bc1c4e0fc49c138bbfc223d3e94231cd4884439c663646d91e48fa005df6704a

Analysis

user interaction
yes
max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 12:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dnSpy.exe
Size 207KB
Sample260924-pq1vhateqa
SHA256 bc1c4e0fc49c138bbfc223d3e94231cd4884439c663646d91e48fa005df6704a
MD5 5cf180fec9628c4df4267de3ed7a98a7
SHA1 edeaac9111d8f499378b67c983f7b7defbddb268
SHA512 97149bb70657393965382a152f8dcdcd9bdca5a6914b788dcba6b92be1547a83fd2720afbd6b2deb9d20da524ee2bb85375d9ffd4b019157f0eef51d46539133
SSDEEP 3072:XUffq4qd9J+AbT9aMqOQl+RgAvImdr+fwjZV:XQANK4bNOwb
TLSH
T194241A3E62E41BDCD061B1374F61B103AFE138EB06618EDEBED42E5A3E265908D3561D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping984_740707903\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping984_311018728\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping984_727787242\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping984_727787242\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping984_740707903\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2956	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347268145688934"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{DA4B9D78-4873-4900-8593-68BE44D99C67}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe
984	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
984	msedge.exe
984	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 984	3096	msedge.exe	110
PID 984 wrote to memory of 3244	984	msedge.exe	111
PID 984 wrote to memory of 2956	984	msedge.exe	112
PID 984 wrote to memory of 1772	984	msedge.exe	113
PID 984 wrote to memory of 1772	984	msedge.exe	113
PID 984 wrote to memory of 1772	984	msedge.exe	113
PID 984 wrote to memory of 1688	984	msedge.exe	114
PID 984 wrote to memory of 1688	984	msedge.exe	114
PID 984 wrote to memory of 4716	984	msedge.exe	116
PID 984 wrote to memory of 4716	984	msedge.exe	116
PID 984 wrote to memory of 4716	984	msedge.exe	116
PID 984 wrote to memory of 2120	984	msedge.exe	117
PID 984 wrote to memory of 2120	984	msedge.exe	117
PID 984 wrote to memory of 2120	984	msedge.exe	117
PID 984 wrote to memory of 4120	984	msedge.exe	118
PID 984 wrote to memory of 4120	984	msedge.exe	118
PID 984 wrote to memory of 4120	984	msedge.exe	118
PID 984 wrote to memory of 2716	984	msedge.exe	119
PID 984 wrote to memory of 2716	984	msedge.exe	119
PID 984 wrote to memory of 2716	984	msedge.exe	119
PID 984 wrote to memory of 2320	984	msedge.exe	122
PID 984 wrote to memory of 2320	984	msedge.exe	122
PID 984 wrote to memory of 1440	984	msedge.exe	124
PID 984 wrote to memory of 1440	984	msedge.exe	124
PID 984 wrote to memory of 864	984	msedge.exe	126
PID 984 wrote to memory of 1444	984	msedge.exe	125
PID 984 wrote to memory of 864	984	msedge.exe	126
PID 984 wrote to memory of 1444	984	msedge.exe	125
PID 984 wrote to memory of 2776	984	msedge.exe	128
PID 984 wrote to memory of 5232	984	msedge.exe	129
PID 984 wrote to memory of 5232	984	msedge.exe	129
PID 984 wrote to memory of 5272	984	msedge.exe	130
PID 984 wrote to memory of 5272	984	msedge.exe	130
PID 984 wrote to memory of 5532	984	msedge.exe	132
PID 984 wrote to memory of 5532	984	msedge.exe	132
PID 984 wrote to memory of 5536	984	msedge.exe	131
PID 984 wrote to memory of 5536	984	msedge.exe	131
PID 984 wrote to memory of 6112	984	msedge.exe	133
PID 984 wrote to memory of 6112	984	msedge.exe	133
PID 984 wrote to memory of 5752	984	msedge.exe	134
PID 984 wrote to memory of 5752	984	msedge.exe	134
PID 984 wrote to memory of 5752	984	msedge.exe	134
PID 984 wrote to memory of 5384	984	msedge.exe	135
PID 984 wrote to memory of 5384	984	msedge.exe	135
PID 984 wrote to memory of 5384	984	msedge.exe	135
PID 984 wrote to memory of 5184	984	msedge.exe	136
PID 984 wrote to memory of 5184	984	msedge.exe	136
PID 984 wrote to memory of 5184	984	msedge.exe	136
PID 984 wrote to memory of 5624	984	msedge.exe	137
PID 984 wrote to memory of 5632	984	msedge.exe	138
PID 984 wrote to memory of 5640	984	msedge.exe	139
PID 984 wrote to memory of 5824	984	msedge.exe	142
PID 984 wrote to memory of 5824	984	msedge.exe	142
PID 984 wrote to memory of 5824	984	msedge.exe	142
PID 984 wrote to memory of 5968	984	msedge.exe	143
PID 984 wrote to memory of 5968	984	msedge.exe	143
PID 984 wrote to memory of 5968	984	msedge.exe	143
PID 984 wrote to memory of 5852	984	msedge.exe	144
PID 984 wrote to memory of 5852	984	msedge.exe	144
PID 984 wrote to memory of 2196	984	msedge.exe	148
PID 984 wrote to memory of 2196	984	msedge.exe	148
PID 984 wrote to memory of 5232	984	msedge.exe	149
PID 984 wrote to memory of 5232	984	msedge.exe	149
PID 984 wrote to memory of 5476	984	msedge.exe	151

C:\Users\Admin\AppData\Local\Temp\dnSpy.exe
"C:\Users\Admin\AppData\Local\Temp\dnSpy.exe"
1⤵
PID:4588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ff88d35c188,0x7ff88d35c194,0x7ff88d35c1a0
    3⤵
    PID:3244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,4274047713515889513,3265613222545971161,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,7928927423839463820,9397045239465620601,262144 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
    3⤵
    PID:1772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,16795803325143913313,2554058321294952091,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
    3⤵
    PID:1688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,9648986777355690843,16795429877900146170,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
    3⤵
    PID:4716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1480614102543714316,11481542032214550357,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:2120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,15312283446002075978,185689466379286316,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,16700933807242131144,7025184826169845407,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
    3⤵
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,796163049702717861,490151915463823118,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
    3⤵
    PID:2320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,11783090214402634788,2782381004489385955,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
    3⤵
    PID:1440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,7181556266293239400,14670983359907976107,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
    3⤵
    PID:1444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,4690263538918435255,11071166195517550296,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:8
    3⤵
    PID:864
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,2807502574909709716,13489639316687588755,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
    3⤵
    PID:3612
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,2807502574909709716,13489639316687588755,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
    3⤵
    PID:2776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,10805485141870101532,5287902497174215553,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
    3⤵
    PID:5232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,11040279335698508584,9501562019089613793,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,17312572280487193199,10064586601126980716,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
    3⤵
    PID:5536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,12006940148159483195,18016341101319978673,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:8
    3⤵
    PID:5532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,11369436970505132801,6277440717127260324,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:8
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6684,i,3757994699825118128,1083745532808527236,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
    3⤵
    PID:5752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4440,i,18274392736770861669,16224524595424579795,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
    3⤵
    PID:5384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6828,i,15981074485309635691,1906564366136585022,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
    3⤵
    PID:5184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,3137182743918860627,1830800501324497965,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
    3⤵
    PID:5624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,17447178401600848617,13626581263395038847,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
    3⤵
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,738360609562728222,5839022328241077836,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3704,i,12489730253714080387,11619872721416792217,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:1
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4492,i,17220452696295616332,8503184655718551379,2097152 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,12403697889956120239,11710317087827356863,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:8
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,14073552776023487096,13189723556975401098,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
    3⤵
    PID:2196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,5668883513838532427,5680658007486449338,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:8
    3⤵
    PID:5232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,13665604841973633743,1093463547578357493,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:8
    3⤵
    PID:5476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,14104086416154983225,562727598733472982,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
    3⤵
    PID:2276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,9520314671467167911,3865736040031476153,524288 --field-trial-handle=2244,i,2803805422833187455,2091989425785624055,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
    3⤵
    PID:1776

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping984_311018728\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping984_727787242\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping984_740707903\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b83cbf64cc348bda7418cf4d51290f954f1a229bfc174076604c71e6316695b1
MD5 e74d8b44e8d40662fd1b1b255738f7f7
SHA1 274571a893d99afe45f887bf62213edcdf6ce25a
SHA512 fdd52b8ff528e9564308a28f53b7774dc738711d7dccce592af97c88bf2722ddb380e7bf76101bce36a685c115e53c6bb3d415de6eecc3c382b674f304fb5a40
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7j:fwUQC5VwBIiElEd2K57P7j
TLSH
T1B2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b83a82d3f37f3084d4c1f43b25e2e31ed310f45e30390c944863248721c60303
MD5 b2b2861faf97873d49fe78457ace6668
SHA1 9cc23e06a93b4931a472d4d4c68d2bca8c9c5649
SHA512 e08a65c33f1e181e7ad12d3e12ec83d62e2690a12e2faee846d1b650f0a5a83e1a60201bf00a847e21ebec572c776cc5445c0b00acde03ffe35f37c37c7e3507
TLSH
T170E0208848D8C37D76026BC741ADA70C8280371FA2CCEA0E2700C445744244466F15D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 17KB
SHA256 2164ce6fd110d2de50a85aa9e311580cbd11ec2db5bf454c51ac5ffe3c59a297
MD5 af80d3750435eae574468fc6a7c37cb2
SHA1 61248ae58e4ef865b9d257664611653ceb7b5899
SHA512 3c7b0ab35b24b2bf9c8432ae0f917ac58fe04068b76bc0c96d41462ca7836b695f613a48d56d793bf556c67f0e9c2b5736e66b7be2a42b8a789bd6c61de1df71
SSDEEP 384:GzHZppBGrJYN51l+d9E+Z/qwRsGVMk1BZ2ZoHi:GzH7WJYN56dVZHKGek1X2aHi
TLSH
T13982D00C046717BECE649CA913F503A2908ECBFDF842405B96B9949A4ADE7BDD5F0D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 32KB
SHA256 b29587cdc5b9377d633b8ffc38b241a37a8b1c769346c51471c0cc1413624646
MD5 8d7a497b349365fc373aa40e8bc7be33
SHA1 1764b8e5c14481d36f29ed4bfaaa9e3d74830013
SHA512 b21bbef945714b2fc073fd83851744ca1daee4b1b43df048067128c62dd1aaf9261cebb1c50a62d3139a29d632d75a8e41cb0b29e1700db591f9509de04a40fa
SSDEEP 768:Lltw0BuOrqfCV7AZ+leHq2iFDkU/mqIhi6FVxc:5tzrpJw+la2DkU+jh4
TLSH
T1CEE2F11A37C20E68386478ABCF3986B3239D9B1543742940BE36BC577D115E2BDF49B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 19KB
SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
MD5 e54d44b14f32f4beec31fa8c91aa7e9a
SHA1 6c11d7190aa7a5d08f095cdff4d20dc000b76a8c
SHA512 4098fdf1025cc0a7aca3b4d8433810ff10a296330bbb9f02af88e40478659e4ac1a3dc1c757eea15b91743dbcf9a401fa0bdbfa88ff03b08dbda79e8e2241c0c
SSDEEP 384:FmRMY8+fSWCLWwmSP/+rJUxNUBawhHKNLuRZAgKkX7:EWYpjbyP/+r6xuSLuN1L
TLSH
T10F92C00F68CAE811B6E45EC583FBCD515482738007BA65F7C28A17882867952C4DA7EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 205KB
SHA256 03d94e1a38c75f42a89451305dd035cc2edfeb9033fc8abb8c5d9dfaf2f4c6e4
MD5 739bc310cbf1ad6f91c28bcff9f737c7
SHA1 309b08e8f3f7865d4a67f55a5553b5a0fa57628f
SHA512 a8071c574c277027cc8d514d79f98630a3fd2a8d043d706fc1a763e502f1db912dc20043a08ade49d4961c0fec11e7aadde65dd1e01c86f783580c2b7542d238
SSDEEP 6144:ut8RUGfimWNzmcdgu1u9Z1g0VISz16PoM0sx:PeW3Wxwu1unI0ZM1
TLSH
T1CA24135C32A66663F02F51317DA7100B9C9C08AFD4FD8AFE768B0A5F7E9C194089457A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 6dd59f5f7b0035dcf3c0acdb540862a9b1fe5ec9c4cedf6850a454e1309628c9
MD5 a300f28879335ad3b660398c543406e0
SHA1 6f04bc57e4dd0fc7a987ce0d42f80bf5df7c2f9b
SHA512 8df3c0e547fbf3d7b5052236de6fc57e41558d069595da922a7ca47540a02c423230b2924093e54ab9cb82b9c2d3897dfe362ac6164de9cfb6b96b44eebc1975
SSDEEP 96:LvPl74x+tXEhWPhsn106GgFUgxWAZTP7ISeGrmxnLgZOI1/wklHfjyXT8ftk:LvPt4otXEhW5s1RGaDxWAZTJeGrELg4F
TLSH
T1D5A120844BB621A4FF9873B414959D6D727C891D747AAF6F293FC9A4E4CB3A00CD9C80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5ac2b5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ac2b5.TMP
Size 3KB
SHA256 db0da9a3de16695d9b0fd0ef75f47dd446f0181d0d0c6f3df56faaf20cc41bd9
MD5 2ba46a8c0cbc94f3fc94006fed5cdd18
SHA1 cee859b06b45ff65e5d6e4df947b479c306cebb5
SHA512 4423e971d53144dcdb0514966a7052875744c65575cd13daeea82d0d393945c5ac3129372114e90bb0d333de1b215f65a014141defe7bf2a9e9823b3d1389def
TLSH
T1ED51C6814EB52361F7E861B181DAEDBB3A3C884179B35E921DB8C8BCD8CF7541E45C54
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\manifest.json
Size 962B
SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
MD5 e805e9e69fd6ecdca65136957b1fb3be
SHA1 2356f60884130c86a45d4b232a26062c7830e622
SHA512 049662ef470d2b9e030a06006894041ae6f787449e4ab1fbf4959adcb88c6bb87a957490212697815bb3627763c01b7b243cf4e3c4620173a95795884d998a75
TLSH
T1661121366E2FC4260AE00698DC51308AF92453ADD380850E35BCE42E5B744FA430631E
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
Size 383B
SHA256 fe927d2bd87226858f895444337b5d06804edcea8a39b02cd5db19a79330674c
MD5 65dea1193355933211c4b92aaa920914
SHA1 92669a4210267b7a3888e84f2cb4e2e1e7f17d29
SHA512 a8ae0cb44dc393b69ad37e9679a23614545c1c927da0bbe16726bac92a3d34bbefbb6dd2e13960e8597a54f5aa1d796086d95e4f3fb611d036f4325a0162d22f
TLSH
T190E06DB854CD822FA56524E682BDBF48E3A3375FF68CBE851B09C892B082540B969191
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 e94e9c4fec3a84b1acbbbedebd81e3851d876ed485e2f5e5d2238ac97577e45b
MD5 b9778e5164fe49c3f3eaecf87dc4a615
SHA1 ef9965ed75f854202d97b2fd310e8be7613913a2
SHA512 7dbe5ea540ac9087af109c3e2e2f43a42cc0a55424fe18dbbe4efe493c4634c35c73962680ed521499c38da5d8efce6cbeef8aea6ee7b025e909b43db7f9bedd
SSDEEP 192:DkzmbDWY+Z3lBQBJLgvwboe+/nOlV2kOY6DpZlMplYisIYG7hE1OVF75THK/e/k:DkzmbDWY+Z3lBQBJLgvwboe+/nOlV2kq
TLSH
T19132D0F7C3E4862DCD125AF0AA156E1BCF5D0954832C3D5AC8E8AF5B93F2470E241A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 211eff9694f9aacd766cec23ae86d9c87e2ebc26651276b990fc49d862f50071
MD5 0df1ba14544ba431b7a4419569b66518
SHA1 e2c1716b4c72743270a0587971ac76aaa075dc72
SHA512 41eafcf0086e728bbfc4ec5df6b3c4ad0a07ab3ba5ddbfbdd256a42a1d958ad5f2170e726f2efbfb31290ed876480114f1546fd6dbe50a68daf3ea38b91d214a
SSDEEP 192:sxZCeRAa6/f8sTZvlb1kQdpm4HW6+WNBCa/YRPLJ+fIg4J:sxZCe/6/f8sTdNHHbF/mFSc
TLSH
T12C42E6466E28643B8CD7D25DBA25BF53E6F9503298D11E4DE6FCCA1C08E76CE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a153a77df5512b078f080b3900bc3db1069b3cef993b9e3c0234a0e05e9c2ad4
MD5 f79fb5d1a1199e61f9705285e725d6fe
SHA1 838b23ef013374f40c344b1761bf97623d51155b
SHA512 702331b0aa422c5c4d4a39e2cca27dde0646efcc8361360ba5403e777560ee427b9eadd538e4ec2a01638d29a6bec6e11c85e2c1699aa00134b586faa8019e4b
SSDEEP 192:sxZCeRAs6/f8shZv1b1kQdpm/8HW6+WNuvCaHh5/EKVIYDoRvEJ+fIg5YJ:sxZCe76/f8shtNZHbq//xV4KSG
TLSH
T1E042D746AD24687B8CD7D229FA15BF63D6F9502794D15E89A6FCCA1C04E77CD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e288b7b983122c3f11cf7be47eabdccfc1190232a2d0d5fc6722e0644dab768b
MD5 810176ccffdd4f989b58a08137a91e26
SHA1 004aeda29db8ac84311311c23248e1cefdae69e7
SHA512 d2a6665243d99aaf9505198827328b3bde4ba41feff2e10298fc8d5c01a020a232cefb9801fac6d1aca16b8fe03514e898f3028e5fa0d092978375176ba1c82a
SSDEEP 192:sxZCwRAs6/f8s6ZvQFUb2wQdp4/3t4HW6+WNdA0hexPsnPOIfEKsUVIYDoBCzIv2:sxZCw76/f8s6OF7BVHbSG7fx3VA4SQ
TLSH
T1B762C5566924697B8CE7D269F914BF67E2F5502298C00E89F6FCCE1C04EB7DE6203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1762132992f70f55ba178f8898b32f509d14c5d3bc16f649cb1ebd99b49a08ed
MD5 cbbab906bc59b4ff41376081d39cd536
SHA1 bb7b712fe01070d06b7452e4b4e8e67c9c49dcd7
SHA512 598e71297c2dc9b4da957d48137a3ed6bca6184a2cbc201d54dae0dd595511678158414aecfab01718937c2584f113fbea22942e199ba42f190f08365cdbb3df
SSDEEP 192:sxZCwRAs6/f8s6ZvxAb2dPQdpmL3t4HW6+WNdA0hexPsnPOIfEKsUVIYDoBCzIve:sxZCw76/f8s6vPWPHbSG7fx3VAwSQ
TLSH
T1AC62D6566924697B8CE7D229F914BF67E2F9502298C00E89F6FCCE1C14E77DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5234854ef6ddb76692213d4e8ba3a5bf8118d224e764d3af50f9c847c775ea2e
MD5 f7c88dc6022a69fcc0f6e0e5f26767cd
SHA1 b0118129bedb8cc3d5246b5248ec43b1496ace33
SHA512 fadebad2a7a29c3d9ca029a840b2a22f88cf3ad14d832d97e2ae1e5fe4e57d735b355f23aef8d369352d652dfb6f0de5a5ecd63e0d7f3f7fa23d6a71fb37222a
SSDEEP 192:sxZCwRAa6/f8s6ZvxAb2dPQdpmk4HW6+WNuo0henPOIfEKVIYDofzIvZJ+fIg5OJ:sxZCw/6/f8s6vPWEHbv7fxVvbSQ
TLSH
T15A52D7566924687B8CE7D229F914BF53E2F9506698C14E89B6FCCE1C14F77DE220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 2f4a8af037761d3b6ec5eed637d4702bfa65a4d9acf442248478e4359c6421d8
MD5 ca15ebe284c2019aa5e272b10fb84c65
SHA1 43446ce457a15041f8d0862407722e05f6b42624
SHA512 3de60a8049d35e383199d425d8a3d93c492ff141130afa6e301001c9bea9d827a828e9e83d01752b7943b61c40c349989ad80c55b1570703ce97d4e5bd8c5cda
SSDEEP 768:YOK9ukX7pLuLbwYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV9BlHLlh7k3jroN:YOK9ukREbwYWvcQWsu1jaABlHL7Q3QbZ
TLSH
T137E2FA7F780CCA7F4FC00A9DDC5A7F9F6EA8029B9698895047FA941C02C66EE51170DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\623cd082b6202da0_0
Size 83KB
SHA256 124be94e5f93328a290293fe2eb57344bc39949b20e668bf2f86663de16113b4
MD5 08a914f1280c02c40682d8f63dd7a68f
SHA1 9de7ecc11b796e3375744e659a5c1758f4618eb4
SHA512 2b8fe8b4ead751c44df5ac8987b4ae40c8ac8363a087e34b8eb3634f9280826ccee0837c412befad71dff3dfa7a9a8d4c4ac65008159ecb430886e0dc20547e7
SSDEEP 1536:oa4cUFa++HqsJs0wihp2VMGznXoHVyOAcU9dP2CsXPoTeTh/eeu1qHPwqYzGW/g/:/1+nKMVMGzXo1yO4Z2dSpR/gsi
TLSH
T12C8339A6B2127035C7AD11D594666B01F22B17961844C8FCF07CA6863F28ECB53F7BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 b2780996c57554718c52c54a89c7c442227a37c1d4881a8f1fce10a159f86781
MD5 910f9332843995871ac21c0482d3e97b
SHA1 c4fb0f2fdb400624b134f500730e61b772caf054
SHA512 8b9e210eb43bf20b0f3dcddc49dd847336257cc8943857feeddc97b7b7bf87ed968032eb152db346f141a587aef5a7b496b2c969ba47f7d3942a205a84542f11
TLSH
T172A0023683C00005D4A3AAB825BE015D7351DD140E7B574F7991018ACC905598E5129C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 01a142268570467d22e4963f6a22bc6b84b5642843cb9b6007af671fcdce3f3d
MD5 71b5d848237d5434705767090e7041c9
SHA1 d1a8c7b53d6d218ca61d5701fddb210bc1ad052d
SHA512 6ce2271d3b38515585555358e5e2e43268180718cddb183156f111eae28a4663814d72013dd1649205ebd78e80e72253767a1fb2b83cf3bd8cdf090c291a6cd7
TLSH
T1B6A0023683810007E127DEF035AF014D3B34CA240E33A30BED910C96CC546954D4122C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 0b1d6208b041cf1de3a22918b2059f6a058b52634e2df84e010e9ea8f7843e2d
MD5 5fef4c97ad95fdf926b054d6a3ad9bc5
SHA1 e396e7c869271ce705feffb19b360ee4316651d8
SHA512 b8e90c33e248e39a8b2a741f97f35411cb34fd1b5774f106535358a888c84a8046bd3c819cdd30487968482539db93436cc5d91c454ca8a0fd0b20353f94c537
TLSH
T114A0023503E01026D45311B36D560E911361C9102525175741E94244DE514808D4131E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\568da5b2-7611-4c39-a336-da0d40f37a75\index-dir\the-real-index
Size 72B
SHA256 668ab0caec28ea647904a528e17aff18d6ce019637109788547deca42b5299f1
MD5 a6cf11a68b7235f29dd89c6f08b0aac2
SHA1 e13ac55a89b3ec27a01758e07b066dcd39ee09e3
SHA512 af5a7d58f0b55c6075cbb1eac8b6ecd3242d4d6943a7330c65c3bde3d3c297fb61320b621a850b77f0a8a797b31387dc2ad03e21215bbe5f50a490f8e925e7cf
TLSH
T17DA002A453543245F01576B8D65612513725ED251901438B98944955DC7125D4952144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\838cad71-3eab-4721-b302-5fd8a51e165e\index-dir\the-real-index
Size 72B
SHA256 b2ab0ec52de3f3e4aef16f082aeadf2059e59d00baa69d810b04614e0d7a524c
MD5 8828d615867acafeafb17e095cb14411
SHA1 74539b8bae38a6a928b9789d619d1e82d43ceb35
SHA512 eb3484f4ac24eddd0b24b1a6b77590dd82d0cb99160a181fd83c03c09c645a3609c35ff0e32829e01315bdd9933435c0eb49e51b87f810aab540a1491e6792d6
TLSH
T14DA0025287604302D04482B9174B4392A3348D1C6E4A834F52D8A4E4989129C9AC14C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5abb14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\838cad71-3eab-4721-b302-5fd8a51e165e\index-dir\the-real-index~RFe5abb14.TMP
Size 48B
SHA256 f05bf018e4d505850f1801ce2cdf4ad24b9b03a64ca09daa5e635300e2a71e73
MD5 251d7f0ee2243145415e05e6ebaad916
SHA1 87b14cc4bf54f81bba62755e4a2a3e7e1e3ef545
SHA512 6b28d162d190fbe8f68dd68da293b572fdf988f8f8a562657a426c52174d339dbb041cededc0140d9fbe47395b63e7a8ac530ebc7b07f20befd7f84add8fb3ef
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 3KB
SHA256 aba123d8cb1b29360e92064ed0aa263244a13a564f459f2028f29c9004250332
MD5 598d938ce26cd649d1285a7071d1c8b5
SHA1 845eef23e1cf4263e4ecc5e553846beaecbec78f
SHA512 ec027a55f17326a72dc50bcb36b937db7d5a94e25a621f1fab910b2ed09357125c03d8341c628146087db6f68377b2442479cf464f7f39071bf4b9744ea37400
TLSH
T13851C94F4D075B52DCA823B104B10446333526DC17581A2BE4FD5535B8C32252CBDF18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 1008B
SHA256 b84aec59decebdd546360916174aa02f8f95e7d38d2688ebd3a0b8710caf56f8
MD5 7fab3694857b26d651aca75fad6f6614
SHA1 f778ed43821110e28b02918e167d78bf7efb6695
SHA512 5792e13909de95a732d0203adbf6cf891d74f115e3ddb43bc0af54e01fa2e98f83f806139b7ddcb2eef79bed1541bde38cfd1edb653c71c84249d5a09e9eed71
TLSH
T1E31194DA5D035B8BFD840338207C6C8AA7B121CC0354BA1FE2FEE126CC86740BC86DA4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598e1d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index~RFe598e1d.TMP
Size 1008B
SHA256 19a64520baf997df4d266201b8aaef6b06ba4d589ce9a73ad9ac1646ec6fc7d9
MD5 8746ce989701de979d9d880ddea6ff12
SHA1 d15ab4c4299c4ce872c441a66d1cec203a462fed
SHA512 7f78459548fe45595b7df84b7184ac3e45456cd0abdb452a5f8d884baacb6c40502fdf7decb695339333a66b78c84681943b9a6e9a6997a0acd4a25446425ea3
TLSH
T19D114EA201535B56FC8803755AAC6C463361914803886B4FA7E7E02ACC82B84ADC3EE0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddf2dce2-cf28-4257-8ae5-ce6072dbd519\index-dir\the-real-index
Size 96B
SHA256 d4f46530ab6bb835aaf86b486fc34a2a55eb85fad92a7a7eb0bf8c0e9a9c4c7c
MD5 9c94934791b4ab4fd2784dda0d9f9cc6
SHA1 52014a80192d5afa3b6793587ee9deeedddb408d
SHA512 0cea4a717a3424ba2161b45835421d90e7dfac277818d3c2425a9ee910ef7eea56457400c8ac6cf3f09b55a048f05eddda9a812e496fb175f933542037fe4b01
TLSH
T1CDB011AC3A00828AE0CA02F02083200A2230CA20230EB30A80E828B8AA0038A8A82002
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5abb14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddf2dce2-cf28-4257-8ae5-ce6072dbd519\index-dir\the-real-index~RFe5abb14.TMP
Size 48B
SHA256 6fe819828b86f700488120470b69f037f57aa971a6a433201e5fc041925b94c6
MD5 a7e35c9536a023eb848558d26df3cb3f
SHA1 925db2c2d7adf7a22e1ab468b16a0505f18d4dd8
SHA512 1fe46cc0f7d629222a50e2d513e4bd77dcc7603932dd20a836ee55eb2c41dbe2789be65ae8533f62dd51334bedd9070a2a1c945de9f6c1fc008f9458d1e59119
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 038e83d46aa286463ced5665c6c56522a4cb548666efa9ebfd2f2608dfefcb36
MD5 8484f9bb671da1f45a152b3d1436b2c9
SHA1 34f1bf7cce4f1717e63466cc48ce483008ede31e
SHA512 2fb1a6b874e054dc85ce51b8bfae7f304ea5b8e8d68a01aa8f56139156bd926f408dbdf3796d7d0975d18bf852edbf54e6f073b290963847b536373449b59b08
TLSH
T1D2F0ACF33FF32904BCAFC7ED243005A40525BC44C51CAC4F5066B29691B2B267008C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 63505f359acf5a23425fef0b4a688714e21e595014383ca6dbb0454cd98a2749
MD5 e85ce61978ecddb786a93893562579bb
SHA1 108d7eee51b086267edd5293bb49fd1b9f03c339
SHA512 7f403d322ec6930d297d28f16c3677ae012cae363a77f197307b7508456d6c58c3a4fab296f4d468127fc5765aabeadbaac0f4601f3f9ad82270bfc5113c2b3c
TLSH
T14BE0C0F73DF21910ACAFC3D2243549A00011B884C44C7C8F406E939322A27393805C21
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 b2d3a3f4d274473c0b677fc5d3393517cb75602540acb0787f58975ca435619a
MD5 e81e982ae63d5f40eb19e155a5efd6a8
SHA1 bd6d023fef9b17948d953299bb35e02e49751708
SHA512 f1de246ee76346378efc79567cf54b55b0484d143178bba56ece83886e102bb47405fc3309d743a2ad4df36fdebd84fa3f19eac765fa5834e28488db317ea639
TLSH
T1F3F097F73FF22914BC6F87EA243949A44125BD44C84CAC4F416AB38621B3B26B418C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 619B
SHA256 e3b63cf9dc73ea33b00953a2483d1fd1158b2a144d48dcf85eb60acf683df3ad
MD5 ffc70dfa93798a4be0031a8130a1d44d
SHA1 50ca30150855b7db6c4242fbb6db08654dacade0
SHA512 1aa371c8f8c87bd7de83024f6dd07eedd3bf69a5f44eea8a677460a166434f46ea3eafb692aad27c4b6ef253077cf8cc6155a3f2d64f22486682d75f6772a60c
TLSH
T1EFF0ACF33FF32904BCAFC7E9243045700225BC44C128EC4F5126729691F2B257008CB2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 dac1edc29faa291887014facb9b4c484d53d796c2b102fa91932e18256248c09
MD5 a4320e59a6c721f11afe1022fe2fbd69
SHA1 9dc97d6fa34e3ae749e9ab005adaa988deed5211
SHA512 e86935385eaff87433596f366ec432f348cfc2f49483d6a17ba36557d66a16c4468974fc72bf46b1fe3eee2529faa9d08c8deb6a40fe7df849dc3399a5b4ea29
TLSH
T1B2A002D98A57AC85F4410AF09CF101982234C9DD0605725150ED01989C50144C1E3004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e6bc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e6bc.TMP
Size 48B
SHA256 f0ad6872e2fa255f79881481c061a20c1b2b5640ee58a816a3e743c5860e57a9
MD5 42b0ec48481e9de75e2825d9bd613476
SHA1 3c1041cf546cf312d58a724d9414d438a55b53a7
SHA512 cdc8b3077880e499c71febb075be122653bd00c3a090b8db59a5764e06d2a8c158ed4f24a856f26793476590c1fc449bd55bef8112e65fbd95ba74dfa2b4355e
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e6c47ba8c568cf0761aa4aeb1b83f609675ce5ffbefc006833747e79b5d90396
MD5 fa3a966082a4417791925f735030d1cd
SHA1 9154501768ebaa454d92fe090941a50743aa301d
SHA512 53f074a9fc0ed533ed9a2d5d8d120384979e170c7e0fb35c96e5b0161c9c20d324e7206393eacc4f658c9535e6e6a736a0c929727a6788250e72d9701e796616
SSDEEP 48:K0mImydgMyQwBbsbcISkBK9o1yBxKRYTkQCyLitwciAgxb8LsIS0xK941Cxx6hYU:K0mt1WK+AyOxmKqURfaK8I66oYKh2Q
TLSH
T1E4C1875570BB0680397F395C80A1972E464235B3305DF67BBBBC91A25E6BE040EFE9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a7418.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a7418.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2d4d19438df9762e37fd80427252f9507c81aec565725c719e2d0eb85df4cfc9
MD5 70d5a991620f7f0c7afdb4c9355e0c87
SHA1 8588afc9e1d8e4d0e191f95b0ae771e56918e069
SHA512 d220a301422527730158f68fd4b2c265aed718783a9aa1f5ea0b28276f1c2aa0ec03c4e3367ea6140d87cc839d89da740d01cd3ef3188e15cbd37f3c0aef340e
SSDEEP 384:npZcIhsNjUAT0RtmyOjTV4AdgL/kKwTeUCXCoT:hhSRn3TKweSo
TLSH
T1C3827D3558B86C7759F7A146E44636038FF8C1B7D6C96F84E4EC9B0D01DA6A8230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 831d0c8b749b3025df2679a75e5f21dc64b6dde37de344e2632ed91da12eafc5
MD5 79c05dbaad0715d45ff3b7fe80c86ffa
SHA1 81871ed946878731a996aa9cc61be3b2c050547b
SHA512 5ac96a05f3ab47e47641347b46f41d52bce8042bf824de59947f28b8aaa5283b9b7a241250e7874b4f4ae2d68d2979c44f3cf885a2a11c7629d7a1874356acc3
SSDEEP 192:SONA6ygpQmiUy16tOCTVgDL+FdViWYzPQTmU6:SONA6lHRtOCTV4AdgdcmU6
TLSH
T1F402D735AC783CBB8EF26E46F48736179FA4117BEA912B84D9E85E0D01D765C2302936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 923c481b7733a10914d273a0317cdae212affe3a15fca809bc8f85808497eab6
MD5 7e8933d1c9b2ccd34f375b2380bdea7c
SHA1 83abc4f71f647592e5ab4ac809c3c1349e062d60
SHA512 1cd885bc052fa1f6e5afc90a89ccdfc329feaa6df577a02f827ed73985c645241dd5891c0b06f16c69cfded5daaf5eed5c297ed413b52ccc18f6e8cf2b1092eb
SSDEEP 384:nviFiZcIzzsNY8TUNTUlIltT0RtZT2OcDfQGTV4AdgL/yKwTeUCXCoT:6FQXZwgeTN7g3PKweSo
TLSH
T1D6D2A4F588D79937E9AE5383A73E7D028EBCC163B5885980B7985D0CCC865BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 72187ebffdd12d40039fb72cfc3d961ea9d71cc83fa819c264a898f31a9469d7
MD5 b54f9d077021be11da24e6fb3ee2a158
SHA1 ca0c9f0533f3832ba4528f1330cd413928d9c00d
SHA512 267df150beea034e6d79dd01626d4e780066997f4077b2731687a35e5d5605f76b4be60400b167fb418e4ee6a89d1aac57815221e236dfbd0687e353fad1e6fa
SSDEEP 384:nmZcIhsNjUtT0RtaT2OjTV4AdgL/kKwTeUCXCoT:0hVTNn3TKweSo
TLSH
T12E827C3558B86C7759F7A146E44636038FB88177D6C96F84E4EC9B0E01DA6A8230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3a19b85e6688a570078f2384295e2ac1da4e679d2532d147c13e265dc305dac3
MD5 c3bb42598c8a797f1754a2b864c1ff3e
SHA1 33a188461beb38f3ee984697aff25d8d8120fd9a
SHA512 c1d5ada617571c711aa3c94d724bf15b4fe362fa788a20e6c17504c3155ab339df5369c66214ea8adfc6dc965010575ed58ae05314236e85638f794a719a3ba1
SSDEEP 192:SONh6yNQmiUy+6uOCTVgDL+FdViWsHZN43Ur/GU6:SONh6wQuOCTV4AdgL/dKU6
TLSH
T12312F935A8A87C7B5DE36541F08736039FA48277DA8A3F90E5EC5F0D01DB6AC6306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 90d756d068d331a07645de79a2c72bad41386b1273884c1a0b3c9cca05b664f4
MD5 f65b65e736cf087b597dbf996c300d20
SHA1 f01dfeb4ab162ed799ce9ebcaf5e958aa2db8e34
SHA512 0e5fa2ad28e53e04c5aa0c385209bc67a52c077e539cd256ca36da2149c2cd3667f3a7f66e33b03f482a5be842285011d9174a626880c5009651a37e3af1bfdc
TLSH
T1DFE00202A310405DC03C137040435B340BE1D21001F50B47972149586D533011F20BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7111c9d122e3d2b2f89043f2238225383a4207530a726d9e405182447130ab90
MD5 89720b0617d530646187cae28f5a8979
SHA1 cdeedeaceee3cd4b3115441941d8c3559c30286f
SHA512 3b58217706805da917e781a67c34a3228a6a952498e9aafd2be6298d28c2b968cda354b56aa169e6d9b482f8ae9b0c9e42a4a05dff17238ff50d62de4b567b71
TLSH
T152E00207A31041BDC07C1370404357780BE2D12001F50B47DA1149586D033411F30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f21747c5f4c808022c6c3dc7f673f1b90f5cad084717c4c2824910848a26ee97
MD5 b8f8ed6ba8263cb9ec31ef093fe9e186
SHA1 83bbb185c0433dad148ee31e5cdf9bcef4606b1c
SHA512 6ee01bd14e60eb356001681009a59337f5d2f90ef31b24637e510b03df00dc1a11f179954af63f2f52a29f582e40ac7094361b75d0a736b74f3c32c06cc4e886
TLSH
T158E00107E36041A9C07D1371405357A807E2C22011F40B4B9A1149587D432420F31F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a0a33.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a0a33.TMP
Size 392B
SHA256 f9daff2c60c46b6c85a4afc26ec8d349934941d8d3f43bb23e24108a559429ea
MD5 f3f5e9b41b0deac90ada1d805b70e0eb
SHA1 0bcee2f30fc911383dd3084ddc081bfa8a674799
SHA512 b96ef27d03f4f44ebd7f698ba08db17437f1b45ecf15ccca191a8d888c8bfce22961a35d9d0fa9037368684f085fbe11b6bd13c269d8a5a929d3a73c5d7fe555
MD5 SHA1 SHA512

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

1ac2dc20-a4fa-4465-be67-752f6d387c13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1ac2dc20-a4fa-4465-be67-752f6d387c13.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 acd009d9df2b7cffd5c0149d986b7cae880a8ed60fa71b04ff71c79cd0648996
MD5 41c7bdc75580e492449e9c69d2a1b738
SHA1 fb5b4fc24975220aa75199d68fbdca2cb35d3941
SHA512 5085e69387129a0c4ba4dcf733f3595f8ebe646fd56fa19ddc87733306bc624f2876ab108c69f18fd280dac9f145be7c0c695f86df183d2f6cc9b7d0c5a48885
TLSH
T151411C98AAFA1144B3B76E5A9BF6786D487EB8772E06D49D10010E4E0673E40CC71F33
MD5 SHA1 SHA512 TLSH

Submit Download

654c0ae7-de5e-4705-a06f-425e53056140.tmp

Path C:\Users\Admin\AppData\Local\Temp\654c0ae7-de5e-4705-a06f-425e53056140.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e0f3ea9-f0a6-42d2-a46d-fd033e8b487b.tmp

Path C:\Users\Admin\AppData\Local\Temp\9e0f3ea9-f0a6-42d2-a46d-fd033e8b487b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir984_1079811085\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97314b42-075f-4755-8d48-d46a2e07ebc7.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir984_688496707\97314b42-075f-4755-8d48-d46a2e07ebc7.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads