deed35744a06ffe8d96b7738e8d7cf6b860d289cc621cfaba6
TLSH
T193613C1836CE007DE7538EB9E1EBC2013FF191B47A4B8E02E6C4F87D9925F318864804
MD5 SHA1 SHA512 TLSH

Submit Download

26fd3614-8977-4bf5-9b5e-46f93d122560.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\26fd3614-8977-4bf5-9b5e-46f93d122560.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 7d3e1e7a96e184a5433b9ca3f89c849599cff2c44eec1e4be344ad679865386b
MD5 55e1d1f92595882aa2d5d7ab9d2fe737
SHA1 958efbe8e6c45e6761944b4eba758f973deafaff
SHA512 5b91eba2ab79ebf22a44319d4e8458a3afdfb62fd68eb7a574aebbdad51f07d2ec7d85fa11372896e937fefad68f3e2520ab0a493df08710a1e85477bcff8a8d
TLSH
T1CDE0204844CDC159E015A5D742AE5B0CD7D1FF07A68C7B035B3F8CC87241541E2D9161
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 beb48ed9c545513c6bc57da1fd1343118f364dbe91ad426cc01a5bd94e8eb0b7
MD5 a072d16b431ff9bcfba5580077100070
SHA1 d3b34e99cbbe05971082558272fbb5ca9732e5d7
SHA512 f42f60c536df522453738e09efeafbc461538359d0f7012bc5fd3500b14bdccaf365252877aa656db604ef79b77b400c365977f57988fa724554f90a4255026d
SSDEEP 96:nxIU+bGz83uy3+u4tgp4DLjGQLBze9z36LjBHMsDEuspU0wbtqrOQpPfR4J+MCXD:nxf+G83uy3Ct7XBBK25H7DXspU3iV
TLSH
T10814100E4F243721CDBD917669E744B35D7CF03FCB1266DA686114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 2594c3dde4040da2cff34d3e547584f95c004f793fac7ca24c854dcdfaea8942
MD5 6723be6ce89505506baa82e682e77dac
SHA1 26e0b60741e82d19fd80a562666a5ff9bd67ca80
SHA512 4be4a1b29d393380f4f6c06a3f8bcb97b20cfbbde34e39ed59be1bc2e6b7bafa0ca05124a6e34479e544e9e358afe230703f827bdf5e3c9ae3ff951acd8d14d2
TLSH
T1ACE0D86446CEC1996104618BC27A7F0CD7F07E4BDA8CAB525F1AD884B145404A7D52E5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 36b0f514ba094b3eea45c93ce8b03e700e6c5a7c4e571f1fe78d95b2911796f5
MD5 63c06affce2db60d7f1360590c1ff7e0
SHA1 eb3563b6f8d912eb770e193f6f25cac8e296adeb
SHA512 1969e5449cce33e4346dfc73d500964846ea5cd7c44cfef1768e3d8216d05bf6fb4add64ad1c246d134710d11b3b7a9def8a70b7588e93f8e165ecc1b790bea1
SSDEEP 48:TtLopFMatSaw/auUOt8BMoHOwUimaAAwH:9eMatUaAKROjimaAAA
TLSH
T190922E4E5F306121D0F48B77ECE1C4672F7C101DA3633699DE5824F2CE9269BF0060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ad3643916ae0cd65ccd61c4821c9b999d3df3e33d783956990d0fe6837c00eb5
MD5 a190cf2669b06f5764d188d7e02d9910
SHA1 bc8570202fa3eb6c49847a8dc5e62523d36e6e13
SHA512 6c027cd87fd7c975ebee7989819df1357557d78f567baf8c155a0a8883b10b4e9c24192dc6bd6d4fb3a47821451a474a418a6ca318c19f5a7275712998c60b68
SSDEEP 96:DJ7PN+zBP0uWfaGORB52Gw5/HqtijtEumGsx:DJ7PN+1bWfa7H52GY/Ktijt3mGsx
TLSH
T152A1CDF7C3E5826DC91156F0AA146F1BCE1D0952436C3C4A88E8AF5BA3F24B1E141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d7e8e730a29286ce95382f8516f0c95150fe4b1a30810f7be4044e5cc8b13b1e
MD5 02a1636c20efcb9dbf7421dd58e8b1f6
SHA1 e92e9693b3d3f057faec69623d0b21abc5c299cb
SHA512 f2976c0769aa707feecd7ec2565775e11222422e04232890d2dc18187df9bbcc2b5619fbf99e60999545b581f597b781fbb4e870d1aa327587aece8a93aade08
TLSH
T1D021CDF3C3E4857E894156F4AA146F2BCE2D0A55431C3C1AD4E4AE2F93E2875E14099F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 3445090e12c52f8387173f80be150097f8db9af271c022343c1e7e66fb5b74ce
MD5 6c91e32fcef7e7a38ec630da87066467
SHA1 3c26aafed6beea438951055de95bd4394617e0d9
SHA512 2b59f8c2c2c3a67d9ccff37a7a23b72e9a108d4c13b9273e6e756da8349cb705480338b323b0ab5c5e1db9027414e2b2ff2a9427fada4bdf227fbcabf4b09010
SSDEEP 96:+IEumQv8m1ccnvS222QHCf5nFXPcDg24g:+IEumQv8m1ccnvSCPcx
TLSH
T173F2DEFB07236105D98444F0A4009F8EAF16414B47B6B7EC76D447E3F7A21E2B2B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 849B
SHA256 2dd122029946824a28403a306a314dbf7244370c18515c6c7af3b4edfea555ae
MD5 6a0c4b7d8f6a09aaa9fcb0c585025504
SHA1 42ac12a9b24bbd7a49985b06c49eb489f87262e3
SHA512 4d0679238338069aec34403f045dce3911e6e0e8c9d3b0f4cad445d36af8ea0c7771997f0068fa7a9bf28e6a7015a9f61ec5145a091d0569b79150f2dbc52274
TLSH
T1EB016FBA84FFB46B103949BA0F88BC056A7AE571415068F2CAAE927CB0D14F35616033
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 85fd52f79f68b6b0aa2ff34ae32bd923596204b6c7c6422d2da22f5a9369cb14
MD5 bcc83bcd7c9d19d3872885416b5d9af6
SHA1 24cdee1bd5f7c162958927c6d9c4ac304efd8d4c
SHA512 c468b0d01fcd0d73e74ab2e89036e97fa7ff06e8eaf53c333a96810321d85817f3e115201423aa9c64c880fb1555a022e2868bf9f2d71f3124d78c644bee0045
TLSH
T17DC0C01580F8F07300741A3D0EC4B880F7B5E430000244F2C8DAC37CA0B01F76B12039
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 213f1bfcd0ceb9aede8152f842c64fd55977bde91e035cd9f92f71671e1e149e
MD5 f2121ff3bdf19f843cd3d4e8ad10d269
SHA1 358d01a01afcb652770dc923958a293095789f6d
SHA512 5853981a03318f33e2f90810fc077d0ed2c889d568bf853b1dc0975b22d1fff6d526b7c7ecda64c649f2a353dd41ac7ea74e4a9110ce8fe1ee3e077872596afb
SSDEEP 192:sxZgRBZ+/fZsEWpVQbYIdpdOHW6+WNGYIVozxIgyJ:sxZgJ+/fZsEWvQbpUHbGeO
TLSH
T14622B611AE28A97B8CC7D21DBB65BF13D6F9103291915E88EAFCC61C05E7ADD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 243b3044ea6bc2e41c5319f80667365d758c6cdcee7c2d05cfbf4ef5b8cef6ba
MD5 81fd98cb711229246937753448e3836b
SHA1 af825d9352b38b04c1b9e7e189755fb6388e4b68
SHA512 f04069a949ba41eda0953392e3753b545819af045879f320e768171981bafd2be2c2fc273b9cf780d42c57f56bd50eec2627f305f9c016346dfc8c564e2df13b
SSDEEP 192:sxZCRB3+/fZsqWpVvb2SOFtlndbsZodpmlOHW6+WNBEK/YIIfQzIgyQKSGVJVS:sxZCn+/fZsqWvvbQhqWPHbb/5uSsJY
TLSH
T10962E756AA14987B8CC7D519AE357F12DBF910339D914E8CA6FCC91C04EB6ED231780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 fb3c0d81df6f95bdc217838a2762b94a0bcae8626601dc1fdcbe982a0ec7f307
MD5 b2a6f148c264d31cffdfce82e980abb5
SHA1 115e1a9e87de5413a5773cde6bc6b8bd76a82f51
SHA512 43ae518c37a2240cf66111ad7f808a1d0d2792369e403ec6d0178d981df8d32ff1e45c899d8b17607b82ed11b865185e50230a66729c2528cca0ce11d1eb1d30
SSDEEP 384:sxZCcmz+/fZsEWvvbQRqB3Hbg4/IuSsJY2BSsJ1:s6cmz+/f1YvbQReHbD1VJYMVJ1
TLSH
T15C82D7566A14C87B8CC6D918AE357F12DBF914238DA14D8CAAFCC95C04EF6FD221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 62a1bab308a0ba503eddb3fe08fde59d96c10800eca887b21922ac89b82d1261
MD5 f34840934bf79def4cb3841b4ac6adc5
SHA1 1a13bd8f58e105664d2b7ff1b175f718cb566e57
SHA512 78e60285a1d55b4235e1dcef7bdd30c309e2b01dd8ea7a9c5aaaf7ad9abb39b603022bde17b7fce2092e7518c1d34a6da65e6613f39298b04d62677328a54f0c
SSDEEP 768:84mjYqmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVKPLlrZ+Djrof3CVao:84mjYqmWvmKyEu1jaJPLZQDQvCl
TLSH
T11BC2E93B244CCF7E4FC01A9DDD5A6F972EA802C76A588D4087FA954C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 3KB
SHA256 e8881a066b18cb424c2efea239815da9a761bef7a667432a69f75bd0b37232fa
MD5 e42154f9e8a1e003a13179b9fc79d725
SHA1 d55b7466ce4e065f69d16fd5c469ce5e6cfe063c
SHA512 bb61c15ac7c4edfa59307ce7fee24ded36e6d66d2f6b52533e8b9c0ec54c2a22c758e8bc2de32605cbe772c84725b2dbc9cba87527f71bb810c86db57044851c
TLSH
T17971A40E8D931F6BFC98567314BA24E9737469CC0358A927ACFD9134FC8330959996EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 1695c893cc88fd4e38f1618b124fae9913fa65578c84df162c6ea87c53567361
MD5 db79fe556979c2891193166a928a30be
SHA1 9867d976cdf97f4b8d66b1ee84061272e4e3b080
SHA512 ad2827561bd38c335e5629a4f3780749243f02fc784f799275dcdeb2f361bbaf24754bc3f344dfe1a09f8c074562210a3981c158d38fa5239af6df9e0de7e1eb
TLSH
T1AAA0023652800048C012D1F4165A05612703EA520540532750D14564CC908A55F6506C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 3b190a1c3902096650394ab023385eb85ebbde148be53285700f0030ee68de06
MD5 bee1c29b60fe5346d19ead64ab36073e
SHA1 ab48c4b1359423c840c01b8844619f9b06fa3bd5
SHA512 7ea3676333f2b95c0cae22691fc127ee9a5144579f0f9a8240f276c12c3af4ffe43b9141c59113226019033027aef907f09a5a59a45d5300c76fc0c3976f071d
TLSH
T13EE0D8F73DD72D20ACBF57E628B245B44146B468C555AD8E2417A2E761A02682016C61
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 74fd7ce483cc83a58f9bea02b3123a87c86fba2932947eee17288d31ab9bfc9f
MD5 eeca0b28a0d5192a03018d7b63961250
SHA1 1872e72c4317de8daacdb770567b57408bd4e7a7
SHA512 a5638f492336f017f27628d1c87268ba1275c8ef0f1147e9c26e493d7cb00e9d466f5c3b50f1c6e85121c00282d750a107f96db827162e0618fa7ea594f0696d
TLSH
T186E0201405C5D1BDB11523C7016E9B0CC2D4BE07D7CC7E411F16CC847242A0872DA561
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 3a5910e8da4f1e7cd5e93d54e1402a455caf351befcb1ea522d07a2351e944ec
MD5 a884fbea249b22d6f891ed2f61606da8
SHA1 a6d78560c256736368757d622ee6f99351a028c8
SHA512 e95a256e3caef73f07ad51756a3d1d118996d10901c8047b915c86093cbfa2d81a7db2353f2fae7ee5ff34a6051913b774a95b851ea1333ed0a7d4b5d43ae845
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe595828.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595828.TMP
Size 48B
SHA256 7d2040d0f4bfddd85f0f7c4efc0ab8c7599336e1015e2128e01e48f34d187fa1
MD5 ad9f64715398e238c659ac5a111a4734
SHA1 1ed91aed3fab9603b7a06774c7f1fc0d6083707f
SHA512 b82970df39575bd4afa712c0337a7008b7a51e2b5c438d7b3406902f1ff12f16d04d17ceed52dd9ba2ed1e693fb1a70b2dc8acafb35d9de565c04b85170773fc
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
Size 697B
SHA256 7799cf99d052d0e8721d57c88e8ba5d2bb3867b41e02408236fa7ac151f23828
MD5 8631e0bff8367b934e6095f35911140d
SHA1 584d2479f8c3df8ca6d1d660f5b811f2a6e9a1e9
SHA512 90a3ce3751462677439e3fd938472f27356df1cb7d60611f3f2779c3bf190d0886490f549d707303c4f1f878f950c82edb4febf711a86b2c99793939e7b7136b
TLSH
T1A001D6F70D58A084DC8ECBB00D927BF9B627858D0BD989D3666D61CB29016322816C0A
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
Size 319B
SHA256 f8ec58f5ae2b87caf94d85530e5d6e9cd586c3d868a4b2a7246e8947363ca731
MD5 03502df7fa6a2055c4573b1781ac02b0
SHA1 ea646e603478de9bc5ec2d2d5740c29d6a9f9e58
SHA512 9135a452ce5c55b6f06f613c325f3ee2366a448185e05e77d8e968856ee94fe8a8593a30c77701411aec95abcd13abab654870912277e22f89f354908d9abd8a
TLSH
T195E0DFB904CAE1A9E11065AB026A6B0CC2E1BE07FB8CAA121B1A8484B241505B2C65E1
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13433387997936794

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13433387997936794
Size 1008B
SHA256 9deff37981772b6213d53870a8980dc1bef5551dee3ea1171b71b5e414126e91
MD5 1177568244eba31d588141c515418f90
SHA1 d155bc5b1df3c79e5a7584e4c588e90c8f39b312
SHA512 c4d87f781c96cbc88cd4121049246294b50215f91bb1da3a2258f9b780d1bb15ffd15ba0904fd57a3986f55c5a57f448f36668f8ecaa3af3d0155509624e3464
TLSH
T19511DD1205D5057FC16D843EC5E7AEAFBA32B8117A408B5F41B3F2080C02322BA79E4C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 3a18968a19fdcbba76a89b2e54f3e71e57dadd7e73af1d275958a2e386fd6182
MD5 d90ec67aa51d2eb1832131c66390a498
SHA1 6624c3f99888842c2dabf44897ccdffbeef4a112
SHA512 c08745ecff74a98e6b1ebfa959a6525941d25e385219a82ec913ede05dee8393a89ce98ea520f4b240e62c97e1c233a2ffd6deda156546bc390377c7b7ff4c9e
TLSH
T1EDE0922415CAC26BA185228B832AEB4CD1E2BA03DACCAA612F1AD484730654072C6561
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 b15c1542aee114f6423af06ffffed9900095ff1cfde1fa25b42b0d70355f993c
MD5 eaed65f595fd9b7b22a8dcdd6de3336b
SHA1 333eea385dabad7e8752fab6ea521e9d063ddbe4
SHA512 5c5936519b6782d7cca8489eb4cf46b6fd5a11cec3f1e7f4f719734653382d9e2e13b9b500fc8c655ffe3e82974e802ee0987e28dac5410c1f205cdd62d81999
TLSH
T18AE026B449CEC279A010658B836BAF0CD2F0BF0B9BCDFB025F1D44C8B201501B3EA1A0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0e9f98522c8b5919b7468bff7737f63fe045a43c86ef08fd53945657cb6f8c36
MD5 98bcd006e6214082472f8c7b6a518cb7
SHA1 e3021cf2fc37223a62eb05bd65dce8feda4fea4d
SHA512 268ec0b9c8c66de61c22162945a234c0129710aa929bde5ce9012c38fc9797fee675405266fdc2e4053d0d660643826faa6138140f2a3662fb2acf14990f3c83
SSDEEP 24:Kh7Qfk7IzKHhK1CSONLyXTcD8MyIFKAhQ1uS1SYClCUQI1K+hE1WSfo5yX/43gz:Ks8IzKBK07yFNIFK2Qo6jI1KoEYHyVz
TLSH
T1B891080031360250383EE65D81AA962F5282BF633499E93B7FB954E70F6AE844DFC5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 b2bcc143d598da9eac2b8248be27ed91f035d5d7e37c1e2c7c7544d2a6675842
MD5 5723496d230e1d0cb7f8086fc0e1f1aa
SHA1 d6c70962896b764dad0cbbf965d59fb78f90bc7f
SHA512 80f54735bba4f874b8fa7e9b3fc87217a41a93e71df7cffbfea75f8fef5c8af3605e8752fa4467c4e625d475f5760b478f3f411e118ed5581e8293d37ab752c7
SSDEEP 192:/+5WyXfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:W5JfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T18724640A7B747001EDE6D9725CB080771E3CB16DCF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e66c8c0d-a280-4343-a0c6-ad9880c5d8e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e66c8c0d-a280-4343-a0c6-ad9880c5d8e7.tmp
Size 414B
SHA256 5ff759471253bf50b24a767cb889c9be446bef9c8263e43241827d61eab3d8b9
MD5 fdb47c2805fb268e69d2af1383d6c0a6
SHA1 437250aa11f787683a0defa090737d364ecb050e
SHA512 ec348757adfb1b21fd6fab01ace31a9ed83f8d798b388c78149c1ebdee6fd2f4f816826b89e80156ecdbda0e3e1cae94d861e176669255ce863142609472745e
TLSH
T17FE0E5EAC911AD6714FD072994C01B46EB4523572A40895F3A3C820E8F7163B1596C5D
MD5 SHA1 SHA512 TLSH

Submit Download

load_statistics.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db
Size 100KB
SHA256 9adc45646e4255dfe6badb4cee7b8918e0bf0582702bfb93fac32c33d1bdf38c
MD5 6a8372a81a43b5a86fdbbebc679ec730
SHA1 fb1536ed872f0765698268ecf8e5bd83c249f94e
SHA512 e4cd4578e99cbd91461f5a8079faee399009d749ad0af6ced21b5340e7e3e37b54531a2586962968f32ebdf7781fe15ad3103a35c4cc3da76a65c8dc37fddbc5
SSDEEP 768:9DWjPIX00UqvBWFkhKg+ljcdJTv/7iKTLKCHkgZIU/704+9Zz4zFYBHaAneew/Ee:qYG/aeU/70PM8pNhjC
TLSH
T15DA30CF7AD0E91A6CDCC91B8D41BEF44407316219620DAE9B93C0CC73B79A0ABD755C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 b8a3bca1bbcf52b1adfcd05c82da70d0b3cb10afc730bd63635f9751952dbe22
MD5 60129a44029ad6771d5b30d063a6760f
SHA1 d71c9dce6317bcd15178ed892bf149566fe8ecd6
SHA512 512da04dc57427d592a4bcc88b599458ea1973210d86bbe88cb00ee97f52aa0eec8417ff379c5fec2b9b67667532fa3a8f580e0a8f1d5ea774a48a312a45be7c
SSDEEP 192:JCQrKIII1baKMIMHOYcYgSVOcVAsdlrMEusqgo:JCQrKIII1baKMIMuB/VcGsXksc
TLSH
T1BD4292AE12452B37C1CF6F36135A81545AD888C941F6222C72626C2F8DF3F9782D67F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 40be6b6bf1a1b20ac32574bf518b343ad7ac9ee5f9219e7c9456d797a5a0023a
MD5 799e6bdecd7f5f6037ab1699503f5122
SHA1 1d8e807e1f8614157c5ca1ce6a14ee63577ea916
SHA512 f0300fb4d2da09d153d26c06c6fe12267c5e978c9c1f95f13a0c3816b3a1bf60d7edd273ff2f7864c7dfc29127a643ab2fd09a5a5bb3cd1482e273a17f0b2b52
TLSH
T186E0D854A4D9C1EE7015619B015E6B0CC2C17E07EE887A065F2788CC710150072CD172
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 48a158faaae02d8f1bda0a8cd03d8284239d9b3627cc2d1edea195ede7b543a0
MD5 0af1f3f33ece645b8dd4085f229b9a4d
SHA1 fe32ee5289ab08ebcb86bd70cdd9a29e04f943bb
SHA512 fbfc274aa39079d2e9441313c4f0d059c782a26876b69878d0b19473abfe1e574ae5a3055cbaab590629c4b63e86548a57b90fcadedb67b4c2e5c60b499c54e0
TLSH
T1D2214556F334C115D1494276503E97261338D8069FF8EC0F55BA24A43E73F480E4BAE6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 b689a8afb8a808f4ddd94ed9533036020ea09b62248aa8a2386c2333c1d7a03a
MD5 4c9969baef85792d265488d210ba5cdd
SHA1 ea8179b372b1e8c98443377f2ffa0bc4872d9fe7
SHA512 0dec7f93fbfb2189f57c30d481de6df7071410f2a63bc46b0146e778e0f140189ebd968bb9621d88d935a0fefd5b08516f8839f778ccb6a48dfa9e471197ba8f
TLSH
T194E0D854B4D9C1EF6011619701AEAB4CC2D27E07EE887F025F278CCC720154172CE172
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f24ae8098906cdd8db32e733e45c509bad23c10cf4b8464172e7a1226034f3cb
MD5 58339b671fe1c70ae8172aaf2f23e2da
SHA1 d5a3f8362b6d1ef76981644e1da2c98b8517b932
SHA512 1aaf6216561a5d6415e0392e74ba53ec716af0095090091501e32a4ef6d6712a239f20b560fc9ecb573c501dbf1b43abef8a91211d757a1e80aa6a99c691b4db
SSDEEP 192:EONq6hZ0QmiUy62pc/+jVWjzor2tn5wOZ9RU6:EONq6oApu+k82A2fU6
TLSH
T1F602E83568787C778EE2AE45F48737235FE5216BA9966F84DAE81F1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 82d0f6c67ab422f0ba4dbbffadb0f2b879187d6fe6b20be68e1281ae0e675165
MD5 b58821a1094055f15ba12882fe12dc1b
SHA1 6e530a363a7c17e9ab6c063deea7f7948aa18265
SHA512 1cfd9eacf67be00d737c9ddb5381e1bfaa0cd3ea7c740b64890b435e3ac1170c8a3f4b2ebf3b28ff8159c7bf3ef2d096455bafa454824a5f8a723fd1bea374ab
SSDEEP 384:ncZcI0sNLkSpba5jSf+k82EXH+2QFUxA8tiI7oK9UB7O6R2Feoylso/:K0wbK6IHl+j88K9UB7TRsg
TLSH
T191A24CB198A89CE744E5E1C5B446F2136DF8107789899E4CD5F8BB3D308FAF81726813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 9b34d7316ca3146f8734add5c16135d9d563bf066b92a2f3c855bff7385c54e7
MD5 c6ff231f1369ac844458a059eccfd8de
SHA1 d05a4c814d92e07d8b04ea711f121f73fc292936
SHA512 2b1e7e78def078c41537ed6b0c8dc1d78dd499d504ca3cc663f028a2d72867b4d0ac9e13c2cccbf69ca6674c0522aba1f16d53bd2b101a28b1a707e794fe0f14
SSDEEP 384:ncZcI0sNLkSpba5GSf+k82EXH+2QFUxA8tiI7oK9UB7O6R2Feoylso/:K0wbf6IHl+j88K9UB7TRsg
TLSH
T1B4A24CB198A89CE744E5E1C5B446F2136DF8107789899E4CD1F8BB3D308FAF81726813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 118f71c6234026ba9a075e3eaa92a038852a570459d39c6cebb32ec382812d4b
MD5 82eae6623457c31ee6ae0727711de25e
SHA1 73c0cfe567990a0461369aacad53055d722faa0d
SHA512 4719eb2ffca26ecb0bfad64dcc7b3c421cf4b8386be7d3862c2b7e8dcb470e48248a026b570230d5365ebec13db53398d4ce4d6b5a80cd7fbdafde253c92e216
SSDEEP 384:n+ZcI0sNtXTcpbapvSf+k82EXH+2akn7O6R2FeoylPgL/7IzdoZ:809bc6IHlNn7TRNS
TLSH
T171928E35587CACB75DE2E946F55B3B13AFF8206786C51E80D5FC9F2E0086A99130B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 60e2bb0623f7616d0952caddeac2b8eb3db151da1f4727669b9ae6669e026e31
MD5 ac3ae84cc01499e68a37339e05fe2db4
SHA1 21a3899df9a6ed83a9c5a9905f53d435940a0513
SHA512 9a27ba5ae9d36060a80212afcd2f2ec87c9d749875dab9898d46930f2a4358918c9464bc1e78c571c830a216dedca7a753900a75213846337ef2bd54f4631909
SSDEEP 192:TONe6hZHQmiUyz2Oc/+jVWjzor2t+XH+235cOq4q3U6:TONe6VnOu+k82EXH+2695U6
TLSH
T14E120B366868BC674DD1A955F48732138EF55117DACABFC4E6EC1F1C00CBAAC230A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 84891237c60cc159ccfc6995a038c8f2e353ea9d86d816780b406d46797e9b23
MD5 cb1e828f78329a6063fcf38c754258d0
SHA1 b941d1a9b987a4d3ba1381cd9a43d210aa3f47de
SHA512 091d4724778ebeb35aca9449ec91b8125c6dc5f4da288503c430b0dd6451d0d387006574972a2b4af07a76d562eee364a7b50c033db88a2adbe8f5e6c2855fb6
SSDEEP 384:nzZcI13sNtXTcpbapTSf+k82EXH+2akhNV3rtwdspNRyKEJWR7O6R2FeoylPgL/3:r139b+6IHlNZ35puKEJWR7TRNS
TLSH
T1E6B25BB0D8A8ACE744E5E5C9A546F6037EF81177C6895A4CD1F8BB3E308F9F41326812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

11242cd5-bef0-42f0-b9f7-274a33519f53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\11242cd5-bef0-42f0-b9f7-274a33519f53.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 42f59af2bd8a8c845de53a4e4fe53a0c60aff50c36f6012fd20643a442d8f680
MD5 b64befdc1630c09fed262632da25a706
SHA1 b78276918fba192c0ac52970efed8c6dfa5ed9f2
SHA512 1aa7174ce47cd563a5b23ea965ef0dd7614bb033c07b0749d695572ba681e29ce003ad1a66336e5c2848ae87e363b32a8da73ece5bde8d1c29e2a2ece21f4408
TLSH
T1FC411D59AAF91144B3B76F5AABF7B8AD487F78371E06946E10110D4F0632A40C871B33
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 727969fc1b14759fe0956ad40eb736485f6d9d31eac1643f278f740b8c0ace73
MD5 a9c62f71dab2f15edf8aa0932161674f
SHA1 0af87e4eabbe8dd0d73c53e1cc6fc42d5cfee2fb
SHA512 e101e2e251b9296bc283aa56825c44b41bda8c03f3ed27509b08106ed83a05cdffc9fa5c4b7b66315c6b55078099e2ce68d5399e12383507943129e7901ac5b6
TLSH
T127515158BAE61058B3B76F4A9FF2B86E447FB9672F16D05D10110E4F4623A00D9B1B3B
MD5 SHA1 SHA512 TLSH

Submit Download

2ff128ad-e10f-4940-983c-9fdf0e3081cd.tmp

Path C:\Users\Admin\AppData\Local\Temp\2ff128ad-e10f-4940-983c-9fdf0e3081cd.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

97243ede-dada-4fa3-8812-a988dc24f580.tmp

Path C:\Users\Admin\AppData\Local\Temp\97243ede-dada-4fa3-8812-a988dc24f580.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5d92b7a-401b-4c9c-a3e4-03659d476af5.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5060_1059519086\e5d92b7a-401b-4c9c-a3e4-03659d476af5.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5568_2086400181\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5568_2086400181\CRX_INSTALL\manifest.json
Size 626B
SHA256 279bf453dd0572dcf4a326cb7df9fa9d296a2921ef96abdb1956a813268d78cb
MD5 b9d00380c0947d7ba5fd1efcbb8a7347
SHA1 fa8ef5bce53e46999cdd957da6113b37d04e116d
SHA512 577b235564c77be3050f2aa0e1b6986bcd3d38b09a792a01f943d7d85efccc43bdc9659aaa3b81311bddc1bcce47faf4f3d3eca77d955ee2fe93fa6b095f0c13
TLSH
T17CF04677EA1D482746F057A4E864B189FA22175FA0A05C063AFC542E0FB01AB0A03B2D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5568_96925920\CRX_INSTALL\_locales\en\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5568_96925920\CRX_INSTALL\manifest.json
Size 1KB
SHA256 3e33f70e46bf4a180963564c1d2da64483caf49536ffbe2a20b20bc4b041d551
MD5 13afa01dc9dd8b9ddfc3a9d93d6a050f
SHA1 9292d71adbb5aa177b2e3d28719ab365396d7bd8
SHA512 80693798628e64b90db2d8db659eaf17a3371712af054bedd9ac9b8b1877cac79ead9e4ff2394cfff903098371e48a6d206f06cb0c5da76b32bfd2983beb068c
TLSH
T1F54169F7BC00AD634BB49898AA1E714EFB69B24D55CFD4DB8298107302CCDAE1D601E5
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads