hxxps://we[.]tl/t-aaKu4tLkaPE5VJSM

Analysis

user interaction
yes
max time kernel
269s
max time network
268s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://we.tl/t-aaKu4tLkaPE5VJSM
Sample260925-st87tsfb78

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4352	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{5A9C8945-C77B-4BD3-BCC9-991D008007E1}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe
2148	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 3660	2148	msedge.exe	87
PID 2148 wrote to memory of 4352	2148	msedge.exe	89
PID 2148 wrote to memory of 4296	2148	msedge.exe	90
PID 2148 wrote to memory of 4296	2148	msedge.exe	90
PID 2148 wrote to memory of 4296	2148	msedge.exe	90
PID 2148 wrote to memory of 3260	2148	msedge.exe	91
PID 2148 wrote to memory of 3260	2148	msedge.exe	91
PID 2148 wrote to memory of 4912	2148	msedge.exe	92
PID 2148 wrote to memory of 456	2148	msedge.exe	93
PID 2148 wrote to memory of 4912	2148	msedge.exe	92
PID 2148 wrote to memory of 4912	2148	msedge.exe	92
PID 2148 wrote to memory of 456	2148	msedge.exe	93
PID 2148 wrote to memory of 456	2148	msedge.exe	93
PID 2148 wrote to memory of 2612	2148	msedge.exe	94
PID 2148 wrote to memory of 2448	2148	msedge.exe	95
PID 2148 wrote to memory of 2612	2148	msedge.exe	94
PID 2148 wrote to memory of 2612	2148	msedge.exe	94
PID 2148 wrote to memory of 2448	2148	msedge.exe	95
PID 2148 wrote to memory of 2448	2148	msedge.exe	95
PID 2148 wrote to memory of 4308	2148	msedge.exe	99
PID 2148 wrote to memory of 4308	2148	msedge.exe	99
PID 2148 wrote to memory of 4308	2148	msedge.exe	99
PID 2148 wrote to memory of 4584	2148	msedge.exe	100
PID 2148 wrote to memory of 2988	2148	msedge.exe	101
PID 2148 wrote to memory of 4584	2148	msedge.exe	100
PID 2148 wrote to memory of 2988	2148	msedge.exe	101
PID 2148 wrote to memory of 3708	2148	msedge.exe	102
PID 2148 wrote to memory of 3708	2148	msedge.exe	102
PID 2148 wrote to memory of 3708	2148	msedge.exe	102
PID 2148 wrote to memory of 2824	2148	msedge.exe	103
PID 2148 wrote to memory of 2824	2148	msedge.exe	103
PID 2148 wrote to memory of 2824	2148	msedge.exe	103
PID 2148 wrote to memory of 5048	2148	msedge.exe	107
PID 2148 wrote to memory of 3576	2148	msedge.exe	108
PID 2148 wrote to memory of 3576	2148	msedge.exe	108
PID 2148 wrote to memory of 3576	2148	msedge.exe	108
PID 2148 wrote to memory of 4328	2148	msedge.exe	111
PID 2148 wrote to memory of 4328	2148	msedge.exe	111
PID 2148 wrote to memory of 4328	2148	msedge.exe	111
PID 2148 wrote to memory of 2552	2148	msedge.exe	112
PID 2148 wrote to memory of 2552	2148	msedge.exe	112
PID 2148 wrote to memory of 2552	2148	msedge.exe	112
PID 2148 wrote to memory of 2108	2148	msedge.exe	113
PID 2148 wrote to memory of 2108	2148	msedge.exe	113
PID 2148 wrote to memory of 2108	2148	msedge.exe	113
PID 2148 wrote to memory of 2360	2148	msedge.exe	124
PID 2148 wrote to memory of 220	2148	msedge.exe	125
PID 2148 wrote to memory of 1192	2148	msedge.exe	126
PID 2148 wrote to memory of 1852	2148	msedge.exe	136
PID 2148 wrote to memory of 1852	2148	msedge.exe	136
PID 2148 wrote to memory of 3860	2148	msedge.exe	139
PID 2148 wrote to memory of 4232	2148	msedge.exe	140
PID 2148 wrote to memory of 3860	2148	msedge.exe	139
PID 2148 wrote to memory of 4232	2148	msedge.exe	140
PID 2148 wrote to memory of 4232	2148	msedge.exe	140
PID 2148 wrote to memory of 5924	2148	msedge.exe	141
PID 2148 wrote to memory of 2140	2148	msedge.exe	142
PID 2148 wrote to memory of 2140	2148	msedge.exe	142
PID 2148 wrote to memory of 2140	2148	msedge.exe	142
PID 2148 wrote to memory of 5116	2148	msedge.exe	143
PID 2148 wrote to memory of 5116	2148	msedge.exe	143
PID 2148 wrote to memory of 5116	2148	msedge.exe	143
PID 2148 wrote to memory of 4020	2148	msedge.exe	145
PID 2148 wrote to memory of 4020	2148	msedge.exe	145

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://we.tl/t-aaKu4tLkaPE5VJSM
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffcedffc188,0x7ffcedffc194,0x7ffcedffc1a0
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,3849937130589323170,9327022074863142228,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,4579960229654133936,9495931162216449141,262144 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:2
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,14890083050078655497,12806591073793810343,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,17205157615337308921,8000297085999367305,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,4077987470862399182,4579385419089221278,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,18146855330778689098,7693934068693349040,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4144,i,46428095896017370,11445721341883988143,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5040,i,13306904142899092981,10286924796767824050,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,12876219176136778092,8088271751878615705,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,12786720372766731194,11461070560093156515,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5880,i,3567802274747700338,2381302652947218332,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6032,i,16917335865955413576,17763592186479948587,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,1708793173864356635,2030057914755879539,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,1708793173864356635,2030057914755879539,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6432,i,16384494641909910574,1142405080213380834,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6820,i,8494251426746605726,5488741964704589073,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5884,i,12347785902151233695,8406963134034376708,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3676,i,5108945408616469740,3736704606704896472,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,1337020758603389625,6573711174939781866,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,2413605464324484086,1105745599969106045,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,2579796259866375785,3569008340414173874,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13049468283306365031,6463893235124447509,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,9075121938372424055,7097718968779396679,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5116,i,12634226163469446767,5721812897687255697,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7628,i,11451792849798545245,16569177569279450415,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:8
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7628,i,15668596148503700123,4195278457245192881,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7216,i,1038119265101529289,17069053470596888739,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:2
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7504,i,16624504918120540134,5515474133429318745,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3464,i,17082675839688020168,6319437920594181052,262144 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3584,i,2564182526390790110,11938110832238416409,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5796,i,6668528918712395101,5208303359016001943,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3600,i,12577203955141528412,9342160610560971437,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=1048,i,11367616015284843736,6246144486870840900,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5884,i,6154023360462596281,16127447931890510528,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:2
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6880,i,10897679720011918472,15638702478464823999,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6508,i,4402171129318345288,17917650581907609703,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7276,i,13467988843470678998,9636451929342527268,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7140,i,8863821804715262720,12386589272098983280,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7236,i,13067971421408011442,18181107692845939462,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,4031008913115255539,13883543540557045936,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7424,i,13976432285316243230,18172572200140814306,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5504851131725175005,455980345852140735,524288 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7268,i,12988541093507346086,8447340959699902697,2097152 --field-trial-handle=2792,i,3050604554688509505,1340867779957424417,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:5532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 49KB
SHA256 10726dcd56268f33a4fe999a96fa5f0ab098c018c8312ebb0e4eb0b550d00f9d
MD5 744cec2283475855dfefa9ba0d344dd5
SHA1 9005f6149a385b2ca83080b4bf4ff2b7db97bce1
SHA512 5c05d911097eacc95ad380a2c48461cb4a848a179bacb890c0339f2a5b31f6679b78c8dc407413fff2b63934e88f28185ef8a1825c145728533257aefa2a2716
SSDEEP 768:sShfK6DXktGAS5apQ3eItgew0KXgZxMgJnCSfR9KEHN3/bR2GG9FgG33Nxj:hJK6LktnS52swjgZxRTRA45Mx/j
TLSH
T10233F13A1B614E776EE5E104E10826F77FB2784D2167E01B9C0F74D849AC93887DE8A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 16KB
SHA256 386e2ec0cfcddd5e2a59311de1081251de2cf70bf16dd52e8db4821ee061afc9
MD5 7b40547a18fae324d326d9ab0b1697a6
SHA1 d74d7824b69dd5e0965f2bb2bd8074765e4497a8
SHA512 ef652940054f074a197c4f01628966ffe19bdf85b0655b426c3bed071687a6b058a68731a58272612f7cf6b50d3f9f0f21768fe4a715c45cb609e6dd1770ee43
SSDEEP 384:ua9WPPYozN9ojZBAitmejpyge3S3DpSTOw/+HK:uacQozToTHDrD9iOYGK
TLSH
T14872E00D25C56C9CC17B05CBFF8A437AB471CB3AB9836CCFE495F56991478960242D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 247KB
SHA256 8bbe3f5372666295089ca491732b33e83a3ccfc58436a791157006ad3670f11a
MD5 812d99b6f05c721714630f1c041dcd33
SHA1 205a171e4d35e2c21cad5549ab8065ddabcf5bb4
SHA512 f77730ee5ecf489c25ca9c73115ddfe837ea5134896e299881ab91535007835aaffc73c909fc811312fd1a6d0d1d036763ea9e065a6c11e1872f39358f9ce1a4
SSDEEP 6144:jdARsApEz7zwkyHDpDgn36IsNck05sUmfIs:h4NEzROFDgnnc57
TLSH
T14F44234F1298A0AF0A93FC74D642DEA92B94E7105CEA35F02A617FC5358EB577F08C52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 fc37e543d6406bf10ea5229c1359d2d6d035109f25250c40a21b9813e3f976c2
MD5 46ee801a3083afca183cd225bf6ee71b
SHA1 f840ed8dd644a7cf22727879f6cbbaa5a7432026
SHA512 1162bc105af2dda2f3cba4f5cf80f7c58343f0fa01c77fdb2f18934d0c883719af9a346e4a4cd5bf338a5848342d911949849e21e7fc14de80800aeecc515a4e
SSDEEP 192:Bfqdl5QgQr1MnFLUlBWHIEVYwQcXOdrtoZAnZix:Jq3OgQrWFLUBVtSXortCA8
TLSH
T15BF13FB5B8A670C9FFD4713847F28C8732B6695C092F2E1A27F5EF74184B3965C01892
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 4ac094c6a29dd1948c49bedf3470b8dabd3fc7d5dd812d77191d03ed9d045bd7
MD5 0980e0d968477b6cf6ee7f463dfc860b
SHA1 4e64d613a3eb87298be84284bddc0e03f817797a
SHA512 44b10079af4f146fb4fe8eb5aee9d2e714634ebdff05026df97ea7bd58362052cf5b5d0b60473e1c672c407fea50b3cdcf8a2338b6a69d6f27f37a5ee994d7dc
SSDEEP 192:ogvoWldDg5O9DwILZmB91/YPkuct+rFoZAWO8:oyoYNg5O5FLQBTwcNt+rFCA8
TLSH
T1E8E1FAB674A674C9FFD8B0789BF288C732B6695C091F2E1A2BF5DF34584A3945C01892
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 eb3198e9b2b2fd22bb72c6b3eec9a8b74601088d3ba11df65b5156fb99c73719
MD5 43e5694dd8f9bacfc825eb8d29c99b50
SHA1 fabdc2ae4159a0d3e31300eb1839b8d409b2824a
SHA512 aea3926535c86f1200298427247c5511a6a3d851e96148491211f89f929916fd5bb2d3e21b3e312025ad3958c4c56a058da6ba0b6eefab02cae4bcf133e3bd69
SSDEEP 192:Tf+dl5QgQrhMxFLUlBObKEpYwQcXCrFoZA+is:b+3OgQrajLUBblSXCrFCAg
TLSH
T1F9F12FB6B89630C9FFD8717847F2888732B6795C492F2E1A27F5EF74184B3965C01886
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe593d2e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593d2e.TMP
Size 3KB
SHA256 2fc954222729602726c92585d10b413afcf7e8af747f8590e0054f139115b8ec
MD5 9767841232a0d80a8f0fe7e4b3c97392
SHA1 a9433168efad2c8b55c4b3f8d476e5b1213b5349
SHA512 377add9ccf8d3a17160bc7a0dcefcc9d232d25756e934f578a4cc66262d707e75584db569ae9920b19c6d0a310d9c9c7e0f153853c1ec8d8c268a172a338a5b6
TLSH
T1E06170F778ABA4D1F7A8A1BCAAD210D7B6B774A019673C0E1B74DF39988E71851040D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\000003.log
Size 391KB
SHA256 9904341a2716925cecfb33788ba9a8b04261d044be66400a5eee4757b8df07ba
MD5 56528925f07519627d99f92205b00937
SHA1 1c957ef1806566414c93a757b12220e7e4c4f03d
SHA512 fed0a377e7811f5862e0b8e5b00e523a869c22057d9cd9d93e4e8821c44f99beb33006ce017392c03836e0b886798b578d5b75018234e2a5b846b644a28fbabb
SSDEEP 6144:OYie/uK1iWBXSTT99lR8j9XwgVDXsc9Rh1WOLWn+e0+3bNE3SYaPIYI/O1JXpKsd:OYu6YN
TLSH
T15E84E87FDC88C937C9B3463BD1B11B8783BAA84175864C8AE0C57B4809B6F163D9895F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 4d7731434cc4df04bfc24974c50a5a57ca42d4327965078ec4379fe3e61440cd
MD5 aecf25130656e0fbfbcdc8ad7c0aeaf4
SHA1 679c653a127e8f78fa3af3f05f6b36800ae0d939
SHA512 3f25429141ba5cd3abb64b92c2aa49573732267a5019f1b9093257cb123efd512cbf3008dce3f5864f1627d0d66b03f654431dbb69790fc694d802e50683d41f
TLSH
T1C4E0D86C88CBD21B621865D715B4BF4D979BAB0FA68CBEC66F01C814B042089956D573
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 e2be5d838c242f0cfe19f41a7bc82850db03a842dbfa9ed0fb249228a9483dcb
MD5 fe4d8b039b6121040b6f0364621e0a57
SHA1 31dea0436ac6bb2a3a39574da1a616fd88e72ca9
SHA512 e445dd005d5418cfaaf4a6da2ae1ff301c029dc97ac16631bb9c80ed135df642d00cd8dabd00fbb1402bdd973d7e44abcb1b68ab4b38d69fec28115b2aa484df
SSDEEP 192:DwMYYtrngefJXJ0JkJ255B9PsxqTpCPoKPHQq4CwQ+Gf7Rw4RYgyJ1Rk4X59QW7+:DwMYYtrngeB50JkJ255B9UwTpCQK/f4o
TLSH
T1BA22C0E7C3E4873DC81556F06B106E1ACD5E0528626D3C2785E9DE5BE3E24BBE18150F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 30f988f60d6e1cb12d0d7eeb3e123a9df742709433556f6ffd3406ab8d7e97c0
MD5 8fffa4ad65d222548402e81f1675456c
SHA1 cd281e24ef8a31ce0407d5a0185e1f5e1d2f1b86
SHA512 11444bfa1bd37da7c2d32d591a3646cbf577ac7103ee1b8e034b0c3a1e1d3ca5ff9a1cdea9d940ea20076ae5f9624260828b01c1c524b9963e6d631162c65a3f
SSDEEP 192:DwMYYtrngefJXJ0JkZ55m2GfN+xxLyIyJ/Rky4RXh9Psxqk71gxTCPoKPikWR/Qp:DwMYYtrngeB50JkZ55m2GfN+xxuIyJ/9
TLSH
T19112CFE7C3E4873DC81552F06B106E1ACD5E0528626D3C2785E9EE5BE3E24BBE18150F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6952ec28509e508b5fbffad2a6588bbaf0329639c117711872527fdabdef5b22
MD5 471003fe08d028064d70baeb5064520b
SHA1 5fc52882ccfa16b9bd7730c8a71a0cc0f70f9a80
SHA512 6ec221cbed2442af2fcd9bb0c21582e75aedee7984d4298cce4c12ca79c74ead5a63d758fbb4c40c768f12b32dccd9c070900f71d67df423de509fe95c85ac63
SSDEEP 192:sxZtR2WK/f4saUQ1IdpFJHW6+WNvcK8XYRPLrMIg57J:sxZtPK/f4shQGvHbyXmA7
TLSH
T1E622B7566E28A97B8CCBD21DFA25BF53E6F9503291D11E48AAFCC61C05E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 370faa21f0d94f4291a0335af1215fc8cdd74c179cf626c8cbcd0ef99dd54327
MD5 8ecb084f47f72fff8d2efc5d7ba64d23
SHA1 0a8790e6bb3fd9ea97eb230f6e364c4f880b4dd5
SHA512 79696d80fefde00a97e2a78f91873ecdda5731c4834cdbe7ffa43a6e11d3fbb37c75e181a14c6c25728e5382a279582a0f5ba92b6318424e3ddbfc1294c92e5a
SSDEEP 192:sxZtR2WK/f4sasQhIdpPAHW6+WNvcDI1/YRPi4rMIg5BJ:sxZtPK/f4sRQKoHbl/msV
TLSH
T1F822B6566E38A97B8CCBD21DBB65BF53D6F95032A1D41E48AAFCC61C04E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 bb54fbc1bfb929e299f1570e7ff8864a3e590a6ad42971348add89e2d757f4c9
MD5 9481d412c5f285bb0d194ed1df9d52a8
SHA1 9d31b72fc5d0cb1a4afcc7ff0c50d033e7a5f53e
SHA512 8e6d5fb5942b17aa9f84a85a860bc3f9538f40d3362c5c19ee311f5a8d447475d3479e674bf9e6a119e49d914dfe0627592abd24305d962a6c1b0b7d17b681c0
SSDEEP 192:sxZtR2WK/f4smsQhIdpPAHW6+WNvcDI1/YRPi4rMIgrJ:sxZtPK/f4slQKoHbl/ms9
TLSH
T1D322A6566E38A97B8CCBD21DBB25BF53D6F95032A1D41E48AAFCC61C04E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 30bb120320a1ad03ef57929a0b72dc0ffa17461c1554c39d4f6c87dcb217e42d
MD5 ee02704d06bbccb220c1625668648365
SHA1 afb147b768e6e266f9713915fdcb0e56d31c24f2
SHA512 2f82f54bda7a282d47036d5436a1e09cd5b56c41bd7bbfae14c784bdb307ddb07a299783f87f4db40e9489b5829e79516f4075673748b88d67dd57fccfff7aa1
SSDEEP 192:sxZtR2WK/f4saUQhIdpPAHW6+WNvcDI1/YRPimrMIg57J:sxZtPK/f4shQKoHbl/ms7
TLSH
T1FD22C7566E28697B8CCBE21DBB25BF53E6F9503291D11E48AAFCC61C05E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d87f03136d51dd8d76c3ca2ec6060a93b1480a4fa48f707b8b8f983c6c7c0040
MD5 1872d70d8a2803cafdd9691771c03ccc
SHA1 0985c6842b8e88e35dcb05e0a17fa47756ceda08
SHA512 b146bcf9c73f99e49564c8f2bd5825cc1bdc17098c8f2d116233318d96373d3e9bae2e571aaf337e8d73e500f20a463a2847fb8ce9d8179ba9f5467169ef189d
SSDEEP 192:sxZtR2nK/f4saUQbIdpHjJHW6+WNvcMDdYRP8OwHrMIg57J:sxZtyK/f4shQENHbTdmEOH7
TLSH
T1D832B7566E38657B8CCBD21DFA25BF53E6F9503291911E48BAFCC61C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 7e28b016a1e678deb74436fe49b5a26d24f9d6bdeaa36feeac36fc4675cb56ec
MD5 3ae6e8b9c2bd01f04778aa822d2e6f73
SHA1 7df150bb0342e5d9a150aae54f8216b896c01aeb
SHA512 fc60fe54dda15ecd9947e397df8d19bb7f2c4e71074bf369447c4a7e0deac6ca57d956eb538a16529ba4f936de9bdd4e1ab79a6ffcfc62389629f0109d452cf1
SSDEEP 768:wmK9uzYWvcQus8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3broB+EV4:wmK9uzYWvcQusu1ja0HL7Q3oB+a4
TLSH
T13EC20A3F640DCB7E4FC01A9DDC5A6F973E9802D7A6684D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 65KB
SHA256 c116e602f7ca718e474ad48ae27051f18f79a634234cd15dc248ba5311d31116
MD5 6e5c8005b3593c1f61e3707ccb0e2be3
SHA1 2231e4c3a0ee2ca1580158bd9c6fd094f51cd5fa
SHA512 284e18679493217e6561948bd4e22e90a74cfb39b96c57b5925d7bb488f46cbb915bff8c00046a022a62999d6b4277398ca249b2a0aea29f353517a0258a112f
SSDEEP 1536:kwaGJUKEXr6EYQ85iwMAJXHWgH5sM2Vhd/gkWPnbjNjHWJvkdbrNT5:g+XHWgZpNjtbrL
TLSH
T1DC633CE7341B10A20FD776BFE856E9E5BC33615D6CCC8958FB30492D1384A7C162B998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
Size 111KB
SHA256 01eb282903dc739627fa67e45a77156ed63f5473cfb76ac8312191a02215af09
MD5 e4206ff469ae3e1f3c0ca157a138256b
SHA1 88e3358c3d428878bec68069df5f74b42690977a
SHA512 e1047cf760ad027465a8ba5059c81c68bd321fea2e2289998168b50a6424f547f5c92a9fc14ac8bba0cd6a1a126884c48c6e93250fccbada4c3461ddfccee7cf
SSDEEP 1536:Yp7Lpx/huv3FZpg/If2lnjPH952PSNBdtckbbRs4HHCDOcLspFAO+e+Cysjz6sM:SLpzufFZN2f52PSkkIrLWF0QzBM
TLSH
T1BEB32EC2AF8A77E1DFB7217E14D2C297BDF282CF1FC1D126E561A209184826916F705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 f3b10916f9b0f8d35885f1b9382e230e14a479d5d1bff1fabbcbc1e8a633d842
MD5 477ba96530ad8fbfb6bc9f4c9dec209f
SHA1 af94b1a23cd1f38a87ce6ab1766b125056ebafe6
SHA512 4363811d559dbfc6d7bc9f20137aa10d1cb363a4c2358e5bf8684a2858a06b952cc18726334319f2a5ad932887a058a9658744423cd90e060e6ba071b91d8a1d
TLSH
T1CBB022200C2080C3E00823FCE0800ACE333C2C88030A2A2B82BA00308A233E03002008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5912e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5912e2.TMP
Size 48B
SHA256 ce4d8da001cf9381413024853cb04685c8e4038942c1f07ad2f4d06939f15811
MD5 2b6d1d9a11aedd821f1e99175b1ea825
SHA1 9176ab0706a255f44026d52bdd66216a33fe94d3
SHA512 3333fb1baaf3362a74fa5ec7b480d18deb76ebf78ebfe35dc1b251371a9016e6f70853fe3c84d49829d9f60a2aeaddd87628269426178f9f87b30e16e039f655
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 10466822f71e38e815e79251f92fa85b41de9baecdf0166bffe0c41df3405950
MD5 83250d6b44cb4b6c8c1920ddc9d698db
SHA1 d8fd48371984e8f6b235e7772c29c54c923c3991
SHA512 27df08a4af8ee7a105f574590900bea3c2d3c6b6babeb0d30ae3c9452e15481f956f6b2e42dc4b25d1abc38725599416265b2832c506ad603bd20cc8d60eb462
TLSH
T188A002500BD06411D0131E725481BB813328CA385106470385F55446DC942D49E06980
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0da37a9b4207f80ea40d6c767e2c5490da6e5009853d005f0ede214f0154ced3
MD5 da085b1d2af429adfdb0987c317d3c93
SHA1 c5c19156f2f7c8372012b966a6243cefcdcae8bb
SHA512 42fe55d569a68c03628a5aac1322469e91e64e3dae68e1c8ac75e919cf36b89814624351a230e72e211e0b759e99b455cc15ef5f9f90c82109e6bbe76ea60c9a
SSDEEP 96:K0mFzKKkcmbOPCugYY+uohlQO+K4LQE+MGOp0JyQKzan:XZbOPCugYYdoh+OOLQERGOp0iE
TLSH
T12F91F45532BB1641397D284884B5871F228231F33058FA6BBFBC10A14F6BE544EFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59a270.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59a270.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 63ebd4eb4ede54dc68c524d5e4d921a6dbca0dd34b66d49ca336178f3d78c969
MD5 3789c31dc9b8fc32db30afbd53d648fc
SHA1 ae47057330d308dd07088b0b32df8bc2566a5cde
SHA512 64e4e2924cc3c1137cdd19683c22dca98df7f98708028ea39327d69eb836f8e15e426eb625e4087460e11e7804f4d851fdcd3518662daa3ddacde03ef3e1ef25
SSDEEP 384:pZcIhsNP/wJijdPOjTV92OqG7YjIQtgOIwZOy8lov:hhXs2nWO0jIQXsdE
TLSH
T15F827E366C785D7769FBA141F58B36038FB884A7D5856B90D4EC6B0D01DA6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 dbfeaa6b01bf6e26845b88db905878c0acb16af24ebd5598a39a93c21e964aba
MD5 7ccf6603dc2bb0858b0d953921f09ca2
SHA1 32d007bc40ed09bfee58814290678f44c3f0eeca
SHA512 3d48accd04e6398ebd1c5c0790dec2628ef0c1071d9c2f9359802b07d3726c40c9ad6dd7e4a7b39b8bf08599c4bbb2786b9690549ff81ef9bd2af2c9ccf21e5a
SSDEEP 384:eiFiZcI1qpsNC8TUNTUlIlWwJixbCQ2OjTV92OqG7YjkQtgOIwZOy8lov:1FQWZwg3NQNnWO0jkQXsdE
TLSH
T1C1C22AF658E74976E8AE5743A77E2E038EBCC067F481A650B3985A0CCC961BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3786d41d275ab5685705a7b825ff0fef005bc6cbe0606c6334ac96bf7605a567
MD5 f8a2477e1d6d3bf84f4987cec4285dc4
SHA1 6ad3a48dc26619bfd5adce01059dc83e89caf369
SHA512 354a03ba8eb7b5558c0d8dacd4dd7554aa41682c59f533c1e172df1a0cd9914f2457d59098347fc497a8003e477e6e0a28425535710e6ea5aa16f25200b2b7b8
SSDEEP 192:SON66ygpQmiUylqtOCTVg+2OqR0BzPtNU6:SON66lH9tOCTV92OqGNXU6
TLSH
T1ED02D634BC686CB78EF3AE06F58B36139FE8116BE9552B84DAD81E1C01D765C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 23bf049cb691e2e87c4e9d4ae0fe8dacc1c106cd4fb6b03d745843c605752c82
MD5 9fa6b8d67cdf25af8c64e6f60e700637
SHA1 139525ab534ff834d48c8e68f95ff7572a952e68
SHA512 e3b90b240e63af8cb7c1641a25c7608c27c2dd5fc2d873a5845a0d3c7f6d65eda89fd064b5991b43b6a3b9badc3da8d762b007d797b06ea70e6b81311d48dbbb
SSDEEP 384:UiFiZcI1qzsNx8TUNTUlIlWwJijbPOjTV92OqG7YjwQtgOIwZOy8lov:vFQ4gwg3a2nWO0jwQXsdE
TLSH
T1BFC22AF658E74976E8AE5743A77E2E038EBCC067F481A650B3985A0CCC961BFD306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 38a967a6933305f87b95bd13c616af12a8c08f90401bb56c2406030ddd25f351
MD5 656934006962d0aae1c0b9ac60e2369e
SHA1 4b064866c55348d52a01f1a34b6676320b9067ec
SHA512 f87fb359e4cae63542789a5d2d4e894bd6edc327db1c47c92f72ad5e1b18c6389ac761414c27e01dae9c85766fcbd0c3b51c68fec1fb42053d73732bd963ab2b
SSDEEP 192:SONa6yTQmiUyqqNOCTVg+2OqR07Yjp/3UN/tQU6:SONa6m8NOCTV92OqG7YjmQU6
TLSH
T15A120835B8386CB75DE2A541F48B36139FA88167DA453F90E5DC2F1C01EF6AC230AC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3699ba78c793d44cea46f96d97d47b1d0e2b782c8bf6146162f6c247f23163d3
MD5 fff9ffbe01f4ac43073894a48e4e6dd7
SHA1 2837043678551984f6ad2f83edaded26628a8a61
SHA512 8ed5883c9cd18b02fa0dc8ca831fe4533f24a1db4ee4f198fa27961ec5c43da36827f798a92eef6273bc084a07956c9225ef276976f1c508c527fa14ed684716
SSDEEP 384:CiFiZcI1qpsNC8TUNTUlIlWwJixbCQ2OjTV92OqG7YjkQtgOIwZOy8lov:JFQWZwg3NQNnWO0jkQXsdE
TLSH
T127C22AF658E74976E8AE5743A77E2E038EBCC067F481A650B3985A0CCC961BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5cb11e52c23a26e3fa31e3e0b5224329714113fa9bda380bf875855d1c023772
MD5 de496615459fe308a6f31338c9bb040d
SHA1 8d73ceaeef244375660437d8453da7d2fe13b3b0
SHA512 f069c2ae8deb8c6a59131cee6fcd4b709d0092426c6e94b0599fe551fc9fbc7bc356ac08f63a9469177926c9c7e8ea73e202bad32cc447e157115f76b10b6a42
SSDEEP 384:LZcIhsNPWwJijdPOjTV92OqG7YjIQtgOIwZOy8lov:Thus2nWO0jIQXsdE
TLSH
T169827E366C785D7768FBA141F58B37038FB880A7D6C56B90D4EC6B0D01DA6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 22d76afe21e82d476ce781acb8f43ca1a341eff47034c73af41bb032ceb5290b
MD5 0c5bfbaf48b3189674c69d11899d5abe
SHA1 e72a374c5dcfd3af7f370e46b464c97c3a84bd06
SHA512 baf9e7a8305c3860000f5373280c9daae57e8edb1f5d3d3ccf74e5e51ca56bf44245ad0c4670ec2f9b9a7638f43ef538835810fa1f9023818e7ad2a5cb106d25
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 75c32627e04740b3f354ea08567f8eca392520bf4a141ac52fc9905cb1015132
MD5 90a634c226d5d757899928bfdb59857d
SHA1 eda9068b79225e803ff442710a6b0cf6c6936e83
SHA512 8b5fe9252e20d003fc01b2c8b863a0941b9e8868ba7c1f77880355fbd0b589a8ed93121c04f55efb5cd423cfad2a182baeb6bedb74094dc9fc0eba8ed89a2cee
TLSH
T180E0022092011071E118033404C75F112BE1D40051B203466331066D3C337542D30F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a95e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a95e8.TMP
Size 392B
SHA256 bdb7aed747d54e7ac6487b1fe88bea93121a193cd1c982a0feaf7d194b0af9f5
MD5 5fb642cc660f840f60c74741fb45db9e
SHA1 39da9525c32aee84ba64af1c22f13a026ce7f8c8
SHA512 1f638fc3ce63d4ecd103b022e66c7d6297d25af18935c8a70cb1b96234d01c7b72e9f063e66ea3f9ff2539573568b7aa9cd3b68a5d8b72728dfb7d022187fd29
MD5 SHA1 SHA512

Submit Download

62bf4ea4-6669-49d0-a368-01fcdf17562c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\62bf4ea4-6669-49d0-a368-01fcdf17562c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2cdf0d4de7bde5db8e4a5c0e3ce26a43621af74cac254a2565093e8c06284de9
MD5 b7840a10e3e9a796167d6cc8016a0f9e
SHA1 e5e25fafed4646cfaa06a0fd9a6290ba4da06818
SHA512 0722d0a0a1298a16573192ee432956f14bd1e8b5768614c543d717a17b22420e4bede367f7d0371695405db459fc738230c3175524b3dc7308d54ee93433042f
TLSH
T1A4412C58A6F91148B3777E5A5FF7A86D847E7D372E56946E10110E4F0A22B00C971733
MD5 SHA1 SHA512 TLSH

Submit Download

Project RFP Drawings & Specifications.pdf

Path C:\Users\Admin\Downloads\Project RFP Drawings & Specifications.pdf
Size 141KB
SHA256 040eb230103242e08939ff71ef9253fc1e07f635cef8cc4da433c84ce121aa00
MD5 4d85590a429ed912cd7aa7410a33a02c
SHA1 c0eb37678ee857de628f77bab6c2f119fbf4d1dc
SHA512 0459063f1c2091d467ccf16de810fbc8072a4cd8486186ff0255cb6b7ee7dc615c86bedb006a83392f9ba0a152dc17666ea57c6e3f0eddec61b102982bbe4e8d
SSDEEP 3072:f+VsairJeP9rw1lkfmpEXeJ+aITLuWED1h7m6QJ:f+dirJ4Clej42CfD1UNJ
TLSH
T1F8E3F17D93BA0C6CB1B7F619E352241D2F64E827184EA87BDD1E43A149EC20DB254BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download