hxxp://apkmirror[.]com

Analysis

user interaction
yes
max time kernel
898s
max time network
896s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 19:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://apkmirror.com
Sample260913-xxmkfsscmf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2008	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338004740627671"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{7BA7E7A3-2FA5-4665-9A01-9F46D6782661}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4764	msedge.exe
4764	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3904 wrote to memory of 4724	3904	msedge.exe	86
PID 3904 wrote to memory of 2008	3904	msedge.exe	87
PID 3904 wrote to memory of 3352	3904	msedge.exe	88
PID 3904 wrote to memory of 4704	3904	msedge.exe	89
PID 3904 wrote to memory of 3352	3904	msedge.exe	88
PID 3904 wrote to memory of 3352	3904	msedge.exe	88
PID 3904 wrote to memory of 4704	3904	msedge.exe	89
PID 3904 wrote to memory of 2132	3904	msedge.exe	91
PID 3904 wrote to memory of 4584	3904	msedge.exe	92
PID 3904 wrote to memory of 2132	3904	msedge.exe	91
PID 3904 wrote to memory of 2132	3904	msedge.exe	91
PID 3904 wrote to memory of 4584	3904	msedge.exe	92
PID 3904 wrote to memory of 4584	3904	msedge.exe	92
PID 3904 wrote to memory of 5072	3904	msedge.exe	93
PID 3904 wrote to memory of 5072	3904	msedge.exe	93
PID 3904 wrote to memory of 5072	3904	msedge.exe	93
PID 3904 wrote to memory of 1792	3904	msedge.exe	94
PID 3904 wrote to memory of 1792	3904	msedge.exe	94
PID 3904 wrote to memory of 1792	3904	msedge.exe	94
PID 3904 wrote to memory of 2240	3904	msedge.exe	97
PID 3904 wrote to memory of 2240	3904	msedge.exe	97
PID 3904 wrote to memory of 2240	3904	msedge.exe	97
PID 3904 wrote to memory of 4552	3904	msedge.exe	100
PID 3904 wrote to memory of 4552	3904	msedge.exe	100
PID 3904 wrote to memory of 4552	3904	msedge.exe	100
PID 3904 wrote to memory of 4200	3904	msedge.exe	101
PID 3904 wrote to memory of 4560	3904	msedge.exe	102
PID 3904 wrote to memory of 4200	3904	msedge.exe	101
PID 3904 wrote to memory of 4560	3904	msedge.exe	102
PID 3904 wrote to memory of 4240	3904	msedge.exe	103
PID 3904 wrote to memory of 4240	3904	msedge.exe	103
PID 3904 wrote to memory of 4240	3904	msedge.exe	103
PID 3904 wrote to memory of 3968	3904	msedge.exe	105
PID 3904 wrote to memory of 4116	3904	msedge.exe	110
PID 3904 wrote to memory of 3808	3904	msedge.exe	111
PID 3904 wrote to memory of 4992	3904	msedge.exe	112
PID 3904 wrote to memory of 4924	3904	msedge.exe	113
PID 3904 wrote to memory of 4924	3904	msedge.exe	113
PID 3904 wrote to memory of 4764	3904	msedge.exe	114
PID 3904 wrote to memory of 2928	3904	msedge.exe	115
PID 3904 wrote to memory of 2928	3904	msedge.exe	115
PID 3904 wrote to memory of 2928	3904	msedge.exe	115
PID 3904 wrote to memory of 4232	3904	msedge.exe	116
PID 3904 wrote to memory of 4232	3904	msedge.exe	116
PID 3904 wrote to memory of 1004	3904	msedge.exe	117
PID 3904 wrote to memory of 1004	3904	msedge.exe	117
PID 3904 wrote to memory of 3508	3904	msedge.exe	118
PID 3904 wrote to memory of 3508	3904	msedge.exe	118
PID 3904 wrote to memory of 208	3904	msedge.exe	119
PID 3904 wrote to memory of 208	3904	msedge.exe	119
PID 3904 wrote to memory of 208	3904	msedge.exe	119
PID 3904 wrote to memory of 1176	3904	msedge.exe	120
PID 3904 wrote to memory of 1176	3904	msedge.exe	120
PID 3904 wrote to memory of 3816	3904	msedge.exe	121
PID 3904 wrote to memory of 3816	3904	msedge.exe	121
PID 3904 wrote to memory of 3816	3904	msedge.exe	121
PID 3904 wrote to memory of 3056	3904	msedge.exe	122
PID 3904 wrote to memory of 3056	3904	msedge.exe	122
PID 3904 wrote to memory of 3056	3904	msedge.exe	122
PID 3904 wrote to memory of 3464	3904	msedge.exe	123
PID 3904 wrote to memory of 3464	3904	msedge.exe	123
PID 3904 wrote to memory of 2752	3904	msedge.exe	124
PID 3904 wrote to memory of 2752	3904	msedge.exe	124
PID 3904 wrote to memory of 2752	3904	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://apkmirror.com
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb92b0c188,0x7ffb92b0c194,0x7ffb92b0c1a0
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,5732205013792545075,12583391750882847522,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,4064069610770952616,15488721647206011560,262144 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:2
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,538590198854175196,6188106565410146847,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,9472253759574228515,8825670670216926663,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,13219796113376681871,14583606388589504031,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,14725500466207513587,6878143600604285593,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,9201953118400896101,5100602442458395228,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:2
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3620,i,11087057913710897540,9293916201790006493,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3712,i,15619451570310546505,4414120669041296722,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,12746166310315779199,11452252083206478886,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,11119552750297746884,15088700905608326438,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5060,i,739498052791603116,11544841121798206738,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,2027108595385021274,2249924043324692859,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,2027108595385021274,2249924043324692859,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,5435831954769932742,15778215367751201644,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,9451548700603544437,6183641484049343847,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,5187117106791801431,13310591538209000558,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,9934859289622526245,11217433943948230980,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5064,i,1350829143528451614,14844561170029737161,262144 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3548,i,4557273926926050106,5885513575896731360,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,10105228141257687618,2728165068981624272,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,64686669599530334,12530262636228618493,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4018983509739525701,2146034838142283050,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6976,i,2647031338931075351,15059522940193398752,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,9976139404105558568,15726490760129452498,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5600,i,260447896578933211,12511679079769151884,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5304,i,18265984972523766000,6250751740957881778,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,5937547299184363350,7033873725364361245,524288 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5476,i,2350679071412183275,16353382561616396818,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3660,i,3599893074907290350,12051074672259816082,2097152 --field-trial-handle=2684,i,2775245692536182185,16735038998456663083,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:3856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 5b58850a9d86518584a2a408e511f9d33843a85a02bee1b2f766c5828c83aae7
MD5 00ba33a8532057fde67b5d5d33400629
SHA1 f05d25a44b7d3a53eb41c94de159e73b3c3b4c47
SHA512 ffdf30168b5ad93b6a8cb002d41bfa59c57ca99cc5e0f4c2f2142deb2226298df089dacc1ea1a1c0252b5eb5c12b0de7640887c6d273408872c9f42d83713f11
TLSH
T1A6E026C446CAC32FAA60A64741EC9B0C82E1770B92CC7F0A1B049DC97043084B3826F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e944b6e5a3364502e1a5383863cf14afafab057322a2f4aac277b006ee3713c9
MD5 36b955f4fdaa62436fc7c537ea7f9a72
SHA1 31134d5a3b66114c45ac7f49a5d0f1ba132f9e49
SHA512 edf9898bad7b58e43520baa3f6e16decff79da284fe43bd42a4612d21b990a7876232b71631fb0e6857640c69619780490a911b7470217d1b43aa853715394fa
TLSH
T19EE0269604C8C32EE784744B426CC74CCBF33B0BA2DD7F0A170885CD7206840A78A6B4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 890361a95b83aa5eb3e36bd95f45492d3d95e66ee54d28bec3d0f619b81a75fd
MD5 6837ffafeac5983ef3b227cecb1d398e
SHA1 e64d329430625f34cc9311f4207c0fa4b99fa06f
SHA512 652c7aa8980da5f1b28e620864a928d15d734396e3af660bde65d1692e60b46fe8e77e194ce19892cd61209907c2cdfd6949158623700e635b1c1d812cd3c189
TLSH
T1CEE026C905C8CB2EB6446A874378970C82A13B4BB3CC7B0A1700C5CC7406468B7927B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ee192feef6ab88bbbb931998d6abf343ba892383dc7b9d1e16653166176d9d3f
MD5 c136b2264c450ca7f0f61918a30db286
SHA1 d24c0a440e6a07574ba98363d61a371cfc7fbbb8
SHA512 166aafd89aba554e747b0e94088c06c67ec8f13b3cd65881d8f899bdc4d80aa93d22b8203afdc38385b29332aa47438f2671c70d8fee2f544ec7e982247fd236
TLSH
T1D0618483995040A5FBFC603193F01E8F37F64D81654BBD53319CF9A7D656F299139884
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e6377138ded22b43bd6891e4dc189fbc17afee2ed650936ff6e4c4c2d8e83755
MD5 eed5fb8e19fcdcfefe8e4ef7d1f77d58
SHA1 3908596c14865fcddd58d4f5d1bb12c258af15fe
SHA512 b720dba8b12ea8d56adbd2fafc578fab4ce9935cc60e363f47588d6e8752d7ec05a7b4c53b683c1cf72b6d7f9434232c26955a589a4a15ed1df2aab4236d4c5f
TLSH
T12971A583694040A5FBFC603183F01E8F37F64E81654BBE57319CF5A7E616F299135984
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d5a6629858d1d3afdb715ef661d3a29674286188de48023937ca9154d9786f9e
MD5 ad8ba5065c16b7edc9180d644217e3d1
SHA1 5a255462c51349d8a29e033bf82d082397be0b74
SHA512 5017a2bdc6bd4594016adc6b6f836545d11a22b464cd36a918260b317626521f3415d6c2b21c5c3722e239b837838db4068fdabdc16932c79ad6a16468a82558
TLSH
T1C5618487994040A5FBFC643193F01E8F37F64E81654B7D53309CF8A7DA46F2A9179894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 da5e632a852625e76f959b1970dad705cb8cfc5daa0da8f526a77ac6ec2271f6
MD5 8918c9ad3fc6ea6d404b18dc3d79123b
SHA1 c43f66374fa3fd4c4eeaf7b5f95c0d2edb46745d
SHA512 0a4946f32efb299db0417dc08a0c2eb28a26063881d0e0e9bc72b5e08cc3d741e17557940c4bf94a6158df0881e97a40d757ab60531d0f46b6511fb358c6dc67
TLSH
T16E71A583A95040A9FBFC603193F01E8F37F64E81654BBE57319CF4A7E616F299179884
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7a53d5e9d838d22ff6b61e64264b4cac804f014e2e840f0161a95399bec7af1a
MD5 a41cac86c53f5b7bd202af06627e0acd
SHA1 80e31f23d3c8af3a4408d0c15dd6bef29bdbacf1
SHA512 0c92c4db0d55a14a7482c312106658a48df18c8e82e4810d5c48bf6f4de2cccb7a2a8520d1275876ae36df07d8db0b6feb75f7e3de06b57a7b83f316c77905ed
TLSH
T14E71B483694040A9FBFC603183F01E8F37F68D81654B7E57319CF5A7E616F299139984
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fec3c6e55d5a3353ffc2fbfa4145de2d2c5d131188e1ef365e5ddef2f8c1ca2d
MD5 cfbe1b221c668c7c2363e43960eb899c
SHA1 a168bac293a40dadd63cea1f9b91489e7b68a27b
SHA512 ebd42241eabd40e6b1306fb2fb836702b4a7c818fa2b77c6db72415f1410adeef7c67bebdb59060d0ac4f3b7b540ab820a9cf9edfa14c91cb498ef54c07ac872
TLSH
T1BA71C583694040A8FBFCA43193F01E8F37F24D81664B7E57319CF4A7E616F2A9135884
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9205c89550ef1d96056e78f8dd822a30c1735de7784ce8d37f4c4122fb625f2b
MD5 85c41541eb2df786893cc2273433b8d9
SHA1 bf8049f8b20ee4dec11ccba60fc1d5852a347391
SHA512 50312eebdc78d516fb6292116093444e21c7754c46d09776fcb3186b11ee8590b120b529e18bce32bf41c4abab99506abea94e45fcd680088c78452ca2eacc16
TLSH
T1C671B483A94040A9FBFC603193F01E8F37F24D81654BBE57309CF4A7E656F2A9139884
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591c39.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591c39.TMP
Size 3KB
SHA256 4f1195adf35747c610da8c8199e96114f185546ee052efb263fc404eaed445cb
MD5 c78f536da9882290b70a996045ad55ad
SHA1 03a6fda48e0ba49741907132609f41a681c729eb
SHA512 10cfc569417e79d4bba15d24313dd186bbec6f15d620288e198ddacfb4f5291bdcc1493ff0dd04b7027a9f5c73f835710d82a243c88e80a8e69ace3f3eeb4468
TLSH
T1EB618487594040A9FBFC603193F01E8F37F68E81A94B7D53319CF4A7DA06F1A9139894
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a9ee023ab75390d3227993c4002e6e4208c275b228b6403d4fe272a45be347e4
MD5 d4278119750787b9321ddd8ba5c8817c
SHA1 fea5460701e498741e66c8ccff83e94d652ade81
SHA512 162aaa7742f267d57ef91d7d82f59ad47d228c8bb3968fe8f6ab47d4bc0f7dadcdf7d987e6385d3025f86fd97f06857cd362b5275bba7c0d27fa630a2c84059a
TLSH
T1453149B383E5965E991156F09B18EE2BCE2C0A15422C3C298DD5EF5B93E3072D002A6B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8a3e1836704f4057ae692e07b478bf0580e7836152eaef43410860dd7dede863
MD5 ebe6eb97da2cd5a3dc283066910fb871
SHA1 7aab407ee7f8dbfbb73a9d0ed7a5cb51a4ee1698
SHA512 7d97299b9a4f3d75ef9d720075ad44f27c8873ac19e51c2f79b5d303ea5fd73a2484c84db5538fe9f5deefd8b19c89eb3dea0e6e6e9cabdd172b896b6f0149be
TLSH
T1F6416DB3C3E5865E981156F09B14EE2BCE1D0A15422C3C298DD5FF5B93E2071E102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7ec03b9f928deede35864bedee3b4d63990f8a5e9333457497e341b0c06a6e98
MD5 fdf23262ed7ea40682f8b4389f621e27
SHA1 6519999643bd6846fc208211d7596383608f6767
SHA512 14fa5513560deb5c441203bf077e368138848dd964f8395ab5086ea60e5d0380e3e7ab62e483ef3f98a5d04f5c242e54a797dbe2e9a1d7f6a3213a8e18d32397
TLSH
T149416DB3C3E58A6E980656F09B18EE6BCE2D0A15422C3C298DD5EF5B93E2472D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c816bd864569849f49d6e67028cbe9aea419f9490c0332b63a43ce6595c1fa6e
MD5 51347c37ece233511999192823872b26
SHA1 04cf396369443ad2a234a9f863284b2beb179dc8
SHA512 31866e8e740ae7395b8d1bda2a6a903f57940f12295aad02a99f571fe22fdf0a4dbc6d6e5e1f40d2aa5afee196c30cc0ecf9f69fd8811afbb5706d3b7a0aea30
SSDEEP 192:sxZaGRIWg/fds3wIdpJi1HW6+WNqUq/Y3tgtIgrJ:sxZaGJg/fds3RcHbg/P9
TLSH
T14822B6526E38697B8CC6D20DBA25BF13E6F9403255911E48AAFCC61C05E6ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5b9289faf9842f3b2386104addb06854baf0480f4a3480cbb2f92678fce1f63a
MD5 4741be83fde462c599fe50d4412a9851
SHA1 3059dabbf80de36372db9373288ae9bbc5bb3153
SHA512 942c641d9b4931a3f7c0ab2c983dfe971116a0b8896b184629b004821e626f65ceb6a485428530c32f599a25c2f07311cae76c71843dc3b840cd42fce1847ce0
SSDEEP 192:sxZaGRIWg/fds9wIdpPi1HW6+WNqUq/Y3VgtIg51AJ:sxZaGJg/fds9ReHbg/pHk
TLSH
T12C22B7526E38697B8CCAE21DBA15BF13E6F9403255911E48AAFCC61C05E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b7fcd09b5d576ada58b2a33c0747cc4bf96d0b3d71fc2ae9d98b757575f2cdf3
MD5 402958c09fa3f4f544575fd719af3f1d
SHA1 7086c1bc0d9950f4b51fab14a53ba52fd854f6e2
SHA512 b063cac5725f52683919b634d67ceb7bca46fa29d24d32a14902827f10bfe834b43b81083cb6549fba62f92d3e02cfe05bccf8b98f1b560baf7bd377cd85b10c
SSDEEP 192:sxZaGRIWg/fds9uIdpP/BHW6+WNqUq/Y3VgtIg51AJ:sxZaGJg/fds9/hHbg/pHk
TLSH
T12E22C7526E38697B8CCBE21DBA15BF13E6F9403255911E48AAFCC61C05E7ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 34a5fddaa5376b6dd98136aff1caa019bd84b2ba901498b5556b54ced1feecab
MD5 8b7c1cdbb8288fffdae789194a0d6c33
SHA1 f513a2203ebd079b4d7056a799274558cef5f3c6
SHA512 33d2d5f4aa0971d7d27f88666f796611ce5b05dd6de40138d879026fddf28c7524a1402fb214118df08e9a42bfd4773b41cc1dc0d0e4626ec4e0724ff90bc216
SSDEEP 192:sxZaGRIWg/fds9fbIdpPIEHW6+WNqUq/Y36gqIg51AJ:sxZaGJg/fds9MtHbg/BHk
TLSH
T13432C7527A38697B8CCBE21DBA15BF13E6FD403255A11E48A6FCCA1C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5e36fb648c60832d7ba641719bbcda79eeda0c4a90943d33d2563f0472e1b14b
MD5 a334309432e7046bd9e19c4ab28a78e4
SHA1 4cda7321b49a55e93d0dc35eb0cd4485fe6023e1
SHA512 31dcb86d24cfd896b56d5a910d0d51f37ea8ba80b7bc40c7b58a23b52d0d026236e1d16a3b1509905446dda3b05c8ad204207df34abd4f301d9f28937c4a760b
SSDEEP 192:sxZaGRIWg/fds9wIdpJi1HW6+WNqUq/Y33gtIg51AJ:sxZaGJg/fds9RcHbg/HHk
TLSH
T18B22B6527E38697B8CCAE21DBA15BF13E6FD403255911E58AAFCC61C05E7ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a08a682c7066fc2122dff8601495ad672bd1b580a56ef93e4f65852d2cfbf117
MD5 2e7db58d1c91d3b255ae1c0a184270ee
SHA1 bc79d4e1ccad1e6dcc058ccbb8cedcbfcbb42aad
SHA512 f42d591b6ecf589b3a70ce195df14e4cd2e8d75568433bc9fccee40f12309a8644e15bed2eab9ac378b64f1131e7c03cb6f725199450c35866d5f86c0243ac24
SSDEEP 192:sxZaGRIWg/fds9BIdpPWxHW6+WNqUq/Y3VgtIg51AJ:sxZaGJg/fds9qiHbg/pHk
TLSH
T17122C7526E38697B8CCBE21DBA15BF13E6F9403255911E48AAFCC61C05E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 18a2d7e6694ec78c748dbd11ee3c23885d6d377396e62ac089e83d67e69dfe09
MD5 75bbc15e60d2290df21e3567748a10f0
SHA1 604feb05f356221ae7b910c8e6eb6560e104b4ee
SHA512 2d200a35246b127676dd51d606569914e3a935cf8918f4d0b31d5579a043c52ca534199629034c16c09e969cf9ee75579625cbc9b332799ca2384474d53de25e
SSDEEP 192:sxZaGRIWg/fdsfwIdpJi1HW6+WNqUq/Y3tgtIg51qJ:sxZaGJg/fdsfRcHbg/PHm
TLSH
T17222C6527E38697B8CCAD21DBA25BF13E6FD403255A11E48AAFCC61C05E66DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 03b7b168a7083f09670d3bc2adcb4d16242adaccf26efb764ee9b0d4482a867a
MD5 cab232067d13e208325b015e75a36c9f
SHA1 ff3119c8ee244a39b72c098c07ae44da89afc184
SHA512 2abfefaba6a69b723ed228a481b6381dd9f2770d1bbee14b34291cefedc6f721fc29704eda56f4c66d013a7dbd796f5101d1119cd458f3b69e79ee673a8224a4
SSDEEP 192:sxZaGRIWg/fds9aIdpP9vHW6+WNqUq/Y36gqIg51AJ:sxZaGJg/fds9zxHbg/BHk
TLSH
T12132C8527A38697B8CCBE21DBA15BF13E6FD403255A11E48A6FCCA1C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dd9bc3eb0cf9031e06dca1589a75364cd8714beda099a2e72e04a781af503330
MD5 2ac3c8a49966518e871ac1eed4643c99
SHA1 7d55a86040fc4d9eb5445a920c2b4ea1895e12a4
SHA512 71758a14388785c71d222d5707e27c8bec3642d82d3729487a0bc5f82296b13e02f48f5f4d54781970cd1f0660709be666bca1e67130b19f158ca960a6bd4476
SSDEEP 192:sxZaGRIWg/fds95IIdpPsIHW6+WNqUq/Y36gqIg51AJ:sxZaGJg/fds9LpHbg/BHk
TLSH
T16332C7527A38697B8CCBE20DBA15BF13E6FD403295A11E48A6FCC61C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fa7085ae9f0d5ce64ba25ca4a269d14809024f49710f2a3e9ad3448c251c4da3
MD5 90f1b1b12d5571156f4a4e375ffec423
SHA1 44d30c62f41f5c72888333d48abc3d2fe11ec9ee
SHA512 6091b94673c3a6f4ead8e68d1f4841e5192cf19a725ccda33056563e58b938cfe7d654f3ba4455ca8d8bec93ec545639e28f4358b888ffec4e29f9fbd6db09d6
SSDEEP 192:sxZaGRIWg/fds9TIdpPHyHW6+WNqUq/Y36gqIg51AJ:sxZaGJg/fds9MKHbg/BHk
TLSH
T1A932C7527A38697B8CCBE21DBA15BF13E6FD403295A11E48A6FCC61C05E7ADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 5df5ae7bf416897df094710c26e46b0845630bf1203f052dc0715a663d4cda7b
MD5 4df33abf70f21f40f28f50968321d510
SHA1 cbdee036e22ed24863d60b9361b2409c719dc890
SHA512 0088aa26ffabdcd229b9500d68d96504d3b7852efae2c8b9a87a65ae9bda9499d7185c6d1d3965016d14e881f4503f8904505deccd10c0696a9f546820a2eee5
SSDEEP 768:AE30AbSWvS2998F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72frolZMp:AE30AbSWvS299u1jaLmLZ12M6
TLSH
T1CFC2DA3B640CCA7E4FC01A9DDC6AAF9B6F9C02C796648D4047FA984C02D77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\temp-index
Size 1KB
SHA256 7f0be4d736040d8960c4b18d081e4e618332265c0a7bca6ad8d3b8a5abf7ea45
MD5 fcb8f1c4204bd538d7d64460d2a17101
SHA1 7ea57be938cb166b9cd86d88e80a26e9ee88a495
SHA512 a6572fcf9ab3474b14f4e5ef2bef06b5e84919d7455931a4b801702fd3a5b81ecb51fbd98bdb4dcd27677029558ff27dfbe3fa852fddf4d035ca7a05136329e2
TLSH
T1632161831E925B27FE982278103E185BB330D2CC03407F0F63FDA13ADC92740AE89894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d4ede.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index~RFe5d4ede.TMP
Size 1KB
SHA256 00c16eece9a05c03cb55b207b679d30be970c46fd522ee9b7aee3315182a72a8
MD5 10c76ca806ea088ff90d37b6bef70595
SHA1 f61eb0636ead68812a9a91e6360a4a333423bcf9
SHA512 e5d80ea20284199087756956cee69b34457ecfa087ee5772c2762778d5636922181645a9194b479c161ea3515ca836a057b57f90b48d8e581c946ceab5399511
TLSH
T18421885301531B63FC442376496D54937330D5484344370F53E7A039DC41B80AC86DE0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 391ce08613d3d07be66e6af31195844cc2813c2424444611c0672196b2a4122e
MD5 59937c3532c49a5151737736852113b9
SHA1 8213b4800c0d7d2d78ee088a432d7d3e6266aedf
SHA512 2d72a52767b52031d6c1064ee1b83c778e0019028f708eaee5de18bb1d014fce0b62f165d9f2a07d782d5a0d644633b9225fbd938e1cc9e6d923b7e81b3f79c5
TLSH
T1C2E0C0F33DF71850FCAF83D5147088B181057898DA08FC4F10AAA3C764703113809C50
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 52e5cfa0627d5a4fcbba7953967e897f3cf99814594d6688c676bea21ec1c062
MD5 fec6efee209cd672ee6b59aafab6ca1e
SHA1 60ef904233f44d421536e92c4776792faf1013f2
SHA512 5e84caff7be6a2d603574b58d2d3b652be6bae0dc852ef9a0a2ec4ab2b4bb84286fbf788592880c2bba99d50d943539cac70f136d88a69258057b08f1fe9fe55
SSDEEP 48:K0CNCsChC9CPC7C/CgbCTCmCzISC1CgK9C11CXCgxClCwYC2C3CtCtyL4neioS2t:KgfeKgYG+fSKAsH2EKvawe
TLSH
T17291FF85317B06143CBE295D91B5CB2B264131B37214EB2BBFB841A18E6BE051EFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\.usage
Size 24B
SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
MD5 e1edf83f1dbe0a1640e5800ef2f44b90
SHA1 58e8f31a1282e84a05c6960d6ab461d6ccef42cc
SHA512 151b19bcb34d72c304d02f2830f577036c5d2156499cb998643a87a3010544e5a4c236f8458786ea4b3416aaa4fd1ea96fc3bfe1ab0c5baebeac29e5427ca417
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599f15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599f15.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9ef4df84c2e559fa8bccca4210989665438d657d2c84efdc34a7d7fc6ed0ccc6
MD5 06a904d63619ea3291bbd847cf7b2ebd
SHA1 141063d6f0eb6df47389bf394acbe3d80825e0ed
SHA512 48da58844f13d8de4d871fcfda3f963741fc25cc63afc30d316a7a4a20e313ec2ec0d5d8bbb4cf005edd7d3d0609706fb306bcfaf27316a488b3cf480838eb8a
SSDEEP 384:giFiZcIZQsNN8TUNTUlIl0lbpuESu9iX5FEFosa+VYQlmok:7FQCwwgebaaaqohgAf
TLSH
T167C23BF258D7983AD9AE9743B77E2D034DBCC063BA846A50B7D85A1CCC961BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8df6c6750f82fd414ee9b1c2ad170e3b329a8407359cc87677ec7ce007f0731a
MD5 69a3d16fab1a2d1610fc4042bddbe52a
SHA1 81ee6a7acf7b76145e6ce9793650d0f80a6a1f0d
SHA512 1da145043e271ffacbfec113ab75c056ffebfaa907eab0fbb9541f823b0330956f0bc0a310b0de0b84ace090dace97ee56f8589692b9a960720fbc6f8a2f7d13
SSDEEP 384:hZcIqsNz0lbpuEMu9iX5FEHosa+VYQlmok:pqXbEaaAohgAf
TLSH
T117827E72B868AC7B4CE7D291F54736035EB880679BDC2F54D5ECAB1D01DA6D4130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a3f362e56dbf1dba3338a5aa2f422c284ec27346426d5b3cce71ac1dc0fc8d13
MD5 3ba694327de5f7de1d2f4674fd8d4fe4
SHA1 e09d5933526675edad9e83140f4034da53f8c2c8
SHA512 95f8bad25346e8ffb136fbd2d72482c103b11e5525293e424d73ebe76d0ce6d64dcefaf5a469a66bff6545a1b5ca82e23f3682ce394a04a411dedfb176096d71
SSDEEP 384:eZcIqsNzBlbpubMu9iX5FEHosa+VYQlmok:cqubvaaAohgAf
TLSH
T1CB827D72BD68AC7B4CE7D291F54736035EB880679BC86F54D9ECAB1C01DA6D8130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 12bddcf2107f5e4995003747b16bce59dc1e54d59494f06e55a40da1e154ecec
MD5 eb72d1af09ed64a12b7533c6ab075d17
SHA1 4398357be3b2a83c50918fb96f6b366faa788289
SHA512 5ea2cd12ee7813178db65757c7668e49d8dfbba4bd39526fd6b80186ccecddb43f7d45ee91743a7c28e29031ea6b9f52a428352f89d526a90d9b52cd6311aa9d
SSDEEP 192:LONe6AmwphQmiUyRJKsiX5FYRB/lRK/7U6:LONe6ip/iKsiX5FEToU6
TLSH
T10B121B36F868AC3F5DD2A550F08735135EA8512BDF896F94D9EC2B2C01EB59C930A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7e2cb84e2611da53e324e22b8ecc2417cdb80335792c52413d4ea7156e9c52b9
MD5 e1456973211d64aacb960c89c8e3d9e0
SHA1 685a17100eceb7389e286dbbbd9a9c7dd1a3dbb2
SHA512 251636029583bda589fa9a01d8b77e56c965fa05ee567001e701fe14468447b9871d93b80c13893ce4792b38418965356862eb7ddb5e4aae7ff65b5e36f54043
SSDEEP 96:gqONkXQsjpfuMVwptaL5ih/cIPURHl8h4otop5diCD/BIPuva6zx8X5Fx+xfYvNc:LONr6AmwprQmiUy3J6siX5FYRkJixhU6
TLSH
T1F6020A35EC686C7F8EE3AE04B58B77136FA9106BDA952F44CAE81B1C01D768C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa244444-8f9b-4735-aac4-edcf0e4f7172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aa244444-8f9b-4735-aac4-edcf0e4f7172.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4c11775ca60476793d2725df30a10ed2a6ba99fd18ecb6496500e835e2faf26c
MD5 44359b14883f6c8e0b68eb26c5444e1c
SHA1 d35a1bc6322c221b5b68d3e0385e480b87e80fd9
SHA512 08d8b4e481019d56f80b7426109ce93950d260259863c75b21e366081a0b521e5cb61f5c8af935e50a7cb4d698c2e617c5b5ab0b19656807a67df197659038d5
TLSH
T161412D58A6FE1149B3776F1A9BF6B86D887F79771E06946E00010E4F4A27B00C971737
MD5 SHA1 SHA512 TLSH

Submit Download