hxxps://url5751[.]acue[.]org/ls/click?upn=u001[.]8Sk-2BdC1oCOsjzhpc2qQ-2BePJ-2B2EVa2HppockG4cl1DN-2BmBBVvcVnEVHgqLev2XSA871VqpmcobDkAzPbMT-2Bu-2FKQgCULUToMY245gIXCn77FOrusnGTUk4BsEXZ4-2BWg6hEXUP6sMJrOVWj42qvOeBczlUFA-2FHj6jaVyXGXM17mb0ws8BeRY-2B5Hjuzc8gSKimbFOLdKoJZIl1Z-2FyBN8aFhrFX3qxv89dzBsFA22qxVmwtZbKHspuSfvhh8tuttoF1eQjrNIB5W9F9w5jGi7-2F2AWKvVxWFsy04iLqOuG9nkhGJNMk0YouMCRNuXPmtdgpsIuFtEZvlLuI-2FX4B7UIMlPB0KhvZsSBLwUmVvZMOwShfoHCmI1UE7ITJbEp3gLro5NvIEgmBtM-2BmZAUiBby87zOGZs4tQd8wdYxWg9h2r7UzfRExKHVlfKSTErSf-2B3lsuz2AvryIzASzW4UGru-2B1YoZgIabdS8FCBBs-2FT4-2Fo-2FUpQjZQj1gKiF60tFtrQyLLtDqgcnOapdDhfV3Js8gAccybbLDe5niR9xY9M-2FpqWdTCUxm5zWgrBPvp3hsiLbka4OJIaixMP6LEivPSYdrc7cE-2FoSZoDfBPpuxd26fKdd4aQvxFQRBOQoHnZ1KEBEhgpmP986N-2B1lskTxHoi2rt4pOwEfrp3-2FranSneqT7nKdLgcBZv6Y19FCXNzNVJvDEsSf8JX7k1kSM0OK3qwr-2BayTu0N0A2UdHQz0Mq6oHLJMMfg1q2BWqNH5m54sfDIuE5A8DSNDs1AymP3XAlpYsqBMAqBly-2BRFkcmeDWeOkTLzlNi16tdb6B-2FpRk4qMHUZIojRO0LnQ8soT4jJoJ2AXscpke2bK1i6LruOrH41Xdi9KIrfrTUQRgOFnxJacrhEIhW26JKuPJN98xJYKX-2Be26aRM-2BkYIru8zLExCSGUBn-2BuiGUriVw1-2FC9FS1HO0jlkHQCrpypYOe6qfYYG5gY2KmfLUSNXj1dN1MNtxBcAhS7B4bi-2FJfhWhlKStvKdzFXuTgbN8QANmSBQe6jcA96ARX8U09yvajeHRiQnWrn-2F3N7GyWeZpDrRL8eKBNFiLf9-2BzYbEleBqOAJiOP62VNAo4in6fCZVZuwxj2SRX0f3FnNfVcA6uRF5ppf15kPRaMEKLOk5exdpujLCV5FDy2doLPJfa9Pg-3D-3DA6vU_MloSkPrFWGkaP9R-2FhGKuX2N9f14IWAxv4XRdEKmNMWkwBF649P28QAWBZBtC23GkzWi7-2BZEW0PSRWnoh4NNBn3DdmvBA7DAUXaI1J8jbCIbzJi2ezVwwGnwWoZjJpayfl03VFxYAw6MYm1nR9GWbDY0JEaqOLTsrXxjZ7mvnhE5xz30wsTLCMsTTgUKXH0zKmGwswQoGDwD5ZJdPzfHBBg-3D-3D

Analysis

user interaction
yes
max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 08:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://url5751.acue.org/ls/click?upn=u001.8Sk-2BdC1oCOsjzhpc2qQ-2BePJ-2B2EVa2HppockG4cl1DN-2BmBBVvcVnEVHgqLev2XSA871VqpmcobDkAzPbMT-2Bu-2FKQgCULUToMY245gIXCn77FOrusnGTUk4BsEXZ4-2BWg6hEXUP6sMJrOVWj42qvOeBczlUFA-2FHj6jaVyXGXM17mb0ws8BeRY-2B5Hjuzc8gSKimbFOLdKoJZIl1Z-2FyBN8aFhrFX3qxv89dzBsFA22qxVmwtZbKHspuSfvhh8tuttoF1eQjrNIB5W9F9w5jGi7-2F2AWKvVxWFsy04iLqOuG9nkhGJNMk0YouMCRNuXPmtdgpsIuFtEZvlLuI-2FX4B7UIMlPB0KhvZsSBLwUmVvZMOwShfoHCmI1UE7ITJbEp3gLro5NvIEgmBtM-2BmZAUiBby87zOGZs4tQd8wdYxWg9h2r7UzfRExKHVlfKSTErSf-2B3lsuz2AvryIzASzW4UGru-2B1YoZgIabdS8FCBBs-2FT4-2Fo-2FUpQjZQj1gKiF60tFtrQyLLtDqgcnOapdDhfV3Js8gAccybbLDe5niR9xY9M-2FpqWdTCUxm5zWgrBPvp3hsiLbka4OJIaixMP6LEivPSYdrc7cE-2FoSZoDfBPpuxd26fKdd4aQvxFQRBOQoHnZ1KEBEhgpmP986N-2B1lskTxHoi2rt4pOwEfrp3-2FranSneqT7nKdLgcBZv6Y19FCXNzNVJvDEsSf8JX7k1kSM0OK3qwr-2BayTu0N0A2UdHQz0Mq6oHLJMMfg1q2BWqNH5m54sfDIuE5A8DSNDs1AymP3XAlpYsqBMAqBly-2BRFkcmeDWeOkTLzlNi16tdb6B-2FpRk4qMHUZIojRO0LnQ8soT4jJoJ2AXscpke2bK1i6LruOrH41Xdi9KIrfrTUQRgOFnxJacrhEIhW26JKuPJN98xJYKX-2Be26aRM-2BkYIru8zLExCSGUBn-2BuiGUriVw1-2FC9FS1HO0jlkHQCrpypYOe6qfYYG5gY2KmfLUSNXj1dN1MNtxBcAhS7B4bi-2FJfhWhlKStvKdzFXuTgbN8QANmSBQe6jcA96ARX8U09yvajeHRiQnWrn-2F3N7GyWeZpDrRL8eKBNFiLf9-2BzYbEleBqOAJiOP62VNAo4in6fCZVZuwxj2SRX0f3FnNfVcA6uRF5ppf15kPRaMEKLOk5exdpujLCV5FDy2doLPJfa9Pg-3D-3DA6vU_MloSkPrFWGkaP9R-2FhGKuX2N9f14IWAxv4XRdEKmNMWkwBF649P28QAWBZBtC23GkzWi7-2BZEW0PSRWnoh4NNBn3DdmvBA7DAUXaI1J8jbCIbzJi2ezVwwGnwWoZjJpayfl03VFxYAw6MYm1nR9GWbDY0JEaqOLTsrXxjZ7mvnhE5xz30wsTLCMsTTgUKXH0zKmGwswQoGDwD5ZJdPzfHBBg-3D-3D
Sample260922-kktrsaxtes

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
372	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345400687602446"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{075AFB41-E2FE-4F48-AC8B-60AF95D0D817}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5140	msedge.exe
5140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe
2652	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 3536	2652	msedge.exe	86
PID 2652 wrote to memory of 372	2652	msedge.exe	87
PID 2652 wrote to memory of 1508	2652	msedge.exe	88
PID 2652 wrote to memory of 1508	2652	msedge.exe	88
PID 2652 wrote to memory of 1508	2652	msedge.exe	88
PID 2652 wrote to memory of 4724	2652	msedge.exe	89
PID 2652 wrote to memory of 4724	2652	msedge.exe	89
PID 2652 wrote to memory of 2080	2652	msedge.exe	90
PID 2652 wrote to memory of 2080	2652	msedge.exe	90
PID 2652 wrote to memory of 2912	2652	msedge.exe	91
PID 2652 wrote to memory of 2080	2652	msedge.exe	90
PID 2652 wrote to memory of 2912	2652	msedge.exe	91
PID 2652 wrote to memory of 2912	2652	msedge.exe	91
PID 2652 wrote to memory of 2328	2652	msedge.exe	93
PID 2652 wrote to memory of 2328	2652	msedge.exe	93
PID 2652 wrote to memory of 2328	2652	msedge.exe	93
PID 2652 wrote to memory of 100	2652	msedge.exe	94
PID 2652 wrote to memory of 100	2652	msedge.exe	94
PID 2652 wrote to memory of 100	2652	msedge.exe	94
PID 2652 wrote to memory of 1760	2652	msedge.exe	98
PID 2652 wrote to memory of 1760	2652	msedge.exe	98
PID 2652 wrote to memory of 1760	2652	msedge.exe	98
PID 2652 wrote to memory of 1320	2652	msedge.exe	101
PID 2652 wrote to memory of 3124	2652	msedge.exe	102
PID 2652 wrote to memory of 1320	2652	msedge.exe	101
PID 2652 wrote to memory of 3124	2652	msedge.exe	102
PID 2652 wrote to memory of 3744	2652	msedge.exe	104
PID 2652 wrote to memory of 4856	2652	msedge.exe	114
PID 2652 wrote to memory of 5084	2652	msedge.exe	115
PID 2652 wrote to memory of 4256	2652	msedge.exe	116
PID 2652 wrote to memory of 5056	2652	msedge.exe	117
PID 2652 wrote to memory of 5056	2652	msedge.exe	117
PID 2652 wrote to memory of 5056	2652	msedge.exe	117
PID 2652 wrote to memory of 4476	2652	msedge.exe	118
PID 2652 wrote to memory of 4476	2652	msedge.exe	118
PID 2652 wrote to memory of 4476	2652	msedge.exe	118
PID 2652 wrote to memory of 3864	2652	msedge.exe	119
PID 2652 wrote to memory of 3864	2652	msedge.exe	119
PID 2652 wrote to memory of 3864	2652	msedge.exe	119
PID 2652 wrote to memory of 5552	2652	msedge.exe	121
PID 2652 wrote to memory of 5552	2652	msedge.exe	121
PID 2652 wrote to memory of 5056	2652	msedge.exe	122
PID 2652 wrote to memory of 5056	2652	msedge.exe	122
PID 2652 wrote to memory of 5056	2652	msedge.exe	122
PID 2652 wrote to memory of 5356	2652	msedge.exe	123
PID 2652 wrote to memory of 5356	2652	msedge.exe	123
PID 2652 wrote to memory of 5356	2652	msedge.exe	123
PID 2652 wrote to memory of 2844	2652	msedge.exe	124
PID 2652 wrote to memory of 2844	2652	msedge.exe	124
PID 2652 wrote to memory of 2844	2652	msedge.exe	124
PID 2652 wrote to memory of 5884	2652	msedge.exe	125
PID 2652 wrote to memory of 5884	2652	msedge.exe	125
PID 2652 wrote to memory of 5884	2652	msedge.exe	125
PID 2652 wrote to memory of 5932	2652	msedge.exe	126
PID 2652 wrote to memory of 5932	2652	msedge.exe	126
PID 2652 wrote to memory of 5932	2652	msedge.exe	126
PID 2652 wrote to memory of 5508	2652	msedge.exe	127
PID 2652 wrote to memory of 5508	2652	msedge.exe	127
PID 2652 wrote to memory of 5140	2652	msedge.exe	138

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://url5751.acue.org/ls/click?upn=u001.8Sk-2BdC1oCOsjzhpc2qQ-2BePJ-2B2EVa2HppockG4cl1DN-2BmBBVvcVnEVHgqLev2XSA871VqpmcobDkAzPbMT-2Bu-2FKQgCULUToMY245gIXCn77FOrusnGTUk4BsEXZ4-2BWg6hEXUP6sMJrOVWj42qvOeBczlUFA-2FHj6jaVyXGXM17mb0ws8BeRY-2B5Hjuzc8gSKimbFOLdKoJZIl1Z-2FyBN8aFhrFX3qxv89dzBsFA22qxVmwtZbKHspuSfvhh8tuttoF1eQjrNIB5W9F9w5jGi7-2F2AWKvVxWFsy04iLqOuG9nkhGJNMk0YouMCRNuXPmtdgpsIuFtEZvlLuI-2FX4B7UIMlPB0KhvZsSBLwUmVvZMOwShfoHCmI1UE7ITJbEp3gLro5NvIEgmBtM-2BmZAUiBby87zOGZs4tQd8wdYxWg9h2r7UzfRExKHVlfKSTErSf-2B3lsuz2AvryIzASzW4UGru-2B1YoZgIabdS8FCBBs-2FT4-2Fo-2FUpQjZQj1gKiF60tFtrQyLLtDqgcnOapdDhfV3Js8gAccybbLDe5niR9xY9M-2FpqWdTCUxm5zWgrBPvp3hsiLbka4OJIaixMP6LEivPSYdrc7cE-2FoSZoDfBPpuxd26fKdd4aQvxFQRBOQoHnZ1KEBEhgpmP986N-2B1lskTxHoi2rt4pOwEfrp3-2FranSneqT7nKdLgcBZv6Y19FCXNzNVJvDEsSf8JX7k1kSM0OK3qwr-2BayTu0N0A2UdHQz0Mq6oHLJMMfg1q2BWqNH5m54sfDIuE5A8DSNDs1AymP3XAlpYsqBMAqBly-2BRFkcmeDWeOkTLzlNi16tdb6B-2FpRk4qMHUZIojRO0LnQ8soT4jJoJ2AXscpke2bK1i6LruOrH41Xdi9KIrfrTUQRgOFnxJacrhEIhW26JKuPJN98xJYKX-2Be26aRM-2BkYIru8zLExCSGUBn-2BuiGUriVw1-2FC9FS1HO0jlkHQCrpypYOe6qfYYG5gY2KmfLUSNXj1dN1MNtxBcAhS7B4bi-2FJfhWhlKStvKdzFXuTgbN8QANmSBQe6jcA96ARX8U09yvajeHRiQnWrn-2F3N7GyWeZpDrRL8eKBNFiLf9-2BzYbEleBqOAJiOP62VNAo4in6fCZVZuwxj2SRX0f3FnNfVcA6uRF5ppf15kPRaMEKLOk5exdpujLCV5FDy2doLPJfa9Pg-3D-3DA6vU_MloSkPrFWGkaP9R-2FhGKuX2N9f14IWAxv4XRdEKmNMWkwBF649P28QAWBZBtC23GkzWi7-2BZEW0PSRWnoh4NNBn3DdmvBA7DAUXaI1J8jbCIbzJi2ezVwwGnwWoZjJpayfl03VFxYAw6MYm1nR9GWbDY0JEaqOLTsrXxjZ7mvnhE5xz30wsTLCMsTTgUKXH0zKmGwswQoGDwD5ZJdPzfHBBg-3D-3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff865edc188,0x7ff865edc194,0x7ff865edc1a0
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,6705613867599968834,12377936889566182813,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,10527169608409105535,1743202476806901674,262144 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,11572913500245983386,12403514248763968123,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,2143407951080619861,10494118006662643996,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,1754556518228548163,390763388052411677,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,12039078736625077250,8935213636549750470,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,15227539281435081900,1869455533958952720,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3684,i,13356757567515814,1323901424365529761,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,7709675075294662519,1075637064209761392,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,13182178900867577909,9743689131757882360,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,14206001903091948573,18349480014433760840,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,14206001903091948573,18349480014433760840,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,16997210814868936693,12363782900431094756,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,11837039862609241219,4317133401630806071,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,10691897511061343436,16783233593127873961,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3608,i,11141531350677226062,16313719288730325502,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4636,i,5562801377405078077,14888537270256010633,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6228,i,3499222281966785944,11122344052776138077,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,14531732707328946659,17420024195869792119,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6876,i,17123010053179655401,10075215025329750757,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5972,i,5241405756659661218,16284112970576654339,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6964,i,7866375880722188227,3414532366796568845,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6396,i,16724877449225992160,7461559380755178683,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6616,i,14099227240313795969,11144591706786994626,2097152 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7244,i,11008416037609106001,17764929669527016880,524288 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:8
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5856,i,13284259605132892426,13047529060206616713,262144 --field-trial-handle=2228,i,17465166986938819335,10186982376715371302,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bf1534982dca26f6b802ccbbc67f8eefef97b30bdf745694fe4cf692d670f313
MD5 9593b1a4926308ea4fe0669188ca3668
SHA1 ad1db93cba9666a7a555d7040ca53364f0316c14
SHA512 8c15ac96048aaa1c0597e599cb730f35149a05e267d03f0d0b9c3533fc49c8915b604d4bef6f9bfed5f40c3351ab6fb9ead7277ce5d6cbc6dc654b45fc8e6f21
TLSH
T1C051E8E09FB1A198F7F883B4F1D1167332B4A090E5831F1F5452E9BD48077F8489436A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 95263d4aa44c33e8244fe78943c380cb689835fecbd86da2da3bef23fa61032f
MD5 85de7f79aa71bc91efab5cc4c803f63d
SHA1 4afe0e5932410e5b5995e46d6c533fe20c19ed28
SHA512 9d46d6129576ffde7659678175474c1861b8fced2b8c189ba975d33fd8491b25559c8687b2ff766cc3d3ac176d54ed6751ef3288e8df6526e182e50e79458a3e
SSDEEP 96:26yRoL6iz0q3mr3AxlwX2Dj91HTgg3t662KDy4KHHWVYu6HDS6K:2XkAvGlgyLk7KsH2VYbD3K
TLSH
T1BDA1E9B88FA22150FFA437B5F2911E2125F5A8ACD8CE0FAB2442DC2C289F3F41094F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 78b7f426d680f95348dec2d5faca09e612dca3009ec48f86871f7d66e48dc6d5
MD5 155fabe3eaf92582975c6ed73f6eddc5
SHA1 4389f7d30b12a037b50005fb0169a2b1afb8f5a5
SHA512 a10ece1e18f5554ca002a9f4a46ba28179078543202d3b0aeebe57cb24219865c029b71f4bf372c38f6f11eb2d100b9cc36799563eb0c1c485afa14062fc748c
SSDEEP 192:DTHH5KsX2NudTdoOeO1rLdqpxAF1Dr82gXkj94bUjt54lqfGRYuTrGI9pZo/rNxa:DTHZ3mct+tE/M4F1Dr82gXkj94bUjt5S
TLSH
T10002ADF787E9862DCD1196F4AA147F2FCF1D091543283929C9D9AF4BA3E24B1E10168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 340266ad195e0620d07d833c094f5d46a0419d6b934d534416ab1527a48a9e1e
MD5 3efb898e79a88dd0474d914ab9e62a35
SHA1 e52a517ae7424e1b3363ac9bf8a313257384e79d
SHA512 6efa3252c30a4fc1e3aa1fa49f5d203ae0a6b4b8d96ae8db4f1ce56e1032ec0adb870e91f8ddba35e7a67bee8644cc66319c6605352b6290d13832bb8fa14774
TLSH
T1D9D02377270D7075556C5E894057FC4FC77710384883DDE410D4A5680531C5D154B541
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59da68.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59da68.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 49b8190a4901fe7ed57b4d3262360397a21d5b315d56c40e2a6783c7cd2f865b
MD5 d30f88210bc250e19463ca7411565c73
SHA1 044abcf5cc2be9d978d07c6f795ad0ffb787bff4
SHA512 bf387f65e8fdbc7c79a4ac570f0b2604cb0988ed66a971ca4e428d74912edc63c01d16c66b982de522b86037434be8a3fc3946ab368e8aa7016f6075d7e68abf
SSDEEP 192:sxZaR/Wf/fMsi8JaMm7bitddp4Eml0+HW6+WNmr8DNcLSOk/Y36bjYIg5VJ:sxZaQf/fMsxUFq/UHbz2o/Xk1
TLSH
T11D52F957BA28293B4CD7D219BD15BF52E1F9503695D60E88A6FCCB5C04EA7CD320380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9149d6991c7ae84afd292699a15abde72b75ee6928272932e4ca02b11e855e1c
MD5 62a3179e3668ca7f263ddf482a4e3750
SHA1 aa3a6474fc12cfe8e1bbca17987141aa8a3a976c
SHA512 56d26a68f721d187afcd29300dc37d6ab2ec75ee650c9688fcede85602c1f66110e3a66d1be180ae0c19070298e736068269647e13f8886b94e57e2514f99fea
SSDEEP 192:sxZqR/Wf/fMsdceIdpl+HW6+WNQbX/Y365jYIgrJ:sxZqQf/fMsmPcHbK/XG9
TLSH
T1B322C852AE28A97B4CC7D20DBA25BF53D6F9503155D61E48A6FCC61C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c88e0d3914f5360ec5620a1808111bbaea64986c5e806d5b5de8e1703bc9b82e
MD5 e48bce261a6de225410084a530f48cb5
SHA1 46711df79510246cff2328325a7ddfdab167da19
SHA512 ba2104ad8cae1eb2e074d6d6c2a0c0f99d305727f052cfc34fbc7430ec2f183a12a441fdd0034f23af411cc7934634a2b6d0a563b8a4ba22ac2f5645c90f8de4
SSDEEP 192:sxZqR/Wf/fMsi8eIdpjU+HW6+WNQcLXY367jYIg5VJ:sxZqQf/fMsxPnHbfXXE1
TLSH
T17422C856AE28697B4CC7E20DBA15BF53E2FA503255D61E44AAFCC71C05EA6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c4ee5a00ee4a7a3cba3f3ac067c193cc0c6fde5320372051e1fd5a82015d524c
MD5 6770e46066e0483f397c21c149b9857b
SHA1 8fa936d262903eac61b0b6491d3c8a7086c6c30a
SHA512 44639bd64ab8f4a5073db7a9e41285afa6b4e0fa017aedf5bf418a0ca77d2d9c84296ebfd3e5551f97b21c38cac5fa8735dcb2069c40eefaa84b85d38746bd46
SSDEEP 192:sxZaR/Wf/fMsi8JaMI7bipddpmEml0+HW6+WNmr8DNcLSOk/Y36TjYIg5VJ:sxZaQf/fMsxUDqzCHbz2o/Xc1
TLSH
T1DD52FA57A928293B4CD7D219BD15BF52E1F9503695D60E88B6FCCB5C04EA7CD320780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1cd93b7e4b74691dd57a6a6ffa89ff94df59c76f74b7b92797bd6d4a1f972aa7
MD5 6dfee47935f104254bb2d8f2106935ba
SHA1 4a8c721da43bf66b9ef46a60acf4fd74face881f
SHA512 2a2652239047065e79c1c5ed5354ffb2da4b9296bcdde1ac62b066f1a38ab7159bf37cebff0ea758498bd6dcc407240acebc1c50dcf58d5a62a3f5c7bd6c8f09
SSDEEP 192:sxZqR/Wf/fMsiceIdpl+HW6+WNQbX/Y365jYIg5HJ:sxZqQf/fMsdPcHbK/XGD
TLSH
T1C022D956AE38B97B4CC7D20DBA15BF53D2FA503155D61E48A6FCC62C05EA6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ea2b526fb613d2dc00b69de75c5065361178f7be070264da0bb58e25665134e1
MD5 8383015d242beeba8a8bdddac6519a80
SHA1 e6d5bfc9c4bae2d06cecf213ed50ccd3f318338e
SHA512 4a36239c7f7dfe7496438c925e5624b4586f411d0b2c885964fdbf2bd35c9e49b7c1bbde1d00f260402480b59e6072c34fd4820ec27c6a38d66351205b0cbfdf
SSDEEP 768:CgKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/FroxW:CgKlm7QWvUYe0u1ja8/L/E/+xW
TLSH
T1ADC20A3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13d42e16-659c-44da-b1d9-e2aebb24682a\index-dir\the-real-index
Size 72B
SHA256 f2e95750ae10186c362f12fae39deab7faae64b56dda9167d6122a7628972b36
MD5 313e18fffefd5348ccfbce34726b6a77
SHA1 d594169133eda0515068d2113094710ed5e80e3c
SHA512 8d268393f7e99d058aae9c1b5ff4edae52f414de287972b9055fdf14168e2a477ff8fa94f9023f21d9ab71a7c68b8db4d4138d06f381cd5c063ad5de89e0c96e
TLSH
T1C0A002A803411482F314837014434264273B4E29834143CA8B94EFFD89D43D14513482
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59fc96.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13d42e16-659c-44da-b1d9-e2aebb24682a\index-dir\the-real-index~RFe59fc96.TMP
Size 48B
SHA256 97658cb2acb7430fdf40842ea0f38489363a1aea2a666e046a00e3ec41046c3e
MD5 eb3dbd5f2605e8dcee52d0d4a06641cc
SHA1 757f7de286b2e732d3391cbea276a81f6902fc46
SHA512 340bcf71dc99d0fe197a779684defec09097fa41106dc5de86b4b5ec679be3157e3f7d2e8a66560c650e03476f435c0ccd020069ed27607db42613f13f4d6f4e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\the-real-index
Size 72B
SHA256 86aa7efc63e319a34af4a359274f15d3070dd08ce1b03f9e4c0c8fc767800cfe
MD5 0ad0f950eb2ed2aed2e1bcb883acb114
SHA1 c129810561deb58f9e7104e3ff9828cccd3ac87c
SHA512 1b595158e77b5e77b91881432cc00c84b5338c48b775b78446e59d7e8a8263acc82e9ed7a27566599acfc3566edf81afe05ad478ee7cb3a0b9e05987bb38b01c
TLSH
T1C4A0021826C04441CD2612BC66DAD54E2313E9148A81132772A15044CC606C95E4500C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59dd75.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\the-real-index~RFe59dd75.TMP
Size 72B
SHA256 c8212eeec56164be93ae6e8b2eceb21736372a924e93904e4f19fcea791f26c4
MD5 eb7171b984addd47a08ccaa0e083b32d
SHA1 407567240274ae353db2ac5e081cdcba5e6f21bf
SHA512 2a462fc42bcfc95f180af89166318f537bb7a2b08aa52e583f5dec395307152d3023eb972c782a466cf117e31ba2d16ad7e7482e502dd8e866f0c2f2ae60c2fd
TLSH
T159A0023417D04039D41212B315A317851701C89121041347409D4248CD614404D4139F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8060cafc-a2a1-451a-8145-d6c071577b3b\index-dir\the-real-index
Size 96B
SHA256 a61a5734cb0f9a2cc6cc2a90a55a513b346ed658cc65f0951406760113356ff0
MD5 96cec1d8b9664ae59e9e2e2cb6978224
SHA1 fb271f5444509b4fe511166a6bc6b8b2d12d3992
SHA512 1612d3f3e389e5cf7ab49b2bd62eeb52d6536d623499c578e583760b6c97edfb54f550eff84970a47c58815fac842dd146381e88a5eee409b9ce7ed957b5c168
TLSH
T1C2B0112223A2888AC20202B008E328302A208A28032A2283ABA0A0BEC80038A0220800
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59fc96.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8060cafc-a2a1-451a-8145-d6c071577b3b\index-dir\the-real-index~RFe59fc96.TMP
Size 48B
SHA256 74c35d20cde4fb9d92dad3e6970c803fa4c28e9dfc2f2db8fd591fa97a25f0ad
MD5 dde87584481abc47719d870b65a8c777
SHA1 78598387ee3567e54d43ae16dc760c6884a106a6
SHA512 f86c03405d82b42bc253ce973afb72b7c38dd2c6cf0ee71764765d088d95026266fb892eb188462bad72b1f5a064641d826836ce479a75feb1cd45b86ff6f711
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a176a39a-f950-43f5-9fe0-8391e92ffbcd\index-dir\the-real-index
Size 72B
SHA256 bc4ab998d6217acfb7f55e6a6aeb2f20dd61ebf0a6a6cc76d733fdc211d9eece
MD5 9bbdd8839ac5ae41812e9eadc2e2e6c0
SHA1 fee5ce89e31cf23f1f10a82a446e90ba561075da
SHA512 16ed007817be3d9244d6469e303f0ce29d7763e3d30f159e0cb494a4b80a67e7bbd93c3eaeeae12a3cb071fb427ca87825a318da78d2183a2230e7de5b082bb0
TLSH
T126A0023282643855D624CFF0955D017C2B38FD550D6347176D904557CC9125D8925450
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef3d016e-de59-40dd-9396-c05531a86522\index-dir\temp-index
Size 3KB
SHA256 f66e4d0e8b20bb51010223d77e0987050abe97870c7abe97b6da4f8f795fd7b2
MD5 5008f0c012fe459cde6178ce3f31c4f4
SHA1 1af0cf9df6cf7be1e62db24e8966d34fb06ab34c
SHA512 8486cc9e7bcc0d8f9187c1ca4a32332b218b21eddc47caaa858d552339fe7b9d76b3de3a0876aa6171cb5f29dea4ddb201dcfbf9e1921f8d1fd131f72bbdcf88
TLSH
T16A51C94F8D076B66CDA892B214750441237416DC13640A1B5AFE923CF983F6519DC769
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef3d016e-de59-40dd-9396-c05531a86522\index-dir\the-real-index
Size 360B
SHA256 f12a4c008e967c00d341af24d750c2833b9954686805b51ea4ceb9694cda272a
MD5 6a73baa086266bf37d91ad9a83d774a3
SHA1 6db02a7dd93e434f360b745b8d43a8b0a6bc4061
SHA512 b623fb1aaa89a35da18775c8db1ff10a839098785e1811b40ea59429f3c55d373e0680f08f3e6b0ee5aed1c99fb8b8ec8465d2064bc3cfe8b7b19f2325539b6f
TLSH
T1ACE02B5A5D134147FC584175747D5069673014DC93141A0F60FDD0568C8A7C4BF0275C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59895a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef3d016e-de59-40dd-9396-c05531a86522\index-dir\the-real-index~RFe59895a.TMP
Size 360B
SHA256 5f6ba27ce67fc9a0def413d8b40f095b5e00c59afb09e691dc7f9b45b9962aaa
MD5 35d4b8f5c994ba10f64b115edbecd33e
SHA1 1dc6c38d9deaa67ffdb9bc533bb03cc960441aa0
SHA512 e1d0ea34e08125f0de073055291ddcd9fae36dfa41e1a9ab3374a8ac50953f5e8a6e9b88b1a57c7caf6192ff54d0ecb0e97832273d00f8f601aa2c983050e652
TLSH
T1D3E02B691A23C146FC080171246E603666711808E320260F61EA80958C42B845E02B54
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 b59491cae81d604acea8010f659146f75b874a714a1b6ef996f02df331b21d56
MD5 e10ea556d98070af979fe663ec08cfb7
SHA1 6128167dd49c8070de5253ccd925437c78e5e075
SHA512 9ad031d99369bdf90b425c44fe7d9c3c08e26aa4d37c98faf810578c12022050be29df1995abb69204825295d85944822d8e85e36fbab3aa2215910f1c3f8cb3
TLSH
T150F028763FF72810FCBFE7EA243214B000157848C868AC5F1526959690B7709A04DC72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 1861dd5c3aa157a7cbe8a07df335f1b9346b17a40f7d41d685654f4de87131cb
MD5 f593810babeddb69bf52d59ed31e3379
SHA1 a0e20a0c31bbff05ddf63fdc56770f3d7af99a64
SHA512 0e2888a246fb1ffd5aa482db3f2b2fa085144cf22518a6bef4d3195da6204725c1ff86c6aee15c8c3101cb0c3fb9e7ad56f4545c448051de9538f68894ffccd7
TLSH
T159F04C763FF72850FDAFE7EA243214A000147C48C858EC5F5526E59690B7705A04DC72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 f1c07b8f3e469dd41a681ebdba1760e900a381d5f546b257cf9c1c70c3146a29
MD5 db048b060ad914742a7c856ec53a8aaf
SHA1 dab343efeab5f2c45b36214130ec722a9dbf6396
SHA512 7fb36ef56c62ac83ae47d923a10f73a22cd933b15c863c5f95c62d104dd9a3683781982d7cf8da199e0dfe93fa35c38ceadb7ceec81bdfc19e92ce4c381e137b
TLSH
T196F059762FF62850F96FE7E6243218A040547C48C848EC0E0526E9976473745A04DD32
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 b04f3c3a8970e99c8e06e6e87286ea8a3f847ecfc534bd61fb529c2da7d9e69d
MD5 f2cff53d747073f4b025b3576caedf2f
SHA1 e7b00cf95f868c06b04134e76084be4c3a7a3bb2
SHA512 1740e1e1387e4b529cbb1042f75cf13de442866a5333c04ad6c5fd2d85861c59e29066e0ef109f59870007f6ef022df1c11128f58121b59f6c7f2c405a3445ba
TLSH
T110A00295895FD001E6004F715CB9A68033B0489D910E361144DCD0ADDCA6544D1C6121
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59de02.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59de02.TMP
Size 48B
SHA256 b4ec43443e248ccbc9bd2fc5fce49b2f566cc2d4d53920676fc067971278237e
MD5 dae5d3110cb86946375f8538c1449ecb
SHA1 3dc3794ac57e6acc3e34ba8a66772d19a1a10dbd
SHA512 ee64269240b6dcce0ecff98b7b71adef2051be8c61362326f42bb1675412e4557e6422e132a836239f02123915a20b02b38e9dd808ce5c60e93da494c544d513
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 56e7a8a3eab3d34c2e73d1f66002d69f8b22c780a2702f05d5f7aa1e6bd87ad1
MD5 1d76650b3366745b2d573062e4085bd8
SHA1 109d8c782ccb813e626ff616840a3931637e85fb
SHA512 950e5f0a3ee5db2a81eb607a0493e9f0bb4d262f6372875ffcfa7ec5dc0c9a13cb2a1bed9cc7837acf01e8f647edd9a7138c310ef57b77435d40c2a67669b7ed
SSDEEP 48:K0ydgMyQwBbsbcISkBK9o1yBxKRYTkQCyLQ/26gK+/b2NWISS/K9u10/xIvY1mus:Kg1SK+Maun2KIQXM4KxyiR
TLSH
T15291376172BB1314387E644980E0976F864131B73268FB2B7FBD14624E6AE491CFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d548.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d548.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 91218cb9ba7e22b56a4643fd831367db83faff874c43dcd65fcdfe5dc4564b03
MD5 22d075439a013d959a934d47639bdb3f
SHA1 2b191881c2015762d1bca4c31d9ba55dc4eb0d64
SHA512 f51aef785ff02ee8ceef150c32af35c3b82ef329e79e31676d8bd0d496ccbd0f662ee2e8ad48424aec5710007343f333e59db72049e44b165c48b2a7e81d98c0
SSDEEP 192:uom+xasuheOwQxMGsN6DQer+/BUbyvQmiU1g0V4h//GBm8yaoW/Tqva+4LcYLWA3:aZcIhsN6D9Tba/Kh//GJcgsa+VYoGYoZ
TLSH
T1CA828C72AC64AC7A59F3A281F54337134EB88167E7C96E9486ECAF2D01DE19C130791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9c34112524e8796aca1e559fb16d2302f752110b07b7a92b0f8f323e934469cf
MD5 c69310e4bd8ead6538a6eb7c45454a7a
SHA1 3d93656e256b7e8a85507b5222685748d3b63e29
SHA512 12583b6dd98fded91bd1c4b6a909555f7e5e68dfb1f98b8a7a51d8e8abdee9f5af1548f314aa946f990d873ae932b04fbacc4c090f478d2137397ff9408265df
SSDEEP 384:liFiZcImzsNC8TUNTUlIl2TqTbWOL2h//GJIgsa+VYoGYoZ:sFQWXwgNLG/rghgRvm
TLSH
T1CBC23AF258D7947AD9AE9743A77E2E034EBCC067B5859950B3D89A1DCCCA0BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8e1d19d56208c89c3bbb773b3a3b9c25a0bbab4a8376212a93a02c62b701eb92
MD5 f718476eed5b6f20fe1354eb75fd442f
SHA1 163236b6e58e506d96d578363b6a4be42a960b91
SHA512 03253d624af0d0b3f66c46ec193537f6d87a1d3b4b000588814c492d5c7cdf78cc0e975df2f221a09c846bc785c015b6ae2d3e3bdf41a70f46f6958b5c944aa3
SSDEEP 192:uHm+xasuheOwQxMGsN62Qer+/BUbyvQmiU1T0V4h//GBm8yaoW/Tqva+4LcYLWA3:xZcIhsN629TbaCKh//GJcgsa+VYoGYoZ
TLSH
T14B828C72AC64AC7A59F3E282F54337135EB4C067D7C96E9486ECAF2D00DE19C130791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a69346a1bf643372b58b86731a302c538ce95b93b561e48df15c0fd2b459dd44
MD5 dbb2b256e8a6379da8fcd54140a7f012
SHA1 613917bfa6e30129ad0637ed6366f16691d17167
SHA512 772e0e69cade13cdce779e67d6ce8a660ef035876bcfb04717388b2d5b1f96475ee12ad9fb367a42c1963b4dd07658049fe1e3e1ab993cfd33fc01bcdfb82475
SSDEEP 96:KqONk5QsjpfbUmjH5ih/cIPURHl8h4otop5RaDrBKP4v+Y1xf//ojdhxZBmqBC/4:BONd6JUm0QmiUyKVso//GBmqBClkU6
TLSH
T10502E938BC68787B9EF39E45B0877B139FA410679A952F84DAE91B2D01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4754fd67d5b5710ac723de6f9d819b85a1f0ba5df64a78c007c825b554a300f3
MD5 e2e2c0fc3d9e8c11c6a9c801599b1ded
SHA1 5553089ce7a69abc67690c0dfea2a3238db3d06a
SHA512 3853d7a18286f769537c265847e7f395dd372e4133e291d8aace58af9e804a713c4c19ae5d4de0c963f1876b668e33ec2d9d2f4e490561067eae7d1c3df6c9c4
SSDEEP 96:KqONknQsjpfbUrH5ih/cIPURHl8h4otop5RfDrBsP4v+Y1xf//ojdhxZBmqxxLOc:BONL6JUcQmiUypVWo//GBm80NxW/TU6
TLSH
T133120939B868BC7B5EE39581F08336135EA48127DB8A6FD4D6DD2E2D01DF19C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e982144a1688511384926052a47f8437ca8bebd24a293b5e2d47494fb0320b9d
MD5 aff3cdee8fcf1ac501fe9ef5ad5013e6
SHA1 a8e2917bca0def731695451307ee0ee3c4d2a4f8
SHA512 745b2086645d7830f65c96e06d7aa3fae6278c12e143cebe1f015248295851a58c9aa351d13408e6ea53eb5698a18770958135fa532e01834d982fe6c44bc0b2
TLSH
T147E00203630010E5C01C023041471F504FD7C030116002555F30424C2C723103D64A54
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59ba4d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59ba4d.TMP
Size 392B
SHA256 5a6022719f99556edadb6c43f167bcc805d8433db86bda66fb63d25dd32bf4fd
MD5 0aabe756d1bc3a30d93b3a263465b145
SHA1 ad4b7b496446ea31e0b263a037441e4d0d01093b
SHA512 5d11b32bce07de068c310b1274edb4ee37d0f92a6861c6c4823126d93775d4764a4c5f3240e989234cf4b76dc2813ea554fdd046033f69c52d2a3c7d362df357
MD5 SHA1 SHA512

Submit Download

8f18cced-4074-46f4-b2bc-12a1ddbad4c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f18cced-4074-46f4-b2bc-12a1ddbad4c9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8187888f378923a40b6c312470312b07d88950f44d867d6b4d5c5efb4506bc54
MD5 dd8b07724bb37cfeda05bc3178a04c5e
SHA1 e16b463a10f92ef6f0a0f509f8fa27928822c420
SHA512 25cceb64294d3a86f8286f035278a81cfe9de86590773ff15d4adb125ee56ed57d97860efee6ed455b6188c879e7370b0fcccbddcb6d5c045b1f6051efe4514f
TLSH
T189410658B6EA1108B7B76F5AABF7A46E487B79772E0AD45E10110E4F0637B00CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download