hxxp://frankmillard[.]com/

Resubmissions

10/09/2026, 14:36

260910-rynagshc973

10/09/2026, 14:00

260910-raz95sdj4w3

Analysis

user interaction
yes
max time kernel
473s
max time network
473s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 14:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://frankmillard.com/
Sample260910-raz95sdj4w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335224211496509"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9D3157E1-5579-469F-A723-D5CC241648F2}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1420	msedge.exe
1420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 560 wrote to memory of 4260	560	msedge.exe	85
PID 560 wrote to memory of 2128	560	msedge.exe	86
PID 560 wrote to memory of 3748	560	msedge.exe	87
PID 560 wrote to memory of 3748	560	msedge.exe	87
PID 560 wrote to memory of 3748	560	msedge.exe	87
PID 560 wrote to memory of 4660	560	msedge.exe	89
PID 560 wrote to memory of 4660	560	msedge.exe	89
PID 560 wrote to memory of 3472	560	msedge.exe	90
PID 560 wrote to memory of 1600	560	msedge.exe	91
PID 560 wrote to memory of 3472	560	msedge.exe	90
PID 560 wrote to memory of 3472	560	msedge.exe	90
PID 560 wrote to memory of 1600	560	msedge.exe	91
PID 560 wrote to memory of 1600	560	msedge.exe	91
PID 560 wrote to memory of 4940	560	msedge.exe	92
PID 560 wrote to memory of 4900	560	msedge.exe	93
PID 560 wrote to memory of 4940	560	msedge.exe	92
PID 560 wrote to memory of 4940	560	msedge.exe	92
PID 560 wrote to memory of 4900	560	msedge.exe	93
PID 560 wrote to memory of 4900	560	msedge.exe	93
PID 560 wrote to memory of 4604	560	msedge.exe	97
PID 560 wrote to memory of 1044	560	msedge.exe	98
PID 560 wrote to memory of 4604	560	msedge.exe	97
PID 560 wrote to memory of 1044	560	msedge.exe	98
PID 560 wrote to memory of 924	560	msedge.exe	100
PID 560 wrote to memory of 1488	560	msedge.exe	101
PID 560 wrote to memory of 1488	560	msedge.exe	101
PID 560 wrote to memory of 4476	560	msedge.exe	102
PID 560 wrote to memory of 4476	560	msedge.exe	102
PID 560 wrote to memory of 4476	560	msedge.exe	102
PID 560 wrote to memory of 3768	560	msedge.exe	103
PID 560 wrote to memory of 3768	560	msedge.exe	103
PID 560 wrote to memory of 3768	560	msedge.exe	103
PID 560 wrote to memory of 5096	560	msedge.exe	104
PID 560 wrote to memory of 5096	560	msedge.exe	104
PID 560 wrote to memory of 4328	560	msedge.exe	105
PID 560 wrote to memory of 4328	560	msedge.exe	105
PID 560 wrote to memory of 4168	560	msedge.exe	106
PID 560 wrote to memory of 4168	560	msedge.exe	106
PID 560 wrote to memory of 368	560	msedge.exe	107
PID 560 wrote to memory of 368	560	msedge.exe	107
PID 560 wrote to memory of 2644	560	msedge.exe	108
PID 560 wrote to memory of 2644	560	msedge.exe	108
PID 560 wrote to memory of 3780	560	msedge.exe	109
PID 560 wrote to memory of 3780	560	msedge.exe	109
PID 560 wrote to memory of 3780	560	msedge.exe	109
PID 560 wrote to memory of 1796	560	msedge.exe	110
PID 560 wrote to memory of 1796	560	msedge.exe	110
PID 560 wrote to memory of 1796	560	msedge.exe	110
PID 560 wrote to memory of 3372	560	msedge.exe	117
PID 560 wrote to memory of 2704	560	msedge.exe	118
PID 560 wrote to memory of 1232	560	msedge.exe	119
PID 560 wrote to memory of 3472	560	msedge.exe	123
PID 560 wrote to memory of 3472	560	msedge.exe	123
PID 560 wrote to memory of 2648	560	msedge.exe	125
PID 560 wrote to memory of 2648	560	msedge.exe	125
PID 560 wrote to memory of 2648	560	msedge.exe	125
PID 560 wrote to memory of 3844	560	msedge.exe	126
PID 560 wrote to memory of 3844	560	msedge.exe	126
PID 560 wrote to memory of 3844	560	msedge.exe	126
PID 560 wrote to memory of 1856	560	msedge.exe	127
PID 560 wrote to memory of 1856	560	msedge.exe	127
PID 560 wrote to memory of 1856	560	msedge.exe	127
PID 560 wrote to memory of 3380	560	msedge.exe	128
PID 560 wrote to memory of 1396	560	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://frankmillard.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x210,0x23c,0x240,0x238,0x260,0x7ffb8646c188,0x7ffb8646c194,0x7ffb8646c1a0
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7266240693679604379,4795287540473653371,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,5878637311479689996,17644653264880091452,262144 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,9933893443316498614,9985872366345695155,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14638277980998112578,14663930741251596741,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,11576129733192866418,6156625511095050452,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,14787316268537463496,8417384916417459859,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,15654910846080158600,3325713092814689444,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,4938776837575046753,1631706214763939043,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,10302836992962084092,3409148473591341728,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,6069739530014469673,7755309419176068474,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,6069739530014469673,7755309419176068474,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,9302720847807081706,3525330469968898035,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6160,i,9098611418583318214,1861010428860001738,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6336,i,8616981161954510678,18418629372580055171,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,1792765435174247870,6769269946514358671,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,9168285748984769130,5643817320095106747,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6596,i,8831341342072443413,11553170714186678649,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,13446190695168163109,17109485076197804140,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,12811078401783010545,17109468765106620366,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7300,i,4379153272377052116,2497009212894163602,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6556,i,11138045449671197689,9935841887199775504,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,11338539536891123349,5795361791706194974,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7208,i,3738883111239933934,13107838285285869152,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,16818785160978638467,10337733047704495990,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5144148695861096490,12383310486185318877,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5400,i,4304328476183872876,5565066065492440856,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6824,i,7446887136459442474,4968741050029741668,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6628,i,251942663230974265,14394468192761436569,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6840,i,9773697908324369169,10964810837797790302,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7224,i,12983104304912133435,4152384024885086773,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4736,i,11774333942311243473,7336172077563231569,262144 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5032,i,10953564996047334125,9164265897586236663,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4464,i,13508472160833578116,17650951151740638468,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6492,i,6566957514278864411,7051452690843299711,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6568,i,5529953335757261917,11047232809037029721,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,4256394067561829833,14944344513449787541,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,14516544198616702644,18362501885837426905,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,17749630663208116152,10939794265344516868,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6692,i,14821332936764954214,12692229005374782220,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,10133615292418147944,8759058302124613867,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7296,i,18382341891796186955,8998470895093368552,524288 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=5300,i,47190212768800125,4670845791809115072,2097152 --field-trial-handle=2232,i,12297260933204630740,15427159059714819022,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:216

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e1ad0f26a548e7201ce8de9de5fe959a3d3c99ee691102f86ae03adeae519bf7
MD5 b4a47dd079140d1e585c34df6755d819
SHA1 357f9aeec76e878a4640c142b8b16b1bf0be0ec3
SHA512 0b0bbec8a0a132a74be4d94d6ec1c3fa54aabe0440fd395bf16f7ba2862802542b7f8c3087d1a1c0d02211d378cabec92275f250e3406ddf585e037da57accc3
TLSH
T181E078CF06D5C29ED148A58B43745B0FC1713F1ED2CCBF0557008454300A940AAC55D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 3.2MB
SHA256 4ab06dc75015485b14ac80431eb9314595cd734be1e007a55c6f04593beb37d0
MD5 1a81259e32939c191725a4b2b7c3417c
SHA1 7f71fe5947d942641c9a06ff2294888e83154aa0
SHA512 3d640ff76612eeb42fcd0a5abbf9fdbd5a478fe582aeb37c5c368eef87faec459fa8e28a81513a16adc576c8bbc6cb119db6c1b937ffdcec347c96ddd8c69602
SSDEEP 98304:QKU8qCh+7PCT0qkAGKQ759BVhM37xfYVqDy:QxChe6T0VAQ9BVhMLxQ
TLSH
T1D0F533EC2C2A908843F3FC7798B9AD90CEB9F09AF7155096606BC0C4F27D46B71559E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 2.3MB
SHA256 f3b95032712a7a509d0cc030c02d2905e12b42ee2146af7eae41cbac6d363a59
MD5 c46f168f4e33fbffef6eaf2b878cb0da
SHA1 240a8b8d8b6af2c43466ede6beb8757160571469
SHA512 254e175d368902da984788828e37fef5e98b8072f78bc05419aad032e825c4da6eadc78bb49fd3acf9de2abbb240fb93ba437c015186cabacbbf2ea050e3d70d
SSDEEP 49152:ma5rt3vvo82gZhG/o9lcYcEzVstf1g6srHzJ9NGfIY31vRRVAe9MHrLi7wrLy:Rx9J5o/cyoI0TJ9fYrRV/Xw3y
TLSH
T125B533A1913DD7BC4F8D623E4F3E8E0641C0058260B6B74A3270993ABBF69C971DD5B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 1.7MB
SHA256 457774b880334490aa43fd189c2508319de5da8b51af52093a2953d44ad20dea
MD5 c4489c93cabbfd304cf4a35b894cbd2c
SHA1 476c2e7b5239afc47b307b6061cece4ab2127cce
SHA512 38c0f093dc93187e9f42d14234a503c0ccd93a522f7e7273a0ca1bd981e8f938bc389099d7b6027219d2e2287201986e0730ed06eafc040d2e77138e01d46df0
SSDEEP 49152:ir+QRlo86EfXICLi2FNWKQCaYrM5LCHF+G:ihRlobaXICLirKtxM6sG
TLSH
T1108533E48E41719F92717B38B87B2B4067DEB02444A79696EBA7ACF4F04530E8E04F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 85KB
SHA256 661cb728211649b55c2039e28b4f9ff40a4963afb58e7de8ca9eb47760b7a1c1
MD5 1c031c8d8a270307b3a97824e92f403c
SHA1 70524e5a7f060db36c6c3269918785b134d3e10d
SHA512 4d62ff422a450b133b7a303614fd8ff4877b5594502d237a0e8b049e10bfaf61f28a526d73e75064513c8bdc4997f9b14cd21358024bf977a3044a46af70e431
SSDEEP 1536:LbDeOHXeZI80jtMHW8Vr5pdfbftJG6r/MDh1xZDi0R+lWt2KCnxKCb+/4x5b1QTG:LveO3eZGxr8Vndf26r/MZZO0w2CnxLbp
TLSH
T10A830204B3E76BF9420E9781FEC1B34CA494866DF4DEA921E34E7C1A58FF9225B56102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
Size 2.4MB
SHA256 74412be96e0d0938cff6ad9ed2b5b46a1e2e386c46695e3e2faa83ea42e70322
MD5 43ad4d945a642ec8aedebec8ec30b52f
SHA1 fb2b91552adbfab558bd05c91f8485f1e0b37723
SHA512 cb4b4ef2c4c283ce292febac034c0efef87f862d833a71069b85d80dc04ba367d23e7607512cbd87de309b278964da65dc5f568bb5b63e68aab30ea73562a205
SSDEEP 49152:HtX+ukmmpijmp8mk7+d50Rzif5yCOTn0k05hR1ChHlelSsoq8j:HUrqJridGliByv05hKHlelSsoN
TLSH
T14FB533E9EFE0A9AAD3D0C97E26BB141BC075532807CEB910735C50897F783499A5CE39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0144d71856bd8455f4401a2a0afb192ce94fe7700a1dba2313cc23399b201a9d
MD5 fe925bc09b4683baecf613be35ed9de1
SHA1 8d81f735a9d35d635fddd2b0af00b95cbd0f8dcc
SHA512 a8d766cb9f173c38ef73b74ccabcae9b0bf666f88ce4504157e854a4fcf9c6785a03bb02fa6ba6f162c3e7b9138bc28966d3ac57cacffb5321224a0b623cb176
SSDEEP 96:ZA3v3U8T9Xn61hDoJf4cCmi/QjkPqQIt/b7:ZuvU8TN6Ds4YTZt/b7
TLSH
T16291404503A90891EF6DD2B3FDF90824F6A3C6D52C07F96A1240A4FC9C16761A92DCFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7103f9b9166b87e3ca9700febe958ef3108f2bc4759cac298ea483fa30e4b3f0
MD5 a0e1e032a616b6c8206054545cfe90ad
SHA1 f8c92d66fe553afdd8d256fda526d52261df9cb7
SHA512 000dc876ae759a070a0bf230307b562afc84381b6d43139a10121c9a0b7e9b4c39e1c1b1c129e5aca24605374179a464753d4ccdf3508f76fc111a9ff9b4f749
SSDEEP 96:zA3vP8c9XnQEMDOJf4h4Bc/WkPoQQte7f:zun8cNKDu42J1te7f
TLSH
T1C3914044839A04A1EF6ED2B3FDF90504F527C6952C07FD6A168094FC0C167A1A92ECFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 78ee9f001bf7fc80fa2ed8bf61e113bccf00b6779bb079de2e6af6a4e0c4c21e
MD5 8c50574a125c379c0a453ac0726894b9
SHA1 4192df51f3c326b00e86ba7ff22a2dfdf7347262
SHA512 7b54828de512d8708508ad707bcb498f90cd2f4d11bbdc190452a3dd0da711cad77d6d93484e39ed78f09a91f43e4b7b904ac168a661216b76aed1db7323dc71
SSDEEP 96:GA3vP8c9XnQEhDOJf4h4Bc/WkPoQ4te77:Gun8cNPDu42Jdte77
TLSH
T16F914044439A04A1EF6ED2B3FDF90504F577C6952C47FD6A1680A4FC0C167A1A92ECBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58a4c7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a4c7.TMP
Size 3KB
SHA256 fb998921e501868f653adbf29bc635105f1c1f8bd185df97a0efd9d82d87aa1c
MD5 ace3d45bbb3532e67936db9a406275c9
SHA1 4b5a20486cbbefddd20a5b06998f806e93c6925e
SHA512 77b77c15f17b624b5c90ce3106800c02d1cb6b4d8dac6f7c435df2843a1bbc1c9fcf7e4385b350e7348b6973c9720b444e5d7ae6ebc8122b675016879dbfad24
TLSH
T16F71E80503954991EFAED2F3FEE91105F663D6892D0BFD65228068FC1C16760A92ECFB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js
Size 8KB
SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
MD5 7f32ca5d3f52675f538b041bd67c0444
SHA1 a8f6a8ff69ba0b3ead7a44d9b64fb009ab0e4e57
SHA512 ba763c633c8a959644535e9a2999e229db42c2fe61a57fa4e58136a05aa29d445f5e4278bcb5b529bc35e443534e516bad7cedc6d0ca2d408a5fe412f6e56df9
SSDEEP 192:95G3OvolW6gQWaxciQV23vrYbSrbS6tk63yidWJvy3BCd2nx3D8jyiQjElDXQqA4:95G3WoaaKDqxVIFB
TLSH
T13C02215EB8F62032F017B576197F8009B63540137418CE19FBED93A4AF92037A993ED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js.map
Size 16KB
SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
MD5 9eb2d561a925489b69a25fd78f7b47ab
SHA1 d989f19f74b1b436e0f84b29a1b6b99033e26603
SHA512 cfcdad655a516a610ee8b6d50d62868f42645e003696438668f8cc0aff0d9e9c569d878dac1cbacad7403b1816197618c8fb1ebe628dfd456fd54447cdfaf9f8
SSDEEP 192:fVuVl3E3tRsSjJ5FWQzgFMO4+wxVdGdFWdYixmrfReRc525y8uj5p6UJO1DsWy:fVuVlU9jFWQzVdGdFWuiYro5y8eQDg
TLSH
T13972881720BAD837B44767A718EB81A67E20545C7D98A70479CCD302F3D2F3BADB2865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NamedFunctionRange.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js
Size 1023B
SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
MD5 fae98d8d75b2ddab58eb531d3c08a8f6
SHA1 1e197513c4ce482eb6aef6c436afba74c1c69e10
SHA512 fcb07e23e1e96f5d3141dcaa389b9e250c0aeeb94dc3dda9c9005e49b41f5c4b64b13cb68facabffc8c40154e5f25f5caacb1d41da4ce46e2b5050e74bd9cedc
TLSH
T1A3119B2B59EA1926AFBE2413BEDF33485631010B5CF688DCF42D93406F614678CB1F91
MD5 SHA1 SHA512 TLSH

Submit Download

NamedFunctionRange.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js.map
Size 2KB
SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
MD5 b2816c88b5f892e2a6c0cd97af1b5896
SHA1 d422ddf8f1513981c623db31579adfed682bf54c
SHA512 5754bc51de04ad9e73849c1c0aaaf7702d0673b7f55b7f289a1f2c6f370f55a758f15bd7574097c5eb78aa236a2b47d58a7b7550150ed29aa557cce0b6166daf
TLSH
T11F415813441DAD333E1B225BBDDB16A52F31114D6CA82758B49DCB25B3A2F378971A42
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\_metadata\verified_contents.json
Size 2KB
SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
MD5 70f58c8151600335b5ec548cade5b98b
SHA1 b916376a8c9e19541af0a787845f80535656478a
SHA512 e8fdf5e299909f96733d0b11c0617d3ca06a22283438f04d7395a4799c04672fdc5f7770e84b4cd0c66311b131e15c2e24924ce1f5e2417dcc9ed495b9685129
TLSH
T16451E730C470359C2D1A12304EBE1363DB51A3AF20817D1B38DDC89E2FB2B4754A7CA9
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\LICENSE.txt
Size 9KB
SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
MD5 f632dfdde0adc0da86f701c6f2df38af
SHA1 5a7612b4d9977a7e79f60e88df556b09a90df828
SHA512 87722a2d675028d18ea276dcf18c24e891a0bad5f85f7387702310976d2fb8e1d0687321b0844b6c47947e6fbb489fe08bd1ffbe9772955ac7191ba4e274c8a5
SSDEEP 192:rwqW/NVo4UTo1YEHFNnFE6GhUGi2Re1CVThOCoHqxLJbzjwA:8ZhUk1Hf4Rg2HbLNB
TLSH
T19C12637F774903770AC30172B78BA4CBF32E903D3BA556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript-tsconfig.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript-tsconfig.json
Size 91B
SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
MD5 40d3e3fbfc100769071a2a27040e33f9
SHA1 e150fe3170a949d8a5d86e9135726cfdc5be6c59
SHA512 3ec8cab677386a19d82240628d27b0a1fcdf1aee56f59cfee994aaea96a1dfaf2b3eab73d0c1902503bac61bb2aef5ab281e73e4b0078994b1242104d9bb2830
TLSH
T13EB01220C5280C1006F975440F2D90018160594286565E2631CFC1384756634043F360
MD5 SHA1 SHA512 TLSH

Submit Download

typescript.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.d.ts
Size 486KB
SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
MD5 9f7f369b169033ee919dba043b424a83
SHA1 ec2ec5846812d366045c969e5e03d037a6e1cbdb
SHA512 f84397b6219a1b07a1d5c1f9a470e1fbd9d3e7143c55c7ef345be147fb0a56b8609e97708cb0482711382f448da57b7fb0b1a55a9750b41d2083d9c86e74aeb0
SSDEEP 12288:HGeBiBCdVZ+dISrJXnMEEuIwmn0NtIRFqr0dhbPzPKUnrjM/MqV6VQ:BBiBCdVZ+dISrJXLEuIwmn7RFqr0dhbS
TLSH
T1E6B4C6A768D514B1091580E26AAE9041DF34E3A33719D0B5F5EC83BD0F1EEE917EB398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js
Size 9.2MB
SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
MD5 fb1c951f849bca76b6aeec81fafb1ee4
SHA1 12a47c6376f82c9d529b0102d82214b8cea02e71
SHA512 bf05030b66e25e7ba27b0d999a670b582d602d639e84b1f6bef01894a95420e1f94c88cacfd841bf7ac4838754fd32e398cf0c5a4c362091ec48d8d572bb4dd1
SSDEEP 49152:8eg4L1W7tVtRPj3HydvhWw2e/L5/sW5iaVf7bnePoMM8AGdcBeEmkCPt2sr+nVsN:LW7t/RF5PB6kl
TLSH
T148A6F8BE39E230615A4B61766A2F9001B735D267320CD8D07ADCC3A95F1583462FBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js.map
Size 6.0MB
SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
MD5 bce05726f69c72ee12576c1ea1a3fba3
SHA1 575168a99c46fc263bb371e09be457d5c18f53be
SHA512 453cf0fc7ceeb1427ccd09bc16ee1354144fba1eb721b72c697eee4544a5fe9b641404d4de715e60dabf68a6ce1a6711353ed3161f442a1d5279a5fc666d865d
SSDEEP 6144:ITyuEDfQX2uiFwGOCqjXqW2N1ekQ4n5LeW:2PX6D
TLSH
T10F56A00201BBDD6BB45B16AB29CF81F2BE50849D7D98BA010988D715F4D2F3EBCE5472
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ffb622ed365c2f0602fc8259acbcc46ff908af458325a8fd3f01470416433ba7
MD5 add1502bbe1a5734761282afd5648e90
SHA1 79f734dc21e91f120e4506215648b6cff06bb58f
SHA512 c880ac1c737a7e2d1367ac79beea6b149164409bffea940ef392fc864fa1ac293844fa6928d2da910031b3fb05aa9150fa5a55fded9b6c6423213ca2c819aa71
TLSH
T18A61D0F783F4862E8D1156F0AA18EE1BCD5D0A16472C3C5A88D5AF1BE3E65B0D101E5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a184867be030ac17646a90f930c72d1c39bc22d5dac3077653def04a86937509
MD5 766b70cb05f22fec8687e8f6320e7e01
SHA1 b40b97cae35ef9468147fecd8e7f73c7ad95cc86
SHA512 c29e290eb5732afd9af6b8b153ee640c5ff3d911b6bc278d67b9c16ee3ff74daa8a8adf8fb1c72bacdd26d2120b412579a040e862175a12bf6c2a174cb9b7bed
TLSH
T1DE61E0F7C3F4862E8D1156F0AA18AE1BCD5D0A16472C3C5A88D5AF1BE3E65B0D101E5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f706ab6d39d94b1f429ce5a9ea5fc40e608b9148d41f19e8d81e59d4aa282b64
MD5 c5499a983bda70cd1daaa1a65d23c8cc
SHA1 83f80b6e843a6335a68a8e559238894d37ce952c
SHA512 709ebb64d8e18a4f2cca36f51c4cc5ac2bf8c02cd12d9533f0be46b755da4c3d5d261eefa72148e96d5cef75eb2acfec8d9e1dabf6cd9e9998aeeb26e66b98f8
TLSH
T19761DEF783B0865F9E1196F0AA08EE1BCE5D0516472C3CAA89D47E17D3E21B1D141F9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9ce411c396a0242284b9d759f5334396ac230952f10fed86f56e4f5fa312a606
MD5 157da27102c7d0620c5103576bae29bd
SHA1 cb612c915ff029bafe48b010b1f2c03bd9f3df9c
SHA512 af0f5ad763669bce232a4c1db6e89e3c1a58ceb93fc0662ce555dcc20ecd582c9d5b2aa33dc1e1d256e24d074b93b6923bfa2cd1dc2a809b5c2e5643a702f880
SSDEEP 192:sxZfRyiyM/jK1Ml8MnH/fcgqs3OIdpPYHW6+WNEGt/YLrR1PIgrJ:sxZf9vH/f8s3fgHb//m9
TLSH
T10C52D815AA346E77CCDBD20DB951BF63D6F9447392901D489AFC8A1C04F6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 3ab716770b7e9627e7ae1fc006ef1d8fb1a00e299ec81d930be024b185a0d079
MD5 d5662976549af38d2e8bb2dd5b02054f
SHA1 2bc912fd591cd3b521e81b6b26b56a0ad3857d74
SHA512 746f6d3af340332a489480ea57ada1ea171b33b3045c7abca8e1888216c45ffa345e95b2f90f6d203ea714e069053d8088317004c171703eac3ac6dc81388c57
SSDEEP 384:sxZf/qaH/fpZ9ZhZgZjZRUZyZeZOZj41xnOkuJzvkjwGfYFsaMUHbdV0/zU:snCaH/fXjfW9RC8wAefYr/HbKY
TLSH
T1D492E7169424EE73C8D7A21EA675BF73E5F5456683802D6C69FCCA0C40A2AFC6117C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 903462f7144426d3dd7d74d841441a3567c0ef366e4c05c70b40d5ce234b02f2
MD5 e62efd87e78b9ea36056319164fcea20
SHA1 f19a5e47f734f0363a9d1e6acb11c8ed226e3b49
SHA512 bee03d872df81e43b85d921124bd421db578acf78d78ed4d1b736934897afc63273dc121b7743a5e984db5090f6757dd25b5aa8d3364b9abcbeaa54baad71204
SSDEEP 384:sxZf/vH/fJZ9ZhZgZjZRUZyZeZOZj41xnOkuJzvkjwGfSHsarMHb//ZU:snHH/f3jfW9RC8wAefSlYHbHa
TLSH
T15192E6169424EE73CCD7A21EA675BF73E5F5456683802D6C69FCCA0C40A2AFC6117C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b9500212efa61764dd6478b1db5a9f391bc12dcc1f7db380402078f684026b68
MD5 5b752f499cc01d4d73877da6602bcb5b
SHA1 f951cdd2b361f2157adcad97ab1447a4b71e32e1
SHA512 7ee1980efb3b24e332c93d2684a333bc784e7a7fcb8decce62575ca33bfc37f9a8e2329e178d948dacc0afc8e154d8e31da9ab36efc437b5ea6b1058d0906174
SSDEEP 768:K8s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNVrosr:K8s6pD1WvxzWju1jahILIsNusr
TLSH
T180D2FA3B680CCB7E4F841E5CEC2A6F966DD801CBAB98895447FA844C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 33KB
SHA256 49099f779f60faee51ea418794fcaa2c187a2725f240121b47d715b480456938
MD5 4168b529825547aa7c1895a9b1937034
SHA1 28f1ed673e558966cbdc958f4eab586b5fdd3f1d
SHA512 f76e0a9d03ff023e3a2b3e74a5399bfade4e2b868f88656fb4ba0d8b8bb1d3a920a8ec666c6f7bb98ffaed6593ae7693b6c5028dc7b3ea2585b086f034194018
SSDEEP 768:Kwa5s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVqgILlWwJNVroBr:Kwa5s6pD1WvxzWju1jaVgILIsNuBr
TLSH
T182E20B3B280CCB7E4F841A5CEC6AAF9779D8018BAA54895447FA884C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\temp-index
Size 2KB
SHA256 67b9af72b1284c5ed7671b302bb215712345faec9cea733ab06f13ef4b371437
MD5 c91af53ee27b03dde43de7c7dc952b14
SHA1 46590a9a73d435398c6ee44a0bc84eb64ccd083a
SHA512 ca1288d4d160c635e40c37e88bd4eca8260ce04d12193f321fdcf6a413a4d600d5004da0a88e7cb120633071ced5e56758f8f44457774cd540e7e0c8900c51d0
TLSH
T1CE51C64D4D528B5EE8AC01B204B294A43374BCDC0A695A136CBC2235A9477292E5A7EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cc5c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe5cc5c8.TMP
Size 2KB
SHA256 a21a680481b3b00ce0271fc5b1f7c42c51545382a88794f4362bbb64118096e3
MD5 8bce9f3340c9a02dcd8fe24d21b227a4
SHA1 0d1aa449f2d33c4b8692cbca63c3d1595fd30e13
SHA512 c88af80cdcc37576f4ff6a24848598c3c73ab1e067be29360720bdc9b18e10aac7e27b32e36ad9e7edc17497d750b0ab65e63aa970016807d0fb6db116848247
TLSH
T16751874A4D418639D9C441770DE3A4B4373A690086557F5374FC9636EC927AE3E0E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 073ad7bd141795b58e1ad0d6898d9650db06a94c869b56655af1bcd34b422729
MD5 ad83546d4321f532947fc9ee2b999ab7
SHA1 37295c4a2901af725632f982821bb9f750396b19
SHA512 48f58365280a8b2f8bb0e70425e3d8ee71d3a27493bab64017b9e26449565a0e0d20c88c4985b3675012e8796e4936a91de1d5e76722bc65c6fd0dd23576088d
TLSH
T164E0DFBB6EA76820EDABE3E7287094B54282786CC805BC4F686EA6C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 75387910a4aaa5b81cdce91319cfefc90bca6ecee28061749ad3175fe38fdd10
MD5 64bc7505807c8d6c5eb6946e46c3ca58
SHA1 a41ecb231a9a2d67f49be0ec9181df90206d8eda
SHA512 d1552a12187b24f537e3c93e597bb63f34e8bd5c207400abcdc9b47f4b01282a9c4e48483106219dac942287aa953565f433418bda92c613e7163b2c2c1ab612
SSDEEP 96:KUAAKtePevCKoUOKhCKqkRgIKZumioQKV+XCfGiwp:iihpFpPzKCfGiwp
TLSH
T194E1A22276BB03523C7D2B0892D5C7278A43B563741DA92B3BDE40B58DA6E204DBCDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58f690.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58f690.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6b18109562f3934c212b3277682dfc9eb3bd3c8fd88631389f6fafe30f90407e
MD5 2803cb07f6db03cead7ab91eba6f1ec3
SHA1 4bb2209e1d22fea414a1d290652e93b17187d218
SHA512 cf3b045ab6008d1b43d8e32995d9a2dff9ddf6c4ba8613c118ad6b6b1637a369fdbadc18d34e3898712f849c25e4c0a5cc5cff5c59a2cf1acf44445c9bf42d69
SSDEEP 384:TZcIhsNyTKdXmva0Ua9HON8P+FYxuvzxV+Mhdp4oE:Lhcdmr99ON8P6Y4184p4j
TLSH
T1A8827C352C786DB759F7E141FD8736078EB88077AAC95B80D5DCAF1D00AB6A8131BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 c5b25871b80831ff1086dfcb549040a8307930da6ee4c7ea1e8b82c8d414cd14
MD5 d057d1a269f3e1d00bc661b44d864768
SHA1 31dcf6f9fb8c597eb140a0d08c4e1ba13e182e51
SHA512 5bc3743ee801f2de7b7e39c1a75ff86691ffd05aef7b81ca2433fc3dc22a3ba18e6db9cbc124f5d0c53a1a4cc12a3449b095f7fd756a6b778d413f058609698f
SSDEEP 384:6iFiZcIksNK8TUNTUlIlIKdXmvaCUa9HON8P+CYxuvzxV+Mhdp4oE:xFQkfwg9dml99ON8PnY4184p4j
TLSH
T135C219F118D79976D9AE9343AB7E2D038EBCC067B5855A80B3C89A0DCC561BFD306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 848dfc3fbf3b34efde08a8395898926d215a23cb5bad8e0048a408198be9134e
MD5 9d7a538934d577a072200126c64e2653
SHA1 0a0dedc4214fc15867fd48765ecf32b8fb8c195c
SHA512 d2c693e87556da6f0a46e60f89931a81f12734939e499a1a8f01ef975a91d6a718feff4f6694bf02e50586e4d0f9d7416f3761021816be671c72e70f8e85c03b
SSDEEP 192:qONF6O7+3hQmiUyuSGttb0qO2bo81gGRSU6:qONF61wGt9HON8FMU6
TLSH
T1B102E8356C686CB75EF3AE49F98727179FA8103BE9922F40D6E85E0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 876b1d58ebb2c6cfe1d540eb70b104593125e8e74eff09b45cd80e13fa86072b
MD5 a659cae70df5cd4456b464a7ee9ee3a9
SHA1 7aaed0ac1abc3d0a4fa4f1a5b02b763195245be2
SHA512 89287f51096243427f7efa5da2529258ce3e5d2bee338026c2febddd8080b86b3504083b12faee19a5840d9ead1bf70252c44c559f639d3922843893a49611ad
SSDEEP 192:MON76O7+3MQmiUyuS0ttb0qO2bo8P+McNqq2wqU6:MON76iC0t9HON8P+lYU6
TLSH
T163121A39786CAC775EF3A145F98736078E694137EA866F80D5DC5E0C01EF66C234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 303234c3525b345fe2e39d88be1004c8147d24baae2e33978f30cc38899ed8db
MD5 758a4e305cf5dda6cc8de7cac54cccc1
SHA1 ed40cf3249e65705312db44e4dd383f844229f5f
SHA512 9ca3c402d8b0233aa7f5ae06cb54d3e2d981b1ffe993ffdd98dd335eb78ef190a88ece4c0f798656c51cb1e32bddc18a35fd27474f6fd92bc1d8f76607f8a535
SSDEEP 384:5ZcIhsNyIKdXmva0Ua9HON8P+FYxuvzxV+Mhdp4oE:Rh9dmr99ON8P6Y4184p4j
TLSH
T174827C352C786DB759F7E141FD8736038EB88067AAC95F80D5ECAF1D00AB668131BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e84aa7f7d626bbff150fae195ada617cf7ef65cc4f747ac75f9da54e13b41d06
MD5 5139230dfcd5d19088561487407fbd06
SHA1 09af15e302ce7f75893c36a5078a05a9f5003cd7
SHA512 7759db8c991bd596af2a3952b9f2a75c6e6f71b93e6d62bd4bf445ce5203bcdb650e96e2f62152973050faec2df2ef6010fc778766ac30a83daea1df350535ce
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe59a87b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59a87b.TMP
Size 392B
SHA256 01543566fa70b3e081fa67d7aff9beec09f4725d4ce530df04c56299352f3cf7
MD5 601767577f7fc12f9eb71fd36d659d02
SHA1 1cfdbb894b31bb5d77503f342496d40a4d6d1eaa
SHA512 b6e0cee28c41f30a5d9075b469293932bb5e9eb31cdfed4b864f265030f8ef8f2766356319b3165a6dfaef9628e26d24b749c60c90055c8a89c08ace431da069
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b4f348dbc71aabf98c70a8f63b754a6195d1a788cb887bb9644d6852f3d67fbd
MD5 de398e5359dfee1e8466e29f7c10d3b7
SHA1 206b76131168e7b264bbaf86a587112567aa0dd9
SHA512 bc072a036f7faa6ab2209c87a4cf96db3c623dcaa2ef71d9aac9988790d66c1f2a94b4cb697dae1613f319d1f8650c99a699c5bc04d87a455274eb050247e276
TLSH
T1B041285CAAE91158B3B76F5AABF7A86D487BBD372E06D45E10010D4F0A62E40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

413d4d2f-ccb8-439e-a0b1-2d1239af50af.tmp

Path C:\Users\Admin\AppData\Local\Temp\413d4d2f-ccb8-439e-a0b1-2d1239af50af.tmp
Size 2.1MB
SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
MD5 4cd67032e35fa92f5182df10df289906
SHA1 9210bfc66bd808ffcd7c6443e160dc8d6754c416
SHA512 f3d83f6e77e4568d2dae539c95acf0a886926a001b4d80f0ea602387530fc333f688ac031b3057e1c2b0375426cf47ae33315f7da9ffaec601102be0bb7221cd
SSDEEP 49152:ykR5Xz/3zNOm3NOHF4+n/UlfmCSJdm8IKXmiQeujzX:DVEkNOHJQOtICGb
TLSH
T166A533BB93AD6C15F3A88C67DCDD498641C2798E6161B7F619837C282ADC07CB47CE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cc8fba7-94c4-47d3-9ee2-44e01e3f0d0d.tmp

Path C:\Users\Admin\AppData\Local\Temp\9cc8fba7-94c4-47d3-9ee2-44e01e3f0d0d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

DevToolsPlugin.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir560_2107579815\CRX_INSTALL\DevToolsPlugin.html
Size 220B
SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
MD5 0d09cc16eebaeae80fe58be258501fc8
SHA1 898cae597eb3039e94878df3eb5ab1c012bb5264
SHA512 f90c0ea0174598146450074c57344765b725ac0e44ca5c21f979b8f77370be94940aa53b684d9ef1e77c3090926e2004a931e6c0bfaa1f5bee3247a55799ff83
TLSH
T131D0974D08CC55A2432004636A26BC0C3F4CDA20813BC6A3E878C1582022EBC80D0880
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir560_2107579815\CRX_INSTALL\manifest.json
Size 766B
SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
MD5 c447a41c21cbb2bf5411029cb0936e13
SHA1 07acb13340be463e041ed22a2b26d5b567fd2023
SHA512 32fe5b340df5d7193bfe9bdaaccfadebc0e2c945f6cf61871f106e18daa4ed164aeb0d39f5552a09e3ed82104d69885288c8f4bc596a4e9291cdf627b57edd6d
TLSH
T14B01757D889FC8B782394B016893C48AF3354B5EA400A20C79B0C05C8871376E913629
MD5 SHA1 SHA512 TLSH

Submit Download

b292f6aa-9506-4b96-8258-b34aab77d130.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir560_2107579815\b292f6aa-9506-4b96-8258-b34aab77d130.tmp
Size 3.0MB
SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
MD5 06f47f5ad37fb94be87982adc116d012
SHA1 4899ca7b1be75f8607b00b59b8469c8072f514ef
SHA512 b9ccbc3f2c45eaefcc4e157fb19eafd10eb54465f514ad16ada25e81390c3d577fa52aa6fc03461de6726694cdfda15ea96c5420609ac7a426e7b5afa43cab46
SSDEEP 49152:nqSGYpZHVTcorMCTt7OQvYilFbQ0NyNLvTAIPvWcfbcFlTfTGquf:n5pXTcoYCTYQAybMg7cfbcFPc
TLSH
T159E53395F69FF0F4D9A5F3317F8C765F16AAD387A30091D84283204A7BA9E210A5DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download