6b0fa72ba4ecb82db7beb53bb568f1d95b0717a2742306edc00330399bbf7b1f

Analysis

user interaction
yes
max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 23KB
Sample260913-wt77babp2z
SHA256 6b0fa72ba4ecb82db7beb53bb568f1d95b0717a2742306edc00330399bbf7b1f
MD5 a5a9f6d88efe948687d1d980c134991c
SHA1 8b951ba56d76050ae35bf7d0c36365549e434981
SHA512 14f2c6def3966607400ee90da4e6a53bbb531b5170c6c24a8c865357ec9754853a40699a94a9b6c20cec5162e103344bb51ee0a25e533ad38d60c37a5044e2d1
SSDEEP 192:p9TysqRjB9fo+rBqaEAuWwJ+c2+XURKj03RhtXLe+sKzekPPUyJLxQ991K4dbPDA:pFsBBo+rB+AuLb+rVS9uMbUkpOW4SZjS
TLSH
T192B2E975A9F250751047C3C09BB26B2A3F91E107E647C9187ABC0B949FC2EDED9836C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4504	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337968554575185"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{7EED7963-F57C-4FBF-9919-ED6892BC2C75}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{52925E6E-F732-41F0-A885-678A5294D9ED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2968	msedge.exe
2968	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6080 wrote to memory of 5704	6080	msedge.exe	88
PID 6080 wrote to memory of 4148	6080	msedge.exe	90
PID 6080 wrote to memory of 4504	6080	msedge.exe	91
PID 6080 wrote to memory of 4148	6080	msedge.exe	90
PID 6080 wrote to memory of 4148	6080	msedge.exe	90
PID 6080 wrote to memory of 3048	6080	msedge.exe	92
PID 6080 wrote to memory of 3048	6080	msedge.exe	92
PID 6080 wrote to memory of 1648	6080	msedge.exe	93
PID 6080 wrote to memory of 1648	6080	msedge.exe	93
PID 6080 wrote to memory of 1648	6080	msedge.exe	93
PID 6080 wrote to memory of 920	6080	msedge.exe	94
PID 6080 wrote to memory of 920	6080	msedge.exe	94
PID 6080 wrote to memory of 920	6080	msedge.exe	94
PID 6080 wrote to memory of 264	6080	msedge.exe	95
PID 6080 wrote to memory of 256	6080	msedge.exe	96
PID 6080 wrote to memory of 264	6080	msedge.exe	95
PID 6080 wrote to memory of 264	6080	msedge.exe	95
PID 6080 wrote to memory of 256	6080	msedge.exe	96
PID 6080 wrote to memory of 256	6080	msedge.exe	96
PID 6080 wrote to memory of 4192	6080	msedge.exe	98
PID 6080 wrote to memory of 4192	6080	msedge.exe	98
PID 6080 wrote to memory of 4192	6080	msedge.exe	98
PID 6080 wrote to memory of 3808	6080	msedge.exe	99
PID 6080 wrote to memory of 3808	6080	msedge.exe	99
PID 6080 wrote to memory of 4320	6080	msedge.exe	100
PID 6080 wrote to memory of 4320	6080	msedge.exe	100
PID 6080 wrote to memory of 2968	6080	msedge.exe	102
PID 6080 wrote to memory of 4784	6080	msedge.exe	106
PID 6080 wrote to memory of 4680	6080	msedge.exe	107
PID 6080 wrote to memory of 4284	6080	msedge.exe	108
PID 6080 wrote to memory of 3908	6080	msedge.exe	109
PID 6080 wrote to memory of 3908	6080	msedge.exe	109
PID 6080 wrote to memory of 5092	6080	msedge.exe	112
PID 6080 wrote to memory of 2420	6080	msedge.exe	113
PID 6080 wrote to memory of 2420	6080	msedge.exe	113
PID 6080 wrote to memory of 2420	6080	msedge.exe	113
PID 6080 wrote to memory of 3376	6080	msedge.exe	114
PID 6080 wrote to memory of 3376	6080	msedge.exe	114
PID 6080 wrote to memory of 3376	6080	msedge.exe	114
PID 6080 wrote to memory of 4688	6080	msedge.exe	115
PID 6080 wrote to memory of 4688	6080	msedge.exe	115
PID 6080 wrote to memory of 5200	6080	msedge.exe	116
PID 6080 wrote to memory of 5200	6080	msedge.exe	116
PID 6080 wrote to memory of 5200	6080	msedge.exe	116
PID 6080 wrote to memory of 2556	6080	msedge.exe	117
PID 6080 wrote to memory of 2556	6080	msedge.exe	117
PID 6080 wrote to memory of 2556	6080	msedge.exe	117
PID 6080 wrote to memory of 4560	6080	msedge.exe	118
PID 6080 wrote to memory of 4560	6080	msedge.exe	118
PID 6080 wrote to memory of 4560	6080	msedge.exe	118
PID 6080 wrote to memory of 2968	6080	msedge.exe	119
PID 6080 wrote to memory of 3000	6080	msedge.exe	120
PID 6080 wrote to memory of 3000	6080	msedge.exe	120
PID 6080 wrote to memory of 3000	6080	msedge.exe	120
PID 6080 wrote to memory of 1788	6080	msedge.exe	121
PID 6080 wrote to memory of 1788	6080	msedge.exe	121
PID 6080 wrote to memory of 1788	6080	msedge.exe	121
PID 6080 wrote to memory of 4636	6080	msedge.exe	122
PID 6080 wrote to memory of 4636	6080	msedge.exe	122
PID 6080 wrote to memory of 4636	6080	msedge.exe	122
PID 6080 wrote to memory of 4308	6080	msedge.exe	123
PID 6080 wrote to memory of 4308	6080	msedge.exe	123
PID 6080 wrote to memory of 4308	6080	msedge.exe	123
PID 6080 wrote to memory of 1860	6080	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ff9617cc188,0x7ff9617cc194,0x7ff9617cc1a0
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,18290417153848320377,8979396142237346136,262144 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:2
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2076,i,10745342639316803126,8643844825494870195,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,2030534313241086301,7743124502255909440,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,17031541565064340274,13867971656646504785,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,1773438438905633071,14881250262029145760,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,9094131013124707180,11770883986536587097,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,1512171290872458121,10984987521142672375,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:9
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3640,i,5015974426110498288,11333101007813218783,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,12096549910060140878,3150538056266741496,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,3464268622580061458,16142925511592150699,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,11948455811033104810,13337869117364625327,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,11948455811033104810,13337869117364625327,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,16094112323188890935,18127598629628862720,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=1184 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,16048436669797441824,15520193700347278075,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,16671581627415875091,9203297293708081172,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:14
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,18066768080396547986,8631060507333325279,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,491951427775409527,17303219794412870086,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:14
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,491951427775409527,17303219794412870086,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=1216 /prefetch:14
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6840,i,1354771033803286706,7407638682846462162,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6536,i,9166057948056430629,13075327161641918551,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,637815745662929599,4041745822810239168,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6984,i,6680977803615934722,10597017773800029083,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4632,i,12071521255476611407,8165778945029572740,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4188,i,15694460968467558837,15006982300508633355,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7608,i,13483688020932475980,11953568560039566810,262144 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7628 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7576,i,16106397441611077749,18067698862111246802,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7144,i,17461183663768868913,16712382210797820063,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7080,i,796808992435318482,15855091986404355773,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3596,i,5088160575659921918,12326140228678339428,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3608,i,17800979805664937319,12406625324087177332,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7112,i,7143339471839362062,3494606157113779288,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7576,i,17088547131153771188,12585696302704821420,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:12
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7592,i,12221264751495733086,10792103825574320989,524288 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7664,i,12904455692909642958,1915669571058523583,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7680 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=4188,i,17000823551194905087,2995614679132958304,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=3532,i,4879249859340826657,16999219795429328564,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=3768,i,11657627442490538391,14292167602793662714,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7204 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7032,i,9337971452097778930,9040963002884979315,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5988,i,14842291583349587889,13769546548179557010,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=3700,i,2208006674288167481,370081771583837349,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7284,i,8539121041294106115,16583458189325424362,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7824,i,16668281303922465933,15207940482338049355,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7892,i,350534960130834472,14886838124563801355,2097152 --field-trial-handle=2552,i,3174923911814685701,3725211165770850505,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:1
  2⤵
  PID:1612

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000034
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000039
Size 205KB
SHA256 b2728642544c04f6d891985311997a0a483a05b279690e57fe0126983e623eae
MD5 15ca6c0b515b89f2749f911c73adccb0
SHA1 ef397b9c38e3b2089cd61fe8b6a4fc2b3a75eb38
SHA512 09bac6e209684798c0cce3f43ca8ee06d125dd38d3b0a73aadee6de2f7ee79bf12300fbb6e086959269d71a208d620dc73e10fec959d7165a9a09469e96cf600
SSDEEP 6144:5VCTw/mK3+QjT6SFhdq6c76VJ6BDvyaB80U9/:G8/mK3BjTBd66VJifc
TLSH
T1C52423F408F343482FBE228A75C2CC27ADAC496FCE0906B570D6EA56D4470957BDC9E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e
Size 256KB
SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
MD5 c21d5d29eb3014fdb864f388b34145ad
SHA1 85f724b019e8d04f50b336631c66f788c2b8f651
SHA512 a67da76326688dcd2de7ab513669246bdaddfda93635de9ef7db820243f3c4087e6166836f8b9cd09830873f0b375d2b720241734eb50d5cc8340d0592e9dd3b
SSDEEP 3072:aeE4Sz4c+ygjpraJ9XQu7fZ/4aUe+w3O2jD/JQw0hHyt8Vn60pGt:Qz4TyXJ9XBfZ/4aqw3O2mRyB0
TLSH
T166448C70F7C3E782CB431AB9A07C3D771FA504C562C51E1786A3AD219098B6AE71B53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
Size 512KB
SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
MD5 33b8b8aad927d1e6649e19fdaf5819b9
SHA1 a629d5a71aeb436d6ad8b959291088951921d7e8
SHA512 f4551060dda057d499f4a8e7270af0bbd24ffb0f69331198e4975c8c911464aecbc11cabbd8bcb9a99f9ef059bc432a931f92083646e0f435b41238e68baf851
SSDEEP 12288:bOS45uyruFRW8uJOyPmhmOW2QJUVtVpSi4ky:aLsyrmWJJHP92QJUnJ4k
TLSH
T195B423565F931C2FC7FF2232F19BECC35A51A2AC20C82D35FBC454AA619171A9B285C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000040

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000040
Size 512KB
SHA256 9a55f5b4da42f0b12e14cf3b4959f2bf8c41b356577211d90f2df96e51d083c1
MD5 fe53ea7bc9881cd79475121c91c84dce
SHA1 e467d2c0195dc4c5252b9068db63dd4879dcfbf2
SHA512 1dd6b7c55c1702df3f10f88a4987a0a5618c2e3530062c0b201a7013f5481ab6950bc87b6ffdecab0e0d772042b904f7876aac5d3ef7ac6170adf5969da60031
SSDEEP 6144:yvzOResswwSQmWRPhkcIJd222iXCdBpKklPoxLyz2DIPjpAmZp2wkhAM:y7ORessbNRpudjcg/Ly68dfp2ww
TLSH
T172B412718BF0B7C5C9269972B2DE38CE5D2A1A2C5B0CDC1BF2618D25FCB954EE6406D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
Size 55KB
SHA256 ddbf30698ac0baf430bc25009326edda21717ba481e57a4b459e8e0c37a4b670
MD5 5aa61e2b9014c5e6583aab7f881c2faa
SHA1 395da7510b4cdfc8d464a283fc5f81431b93d223
SHA512 093e65aba8023a6f4691df6d30711f9962b235277eee21ef20ffc87a6d782b86490c95dc40cdd4620db243f844629d9a685ea235edaaabd4498a7ed237e7916a
SSDEEP 1536:bChfT2kfWOZ/lf+hURbIwD5l5ZyCxk+wHwW1msM:w4sP3rk+wQGM
TLSH
T1DE43F18DCE7C3FA1E1DB6549B132F42186A4C07252BA37963B09CF45827F19692B87F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
Size 30KB
SHA256 f8425893dd95d3719cb1f6bc96e1c61f69b577dd15185d5e0e0e1f34330780e9
MD5 989eff2c685217537d8b3b8c4b778289
SHA1 161119129f50d06ff50a79d4efcbaeaf0bc0bc18
SHA512 3561cdcca526cb95fc398456e18dcd1062ec7abf19f3775b06bf5871d1e5fa57dbe2f6d902edd7ec94d4b32925f69233cb0a0453f8e5a77d90802af216b9a653
SSDEEP 768:UoAdua2J3TOJyn9E5LnKOt2ugnfY6/j45qLcegiKEH76OI:UoWuh1O4nkLtFgf1/05qLUAH76p
TLSH
T186D2F123ABC9FA34F5E0D0997F7A8E8239066195A174E143DE4CA05E3FA11E5572EC38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 44KB
SHA256 329cb08cfae484e9069bdb56868c97df3434afa984c27b04d887f6aacdadc43b
MD5 9b824abff5ac5340d608d815a4623155
SHA1 6bcefeac013700b1c77317ef659967b8a8fb2c13
SHA512 98a87c851c05d6aa3a5ce71f3ef1543ae554810bf19faf5fde7c1171b463c6eaf036745cd556aea940de629ad8cf63601de41c82eea2ee0954747b52768b78ce
SSDEEP 768:r2LSW50upzXqhOPFE0TKc0cRSsJae4Hy+RpRNHBB9tBHzz/sBi+b0:r2eo7qhO7TDSc/qy+7RNHVtBHfkBm
TLSH
T1AA13F15CDF478AE1FA2ED6786D05BC4C86C10F428EFEF73059EB947642CB510A25E129
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
Size 18KB
SHA256 2be51ce75587f62be1ed44b17bbd1475daa757d1f0a7ba4293c39a0583787b7b
MD5 d152f9cbae18e03fe798938d8d5da8a1
SHA1 2e33d4cb75aef6524e5cd7bc1d51c6d7346f6af0
SHA512 2b94de2e6217865cc8f5bb034d11e52ca199966ce4adbcf29fc2a64b63a9ccc6f12638ba11295cfa805619d4445f9d1ff084197fa64c15e6ac5f7774d0939a72
SSDEEP 384:Dpx/g0tvaxrIREaCvk1yVgw/Xn+zI+8wW+NWTeanuK5p7:Nx/irIgvgy9+cwYRJ
TLSH
T19E82E1942F5A4C9D1C064D7B0ECC7EAD06BA5C60CCC56A3E4E48B2F825DEA205478CAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d0ceabddc5cfbb400b06981ab58a7beaa71c04f16a37fef1d0440d279b4d7009
MD5 056719d82903aa32e29d37abc2650f50
SHA1 30700b8adc5d035aea9c60b0fdf8e56c7275c8cf
SHA512 cf3a20586e59cb56c7d110dcc7160bb45e25d244a26f6ed3ca33f8fc2a7d3f4a2f76dff65196d5af68da02cc405c3f9f97ad7e449c716bed1091d15f110a3ef1
TLSH
T17F412CC202A0638CF7B9407D75C00E93FAF2A9B06483DF500954C5FBBAC1399FD50100
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 386B
SHA256 79e19a8a719a3a0e41180c71e88e63f953901e69699fc43984086296e1b4479a
MD5 86b64e8e100cae12f9ffeb96adf31374
SHA1 3506b7b5e643f005623a358acedc87c03ad37b24
SHA512 302bd608b9684f4748f72788abe44fb3079a5c976275045286cad4447e4af8fc93068da7db2c48226598a0826cadd17ca902d66896ca5cf087ba1dd31e91e6ef
TLSH
T130E061784ACDD35FB08411930635BF4D9AA3B74AD6CCADC63B4DC48CB141640B7AE6A0
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 ff9b6ce0a017c1801274a867c9a58858d1cd081fd17b8d604681517eac8b0172
MD5 cd0216b716f10e8a51f3a735f1da5c10
SHA1 96f1ab724ab7292527f744c501593c752f6f2153
SHA512 c9a509f5ef233fb43e7bff42ed321fee77fb98a554950b4bacc4ee8d412fdb1bb629eff722ba439fcf3144b2a2f78487ec26f002a9b8527cf83efe31b8f6d37c
SSDEEP 96:DeAOF48jahci7jh5eZoz0pfXefBZM+ayGwQ:DebF48jahci7jh5eZoQpfXefBZtGT
TLSH
T128B1CDB7C3D8877E880156F0AB246E1ACD1D0A1A423C3D1689E4EE4FA3E24B1D24129F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e583e58005a5993ab6339782212f4d55f81446bd8564d865ce661e8fab3ab9d9
MD5 11f079f08ff75ead7ab7ac8bbfc1d59f
SHA1 369c3332c1f88d2ec9178a7dfa0775ae5c54747c
SHA512 65961c3340f9b8080898e12aeb16d6056b2d203901aca4ee1242e665baff64495ebda0127cae7db4c4a8f53f65d136f83744a03f9f36b4d60332e6f586594e31
SSDEEP 192:sxR7R3bfK/fZseulNzoA8pel/g6+WNIYubiWG0IgDtJ:sxR71fK/fZseulAi/5InD
TLSH
T1BF32B715AD28A93B8CDBE20DBB55BF53D2F95032A1911F58B7FC962C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b816bb3079189a1cff16e618bc5c7b4f0aac3fccc459a5d2fb1ddfb8fd2ccd0c
MD5 dc1dc4b091a8f85d63d6a5a514872841
SHA1 6957a14e476ed1c47a86acb6001aa9d7b7b44156
SHA512 ae617782ab6a0d676d8b299100cec8cb825e73c39e5ff4b68c990ae0c2eb501f67e13457afa6c54f3cb641a0a734f9a504c2a024a23712525a32d0da832343e9
SSDEEP 192:sxRcR3bfK/fZsC77NzoA8p4n/g6+WNIYueiWG0IgIJ:sxRc1fK/fZsC77Au/5IAs
TLSH
T10732B715AE28A93B8CDBD20DBB65BF53D6F91032A1911F58F6FC961C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bb3e45b5f9823825327de2020bd42de9f6b56598e156099c69d25dbf6b8b81a0
MD5 07ef4862cdc268db9f28e385a0f818f1
SHA1 e3e6e09eaa9ccfb4cc3ef90cb8e64179a89466a5
SHA512 74d8ce06673e53a35377344ddd48745ae93519857b9a0478dc55bcea618d04f3fe260ef4c00ca16e5e5520c37c49b30a1edd046f781de21741abc88297b67995
SSDEEP 192:sxR7R3bfK/fZseu7NzoA8p4n/g6+WNIYubiWG0IgDtJ:sxR71fK/fZseu7Au/5InD
TLSH
T1C732C715AD28A93B8CDBE20DBB55BF53D2F91032A1911F58B7FC962C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6059fd918f57a6266d7dce15721bd6c626a939014ff50286b5001eab15f04262
MD5 d5841ee3933b8720348329852e9375df
SHA1 095022cd546e71f3d30f18cb7e6828363b5b40df
SHA512 ebb99b07834b21605100d06c4309b4bca95046edeae5eb67ba83ed29223d5082a5631ba8108cc22abef91769876067aa21ad01f8d499dac8a24f0b8305a5d7f9
SSDEEP 192:sxR7R3bfK/fZse77NzoA8p4n/g6+WNIYueiWG0IgDbJ:sxR71fK/fZse77Au/5IAp
TLSH
T18C32B715AE28A93B8CDBD20DBB55BF53D2F91032A1911F58B6FC962C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2733cd0e1e1a2bcb80054ef4fb28db79ae4f7ab9224e01854026cdd494a325b1
MD5 1de4f865297dbcbd499b8d1353c48d42
SHA1 b6d936defe4feda72181990f789b7cedee7ae070
SHA512 fb4364e743289cb2597a148207ae1543ce98a29cb6f5a795c0178c8500940f6f91a7d900ce80b48d7b5df457977ee8c4fd5995e98a6fe8e220cf8d2dd90bb645
SSDEEP 192:sxRoQUn9AR3bfK/fZseujNxLbrUNXoA8pXG4ptJKX/o26+WNc1acRpmJByC5K3bL:sxRenS1fK/fZseuj/TIS+/gv1tA/XD
TLSH
T1CD72D616A934597B9CE7D229FA11BB63E2F86022A9D44E58F7FC891C04E77DD2203C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 160e0646641455577649e5cf1d8deba3ffb82a7cd9f947a129ad9fc9e521db9d
MD5 83ea874fcba278acc5f5979189437dcb
SHA1 30eed6f7b2c98adfd9cc09d8d1b5be7321f9ca57
SHA512 f0d8d38f75c0e5d23dab409340024390189516ed4c44a1bb2e193fb782a70be643ca2e9e2d7d19da636dbf41bfc06de20ed678c89058bf481e21314394ae5fac
SSDEEP 192:sxRtR3bfK/fZseulN9bTvNXoA8pXQRgl/g6+WNNUygpNq3b/YujiWG0IgDtJ:sxRt1fK/fZseulDFST/5W5g/7D
TLSH
T1AB52E715A9289D3B8CD7D25DBA15BF63E2F95033A5941E58F6FC8A1C08E76DD2203C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f098053d7ecf3b24554535c5cd47ee057ba3c6e7e5821e42c930da57f044dbd5
MD5 84960ee6ff332ce579604b708df9259c
SHA1 4d1344939f0de5776269ac1bacc054f978567a5e
SHA512 4569a07461da53cae9d5a77050a3fe04fd5baf2e66ea4dd4ed7eea9bd716e6fefedf31493158d2a15a17ed0ec30c33a30badad5f8e8eb6266b6e9a1ff80c8499
SSDEEP 192:sxRtR3bfK/fZseumNGWbTUNXoA8pXU4ptCg7k/ry/4q6+WNc1acRpmUygpNq3b/n:sxRt1fK/fZseumw0ISU/rZve5g/7D
TLSH
T16062D515A9245E7B8CE7D229BA11FF63E2F85022A5D45E99F6FC891C08E77DD2203C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 7058b30887e97016938c5ba9358933a198e196a8d5dcb9689e4b713db75cc315
MD5 07edb06fe0683103bf244042c7e7a162
SHA1 203d0a1fc603aa8b4aefc52768709099ac16cbaa
SHA512 1986158e2e3ff1e5e1d3b37b4096eeda6ede3c1874b462e5ff18cf4e07f2c19980f2e9aab23573ce52d8f8ef09fad6ed368152d6335d4b2fa2f0159b03ad2397
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6Urocbe:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0Vz
TLSH
T159B2DA2B644CCB7F9FC00AADDC196F976D9802C79A988D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\970a84e7-a92f-449c-816d-9a192060bab8\index-dir\temp-index
Size 3KB
SHA256 da2fae8c99b1b365f0ba1e99c460e50c2fdf21df1e8daebaa04765647167b25b
MD5 74f15ee5df8bc07011826bdfa78cbd3a
SHA1 dff441535d17629619c6680b3abc9634996ce874
SHA512 adb1686434d9410b407f773869676109bbb4d9eae31ab7bb065bca34df7d5615395f661d7a29fac8409c8a6f24bddaa2be32b282f4e4719c42ec6af2afccd98f
TLSH
T16F51C54E0D535B2BCD9C6672247A1491333865CC13682E0BA6FE9138F8C3A286CD9F68
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\970a84e7-a92f-449c-816d-9a192060bab8\index-dir\the-real-index
Size 96B
SHA256 053af8659a8d8c7e7ab4eada2cbb8c6133478e66ff8218e47ddfcc2155dfc842
MD5 8a0e06e65b17de8ef22ea7e11d359cb7
SHA1 a31bd713d6d7d5247ae7e7d8730c288412d3f3e4
SHA512 bf86e855a5495f8ad8a09be62891faf2cb294bc5115ca6094a22464fe38e41aec0553261cc976ae865a3c3e289399658a9f62caacf16dae4c29555ddbe581d1f
TLSH
T1E2B0124118416502D42133B210E3109022200CCA1092913120FC40596CD0690F211104
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac10f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\970a84e7-a92f-449c-816d-9a192060bab8\index-dir\the-real-index~RFe5ac10f.TMP
Size 96B
SHA256 75141806f209babfdf5ce94197186ec080e260c54c8e91a4bfe4830a347f04cb
MD5 104677f9a8f763cc982b91bb1b55079c
SHA1 16f538c5a424dd7d256e80dbd079d5b24d22b8fc
SHA512 0851e370e15eacd5605ac3b2f93cfad89c0ee813a6cbc3d57bb5771839bb95c2c502c385cad1e851f8717c215b8163739182f873da395ac1aa28f9b729fa6e04
TLSH
T129B0244001405741D43173F110C5115131100C070043D13340F1414DFCD0350FD40100
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9e32e60-9a61-4e53-bb41-57345456ef62\623cd082b6202da0_0
Size 83KB
SHA256 c170bb8784b16329eb009e31db2f7d5327e599b11bec2206698e1c61e16a7d09
MD5 25b8005c5fe277a0f52754de9d22473d
SHA1 7718c7515fda2a8b9ac00ae894282201bb33499a
SHA512 33261ae7acdf10cfceb5ee7b03e8e04cf5a615adc1cfbe6ada98279bdf87d09fbc0f5b87845eba23fac71eef20761376d9c4c438a1b03ea6c635ac0544293d76
SSDEEP 1536:AGC0Q++HqsJs0wihp2VMGznX7HVyOAcU9dP2CsXMoTrE/rZbycRqHPwqYzGq/1:pa+nKMVMGzX71yO4Z2dnYd/1
TLSH
T1A3833AA7B222B035C7AD11D594566B01F22B07561444C8ECF0BCA6D63F18ECB67B7BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9e32e60-9a61-4e53-bb41-57345456ef62\index-dir\the-real-index
Size 72B
SHA256 d340dcb4abb3735a0b20887e072590ddc7e0dd2019cb441d4c53e0bd3f5c2a11
MD5 de255669ef0d68af272415bf5cbd4cc8
SHA1 cb132709e0109ff1f7df27996080e4305f7edc9d
SHA512 8520d7800f41a76cd901e4ad70bdb024db569ebd1db282a55fcd60cad618faa33d0d9977f6c71bbc8560a3d4241932a3b876af80feae91d329ae9bf0b903e333
TLSH
T13FA0023523840111CC5232B139AAC94B2712C9214B4517A775A44048CCD56C58D4105C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b1bf1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b9e32e60-9a61-4e53-bb41-57345456ef62\index-dir\the-real-index~RFe5b1bf1.TMP
Size 72B
SHA256 48f58749ad553b0e6ef7ba18fa95f790b2e168bdf68ed936d7f75dc8c9dc910e
MD5 c4e2a77e55133cab457ee242e583b0ff
SHA1 c17748229db7142e0136e471ee0f9463960d29d8
SHA512 6f6b8b08d1dc96e89c115fee8f28934198f146ae86fbcfedb715ad06dd6f6289e49b95c4c35fcd56ddce2b9fe893e5df5313865b0d6371221fcf8bcf2ce0918e
TLSH
T189A002508F830205E01622B969DB22711320C8101282A307D4E34044CCB2450BD8210C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bd0e9ae8-a95d-4999-b368-eaeb0429e076\index-dir\the-real-index
Size 72B
SHA256 c323e1926df2984c6f658dba63d56745f8b1c3f22b2889e7bd28f1d611e8f5bb
MD5 db8c1b81cc8312731c01b60ceea18ab1
SHA1 5c38523e6b03e2d7a7afa15aea6b6f41ee8efcb3
SHA512 19dadee0c0240fe09695b4dd48e44fc1dc8fc7ebb2f67b4a8aa80734386cedceab95dc4097f16d07d8d79e4d0591059e4f27317cf75963549e60654b80d773ea
TLSH
T108A00210464C0459D4D4977113D749C42A186E1406A10A554395F164DFD039A42EA044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b6761.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bd0e9ae8-a95d-4999-b368-eaeb0429e076\index-dir\the-real-index~RFe5b6761.TMP
Size 48B
SHA256 d5554e4bd4a54ee3d37c04ff51774c47fd24c963dd4308a366d9eb8ac2d04c4c
MD5 a586b69946dff241f2c500e79b922a2c
SHA1 bf9a241638ba4494a3abfb6f4d0b6c1e4ac00f5f
SHA512 a7166d397f4d25ab2b9f6fd065a027ec621cc661477427335260b38cd1290f24817e6d9f1a5175f66802e9bb54acbd9dc1148f78b80a1f1a17a8100a0574add8
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 74cd18e51858db2f9e84cde99df60a5de8f28d5fa0e0c9d2beb5161d7f27510e
MD5 9b7c5485cbe9a08baaa5c7c52571af3b
SHA1 081a70c997dc523a652e1f7e63d1f8742cc62b83
SHA512 7a2ac753fc78001cddfac06137237bb7ca7d9786e9aa7638f5549b4f111ab7393e02555e8ab93741785d6fa5e52f476ead8db9e5f8db5ca433ae29cad8f769fc
TLSH
T1A6F027B37FF72850FDBF87E6217144A089913C98C949ED4F925BA1831472746349AC76
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 624B
SHA256 bb07637dc411f87296f61607bce93f586c578f4aa3c5136c58640dd1ced842f0
MD5 927d870758ba85023a3557a7f813baaa
SHA1 90c0621ad5c4e0d7c14e2d95359851ccfbc297d9
SHA512 5c6819fc4bc641c00088f0a55d9d9ed3a9888e7935d83d5e5d53df3bc54427557a8753974e7f074849255156301b53f89685eca94416f30b7d23cb2e949a8d7a
TLSH
T149F028737FF72810B9AF87E9247104A044113C84C818ED4F851AA18341B27052559C76
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 23c174454fe54cc97df4876659576737c7ab326565e9e43b8a1682132f251f15
MD5 634b8a98ff7edc9f313c448861c3f1cf
SHA1 67c72171342a0fd118eaffd85d8197f5f3404187
SHA512 3b7c35318f9a36ab31e06545865f33394fa32013cbf2a57c468a00ed7b1851e0037751bb672564a9ab541439b5b77e29d10de7d2a6f09aa7e37ac7922c77a650
TLSH
T146A00250DA83D019C18402B431BD8AD42320EF9D87153251C1E9B886CC5424142D1510
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b1a89.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b1a89.TMP
Size 48B
SHA256 8823836504f8f5801cbc7455b408ebcec7aec5416e642b0807238ab90c43781d
MD5 add9e54d1578c6fe6ae01d45729b09ce
SHA1 8a74a2fcb80f9173b9571d63ce18b6526f0a6c4a
SHA512 c1e42a7c7331384e14c90ac9e65fe94a462a20e02e47c973a9ae87337c89f271674617c037074ccfcee30f925c784680a8774dba2ebc206bab96e733832284bd
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1d736b6b027e28a67467a7ddde579ca0115deb6253217b8f20595032eae9b70c
MD5 f412efa0a7a8dcaeb3eff219a3cdeda8
SHA1 a15f8b8c57ff81556df17480e815f0459f1b542c
SHA512 a519cd90d6cc057d2948957f0389cb9ddb155bb1ad2e5ea599383235cab6a7bce7e9f8bf263bb3770c5b5418e005b3bab32a1c6b629b0d29c6acc4a0d83b3f9a
SSDEEP 48:KM9MZN3LXYTD+LIa1YKV99fYR1IoOfN1yD3SL3pJZiTB0RIaHiKVH9FiRnyo8d33:KkC4Kf6+qUAKNimiGoK7Sc
TLSH
T11A910621307B0650387D364CA0EAA79E174177A77428E62B3BEB40E58D67E095DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3114.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3114.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e9aa2fc7a2827e84d17eaa1131d669c5ed66e3069b60d98122a91b3c32758bc1
MD5 2d5c861bf7c538b5463f2b8c28b8bd5a
SHA1 f62247e3cad34301931c3e0c64f04a7b7eb26f21
SHA512 3e508a551fd7e40fe12c66b8f17d8809354b6f1f909d0616c8d533115d8fa953031894c7c403cc120c2f19f75d7a9413247a95697bf9f5e278c3df0fa971026a
SSDEEP 768:5q/UxvxjgC+U3i69JSO5p1j81LUMIYNa8S5oYklnA+LoE4:JZj3+U3i6TpB8B+TWRdAsoE4
TLSH
T12103B035A9A4AC639CF663C4B30A6753AEE55223D1C55EFC49EC1E0E06C73AE5303856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 f57bd39b552151337c15c784c1d0e9546b39ac8c4e4eb8913a15d597d430e29f
MD5 987c4fde10ca99bcd89c1bfae78c4977
SHA1 0bc1959968836152ba97d091d9ff4b5cb6a2c3e6
SHA512 d8491aa4e405438533c223a1c77d81cd5e6588ea26f5708c4d231c8a83a19f7f8b2c3fbe0145103841527bd6e95f0a8f72b029123d3d65f099113378370f2d68
SSDEEP 768:5qt3i6XJSO5p1j81LUMIYNa8S5oYklnA+LMgas:Et3i69pB8B+TWRdAsMgas
TLSH
T1A3F2BF35ADA499B39CF653C5B6077753AEF45223D1C85EE889DC2B0E06C76AF1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f13cca38c0288dcea53473fed352d1f00ec6e01c6e19389e650b6e3bd77950c7
MD5 ebbdfc11fcb0afb7b54aa592189959cd
SHA1 9bfdcc65a3ff001397e4e6145e88806b5561935d
SHA512 f9648348c2fd18cb4ea77cd208411a7ec259d631d391287f561056e10027a07a084361ce636eb552eac2b87a1eb449e4c417712bcf6586a0dd058b0e12437b15
SSDEEP 768:RQFQG34wgQ6XJSO5p1j81/YMIYNa8S5oYklnA+LMgas:ZG3Z69pB8hSTWRdAsMgas
TLSH
T1EE03AE329DD4D9B79CBA97C5F6067312AEF44263D5D8AAA8DADC1E0D01C72AE1303C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 81ab05089cb3078d0cd0077794989d1476e42742327a80f600ab62c1d63a1d48
MD5 eba8d9e947bf94378d2a646ee372903e
SHA1 0dab84108a4d7fb0dd866e3e1377cbdb5e204de3
SHA512 7788c7d298daefc96a6470385a086bf8f194583bf7051b86fb39f0d823079736387c4968ca473fce45e409938f8e0684a464cc02cdc3aa42657012bc1a5f10f6
SSDEEP 768:do/UxvxjgC+23ffOSO5p1jdJMIYNa8S5oYklnAa8SH8L4:nZj3+233qpBdHTWRdAPS04
TLSH
T17C03C0399D94A8738CF663C4770A9357AEE55263D0C16AF88AEC1F0E17C72AD5303456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 893eca2a579c067e49260881bbf711238fba5ef16c6a7af4e18c28130cad25c8
MD5 d539f91f176f79652a2546e4362994e8
SHA1 9baf4e0db267343ac0509b3bd4a3bbe2ecbd87d7
SHA512 db91afd8c6277e60c236cb3f7b50cd84b15a29290a2582f0a54bdf97e2b40d2686d9d30b341897fadb3a666f9e6c9fe494143f48b2b4e8ca0920f3f23b9a9e1a
TLSH
T1FBE00166525100BFC43C433800DB1B28BBF6912013F3024A5A35027C2C633502E30FD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e5d524c11d53df2d617ad5bc41b5afd6470378ce7d511e1d6ae7c7f13e1889a8
MD5 1974f62abbbb61622712c25a833b615a
SHA1 123fea63f437c05b276ef61a32a5ecee5e7d5be5
SHA512 3575397c27f1c2120999ac20a2135e2b3e341d45a66be63bb03f2ae6e470b34d2f4784b8a656556839e10b7d2a6f565515156aa48139ff79f0078b3880ac2085
TLSH
T106E00445535100F7C01C433400C7111CF7F5D01003F3034F5414015C1C133101D30F50
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 98aaf67a9643c8eca9b4760fd3044502fe10ca71c516b5ef8263d67f26bd9fd3
MD5 592b6d682cacf787b67a0d5000fabc8d
SHA1 3370cdd53d19cf33389a5d2642a57b0418f14fd5
SHA512 801f6e52faf54cfbb3f6a840385aba3e7a28179b5183bbcd87e3610ac0c394cd9c2ef7c5662bd84a33dba3ab0eb1de7224b5e17e22a0bf1faf5d550ea6b1cf1a
TLSH
T116E00246535100FBC02C433400C71228B7F6D02013F3024B581501781C133501E30F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5aeb4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5aeb4c.TMP
Size 392B
SHA256 4954b61b2ad16b80f8c105ea60b1b8f42d0de7c6f69e2739827272246108cd69
MD5 237e36c9dc98c5f18c75472ff3bf00da
SHA1 36e484db925e98e883666d6a348fc1771b5481a9
SHA512 eefa7eff7258b19585221fbeaf2e8bf16404b0fb89a08d92be77a568b5e47a13d67352dd8cf525a115a444d1664c41197722905ee5b4bc60e1679cfd2383ab17
MD5 SHA1 SHA512

Submit Download

d32ca1f2-ff2c-42f7-9689-f815daad78f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d32ca1f2-ff2c-42f7-9689-f815daad78f3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 28e9bb555ba0caf0184f627758ccf4eec364fd31465cfb57d709b99796fcc26d
MD5 441b03738d69acdd1c565fe1bfdcb4be
SHA1 358ba8f69d059e1ca1836674dfc610b321ac0a83
SHA512 577ba06232d01e2d6a4adcfb0da777c0b53beebcf1b20f71ed2b2bcdf8fbf876146ce48ea5d4d01432cb95c924873e8cbfc377f3e601b660a7ae5a08ce0b0e70
SSDEEP 96:5/TpHBJhSiZiwu4ZNNmowXHBJ2Nw/QWomowXHBJVuJjmowXHBJruzkimowXHBJn3:VHSqDsRrRfFR5dRBI8
TLSH
T17222FD104BE96E46F3F76A7365B26314BF36BC058B088E4E045981095C63F04DEBAFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download