hxxps://www[.]bing[.]com/ck/a?!&&p=7a5a69a8347bb52c7c4627c36044ddf543c0366890150a8e547b3169b50252a3JmltdHM9MTc5MDI5NDQwMA&ptn=3&ver=2&hsh=4&fclid=01790436-56c4-64b5-1cc0-13eb577e65d8&psq=astra+client+2&u=a1aHR0cHM6Ly9hc3RyYWNsaWVudC5jb20v

Analysis

user interaction
yes
max time kernel
899s
max time network
900s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bing.com/ck/a?!&&p=7a5a69a8347bb52c7c4627c36044ddf543c0366890150a8e547b3169b50252a3JmltdHM9MTc5MDI5NDQwMA&ptn=3&ver=2&hsh=4&fclid=01790436-56c4-64b5-1cc0-13eb577e65d8&psq=astra+client+2&u=a1aHR0cHM6Ly9hc3RyYWNsaWVudC5jb20v
Sample260925-ttylrsst2p

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1752	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 010000000200000000000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\NodeSlot = "4"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "3"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{A370E13C-2590-49A2-95C9-4040D3495211}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Version = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{A3CA8C48-5FE9-4A24-8D8C-CCA5A16A720F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell	msedge.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
4512	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
5784	msedge.exe
6840	msedge.exe
6840	msedge.exe
6840	msedge.exe
6840	msedge.exe
6840	msedge.exe
5240	msedge.exe
5388	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 3220	3000	msedge.exe	88
PID 3000 wrote to memory of 1752	3000	msedge.exe	90
PID 3000 wrote to memory of 552	3000	msedge.exe	91
PID 3000 wrote to memory of 552	3000	msedge.exe	91
PID 3000 wrote to memory of 552	3000	msedge.exe	91
PID 3000 wrote to memory of 4972	3000	msedge.exe	92
PID 3000 wrote to memory of 4972	3000	msedge.exe	92
PID 3000 wrote to memory of 3412	3000	msedge.exe	95
PID 3000 wrote to memory of 2760	3000	msedge.exe	94
PID 3000 wrote to memory of 3412	3000	msedge.exe	95
PID 3000 wrote to memory of 3412	3000	msedge.exe	95
PID 3000 wrote to memory of 2760	3000	msedge.exe	94
PID 3000 wrote to memory of 2760	3000	msedge.exe	94
PID 3000 wrote to memory of 1496	3000	msedge.exe	96
PID 3000 wrote to memory of 1496	3000	msedge.exe	96
PID 3000 wrote to memory of 1496	3000	msedge.exe	96
PID 3000 wrote to memory of 5028	3000	msedge.exe	97
PID 3000 wrote to memory of 5028	3000	msedge.exe	97
PID 3000 wrote to memory of 5028	3000	msedge.exe	97
PID 3000 wrote to memory of 3656	3000	msedge.exe	99
PID 3000 wrote to memory of 3656	3000	msedge.exe	99
PID 3000 wrote to memory of 3656	3000	msedge.exe	99
PID 3000 wrote to memory of 6128	3000	msedge.exe	100
PID 3000 wrote to memory of 6128	3000	msedge.exe	100
PID 3000 wrote to memory of 5808	3000	msedge.exe	101
PID 3000 wrote to memory of 5808	3000	msedge.exe	101
PID 3000 wrote to memory of 4200	3000	msedge.exe	103
PID 3000 wrote to memory of 5744	3000	msedge.exe	106
PID 3000 wrote to memory of 5744	3000	msedge.exe	106
PID 3000 wrote to memory of 5744	3000	msedge.exe	106
PID 3000 wrote to memory of 5512	3000	msedge.exe	107
PID 3000 wrote to memory of 5512	3000	msedge.exe	107
PID 3000 wrote to memory of 464	3000	msedge.exe	108
PID 3000 wrote to memory of 464	3000	msedge.exe	108
PID 3000 wrote to memory of 464	3000	msedge.exe	108
PID 3000 wrote to memory of 3400	3000	msedge.exe	109
PID 3000 wrote to memory of 3400	3000	msedge.exe	109
PID 3000 wrote to memory of 3400	3000	msedge.exe	109
PID 3000 wrote to memory of 1836	3000	msedge.exe	110
PID 3000 wrote to memory of 2464	3000	msedge.exe	111
PID 3000 wrote to memory of 2524	3000	msedge.exe	112
PID 3000 wrote to memory of 6108	3000	msedge.exe	113
PID 3000 wrote to memory of 3908	3000	msedge.exe	115
PID 3000 wrote to memory of 3908	3000	msedge.exe	115
PID 3000 wrote to memory of 3908	3000	msedge.exe	115
PID 3000 wrote to memory of 4688	3000	msedge.exe	119
PID 3000 wrote to memory of 4688	3000	msedge.exe	119
PID 3000 wrote to memory of 4688	3000	msedge.exe	119
PID 3000 wrote to memory of 3808	3000	msedge.exe	120
PID 3000 wrote to memory of 3808	3000	msedge.exe	120
PID 3000 wrote to memory of 1276	3000	msedge.exe	121
PID 3000 wrote to memory of 1276	3000	msedge.exe	121
PID 3000 wrote to memory of 1276	3000	msedge.exe	121
PID 3000 wrote to memory of 3668	3000	msedge.exe	122
PID 3000 wrote to memory of 3668	3000	msedge.exe	122
PID 3000 wrote to memory of 4712	3000	msedge.exe	124
PID 3000 wrote to memory of 4712	3000	msedge.exe	124
PID 3000 wrote to memory of 4712	3000	msedge.exe	124
PID 3000 wrote to memory of 5824	3000	msedge.exe	125
PID 3000 wrote to memory of 5824	3000	msedge.exe	125
PID 3000 wrote to memory of 5824	3000	msedge.exe	125
PID 3000 wrote to memory of 5624	3000	msedge.exe	126
PID 3000 wrote to memory of 1592	3000	msedge.exe	127
PID 3000 wrote to memory of 1980	3000	msedge.exe	128

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bing.com/ck/a?!&&p=7a5a69a8347bb52c7c4627c36044ddf543c0366890150a8e547b3169b50252a3JmltdHM9MTc5MDI5NDQwMA&ptn=3&ver=2&hsh=4&fclid=01790436-56c4-64b5-1cc0-13eb577e65d8&psq=astra+client+2&u=a1aHR0cHM6Ly9hc3RyYWNsaWVudC5jb20v
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c4,0x7ffa6bdcc188,0x7ffa6bdcc194,0x7ffa6bdcc1a0
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,16836311957296500522,10301288241715092132,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,5266930016440629920,6856538965508385399,262144 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,4455939572368029734,14183652358045897605,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,5658462949763824631,16880114458779253157,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,11236718048872522669,14398690443754078389,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4376,i,1850644243679783257,17879246005422753709,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:9
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4364,i,12862078234864257246,2798072650003825351,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5416,i,10627439849692239890,2194248926579179737,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,6922960004878769559,2254939561572371604,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,12910266905493497963,4387335475010460204,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,14614969621976786113,2669227311007182247,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:14
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,14614969621976786113,2669227311007182247,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:14
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6816,i,5322190416154682571,3841752396944797170,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,11687466860570593563,1216597905583480422,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:14
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3844,i,16349172386220927230,4934409316596861256,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5940,i,5318954910403303641,1072058492849623192,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7176,i,4172414390454215021,10533896239009530156,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:14
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,121657305080783389,6044485041629768370,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:14
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,14962778379377052770,16534876685291688542,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,13504817283064791405,9746081871783483542,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:14
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7148,i,5898830382309071770,14816900006894146256,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3452,i,4799206507477906710,10228140187432047209,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4072,i,12179335280404297639,16943203285642743324,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6636,i,7737927771528370977,8749705711228763962,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,16369507958861858702,3165465474460217598,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:14
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3456,i,9268714759240704689,2680803795691265002,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7364,i,10640583310986208917,7591523942140237792,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7624,i,13527107969796841933,2459384945575239456,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=1440 /prefetch:14
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7680,i,14810672561187652873,16232735226839313452,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:14
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6696,i,5111435822228176430,7236547950387674305,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7536 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3836,i,12387231715683127410,14437105307714080429,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7396,i,18349396507672877711,3034163128888987327,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:14
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7396,i,18349396507672877711,3034163128888987327,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7480,i,17168706377227492516,9783079938998980668,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7712,i,15439188812567848750,10021088385149217186,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=4452,i,16590923012120799818,278963488261613665,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7464,i,9659946357091607973,1602917260792185064,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6736,i,13860372174762124102,17106107081718568017,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5556,i,16284739547297396187,17645356333458205581,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7656,i,12119365284673301625,3143236801751977915,262144 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,9951492245482797020,15929904404475021391,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:14
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,9951492245482797020,15929904404475021391,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:14
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7484,i,349484140337544692,6455362573263101656,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,9670861412431409252,11635930390313409291,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7404,i,16074497723280687598,17672421283737591528,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7892,i,17074666237133251586,13328713479421204640,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:14
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7644,i,16497208546728748012,5631322389337227880,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=5220,i,12909012925115292072,15571428954449211648,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7760,i,6485399309754827426,2826890854531168478,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7324,i,15453597010279547289,12710919668001158269,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=4656,i,4945590721103236255,12713966013456914337,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7348,i,4943087123969723566,1511739017656895740,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7556,i,12052556535205020378,1631868091188447561,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7492 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8252,i,12047095282009503397,10037731752249245348,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8236,i,13610821207906536474,9363019315633878353,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:12
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8572,i,17912333818871605177,18163784918055234788,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=3344,i,6335148546373009642,11856603102855134433,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=3288,i,9962990974933993165,9336122175323349768,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7252,i,16506008738617784412,2306760753342892748,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,10114290460383696404,12070248814484044409,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8132 /prefetch:14
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,10165112215287879257,15532323786361556959,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7820 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,5601589642102475256,12939457868677228808,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7760 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:6840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=6792,i,1431180830910024611,9401354141825193700,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=8004,i,6578643873109696908,5835963441271440989,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7096,i,10904376806964585012,4063095075143796434,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7092,i,416644077128129634,15345357679903702259,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
  2⤵
  PID:7056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8776,i,14511423436966205498,6799814756082830761,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8996,i,4646072189432416076,8781411870471678981,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=8656,i,10481148937052913459,4524818762606583705,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=8200,i,8625482631165384715,2922846321882864967,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8144 /prefetch:1
  2⤵
  PID:6632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=6784,i,1149430630998081738,7539344425187996646,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8828 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=9160,i,2428185250301931356,9585826505047275383,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=9176 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9276,i,5069145635204474100,143367650024666373,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=9288 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=8868,i,12459977755699473948,6843485434836446062,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8908 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8108,i,7025406922159790999,6806886370949865781,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8108,i,7025406922159790999,6806886370949865781,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
  2⤵
  PID:6680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=8972,i,17595140040130501516,4069964123990939358,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8932 /prefetch:1
  2⤵
  PID:6748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=7732,i,16699171280968328236,9731675987036853332,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=1108 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=8932,i,9154616855702824508,11665905722679876321,2097152 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9352,i,17433180735411942617,9045892864361890541,524288 --field-trial-handle=2144,i,1010101699468903712,714026286790817686,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:14
  2⤵
  PID:1300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1212

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e703133b-257c-469e-9831-a12651d09f3b_astra-webfiles-v2.1.zip.f3b\2026.1 - Web Files\index.html
1⤵
PID:3156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:2408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4796

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5388
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\astra18.html
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:4512

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 796593455ea02e693650171b44a9917a02a83c8bc94aee41d77896ca8a849568
MD5 851f662b893784f5fee1608faf2402a4
SHA1 1d023159ad8ef23bd54ab8a660f430677bfe3a5e
SHA512 700f2fa263293ea4702e6396be44d04b950e2eecf91f27d7041c752277336c10e425a46d079cef254d5ead28e83f0bf15c2e62b9f6369d5d60b761b5e50a7d53
TLSH
T1DEE0CDDC19CAC2BFA31868CB81FDA74DD390371ED6CC7E9A1B04C5847145954B7D2791
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 833d176821dd4de9ef9999c6f77a7307c623563a82deb72748c710944e5c5015
MD5 edad88b2e63cbeef1ad14b2970882fc4
SHA1 7bdc15d76b062534466a8a2d6cc6a634716b5c6a
SHA512 d64b0a2aa707d315f9f4ee7543392e66d0b59378e94889a4ec1b9701558861e01fe99f1390d5b68c8936539b0f8b2e4c77be03fae38a30b331677b918c395371
TLSH
T1E1E020D828CDC22D9314A487417D778CC380775B92CCEED997048448B241440E6C5B52
MD5 SHA1 SHA512 TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 68KB
SHA256 aa8aa822dcc877a0002877631fd1888141da53bfa4838119a05e25ae6082c3bf
MD5 110c2e941f1ec2d409ba64e9076d05a6
SHA1 3112c99e2bcd5fa11dd1b28410b2c0a1bc76c0fd
SHA512 9ae278820122336eedfbef12aecd0ed14ea9947fb51bd52253c6c72f8b0df58284a38bd3baec36743dcdf026ad8ca383ca7eb2794cebd3886a02a4f405686157
SSDEEP 1536:a8ZGkKYRIqNz2tDACsUf76Z+AGYguWv0KxwhneRy4Y1R9s82yCENwYJoYl:tkVYR7NOAXX9GjuW8Kxwhne04Y1Ds82I
TLSH
T149630267DFF657B536E17808FC6CDA2698DE11684B438A900FBA7CC50F86C6284CD48B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 46KB
SHA256 f7aacdb4193f8dc34a901e5b6051f49633c85a0be3c29b80e30521698158a3b5
MD5 ab6d7d88c03f1413a0d7a4ad2992897f
SHA1 c4437cdaf4955be0c16a739b2e5878a75ae84fc5
SHA512 c8e5aa4ae0a764c9a88421f1a787045c5ccdfff938c0dcec90cfc7ea70b0abcda3ae7fa16f0217287768bac2305e9121d211ec18abac3a9ab8313ea7dac5b1ca
SSDEEP 768:ixWCqN2jfadL1G/PaAsP8amI6o+dCe8sZkfVqH21/0PWoN4:iA5N2eR1GHFP5IE0e8ANH6/0r4
TLSH
T15923F1E6B294CCE0D6C4E0DB235D5053EFCA9BE4769FC6A13536341C06E42661A2BDB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 34KB
SHA256 feeb47d69c72959c49fe698d857b21cb9350b96fd2f674189e9990503e2ef2f7
MD5 a93b40539193a8adef3388a94281eee7
SHA1 f78dc2cec9a0f94aa224edc2adb3c74683b665a6
SHA512 b3cd63f59cf5bd6962198ec094d09d5a6affc2ff2cf7a3d5bc39a50d67083ffdd3598b3a02b6b2a9863f49c2b0cd72c5057c2088401ebf6d51c73bb31e5378a2
SSDEEP 768:5kSg0uGtUOv8GSHewJ94VeMZZ/6zIAmeOBc7icd+EYpqlJiKzBAqqXib:603BS+wf4VhZZ/qaBcWzEYpqlZ44
TLSH
T1F4F2E1DEEB168ACBD2B720945E7CF99ABDBF419B45A8C8C7AD492C4978056468148038
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 39KB
SHA256 351740773d7f76fdcbc590e4877f82b43b6b302e055b4a212b5f0eeeb7d75c72
MD5 cc0a7c6e4d5d6be516c7a0e9bab02d67
SHA1 4aec30569325f3c30837d976910f17894fc7cb5f
SHA512 570ea83d4c122d9889baad2579f1653962e59ce778db8cdf94a98831dfeded91668c7d2e80fdfb8c3f702e902593d3df351300370c1c5e0d61bfe5617b755ef7
SSDEEP 768:Cob8upP5M7nN5mfoc6hHsJeDy+Itjui1hnh1R8FghRFH4uIylFW/0Qmp5k8R:Z5m6fZDeYnagDFYdyrV5rR
TLSH
T13B03F190E091176E363637A7BC65993F8C09EB737F94F1728A4A0EB690C4512363A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 42KB
SHA256 78dded9f4efe465f42f9db4e9119a322281955a194798b6a0e8fbde84c9709fd
MD5 512dd1c152a20faa05e0a56677208e0b
SHA1 927bcfdd5acbdc22515a7117e942b9c34eee6280
SHA512 f3ab9671044422ba5cb4332e7d5fa71580d5de2a6ba92d2bb0a3af29c4690fb6b014847bd469ec74e10f0902dc637b7830537264ef893d9158fd9344fa32f3d7
SSDEEP 768:l/F/hIfYnSNWBpoZEtW3epWaLcIUsmvaOCBtZenQk+QLq1p3ey/GKiisauD+0h:lt/hIqQSWyWOpxcIUlaxmnQQOCy/Hxkp
TLSH
T16913F1BEE53B1A925897DB620B17603EE435FDC0D15E80DC0F0DA711785DABE08475AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 21KB
SHA256 f4ffb55e518e2d21714efd1359ecad05103289ce71a2cb632b36e2c63f134a00
MD5 6544dc7fe2a02f0d22847ec8f54d7eb3
SHA1 aa06907c35d346625df61264b30bb8259a5dab54
SHA512 7ecbbcc4978519fd8a9fcf4011944dc25731dbaffd6026b7a51a67b812e18e9f3c94ce04c5ad19dfa1769f47e230457663196df3f57863beb750b67b94748635
SSDEEP 384:AKHNGL2QHpf7PWP5JqaNIS9MPv0EIodnTur3ZIOO18EzZgqu7m6U04aK71Kvk:AKsL2Q57PWP6S9PElTWZIOOa49gwhak
TLSH
T184A2F16674463531CC3D3549FB020FA16CBA69B7DDF637463ED2D0004A988ABB5C739A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 27KB
SHA256 15fb1de3a27613fda7f02ee8fb15b45e6f26a774be8580cd5276c26a65837012
MD5 7e15376a1db062303308e60898acaf30
SHA1 1949fa65ed4557390a9fb0cb1213498eab2253e6
SHA512 87b9b10bb1bf02f1dda35d8fd5aff68a4e3b70b33f10cfc6d945fe265a67d130eb7a4122f153a4b07640015dd94db3d2d799a67f8025de6b0d517a63d59170de
SSDEEP 768:BUHQr6S5STu4MfnlA9wAgt2MVJ13fVdICr9oure5:CwOKSTF8lAajVJ1oCGx5
TLSH
T114C2E1BBF86A9ABF5675452062026CEFFD5F79E455DC1F84DC921720C28CDE93286180
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 16KB
SHA256 09767d678ed131ae28d1eb1af01a9062e3efcffe96d486f9ca476d934e1d7e1d
MD5 3b780533b607ef42a095eda05104ec16
SHA1 2d0ecc9e1f60af9ee09208c0c29499aee555210c
SHA512 65a65bba5d57b14c19d2a692e4413e1702dc03b36b1d905a9cc925ed501c153e7e419b6d31dcfebf25f961b052a4eb3e791c1172e92e136b3801c83fc80628f6
SSDEEP 384:B4gdxg/4UipHru42c4A0cB991ctIDYGXUzFsn4+R7SKJhlX+:B4sx44U+6Tc42991rDBXcFD+hSMbX+
TLSH
T16672D1C15C97634BDCD762124CF79087765F905CD318AD90A80C95A8D69EA3CE1F063A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 118KB
SHA256 e5a975b95edb47c666e7c71bb6a57607611637711b06b5cddab2817c9bbe31be
MD5 0c57d58d442f6dd049d1a27d7bca737d
SHA1 daf7bb8f99b80bf154b1161238675c6ba1552058
SHA512 da20093daeb9d4c69f009389283b1dd60cfad6c8ad8df83e6cc2a7775302a1e776c90480fe3fe99a8771d700eb8c1ff8a871d638e2fae3715043ddf8fd272868
SSDEEP 3072:16JHKpFXdGoAzGvU1oRiRSfu17dp60eS4j9:168Ghd1oRi0fWpURSS9
TLSH
T18EC3123C8AD91810A9F3BFE21614753B6924027C2B62937F4A77DB1241A631328DE93F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 36KB
SHA256 16fd378a7fde064728239e08cb13e6f59a03b09afbf8ea3f8c029fcb18bb4ead
MD5 c0601c2958e17c80230f7469ffd0985e
SHA1 47135c0285f9d05a161a08052e3be181efe772a2
SHA512 0020fd3351de90869d04a73004b5e5a19f0ebaa8e725832ef934b5cb935237ff836fef13679aa8a523b01812eade52fd016fb402e63aa060197a5ee11b49c07d
SSDEEP 768:znmst0/m+Fid/XuGic8X9DqSPSU8Mj8a+RPnVKpD7royockkR+OMi:znmsy/fiEGaVH8PkrD2nOMi
TLSH
T18503F2348668488EDDF274F72609D4D9E45F03763A0BAE6B704D58186F93398AF72185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 31KB
SHA256 673ace49df0d2429a8a85de0eea0592eae5fbbcfac169170f0d4eed6eddbf62e
MD5 ef8adb5e88cf79670890adc0474d62d0
SHA1 9b0c8c7bf6d8544bdcb78999d7c5da0ff90c77c3
SHA512 a79193f1bb704e0396ebe378edeb45d579415e1f39bed586e02e791cb0327845fc025650b7fbb9992b6ba5d6adc55cb4656d33c675fe77ce2595c15efb9ac1e7
SSDEEP 768:jGsq05YPugh2Lu+ZQjOfI1Q4MUtc+BzXQv:ydPugEPTf20ivXQv
TLSH
T11CE2F1254DF9110C269B572CA45508ECDE2FC9CAB77A36B76D3E66082F9904A312F493
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 58KB
SHA256 c17cd0536ea6d874741569b893dab49fa9d69153f7f6c34d5fb9f3a029ead3b6
MD5 293468046bf7120767db5ede16ec89db
SHA1 78126b9b414c2717bc5cf464b0ff2c4efc879641
SHA512 3a9ff8ee19ff3c306225cfe21c72ed4a9815c991ce16043cebd643d89f95eb56d6661a3422fca8f3fabcda1e70d8c52b3561695b5471f213616b423eb7173cf2
SSDEEP 1536:BX/AsidNG2Ykfjyq5zJdRtMj5zt8xDGfVUsutw5Ll6mBf+Q:BX/AsidsDkfRFdG4DM/utw1Xf+Q
TLSH
T1FF43020487681C6C0F279AEC8E4180CD9DFC6EC466F6D9829A7694F1FD9D834CD9194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 37KB
SHA256 54a153ee4b32e92f7052c64bb5bb95bf61e377e717479bd2328edf41f50a4a3a
MD5 fe57b3a9bc03fd2c43cd8e4108ff070e
SHA1 cda47cb314c13715f2e9d207703020e115e7b344
SHA512 4c8ef42f232f820ea9f12deb115c0a83175e2b21dda1ecfcdc5af9f51e16f99a3589065d67a398480ed04f5c82fd739d16c078acaf158efd1956e6e8c0d15cbc
SSDEEP 768:dvUFHV5ZjNp3xyn7QU857X2rtvXwz4dw6SONUHtObqUHPHBZ7XJVZG3PGVTH:dvUFHVTj27QU8grtvXwkmn/wRHvFVwfY
TLSH
T10603F14F798E152D04997972EA9AD6028C809CF8F32D4A3638360E3D67FF7845E45AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 18KB
SHA256 b0ad467413f924d3cec786a0dcd5d806b0607f405c4dd4e6ca08b4c1bd7cf82d
MD5 bb0be68eec99b07d88d5d34220babdd5
SHA1 6d77ffcbbf90e51cd0ff59596274aea6447890c0
SHA512 5b95c12f9243d331ef5abd3172db5cc6200335c8c27b704632a3f390a291d7730a25324206124502db6152e16f135c868a41d71e6927d817039a2b5f35a758f1
SSDEEP 384:GpH1chx1CNjHuPUjk2E2r2rnxntPRRPbyNaYmwsj5FF1Lj86L1Wp3y:GpH1CzChunp2WnxtZmzsjTj46hWg
TLSH
T13982E167E8B92EEC2DC7142323FA57F5D22EAC17D9922690B101E37815010DDE612DEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 80KB
SHA256 3b154d90a546141607608c68f41b1f917b6fc8bdd3666196a04bc09b1c8750f0
MD5 c45bfcb23560ceeb13456a757d784935
SHA1 a139445b1fcfda5c2408f6ce9222cbbd7e531767
SHA512 7a2c05a81f506815fda1e9095926b1d71d04f161f271cb0d5180f35df56d69f6465bc73b649ac69fe71bcf5843ec04ffe0b771ef7c572e965f29eca8a14cbf83
SSDEEP 1536:0Sz5ACknxQo9HRAUK3SWXnvD0MuRkrp8TaNwOy9PWwu1:0G5ACa9xAUK3rwdyr+umG1
TLSH
T17183024B9C947CED026D48A3C28CA99EB946470D1E871C1435C7BAAB4FB2CB4C167F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 26KB
SHA256 a12f2a425981be9078d28307984f94d84c8459fedfa545321bf8b326cbeb8f6b
MD5 ea76426d12df28f507bfbf0d7f8f8f0f
SHA1 51a1ad97f8b8db435148c0709ced90e01f2656da
SHA512 0985a764c02b4b2a3fdf99d9900e5573a46ea72a3ccd36b7d063685cb2af7cb87700ef3baeddbd58dd2b0a01d885bfa3a17470e951acb56d4bd80315d73c4321
SSDEEP 384:Xh0Wrtkgg/1H5PKAJUo+gIjzRq5lbuIUB+/ts7Uvvx5G/FyTO4A0SMQqtM4J0etb:xZkggNHrJ4jzRcuIWhgvJI/FYAA0G
TLSH
T15BC2E14B21610E30661BB1BB4144FB5F0301E76B95354E2F4F8B9AD574ABEB16AF4C0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 63KB
SHA256 6ee1d28ae56637defa26ff05be499b14d62a7132b799a96dff8795b9842dd3c0
MD5 2a9c29feb479c966ed7d2206e170f4b1
SHA1 4aeed5c26e32109b6befc0cc8d7e01118e8a1626
SHA512 29f4e811cfb9ad1dce4a4be9e97a823d25df0d0950ae0595fead28750ff7616053947b95a62b8fcf81cba74529875426304a65f9890b99cb18024c643f15056c
SSDEEP 1536:b0wsYTQ1uEmi5OWkQVAWwaswFaIWYgCIEDv:bXdQ16w7BaIuCP
TLSH
T1F35301328A1CA1DB001E3AE644AAB87AB5D2747394B12D5EDE6448F5E21CE91DF4FCD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 20KB
SHA256 79886d8df0fb6e97de541059383896ecb167d22de1d56d7778e19f7385683b85
MD5 7e35ad2267c384ef18c27b52298fdae9
SHA1 585294275c4c75337694cdd70ae77e58477850b6
SHA512 51d0d0ebccae2047b118fef546c5b788c1706bae5c1cb8321dfbb330da02faebec21f375bdd6ffb51651632dba24c47e62ffa8934c7ca86a5c55fcfb0de3a1fd
SSDEEP 384:RE9nh8G2PpjwlXJUsxWaOT11xmAv3i8O/qtbBUC/kOceSqWgdIuubphs:RE9nX2BEldUxxXvy8tr/ptS3uu1hs
TLSH
T1C992D02F0E3A6B206F751761434F188F20D5C728E143C0A972BA1FC6C5E8E596647EAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 40KB
SHA256 285fc0bc28f96c9f6449e1bb339d87afedbadf263b2381e1cd7cb2a67967d370
MD5 01c19fc014ad5c65e4a8419744ce6c0d
SHA1 dddbb0c906d4be86cc5bfb5e86b98ca94212a170
SHA512 bab97730e8be25731ef4c8c67a591afc03561dceccf51064b229201a85ef78bcb679f055b657ca44e2a7891cbf5c8d59368f3ff1bd7c1fd28a25403d8b232dd8
SSDEEP 768:FuCxRcZQFDb1CGM/beeku/CG7Yw1TiXrSGm2EalIpNavJzAJ1klkOI7azHHAN9AE:Fu2IwAGCb7CIYstGmlHNcJKpqAN9P
TLSH
T1D103F2A32022F592068FDA1D90182A8CC0B63D59D7C4C96BF5613D8D957D3A55F88E1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 22KB
SHA256 679a82e321bf76ce9ae790ce85ad8f7041a8b93c746ac8a81fbd5f22e9a2df0f
MD5 f1ac20b5d926bbf95d332380d4d7877f
SHA1 88abcacdd9bd2050862031cf5d7af4fd5de2f455
SHA512 3536ba75a4ae6110e4d4e1162c7a7e1cae4cd32322fb4f369c7cf00b4ccab6ef0f7bf7b28bf2a2c3bb046a7675b1173f9d9b35d197d5904d425fdf8e2c999ebc
SSDEEP 384:AtQz7Ppsm8QmdEI0qPJyS63dIPeT60tgzOfCxxSKq7MYXeTxUDhjoke8y:AtAhXnm6I0qO3GWT61SaWrmTxWy
TLSH
T18BA2E06FD2F491B8FF8E59F9C02E5F324926A153E6E040676CE33D6B2C64261C2385D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 19KB
SHA256 7fe0a00f8f1aa0db74d408a7ea1f91b1f240831ba2a3e55ab8d49a4b1d90ca2b
MD5 2c22042cfab925c8cd8146e70771f4bf
SHA1 082486edae14658f6501afc4e493ad9ee5de2864
SHA512 8c7fbb85720edb0a959f922e3c782501a533d49c2f06ce49de8ddb7c017eba8c24ff862356602117b9db6274203034720d6e76c4edefa5f532e1cd9b3a9f26cb
SSDEEP 384:m2hOY9KflHSdwe5S/B9Js7jzseQyeuJGkZ+BP9RHdR4f5aO7rc3n7xjyrjXW8g:mqJKflHQwQSjJsPEyeukH/PC5aH3BkXW
TLSH
T19B92E012C2D5F430544A2D98C73EB2B6F95EE3F0D6E6096D7A899B52CB10BFB00D95C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 20KB
SHA256 48311eddadac259446a4f1dfa62e15352e7c492081b1f9adf976ca6b2a28929e
MD5 a115f17d1aa37fce2c1175363769bf36
SHA1 95a06e642d08f64473919a1fee4d318bfa82dde5
SHA512 b2e4065f792828fa77661230607c5daea867ed28a3d8284d54e093490764460fbfebdd3bad9ea9f39503f281c1ec9c24646d0414f782c10fb5b1cbf29feb1713
SSDEEP 384:1SD+7gG+22MlLo/Gck9CvPy/YQOnyp+gcBuaiONJaitXgwb9kK46CmjP:1VcGLRyk9Cv4YQOypegOaitXge9kwCmr
TLSH
T189A2D0CA5B3CE58D8B8168AA77629BD10762E3F7F7C1C6A1B3B5D1CC92935A08090516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 40KB
SHA256 6b03ce91d2dac656128b063f8ee113c8746b2841c5d99d51ce9f9bc2d3cc8584
MD5 f2b1cbd8ef937ceb3a3ae7110c7f1400
SHA1 7752007a4258f01a0d4bd7680296a8db15277772
SHA512 4e8e7924bb408541e7d36f8ed6ee05b6af0709b80de1df9d12309f95cff07990aa129bf7a87a4265f5b3acf603684bc03a51d8687ca26016b3031eaccffc54da
SSDEEP 768:h6t4KxVsj+zH57xnmXxlpXO47L0CbC+SaizcgXujb7gmx5Fik0NqsCX4:h6txxVsjSH57pYxZ0KnLkcDbVFiJ8sCI
TLSH
T1670302FA9A03CAB0C4F1C35AE56DC71D69A42AFC648509E744E97CAEC94D2AC4E150CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 19KB
SHA256 fa9e3b6a0b0d2562c93ad2dc7020bb057b53499678c66ad778bf19fff6182d5a
MD5 b631513c4cc758878bbf3d77e1f21923
SHA1 3ae8111a38e9bbc5fc3e9774aae35a3c19da7f53
SHA512 85fed0b9b320e2a84daac46ceea806fd23da666bbb33cc2ab098bd549e5633a4c3293d1bf54bb5e7cf5aa51354386efca9e34bd2d4f397e2f26d4b04b90fef9e
SSDEEP 384:GPm5Jv54ATkmbtRy2HsViVwmSO5H9KoSJKcMAZshp45Xhgveo4:GPm5NKATkmbtTHQiVwmdZSJzMOshpYRn
TLSH
T1B492E1CCEC063A8AE2630F61718FD543D484D8C1B60DAD17BBD95D23B4259DE1278F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 416KB
SHA256 c5c78d605032266ac4d831673f8f9d0323a47194155b0534b737ced2d78333e1
MD5 b0e065464f811470ea6d4c064c4e4cb0
SHA1 96043c799a46e1d51d91294b5f6865f2a9a17de0
SHA512 d0cd9520ba734504f87e48da9cc94b18ca5728bc188537f47a566fc7bcf91081d8819df97c3c018bd11459da40dc0231610c3d7077b115f8c621ec2c62937e87
SSDEEP 12288:gFsJTkrWpiA70rHTngUuX5Z3IGHrpbW9w:gmJDoAQrH7M7IEq9w
TLSH
T1B99423E5247A1E5B0BCE3743B9421D87628772C30F9613C85723E55E9AF24A0EF524ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
Size 70KB
SHA256 483db2092c66391c9b1048327cc8ae5a392fd0cc9802f30a2a2094ec55f7e0d1
MD5 6a8a48918cb681f434aa2088125962a1
SHA1 1deb63168dc64fb8d3ed940e1b76e655a5c52828
SHA512 08ff814485eddc3293c2b3aca3462f4a5f0e2f22a51eb13590e2e9203744a250f395627ce4a890e956d193bf7dad9f243267e9dfa0406a7396dab6c9a88ea080
SSDEEP 1536:joqOysWm5M1Ew3A56Tm67CPFgkG6pT11HyC3TIpZJueYO9/hKnRmQdeDqsKldRL:FsWmy1EmAgm6FkGWTqCeY4/hvQYDq3dR
TLSH
T1326312E785750C26B1D12DF09294ADC629A75904A3F1310BEA85FD7B253D0F3EA23727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 205KB
SHA256 7a16bdce95c1b5db5a0318901d94f4a391e58100a19e53d0ab7e21ef54818b7b
MD5 26871e431ae9f0afd5b457d6681a99b5
SHA1 d439af02b70c5c27fba7c204d9d8cdceec9b2810
SHA512 9b6e76ef30df40aa7fbff8d15c6871f4bcfd1dadbf2651dcdfb0f3c83bd3ed0f2c426158779ecae3906deeea7cdc3534e2bcc96a97513646696527d045f87bd5
SSDEEP 6144:mwGYZjuxYjjoxnNXUqTsXNZSreL6OsSRSvF69nc7:0qjQAEdTsdYretT+
TLSH
T1562423F07D1D273F921A96A7A045A2035BCC39DF0C1AB034B6A91764836FD3186B7DCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
Size 256KB
SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
MD5 c21d5d29eb3014fdb864f388b34145ad
SHA1 85f724b019e8d04f50b336631c66f788c2b8f651
SHA512 a67da76326688dcd2de7ab513669246bdaddfda93635de9ef7db820243f3c4087e6166836f8b9cd09830873f0b375d2b720241734eb50d5cc8340d0592e9dd3b
SSDEEP 3072:aeE4Sz4c+ygjpraJ9XQu7fZ/4aUe+w3O2jD/JQw0hHyt8Vn60pGt:Qz4TyXJ9XBfZ/4aqw3O2mRyB0
TLSH
T166448C70F7C3E782CB431AB9A07C3D771FA504C562C51E1786A3AD219098B6AE71B53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
Size 512KB
SHA256 4cd087fa77488d3127bde4400d97d31e70f42f49498b461fce48caa03118abc0
MD5 99a42fff1aefc80d74b8fd19b0fc97ab
SHA1 b768837df854d89cc64763d595e32f13fc4b8df6
SHA512 2105f4092589cb51fb8223427f8096370d6352baf33ac8b478cbf521c7be71da8b5cd9c5693cbca650bf178b582f4fafccbd1da8f53ccb45ec94d280e3cd6e35
SSDEEP 6144:LGzmEh2Os8Eyh6C3yXcviY8NmPmIAOAdaVwge56FTMsvmpjGRPKlWWbWwHQA8qkQ:B8EQoUCmwOrwF6FTM2QqRPL2EY3
TLSH
T131B412E4FA93D2D1CF9B37F8A07C2E635B9A00C564C90C5F85C27C00A2A57A5F66752E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000de

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
Size 512KB
SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
MD5 a0355e6554046083e262e04dd1ee6199
SHA1 73f053d90ec3e9ddf235f2f79902350096be795f
SHA512 3e794941897c103033e709913af6e7057295c2e9f4587f19d1a13bcc867c86f6816d168245660195ea96ac17c833696abad4a4f034aa9dc2a45033ca09d52a11
SSDEEP 6144:aVIHGR+Y4LbXL9wD4GR9R9YsRUhovbfxGyTmSfKcKApMqdjdLi9NrMCrx4F:JU+YI9wD4GVwdVALzu9NQCo
TLSH
T1B2B423E9E1268529D30484B1BD769D0939BA3B681DEF3D4B04009A62FBEF1D0761EFD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000df

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
Size 17KB
SHA256 2164ce6fd110d2de50a85aa9e311580cbd11ec2db5bf454c51ac5ffe3c59a297
MD5 af80d3750435eae574468fc6a7c37cb2
SHA1 61248ae58e4ef865b9d257664611653ceb7b5899
SHA512 3c7b0ab35b24b2bf9c8432ae0f917ac58fe04068b76bc0c96d41462ca7836b695f613a48d56d793bf556c67f0e9c2b5736e66b7be2a42b8a789bd6c61de1df71
SSDEEP 384:GzHZppBGrJYN51l+d9E+Z/qwRsGVMk1BZ2ZoHi:GzH7WJYN56dVZHKGek1X2aHi
TLSH
T13982D00C046717BECE649CA913F503A2908ECBFDF842405B96B9949A4ADE7BDD5F0D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 19KB
SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
MD5 e54d44b14f32f4beec31fa8c91aa7e9a
SHA1 6c11d7190aa7a5d08f095cdff4d20dc000b76a8c
SHA512 4098fdf1025cc0a7aca3b4d8433810ff10a296330bbb9f02af88e40478659e4ac1a3dc1c757eea15b91743dbcf9a401fa0bdbfa88ff03b08dbda79e8e2241c0c
SSDEEP 384:FmRMY8+fSWCLWwmSP/+rJUxNUBawhHKNLuRZAgKkX7:EWYpjbyP/+r6xuSLuN1L
TLSH
T10F92C00F68CAE811B6E45EC583FBCD515482738007BA65F7C28A17882867952C4DA7EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
Size 46KB
SHA256 93e3314951da1b7d1ab2d0be721fa3eaa5d5491d6e4ecb0e67d9e8824d30d42a
MD5 d25f28bf445a5f1e3258138e87a7ff95
SHA1 7bfcc2eb3418a76f76dcfe63351966ffb9e9324e
SHA512 d977a86d181f88d58c6e4ed2faadfc2749e2480e43eaef25122dba9733fbfda53820d043f42db0af466c327f031076d870cf3b7274109e2d58b9170c17cb4cb9
SSDEEP 768:bH75PEhIxC5RfhnR9njsg9dyJKVsnwOvqpo9g3dSBJXKgG++SUmHuV98:j75PEhIxC75nLjsg6K+vqpo9g3da9Q0t
TLSH
T18E23F11743B6B48CFAFF72ADE1A95D3860DA70A4D42F447B83D9565343B01A25050BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 39KB
SHA256 e4cae14df60dcc77f05666d2bd7f856f0b09bd26a30ffafce5d04ae5667bfea4
MD5 ceafcaba0aadce9f4a0ef2f021ad041c
SHA1 1f1e8e81c35bebac09b122d4a91204cac4af9417
SHA512 c4dba0e7449f4babbdeff424a5ec5cf390646dac2f4186bb5167e5201ccc254cc65b2a3f7f7b9f4aa7dc673cebd66684b6a4d9ee611f5d3744597a6f3bbb00ee
SSDEEP 768:EvOPPZqrttgAOLQAZZf8JBZbRC6AKbcCv4DXKC7OqZoFlZc/PUhrxtHQX/W1hRXn:SOM5tgPLQsfslzBKaOOMoDZc/UrjH6Wd
TLSH
T1C803E11F808690FBA026EE1A89EB0E19D986674A8F1C0D51CFCD170C9FEAFDC5756851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1079455ce311235c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1079455ce311235c_0
Size 13KB
SHA256 044b01c42cdc3844ba03080ff0f9d0e7f7d60d8758e87a59cd8c3cc8491cd4f5
MD5 102fbbc1de72b3c38ad78835bfb127d7
SHA1 e63a55ae3f0ea5d92e3b35f6ae4b7e6798b57ccf
SHA512 5a1a2bb9301eded6e63207530070a56962bf4f51c7a54cd9b688514a7d8460a9e81b022fcbec4c8711b67027da0de029b77b99a75f958f1cbd8ad8c4bcbe75f9
SSDEEP 192:i7ebnmYJygqXJbRFUaIz5nrbJuXjQIsWjFoMyJZDLe1Je+Ve2tZR/hv7INsJ5VMg:i7umYovXSFrozQJZD618F2rR/hIO5pX
TLSH
T1C052071657697E27CE2517F608868B7BF73282463F83E31721B1A3752C267E74E88807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18853885c3dee531_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\18853885c3dee531_0
Size 72KB
SHA256 29cf7244f35e7c56e5573657408024e572cc005a7e84a67fde964ec8e797a1ae
MD5 9903fa923ca253b3a4b80fdadc01ffb5
SHA1 13f06728f6a3ffaf8b7b523f3a4d9d3584a8a707
SHA512 4b79337975dfba5748d88b92f060c74e34aa24486fe4cbad0825f6f5bc5ca9bc2e45e7579aa76c90270e86cc33aaa3d0947879aec8ee0bbccb72dd539c816f2d
SSDEEP 768:mEF9q5dMDgac38SsMC7YHUGagLPEm39eMShXd1QTT0Gv8bh7UfvJeO6m:mEUqEacMShBUGl755f0Nbh7YT6
TLSH
T175731CE6B3D4EF35DE5A5AF20011C766F6269D2C0CD5A387B1D0C3162C1EAD61E84E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22d52bec84f9b0d4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\22d52bec84f9b0d4_0
Size 280B
SHA256 47b9e37731ac7f4abae4fea3d124fc5383d2dcd86c194bf9c4f845227a636bd2
MD5 a3d3c0d57e9c51de188e9f1f638c000e
SHA1 8267088d4b50457bb8b54675f49f545b053cd05e
SHA512 fdbdacd1b02b784a7adc4a2cbb812ebcaf314ae610c0530a076630de1abc2f8284fb88d3ec2029cd76d7c629c24483b49d9fe9fab9e6b5121204d1a836542d52
TLSH
T148D02BE35C5219A9CF4F19BADE5A70958313D208CA09C099813A90BD3510EA92649026
MD5 SHA1 SHA512 TLSH

Submit Download

234c1e8c5294adf4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\234c1e8c5294adf4_0
Size 9KB
SHA256 1f2a7642e8fc59fa1ceb47e220ed24c70125038c844c504b685cee8f06e2b465
MD5 90ea7c94a50fefe9d596af94c488b45a
SHA1 f4ebe387bc616c560cca81fcf78f5e64ded2b964
SHA512 1979dc5a97a90fdf0594e07e2f63c937f95ce60d921aa10df54590786ef1f240467b3a0c092d5af85e673a7014d1a319b61e9c7c5919077f50ded7a1ec263d2a
SSDEEP 192:hPwmpU3RWT5iVdPda/8DzjPpoGEUfMXd7KlngyYwyfjDp11Ar:htW3RigNrxoGEYMCnGwGVA
TLSH
T19312A5A56721EE59CA61A3F301A1C9A6F37546893FC2C30B79A4D3342C2C6D71D8EC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a65d578b71d50d6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2a65d578b71d50d6_0
Size 3KB
SHA256 8ce6f99c052fd2ad51404b27973ea97fbe84ddd2a01581b0c083ad7eb1cfdb53
MD5 df3d80753089e0d3c993141a646bb522
SHA1 a48c6c845223fcd41ecbd048bf8f8292b1dabf1a
SHA512 8b01c836b431f7fb9e0dc02c0043d75d8912fb3de9656b865b8ac202418255c0e8af1b3c39dc709d73b6eacce85477b32678ba2b479ac96448164341f5afc499
TLSH
T15961C59B4B88B959CE3957B1D0858B56F33985841FC3C31B22B2A7383C481F90D6A6DF
MD5 SHA1 SHA512 TLSH

Submit Download

2d3961ded9bb3a62_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d3961ded9bb3a62_0
Size 16KB
SHA256 b1cbbbb661dae9c2a0ad3d49a12db4ab6dbb4fc50df823d60e172978e439d1f8
MD5 2c35fb34dbe32d98180774249e7581cb
SHA1 decb7882b3fb9817de3166dfeff74a69f53a7fe5
SHA512 984fe9b76c3a57d3789f76f48341fec4d4b1c8f93432a1d821aa3124412aac09693776bd5ec60a0fbcb4f1738abedd5a543add70db621b0a27a5e34e09d201b4
SSDEEP 384:DEGU5IIlItLGwRSnuGudZI3ZqOl71pGuuv348v7MDJe7F5hpUW9cJNLTf/:DMIuIZIEOl71ouuv348v7MDJe7F5fUWk
TLSH
T126721A86A366A66ACE2673F6069A9626F731404F2FC3D73538DC53950F482F10E47D4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33ed520404acc1d9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33ed520404acc1d9_0
Size 10KB
SHA256 c3d5a1c3230e31cb298220f5538c05561093f39e566ecdbad3129c818fd3c1e4
MD5 d92353dbf5be7c989f3a37195261a64c
SHA1 6dde9386df2ff2d0a9b2739faf54ba2bb10f09e6
SHA512 7d16803344cd856a2c384cedf3c0c3b4a2cd816dc4be727ffe96bd0616caaf56289ec756c0a8e2b331bf6dba2dedaee1250230edb88a0f362db3c18136bf81b0
SSDEEP 192:85I/bpgjYZfYMfvnrpfe7elVeAGefeSeyGe4GeUebeveTGeTeReJdeGBuj28P2Kr:85ItgCfYIUKlQo2xegPqm5CEWA6fFghI
TLSH
T15D3294C5F7C8AB6FCD1513FDC183DEBA7734826A6BCEC707A1E199589C861E00E64648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

370f7c71c3637b9c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\370f7c71c3637b9c_0
Size 95KB
SHA256 51b0447a63005431c931f4739d6362dc25197891ca4b5faaaa990202271bcfef
MD5 5a97e2da08358eadfb72b7df6c373370
SHA1 c31d5ed2ca464d403edd8ed519f6f399aaa60898
SHA512 9656046a8e548997d30a095ca343cbc80b40136c146f52940b7cadb062f81a8f10a33756fe68f44c3aecbe8663921678ba4c463e8fc5f1f7f800b40497def758
SSDEEP 1536:a6kpWsNVaihisHmj/iDnir7i6ei5ti+69iJxiYXziB67iwqi/BibEigRUWQiRAtE:a6fsNgihisHmj/iDnir7i6ei5ti+0iJH
TLSH
T15DA3830A2B80BB59CF2EA3F985B18FA7763090495EC2E30762F1632C3C5D5E55D8974E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e6eb1da66dc78aa_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e6eb1da66dc78aa_0
Size 20KB
SHA256 0650beccf90178e72d832a957a90cfc59bc4a4b2118fcada87f7b05c262b7b5a
MD5 23a4af6f17e23660be62127447fd276e
SHA1 2090a85c4a50200731e56c6acfde286945af5827
SHA512 5adee58e2e19e4dc17e1e0f3b52200fa853d962c6792f86e653fe62edec22367b531f912f9e9bc9525b207ec9d6ba88d84e63e8b7fdee5377576d15c05c93872
SSDEEP 384:ccYzBNVJjD8kmkn9y/XUYVnyKQfKnsBbRwQYz7KnAejlHbxpbQMp1j23tEzR2:k1NrHp6XbnyKQf6cbRwQYvIA6RtpbQMs
TLSH
T1D192D5916750FD95CD625BF601A3892BB37A08897F87830B20F6E7302C683D75D8DA4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40a48cfddcce7ac4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40a48cfddcce7ac4_0
Size 274B
SHA256 93478a7ca21d9a3833c874b4f5a656cc6efb7e4025f09f701de0bcec7e9b6689
MD5 7ff74f6473aaab17d02661416984e63f
SHA1 bd8b542dbcfd370a206b6ded39f30c2854117519
SHA512 fc24ec8f3a311007f990ea8dee473a5ab89aef1e6427489f716051a7ffaf6baaa9893b4d4b355c2f79651d0fc0669e6a219fd2e0c4120ed83618f0f550313dbc
TLSH
T165D02BE3B900264CCE044BF3CD943291C33548A4CE8AC05C9431247675259E7214162A
MD5 SHA1 SHA512 TLSH

Submit Download

417ce13111469d84_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\417ce13111469d84_0
Size 266B
SHA256 07a3f6b1bd6d100fee1d4e04348a740456a3e9c89e4348581811eb70110fb0e7
MD5 fd7495b03710e79d10af22283881daeb
SHA1 ebbbb773379601954fe718e46fe4dfcd5c25b7f2
SHA512 ad48c63c073a390d6fe5df6e5ee10cb7766797e9838289167f70dd3be1e8cda582e8eb67f341279bfc20622198438deab68211969ed3882e8a6f753ef9d7bad4
TLSH
T176D02BF380200984CF4918F0CCD6A1B6D3310348DE9882D8743230AEE514871A784865
MD5 SHA1 SHA512 TLSH

Submit Download

4571e087b1bfa3c6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4571e087b1bfa3c6_0
Size 17KB
SHA256 3a3bceb24795c7f56759cce50ce5d43781a5e7357cde7b566c14940efaa8c361
MD5 50aaad388e81a5db3be683d62395281a
SHA1 82cf2106e91ec3521a82c2151eaa5c8450c6eed3
SHA512 a733a31da6fd6f0ae9ff43256062640034a22574f3224a15cb4d66d2446d5c3d25edaa2a7e5fdff156ac6e31e889d257ff9920ab19f755a01bee1d6451a96d01
SSDEEP 384:2oc/3pBY9XlvxHkEg1qTL9zJ00WRMXuDG+w73+c2k:2oc/7iON+L5JsDGpdh
TLSH
T1A382F74523992D26CA2D13FB0866C96BF33585013F87C3677AD563392D2A3E70F8E506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ab942382c038941_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ab942382c038941_0
Size 272B
SHA256 d38dfe15d14b99051ea01f14aa81708bc823f2d4910c85303b40d9eba77e613c
MD5 4b906cbef735c39237645a9e1be9061b
SHA1 9c5d84e2b56193d9d0674ee60f75219bfaa3962a
SHA512 ddcd6761a1faa5d970b9bf92b90d90af08b0f2a58e6e92e5dc8b91f870e7e587a863d1c90a454ef29424b22b1c6cc3fff50a8b176dd4daa2da28a7b87da2800b
TLSH
T162D095F70034B84CEF0AFCF0DD5C7ADBA33241558C4D84069072403BF447412265D811
MD5 SHA1 SHA512 TLSH

Submit Download

561f953653a8e4fc_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\561f953653a8e4fc_0
Size 5KB
SHA256 46bb4658d1209087b9b5bc937cee42a2941099ace57172fd3373f9be33c3ffa9
MD5 4fdc6243effcf533ca43b73f72f497f1
SHA1 8a6f6a10f9622c7aa7fde656087baff4e196f51d
SHA512 37fc6183391f7ab34f17177c676f35d78364f5a4058da25c2f6f05cd5e812809e1930a37d87717120ec38cd1e7d65d2c48ce8933320541d59565bd03a887ea1b
SSDEEP 96:23yzYRcjqgy1lrBLng7GL9gSyikaGSCSEa8FAQX2rp7vLDAeg7T4V:2iGgAlrlng7GLBxkaXb7QmdTAT
TLSH
T1DAC1C81A1778A857CB2A03F96542465BB33A41883FD3D34720E1637C2C5A7FA8C9DA07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

571976d23935541a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\571976d23935541a_0
Size 9KB
SHA256 b54679f988a8c67cc85646b62b0fd21b8e985230111f70b3eb00ca3a92f7ca0c
MD5 ae69b603d3c6cff4556c62be9e5b0a86
SHA1 64c44c0719ae3bc584b9f8907d5cee391fb3475d
SHA512 65c3974807c91efa8496f5b96f8fa9d2b2a28136a8ecd60c7e7328296b620919be17e9794e175da94c21d7f723410252206dae8bb7938bb4bd8431b6d0a02b24
SSDEEP 192:HSil/R0G9fe+gGPzWCH2QkBN78Ej1ZebLg24M4e:HSiv0r+ggzWCH2QkT7t1sbLg/1
TLSH
T19F12B592A354AF49CE2613F64A1686A7F7345ACC2F93D75330F1632A2C1E4E54C95E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f417ab305b6b825_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f417ab305b6b825_0
Size 7KB
SHA256 0272518e651bd23cccd8d6dacb956c8d6c6d37f52ace426a223356786d1ae396
MD5 2d2b6416d7f7ac9c962935a296714f8f
SHA1 5818b752aa2b7f60db2e050b218007f0439eae1c
SHA512 5abb55c0635a5fa01f112351dbe28a92f5ff4c2b2de00422bcae083446bd518a0fcc91581d45cf253362533c47d090d81c2e3feb246a4826ec0d4563f4116173
SSDEEP 192:bVA0idhI4hBxpgWweneck/LXoci4ofee+D1:JoE4HESecGoD4o2ey1
TLSH
T1E6E1B786A3D86E4BCE2713FA424296F9F63245092F87F30715A6533B6C11AE35C19E0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

613f4e72673dd0aa_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\613f4e72673dd0aa_0
Size 10KB
SHA256 023982bc8f9f2a6da963cf2cbedd4a7f644263f0a4cc9154ce10f3dc056a0ea6
MD5 2859c19f00b3cf90e08049bbdd9d57d6
SHA1 9b2f08c5aaf1d2cf779bee86793c13e9fa9af47c
SHA512 cf012192555964ab33c67905f40b50fbcf943c5d8824a5952898e8198869cc5e74196090ac45e33bda08bbff936fca105a8b2c866a7b514c2cea7fe99d6e5c96
SSDEEP 192:2ckHsS2Mr6chEpNO/YsACxCia5yexEeQeQNZ5snj+:2cVA6coQ9LCf5RtDQNZ54j
TLSH
T18722408267846B0DCF2633FB89668A727731545D6EC7D31726E0F3681C1A4C6AC58B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cfbdf47b5435b91_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6cfbdf47b5435b91_0
Size 11KB
SHA256 9ec97cfec2c5fd64574996995db5525cf378f03935a70b36a86ac175831b8fbf
MD5 56ae2e558208bce11bf974486fb7e785
SHA1 14a8cadc53820463a114d19a2c0f73451486f905
SHA512 997ad2f4512e80ea726161f813bc25209ba70b13719a0c45b49c6b770a103fcd1dc11fadcec7d1c536908ae3b48c0cdfb73115ce615dd7b1598bc532b73d2ada
SSDEEP 192:wcpvGcyH7ewQJrYUonOhegGAntwCez0ImqLK2HbEoQkKHMeiNhR0bpB4sgsteIL:rpvGTHKwQeUonO0gJ6BAImqL5Ao8niPU
TLSH
T17132B5496388AB5ECF2563FA86A3CAA7BB3150493ED3DB2761E563392C051E00D0870F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eeaa108328b4615_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6eeaa108328b4615_0
Size 14KB
SHA256 df82d15b3f2a5bca64d0d5a0e7b36e767524c291b8b4a46c4715e6e6ecd293a0
MD5 4439a8ec7bb612ba461306604557f25d
SHA1 44cd2a672f3c613a5d48f100b89221ff566f64b1
SHA512 e46996f0dcf8f0f84a329891047af5368fa9d867ff86159a029f21d62208f40c5e9aaafd44790ea5f88018f13aa088a6497c2ba07079a0755002874713a260bc
SSDEEP 384:YEuz1cdBeQx2gq9u+BmsF74aYOn8l2pGfR7aY0:YEuzGBeU2gLd474PN1
TLSH
T1CA62D7561B64A81BDE2B53F90197872AB33581443F87E72520E277386C363F7498DA0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70c26174a041dbbc_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70c26174a041dbbc_0
Size 279B
SHA256 4c754bef4afbb84bae63ac71afb8d255031870d9bea61ecb1f409b7ee4382e9e
MD5 d2bd508bfad1db6abbf8591e8727c27f
SHA1 00248750b2e78293cb6890caacf325efaa47e72b
SHA512 2a5965bb558ee7988e2d39ef399cc2eedcdf84d6272a2c26632f301a5b2d2b8146d0955e5fc2f69874193b5c4a070c5a4e7882a148b8df1ac35090a16f43bb1a
TLSH
T145D02BC324380404DE155AF0CD7A724ECB268CD9C884802A80335496B852C3325C5939
MD5 SHA1 SHA512 TLSH

Submit Download

77632dbe668eaa04_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\77632dbe668eaa04_0
Size 19KB
SHA256 773b9ad617027b890c19cfc2850ce8830ea65d246d2e785a3a451ddc186905a1
MD5 417818a0f1ecb0726bf204dcf69ab3a7
SHA1 c6615b25f08a91988f3f951ba50bf7e44b2d9dca
SHA512 4b0bf23d3c0a2e793ac9922e794756969a6672e527d98acc1e053f070cc382b1a878daa2c32ac8e4774ec523631db5d2f5731e621bef34da9c51e1988434defc
SSDEEP 384:m1znUqXe4mV8ShYAzWsIwudZROFgujaNDR0Zq7F7WMbd:WznUUmVl/ZIwkLOYWZqRWM
TLSH
T1F492D9512755AD2ACE6203FB09B68627B336814A3F87C31B1591A3367C653D35E4EE0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89a6ebd98e80525e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\89a6ebd98e80525e_0
Size 269B
SHA256 989b34b4bcc5505dc3c43bfa55cfdd4b44be1ed1a0a49cb53cab737017e1bedc
MD5 a44871656504abdc23d004eecc37d1eb
SHA1 6365d2491053dc28736dc8942d2316e40a1f69f8
SHA512 725e9d11f5d7b69b1fff98d29ed66982e5e777183e3a61a8f9ccb97359b52109cce3ed67a1bd5f361efc6dfbdddb4a10d499b9672b9838fe3cd55b119f1f47a0
TLSH
T1E9D02BD334231458CF5378B8CAA252C846352068CD38C69850765061B8235334B54459
MD5 SHA1 SHA512 TLSH

Submit Download

8baff564a24ef342_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8baff564a24ef342_0
Size 8KB
SHA256 3f2d20a077689a496dae799abbe994cede44c7560ff6a891fa6f5fc1cd7c0325
MD5 b62695a320b8bc20d47213892a934c98
SHA1 3b5fbfe54bb987e11b5b692ed8a7aa80e411d148
SHA512 869693e17ab6143f78f21f5e5cd65f42688a6eb33dd99907583352be61dca96b0c89898031623c8a5839a48a5b0bb7d6f787d6e25d7c35443b386267b6eb75e8
SSDEEP 192:Gez/VV42PVbgZhGzGHL2NL4MF5fkfaZAOnjTVlCo0/n:GejVBVMhGC+4MDfkSZK9
TLSH
T15702A5659B314C26C6364BF624A7486BB33B425D7F83E3176BA0A3252C2C3E39D9F415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c23982ec2e3393c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c23982ec2e3393c_0
Size 267B
SHA256 57f3c4a3c81e525128fe732fa54910cb6aa59426690f0f4c2227fdcd43660d4d
MD5 f5fe7624a4f2e0be674486c0afe51569
SHA1 1c66fe42ed816e6463fe8e2647a33348fd3c3dd5
SHA512 3cac5fda4e0b553483078f499e075e419880bc79332a93106e6e065b869acb8062a7c917c5cf6e23ffe1c61df80a2ce11d7191795c37b63c4df1b2ef101e371b
TLSH
T16AD02BD348550448DF449CF4CE9D31938319A318CC42C74805319452E3584664691422
MD5 SHA1 SHA512 TLSH

Submit Download

965c85ac0f1da3c5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\965c85ac0f1da3c5_0
Size 10KB
SHA256 5f1c8a0ea30b304d54ae23546811c2ae2adde3a29cf0bd965988b5e5aeed0585
MD5 2b1435c438e1ace4c4b4e38337275584
SHA1 18824324ceb786e91f1c3412d79dae81c996c3b5
SHA512 e49ee7ad14ad6c73a0be1c4308f9618cd08d662c5d1ba03af217275dba845cdd43b80c5a9fc5d4cc99420815f6a1a7a90488270d6de832bb7c3d436b43805def
SSDEEP 192:UxjJCZfhOLH8MsCveaQ30QwpHlLPH4e6EGeLzkhPDoSBfe0lEAIesQeY+o/9:oFCuH8MFve50ppL3NLzuMEEA7sDYl9
TLSH
T1EA3260D2A3846768CF1A33FADA928BF26331401D6AC2C70771F19358AC5A4C68DD9F4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

974b736a16eef29b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\974b736a16eef29b_0
Size 7KB
SHA256 c92aa458124d6d9f033e9228d4245b2f157a140d89655a208ed07925fab0e5af
MD5 816068d4bad0ea7bcffef2fbfc6d1ecb
SHA1 8713b6ce481979664df9f89846191159f6dc536f
SHA512 262b15aca363b2595be4b5951258800c514e51c80bbf10c7dce9a29035b93f0cb30fb304112ee19d6bc02b1eab35e1f12b0700f5419d455ab84c174271d50bf4
SSDEEP 192:V2NVzBd8n3WfTckzcopbgjLyf9DyWMue:8NC3WfQccopKMDyWMu
TLSH
T176E1A59E7799ED87DEA617F248906835F27C8498FBD293CB21B0D33058499E21DC990B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98fb17b4034f8f18_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\98fb17b4034f8f18_0
Size 6KB
SHA256 45923946e51fc990f1be1ecd7da141547aa53d164657da82746262c4be8edf59
MD5 5465de69594335ecf937b1e76f8d41a4
SHA1 d6e66ce8d82526732d6b342153e47ed4e265774c
SHA512 70a39cd64984a2d51fe4be427e6b0967ac0f773ad8c7b2f04f44f0c283371e4fcd4da7a7cce5193fc7c017a693da36375bdd8cafc893805745448038aeecda25
SSDEEP 96:l0s47wOlvoHGywwVlS2Ev+mH+3WAKYpbTvy/mRxcK1DfPfaUyrNbLfiBDDrFChBf:aaKgHGilU3+JyOosHyrdLf1h0bfrO+k
TLSH
T1DAD195565B11FC95CEE253F10196C42AB7764444AFC2832B20BCE73A2C4ABD71D9EA4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a0edeefca36a251_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a0edeefca36a251_0
Size 267B
SHA256 b919750e99eb42fc896098621654fec507b012a849c12f6d29ce9b2ee8ee452d
MD5 c8890f6cdac5d5d3d8265b83738cc907
SHA1 1e607144d2550b4162d5a8a6eff1372965ed2a0b
SHA512 51e52b8387935522788f1649fa145987488507243fb42adf3e278229ce22b56810ffef878277439de14fce15b750245e07a74c2d6ec6faa6e68e34f45c9dba75
TLSH
T1F1D02EE3902114C8CF065AF9EAB431C8EB680018CCA8E2AD8031A2972E12837044C92C
MD5 SHA1 SHA512 TLSH

Submit Download

9f309867143e7cca_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9f309867143e7cca_0
Size 88KB
SHA256 3f07c25b2a01af84562acf6c19ce880397fc2da5a0a00024652399103d16bf7a
MD5 c63b2b49a13704e10565084f17d7b8a1
SHA1 c85eb65212ac5d26581b077fa41fd7847c4c7b5c
SHA512 057d0306e5e4f546e9f52de810ff47500cc3577d53eef4bd2702ea80beba5ec822e8e82852d162998a9192576075f7fba8054e2c5948116d0c391ee78a7aa0e0
SSDEEP 1536:gdSzz8Aymi6Pv9LVku75Z2Ge+gXT3/KblzVPyH9L4Uracc:eSzz8Xm5TkE5Z2Ge+gXTPudAa
TLSH
T1BF9318592364B957CA2663F900A28766F73584413FC3E32766E273762C292F25D8ED0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4bc422d24fcc079_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4bc422d24fcc079_0
Size 13KB
SHA256 0fc3c05c54d17b633666093052ea8a82fff811029c57b82ab5c43d21501dd491
MD5 36dbcd73f7a8db74a0471e76a7ee3de3
SHA1 ec756c6cdb882449c240175d6c483b74c2b1ccef
SHA512 9bf43f92fbc73f6ce67a5b3241a347462aa4085b05ce9006ddc0c25bc718a72e6495f4da7bf38108bfdfb51b44f299e89e6c152e768117355919712746caba69
SSDEEP 384:LTIyQgw0UkY8aW9UkLdj5ZZ0WDKCB8vHYDPr0:vrQxkzaAdp1ZZNgQ
TLSH
T1AC527483A3846B0DCF2223FE425B8A63B730501D2E87D71BA6E1F32A2C595D16D55F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac79baa0f42e0724_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac79baa0f42e0724_0
Size 138KB
SHA256 60e21c84911d17c8eb8421dc68270874bec48c765c7404d4c6b0c8225a627a4b
MD5 c836ff568269d52c831e12c3b00f100f
SHA1 87eaf0d4e4872c740bb9e054753e10978aa05ae5
SHA512 2fc74b8c57550242e526615b5ca29d4557f1a12ae61b3ef07879fed6e571d53cdf4f401165d3d93ecec3e327edf5512d262e810bc7599c9baa775a59b1606fad
SSDEEP 3072:w/lVxySAw0IHzYYtHI9PITYX9MQs+7omdI+YLA3+clzLzSRVtXd/:oLVfH03s+7DfYLm1BLm/L
TLSH
T134D31AE9236439DF5807193AA03AAEF97BB40FE9488B67D7C037B29509319F761C4139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c70dc1094b4cd4e7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c70dc1094b4cd4e7_0
Size 275B
SHA256 87dd50540b01a208a9ca33790a507a75fe1c72c7a4bfcbc91e8a579d195203ee
MD5 2985a55866f7c974d5b52d1aeeb299a5
SHA1 5cbea09e337620523b7e62879608fd18fc18cddf
SHA512 d1d511d963b342dd894a67b4ac530df81e776bbcf4c56e5bf2f54230272810a203ddbc80b5edec2345cb937f1f85571afe9f503b775097e36edd69f896348beb
TLSH
T1EFD02B97082A0C18CB055EF5CD2B2995D63B0257CCE0E1EC043950BFBC35965E242B23
MD5 SHA1 SHA512 TLSH

Submit Download

e65bd2787637d8eb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e65bd2787637d8eb_0
Size 24KB
SHA256 0860bcf44b365fa5d2e3f01c06fc3bbf24dd7ac27b27d5af7b2964eacd47269c
MD5 167f791c39ba34ce1b6e5d3c1901c723
SHA1 0d0c9b6aba50d4f84c8a31cdf60bef65bb403b08
SHA512 632eb97242ac713fb4f30477313682065150410bda3cb1729e1948807c00f0eaa613a4e7d05c22ba3eafcbce51aa1d067a529eda6f50d6cbbcaa7d4978cae65c
SSDEEP 384:v0D3zQxnJo4xjDLqSI+GGFGt5zIoW/Lutrur/T4J4lUQzn5uhuUD8UQIwZihgLJk:v0D3z6yqPj8h5IlSsqx4n
TLSH
T1A1B273AA2794FD25CB2A23F25151C673673148043FC2F72734E8AB361C4D4E91E59A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 854dbca33277af3d8f953109c92cc3d81c1195ed332f492776b1b27eea9a575a
MD5 78918c0f82daae5fcc6f43e78a603698
SHA1 a41990cd1c9fe428359e939897835e714a5b07c5
SHA512 7c4d106b7b359c19aef924d9326772071e0e1005806495aa80a209e5dc7b3083deff2925a24f60467b8e1871ff89067caff7e091a93b9458d89c4a45cb0dbce4
TLSH
T190510044A8BF62B6EBC5013149E0B28B357466728E837F128B64DCFA7B267D483850CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 41dc935aba53ac45bdf671285db84644a47f32d940619bbbc4dbe776967c8e56
MD5 8ef53693e5a5a4212cb5c003a85aa8ed
SHA1 a3af529cf87cde0c6047a528d33580311e31968f
SHA512 aa294c5ddabcf8c4849cd54cbbf9b622df8cd25470d9c71a96a5b4f8105e77f908870206db67e21a331ae6c29e431f326181fab526226f04c72a471c8645d905
SSDEEP 192:+3mykLpVEr/DtNopp9J6XRyNO91axz34J8At5c7BvAPXHA/cP4ymW2EcZv8RFIsk:G6jEr/wj6XR7mG5tEiP39D6fZAIsaX
TLSH
T132623C2B6E5CA492EF18307040D8465679389C6DEF0F3E423B97DEFDA79275431621E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 8685b8e54c26e6bb181650e432d3a818441e29a3243a45971e6d1e9813f05fb0
MD5 e3a3ab918ee2aca2fa92810e8b4d1e89
SHA1 4dbf50be9a6ab0690e7f9c06220b2ea1ce6dfb34
SHA512 bf4e0a16ca09b6f7e638c8e0b32c80c84ded954da7f254385c3ddc1d0ae9c4346b49503203e39e6b108606b580a1fa9e67cf8263392aaa359afb905411ca0db3
SSDEEP 192:6b5K0mAy9Jpk93x6h1DD52qsNkW9lnpuseCkaMwSh:OkTHiSk7kWgseOM
TLSH
T17AF1D7007E6E32EBDB8D31B108E0A54A7571643E4F532F927767D8FDA7127C052AA0C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59b404.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b404.TMP
Size 2KB
SHA256 08854436b870dd77021067d5b11be78b552cc767732f9875a27f434bc701eeda
MD5 643634d01647ba1b7ff3b0ff5b3e13e5
SHA1 8f25b855e1a1da2dda6dd6f55670c6b5974c94d6
SHA512 b0a829d91b9dfb034a33de936b414f0db1610b274409b6c11d32e7b8cda9c18e52a0718fab9b6ccdc4da7366965cdcc8ac8186390f85cafc4a384d449ac8c937
TLSH
T16751FF44A8BF62B6EBC5013149E0B28B3534A6728E837F128B64DCF97B267D483850CC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 a56d956b20d3c0e99e2546ec790c3f75fc70cd5fda1faa9f788a3b76da3e2146
MD5 43aef7338e0526572116613b430e5a02
SHA1 27b0315cafbfc6eb2175505bac93b72d46ed3de3
SHA512 4ad5920e5c529b3735b2a82c59a42b6592c266981f7a1d6b88cbb81cf20f98957420bf7ce9e96fd72150aaa397610a993533dc21f7924e5e13b91c1bfe60fbb2
SSDEEP 384:DW7UEhhnmp0q5odxoJTfXTXeX5XYXdXuXqI3Fvi25ahQ8/SLJRNi4RpFmILm3CEr:rj37Yq9iJ8q+
TLSH
T1F672ABF7C3E5862DC91156F0AB14BF2BCE1D0959836C3C1A89E4AF5BA3F2471E141A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2396c21713e72da3dc78de02639fe332fd971578bbb7f864c61abc40105d3c51
MD5 36036d4dde5d4257aae8742b7d187524
SHA1 be6f430776f490a9f000f234e2be0dfef92396b8
SHA512 0d8fef0e3991585c0979e5ae4d451126293bf1703a52fdd795d9409cbf4320a3b73e149b0f50376aad15d53424899628643e16c251d67166e9c8d78b19dba0f6
SSDEEP 48:YALlN3O1JZm1J81JsC88T1JgAsf3RsfifoKsfUgmgCZs6jhhnONzs1zEsy18zs7f:DNOBm0kyTIn30i0Ui2jh/z2HUx3Swly
TLSH
T10991B0F7C3E8D66DCC025AF0A618BE2BCE2D0958922C3D1AC8D5DF5B93E24B1D14194E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 5dd6205c2da8c82cc020221a3386e52a7bc1103e4ebbe5be86ebcfd702931405
MD5 c4f222a99758928407e40af89740c728
SHA1 d8225c4c80c47ce1a14f7225189b98374939cf27
SHA512 967db6a131e529bbd8a620a1c11febf875a5348e8e03969c20146e7657225854c4c3055cbb60a6591594e520c66233991cc37b20a4fac5c5578ae094c844ba68
SSDEEP 192:DgBm0kyTMhnmp0q5ol3Fvi2jh/aHU8yfVSfzEvYvJRNi4RpFmImBmtmR1mDLj440:Dg00kSMhnmp0q5ol3Fvi2BaHU8yfVSfu
TLSH
T1DF229EF7C3E5C62DD91156F0AB14AE2FCE1D0918932C3C1AC8D9AF5BA3E2471E141A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 676750fa9e2a367ca15f74ab03bd957b60ba46d862e84ae515f3999393b86a03
MD5 9cf0a3df5e834b48630bd8d57e199cfc
SHA1 77339c35b8b24b091758f5327d16f3eac0063393
SHA512 ad94b28530b3b4b7264b1da7539ffad518ec5fa3ae953c2e05f6491513a192698e96535a7d3b92dd948e0a49c22d8eb5da2c25003ce3b031d764649745baef41
SSDEEP 192:DWImUEhhnmp0q5odxoJn3Fvi2jhnahQ8/SLJRNi4RpFmILm3Cj44jkmrmEmDmgmv:DW7UEhhnmp0q5odxoJn3Fvi25ahQ8/SH
TLSH
T113329BF7C3E5862DD91156F0AA14AF2FCE1D0514832C3C6A88D4AE5BA3F2871E141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 99395024d84fb97a1c8fd23779925670042ce6f726bd44c61fb4e24678728388
MD5 0dc9e734e349492f372f8749b05e2560
SHA1 ad97fe85e126f00bba7355d9df51dfd9f2416368
SHA512 0ab57dc7d72d060c8cd3fef5bf1b921ace495a23bef3c5c9b5c4c3baeb49b7f6775f66de4a9aadcbb300218c91d2a405c53f502c22f03c7875ed188d1ca9d455
TLSH
T183D02263130970B5A56C6E8188AAFECEC3B660B84803AED855E1D898293286C46C7086
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 06a79209cefbd004991add61639968e8b0b6def488b22749f8e5127401bb2733
MD5 1c5523fd159253afc654c9624ad4ea80
SHA1 6ad26db57fe652fafc2f5767454b557438a1226f
SHA512 2533539e4d2ee299ddcad9b218a2ba6da96487005790194fb051ed40dcbbf1e4ddd72c6e4c7ec75cc410490ff770c5803b0673b47cb1b91b49a77649c9e7236f
TLSH
T183D02263134831B5A66C6E92446AFD8EC37620740803AEE859D298A8293296D468758A
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 d96d416f05e721d423c0d4d3920518ddfc64ed02d3a5586009180c05e31319f0
MD5 16b8b1d079e05493d668ab1153901422
SHA1 16f40e5dc88580e644bd617f6b85f5db64aae68f
SHA512 55b617044a2f17ba1b11ea5c0dc9d24bb82453e2eec1333a2b022ca640d52d08bb246d8b66a62a10a487464f907f276ccc3d95757e51c6b72effa98bfd13f16c
TLSH
T1F8D02263130870B4AA5C6E9684AAFC8FC37660344803AEDC98D19C98293286D46970C5
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 3b8061b7dcb455de4546664c7bf7cd3123de490b33c11617ec1dd01fad9c0fbc
MD5 bfe9af9847512f608ca00873fd00e3c5
SHA1 8f4e4df611816d7fef8839dff3ee783009f216ec
SHA512 53a435e2515c5754707d11d87fd4c4ab73550847bd7bd38111745d82c2bb1340b5743ccb268066a0f1d844dd15b73599c816f268d397baed663460872ac4e45b
TLSH
T1DCD02223130930B5A66C6EC5446AFCCFC37620740883DAD894E1D8A8393186C8687186
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 17791423dee17b62d427f9efde2798e1d19e812f6967ef9ba61e36b885148aac
MD5 66b0935b7bb7ff82412f66499ab79b9a
SHA1 57163c8df87807ecdd4112fe8f29166f7997985c
SHA512 ccdd9f6a73c08ba1983c5cc08cac6cc772cccc7e1cc4a45ed8b21edf220a4ddff26c95c80b11635fb0e4a811edd0c77a4565bf434cb65e36472776b054b2439e
TLSH
T110D022731309B0B8B55DAEC1646AFC8EC77A207408039AD858D1D899393186C4A97089
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 8a6b379773eaa32f3e73091a14253c740b99bc487de80b99d145d44d9679fa1b
MD5 2de55b01410551199a9c381d46dc51b9
SHA1 e19e28195d1b46da8fe821aff86376cb07d3e287
SHA512 f89e9d0caef48dcb0b3b6ba48684c926e0879b7f70635888f3b1b2f4651113b475a1c27d2bc64e7d3c5e667bcf4f4893f35a8babd0305ca53a8a8ee0a9118266
SSDEEP 768:symJmWg/ft4Mnc7WeT+P632Ey5VlI+TT8:6JmW9MmW9O2fVO+P8
TLSH
T193F20A469810C8778AC35D29A93DBE37E6AC105259C5DEDEAAECCE1C00DD1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 da787476fc7f68b50196f25d1d5c16fa1a7019630312baa00d4e722d7dadaa1d
MD5 21667e4c2139a99bd49f7d368ccce8e9
SHA1 34536e826ae8d5cc682546b0b1f83242538e4b47
SHA512 3a40bf2155d26f2aeeb78c892f52f7a5eaf485d8671ff783d47e9044ec0faa006f3def351ecdcf7d546c3f2a27699910679c8bad65d8c721d9153f2ba1afeb03
SSDEEP 192:sxRaRsOg/fwsnDuK7xf+zoA8pKpY/g6+WNLrgXYDDc+GEIgDfJ:sxRalg/fwsK6VZ/54XB+9
TLSH
T16142A819AE68693B4CCBE219FB55BF13D2FD103260951E48B6FC8B1C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 433c57fa9a1ddad1af82035b2eee0d31caba89b45b4aeaaf768ea7dcd7a30f54
MD5 e25f7a37cca89941d947f227f9a109ab
SHA1 6744f18a29d17bf07ea21a0d60a3db2de4820db7
SHA512 9659532535f7c099dd3212ad352df5670d6d5962c187bfcb683da98b2d6bdda4e94ae20db7e58a0f65d26a37b11fd9e4bcc23f29f653f884dcffeff3362ec00e
SSDEEP 384:sxRXTmWg/fwsh66s8qMpRiYnazAW8pZS15posJWeT+IM6JicqFhy5FEG/C+Tofrl:sLTmWg/ft4Mnc7WeT+P6Jgy5nChfZ
TLSH
T155E2084A9810C8778BC35D19A93CBE33E6AC105255C5DEDE6AECCA2C01DE1FCAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 44d7aad9f67282160e06835617a7e0a1e90751adabbbad2148168dc4bfcb8583
MD5 3d66abe89829d1f690bc237be8153bb5
SHA1 1153bfe8c04da886a4e676f1b6e2a815e9d00e84
SHA512 19f9d9a8ad7105a283db068046cfb295dde1dd35e0a9a4b7d75be8592a1fe6255810d12fdb8eeb009570698274c062c0a9a466f3baa73ca1afeb09cae7e1465e
SSDEEP 192:sxRxRsbg/fwsNK7xf+zoA8pKpY/g6+WNLUr/YDRc+GEIgIJ:sxRxcg/fwsN6VZ/5U/h+s
TLSH
T19E32A815AD68A93B4CCBE219FB55BF53D2FD1032A0955E48E6FC871C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e2b3a00ff06cec66d433953d10d665b017456e842055fa6c54220da09403b14a
MD5 72cc8576e31c84d0bf81ae5bd0982bf6
SHA1 94b1b2f9e7c69b76937e4c2b9713739539de13dc
SHA512 be4793644977339f8698b24a7971fd79b4890d0b3af4133887c23a7772f8aeebfc52525a74b32033be4b4e12393c5fc19db5272548bc2ba8a7ec5db2a24ebe25
SSDEEP 192:sxRaRsOg/fwsnRK7xf+zoA8pKpY/g6+WNLUr/YDRc+GEIgD5J:sxRalg/fwsR6VZ/5U/h+P
TLSH
T10432B819AD28A93B4CCBE21DFB55BF53D2FD1032A0951E48A6FC871C14EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2c8207ce826340bde9caeaa48dfa36c6a1d0f5379693dea301b1ef4e71856ee1
MD5 d7d98ac02760d461915b07c4fe9348c2
SHA1 9eea011116b2375093d1cec8975e7660cf130e0a
SHA512 b6b6c9c0bbb5942db5b8a97b2a1a92ad9d058aa8e84ab2024ed554b2081b3ab89b93214ecbf25053b4e1e49cd98cf8690dcb77d042a1793c01b4dde96af4559b
SSDEEP 192:sxR9RsOg/fwsnDuK7xf+zoA8piIuKY/g6+WNLQ+dYD4c+GEIgDfJ:sxR9lg/fwsK6VY/51di+9
TLSH
T1AD42A919AD28793B4CCBE619FA55BF53E2FD103260911E48B6FC8B1C15EB6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 37KB
SHA256 04834b4c6a66009680ae54e9bafc0096f7ba6e79acaac809df8d73810c149c55
MD5 cc56ee37904bdc16539bd5bd55008722
SHA1 cfda1f8cd4372d9e76882321495d7015033d6f84
SHA512 9b545a9f2fa2696d60c07f81a51228f000e313b778b31a094541341067aa19b9dfe8279f3dd7fdf8fa9f8042177e67b7eeca11a22fc66342c31f22b1e836e81a
SSDEEP 768:symTmWg/ft4Mnc7WeT+P632ry5rFM+TTXu+TT8:6TmW9MmW9O24rC+PXu+P8
TLSH
T16E03F8469810C8778AC75D28A93DBE36D6AC10525DC5CEDD6AECCE2D00DE1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 185f1316a94f8b5fc39754904d4f204416a06206611394b8cbad81d77202ba65
MD5 722157ec5eb2373b083f56f2da052cca
SHA1 0dfb3dd1ffd232eefb25270a13b143bf330da4a3
SHA512 dd021da3444f60931c2186e078c4c8cad723ef845f678293941a73d5953d845a28065d9b0de293a108c4ee75f223706f09d5cd39bc181c164cc8e29495f5a7ce
SSDEEP 192:sxRARsHcBWg/fwsnDuK7xoA/oA8pwAI6uD9qu/g6+WNLG35TI/YD/c+GEIgDfJGo:sxRA8mWg/fwsK6xqYV/5U+/t+Aofrl
TLSH
T1F762C9569914997B8CCBD61DFA35BF12D3F9102299911E4CBAFCCB1D04EB6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 36fd1b9a110e112d18eaf28ac2e6aeee5f0c66477b00782b8f2a3c5c505ca2ac
MD5 130394fe5899ea6fdf787c44954e7866
SHA1 a65b935a350f3b16a10fd118da6b6876a5d5cdb7
SHA512 2c743bf9efb472288daa4ef781f4f55791de80975986a6fbf21fb8e18470c370e5c51bda14b64ca8f8bdabf522dd68faf16b2ef368f6344a8639096d30c6644c
SSDEEP 192:sxR/RsHcBWg/fwsnDuK7xJ7A/oA8pwA0P6uD9qhW/g6+WNIeG3Dw3HTI/YD4c+G2:sxR/8mWg/fwsK6Hcqob/5YIM/G+Aofrl
TLSH
T1FF72DA56592499774CCBD619FE35BF12E3F9102299911E4CBAFCCB2D04DB6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 ca3ef53ad4aaedfd5147fc3c421ca4742e1747cd570c4971a07af430acb59cd5
MD5 79ec1280eae25e7862b6abe4ead2594e
SHA1 2699b7a80b29e6fc7fe3e634fbb029a2d91b7aa0
SHA512 0f01299c0d25d2ec2e6751a5e8261e299f604a7195bbc60629d07f54e7b6c37f0363aea3aef0eb81c02f959ca4ca37b8de6985faf84101aa5c2adf8030ce648f
SSDEEP 384:sxRX8mWg/fwsh66s8qMpRiYnazAW8pZS15posJWeT+IM6SicqF2y5FEG/C+Tofrl:sL8mWg/ft4Mnc7WeT+P6S/y5nChfZ
TLSH
T1FDE2094A9810C8778BC35D19A93DBE37E6AC105255C5DEDE6AECCA2C01DE1FCAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 660aa619d492517d7e1e2146b52866e6f7a81f389e44bf0319932c175977cbf1
MD5 259a00b432c0879a3db861a6d74e1e3d
SHA1 83e982c2b42afc6f04301b37d5e1816fec971d29
SHA512 c5e4fcc75d6f291fd245a768f2b98beeca188b5a6fd9d2dfadd461d9edc166e657ce94ade4dfef90c1e09d1af23850e07f69df921378358b1f8201a79b1d0716
SSDEEP 384:sxRiTmWg/fwsh66s8qMpRiYnazAW8pZS15posJWeT+IM6qiccIiy5HlOhhf82+y+:seTmWg/ft4Mnc7WeT+P6qmy5SlI+TT8
TLSH
T109F2194A9810C8778AC35D19A93DBE37E6AC105259C5CEDE6AECCE2D00DE1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6b314d2e666a04624a023a6b771a2f4d666c09d16390f308d435e9c4a5e4aa84
MD5 7b300ce2734177d441b7250b3680b9b0
SHA1 878d00eff5a9c3b1a452952dfa20bae37e26f6f2
SHA512 333d4d8aca7a8f2b286c15714fc392cab9d621e9e0fd118e8dd00fad27cda3d0e52f010396109bde7ea10c1aadea1de8d687a6f5b99fb8abe74cd010be725992
SSDEEP 384:sxRX8mWg/fwsX6gicqF4y5FIM/G+Aofrl:sL8mWg/f76gly55GYfZ
TLSH
T16F82E85B592499778DCAD219FA30BF16E3F9102299815D5CBBFCCB2D04DB6ED2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 2d80827dc346cc78290fd8585aa5cb3fc19e85147571d67a7082e30e2a8368c0
MD5 ea6afbdac45473e06010665f79da3631
SHA1 6629919521faf38fca2b9a6f436bebd640532179
SHA512 698d09ad6497dbd9318532c306cfb544e18a8fbf6ac6ae12acf306a91d18cdac719733dff203fb493e357de894d880af6adbd40f91ca99363a9c00045208fd37
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9xroTyA:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VH
TLSH
T101B2DA2B640CC77E4F804AADAC1A6F977E5802C796988D4047FE995C03C77FBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1961e6df-4971-45cd-8bd9-03e7bdb5dc41\index-dir\the-real-index
Size 96B
SHA256 74f7d136792c34cb4ee77470850e10d3d26d71841c230baccbb3fef234b22ce3
MD5 57096270881898e02ebe5150c04c16c0
SHA1 4e0c64665c1ecc23eef7e961cb6a692dad8028c6
SHA512 361b80ccca7a3db31784db1d185d4099e64ac1b59de06b0e588ccfcf20708d50848a71a13d58b09f54d4eee7feb87bce88e163b27c9c9025417d035f6a49ff91
TLSH
T12EB01138BA000382C80AA2F00B82002832288EA2230B3222B3E0A23AC8202888202000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5fb4f1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1961e6df-4971-45cd-8bd9-03e7bdb5dc41\index-dir\the-real-index~RFe5fb4f1.TMP
Size 48B
SHA256 5d8cdd9652025d29631d25beebba0ce971f05c7267e66c2341a0f0718bbad9e6
MD5 30e6b91bbd1712d0d35360c0847f0505
SHA1 5f35de080115f5c96bfe45f58fe65acc5b0be200
SHA512 27add80581c3cc286e6d11ef5d04df581e149e7e31de1953ce6d8b8e6e8895dab03e1baa1cef3f0410f1dd88b05fab8286ace85ac9644477ad38a56dc192ca0a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43787ed7-1b56-4d1d-9dc0-8749000badb7\index-dir\the-real-index
Size 120B
SHA256 1ee8b56fb5a808c0a2950dcf3322d76ae0aec726b4bc7549b5bfec0cc869e433
MD5 91e13365e9fae227e5adb78ebcbe6cbe
SHA1 17aa782545760c8b438a5d493632f8de9af5b80a
SHA512 42ca4430bbde70404cf31bdb400c9b40ad7cc25b369a83f11ca994c4c5b5ed14d8490f73622199c825a1d8f7af7edb688b093c5b5b626f6c286d512b7444193f
TLSH
T1C9B012549C491951FCA149F10CBB2262292008EE1534220314FDE0049D570C44100208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43787ed7-1b56-4d1d-9dc0-8749000badb7\index-dir\the-real-index
Size 3KB
SHA256 40daec4f8c303a6c2f7ebf98517f43945a0861a9c86dd4d0268530b3fd260bd5
MD5 14746cd895443834a414dcc2e3227a14
SHA1 f7524d6b25fb5801deb3a92e55f21e8769e7d1dc
SHA512 838c11768ac4bd644816d7d9a9691638c33373a105d78fe4f4fc24099e4d02695a13f1ed5200a0259414e02cdbebc8ea99dd480d5563d55f0768fb678c428fde
TLSH
T1AD51F84D1E072B2AEC9CA2B108B50805377415EC13681F17A5FE9238F8C36292DDD76D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5df56f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43787ed7-1b56-4d1d-9dc0-8749000badb7\index-dir\the-real-index~RFe5df56f.TMP
Size 120B
SHA256 667f0d63f3e5bbf627a74db785c4b6ce189677a626b67fda138d629f89a7a60e
MD5 844f1f45f0e25ec7b13d50f9b5765d41
SHA1 c9fc923640cc0bdd7c78d3f47e11e0f5577cab54
SHA512 b0d6a59953cb2b9ffd94d5538c00738adb383a2a21cff2160a21b313b3dae98b517a00031ff845c65a44efc6929f73610c8128334ba431056bbf53633d441190
TLSH
T1E8B02430DF545DD0FC1145710C4311333F105C3C5130731310F7C0145D031D40104340
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c4a9b5b-77ca-4850-b028-3905050f46d0\index-dir\the-real-index
Size 72B
SHA256 74ac03df5eafbae7b91c37ede90cd65664063d8954ff0446a7488218359bbf92
MD5 3e09b3716e4fb56b46331ed9e3c75720
SHA1 f61ee6f9e0a90b4d30ea21b42f00f39ccd3c2ed4
SHA512 a7de84ad3453c6d81227dddb2da0a312b3d6372b417ba9bd1c1815feadfab0e63a805cdb637e90c69740e896b8837144a0108af89369c09fd22ba20e1d63ad91
TLSH
T136A00254618185D2D2E05B7058838196B29CDDB482416B1FE7E4B0E6EA929545A59A40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5fb530.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9c4a9b5b-77ca-4850-b028-3905050f46d0\index-dir\the-real-index~RFe5fb530.TMP
Size 48B
SHA256 66e1c4113c19ab762e687ba50ba921937dc054fdb7721c20e9582a80c837600e
MD5 3ec3f90623fc19357883371dabca2a62
SHA1 9634587ac8561aea396ed38208fe40659cadee06
SHA512 dc189d3c2f2b232a50de39762bb7dc8494ed426efd13d07200d4489442259d7db8abc317b4c0c7ec913880bc109475a1e8553538c09e9c3a6999b2afc2c4bc76
MD5 SHA1 SHA512

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\623cd082b6202da0_0
Size 82KB
SHA256 d1a643f5c7a49342275826067d28013fafb6cb351d69373766be18872e05c786
MD5 f9b630b9845f074ffc4e780dc0dc7efb
SHA1 dc01985a76dab374e33676645b5182a3dd508b0d
SHA512 bb504392fce5890906dcc4a21a1ddd079429147c0c88849fb34c5baea430eb3a57692fc2e504827ba8feb983186ca5f7b2674b568a7ae5a98d6c85beb862a46c
SSDEEP 1536:MuXI2tC++HqsJs0wihp2VMGznXoHVyOAcU9dP2CsXPoTe7hOmwqbqHPwqYzGF/mv:lW+nKMVMGzXo1yO4Z2dSAC/mv
TLSH
T1F1833BA7B252703687AC11D594567B01F22B07961448C8FCF07CA5D63B28ECB67B7BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index
Size 72B
SHA256 451566fb699cf4f84731f7aad825385261556bf154b6e2e7f8744f19ff7e4e88
MD5 f7fde5b661e07f599101e87721a29df8
SHA1 a756a6a723448dae3859f710a8905c2afd12e05b
SHA512 dce7db7051cb756137e7cfe057fe90c647d4f4b6ad5f58c8586f07b537c917af4787184af26e1cde21350d85766140f340327eafff905089934fb99eb83db7fd
TLSH
T107A002280A820005C09613B42ED625E263A0DE1427525347E1A20458DCB2645CD8500D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index
Size 72B
SHA256 3f700196470fe04c5f088f17b6bbb8447ccc4e06f69ab88c9865c2686417da48
MD5 4f27922138ad6f805ff7642973a6683a
SHA1 d328b2f09e9645ffc673451d91d569289e258d7b
SHA512 adc0ebe19d43833596efb89b500f9829b5b0f026aa767def83afd18aa6d7ccfaf15aec2bfd00ee52f2715302d3c1c0da29ed4fed35c51f610abb895aa3858e41
TLSH
T117A002541A830145E54617B83A9731A12770C9141713234741D61044EEF65454E4108C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5f0345.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index~RFe5f0345.TMP
Size 72B
SHA256 33784b194fdd16116c57f039a41d6138463647428ded1f30def2f2b478015050
MD5 3ed3ff3b7dbc9575346479c1543480b0
SHA1 43b2753c6b169ffeb09c9ffb49895e2c10d4100a
SHA512 42c34187201f50d7e8f531887a95f2951f28d1b8509dfaca6b4e5c4008373b11c10efbe5b8a085a4812d846f0b23c0103183203ee760777d7e77e0bf707b1e24
TLSH
T143A0021047D10DD6C05257F3565217471340FF241140D3074499404DDD534808D4240C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddc35808-522c-42f4-b661-620994b57666\index-dir\the-real-index
Size 72B
SHA256 082d0147a0a37ad738635b27e45c3bfef0567aa6dbc76e930c6d68db7259ed17
MD5 36ad17d6e3efc076a6c51acc81db7cc9
SHA1 a34418bb3fdb99d332350712d03df1c331c9ebb6
SHA512 73869b4c6dce223155d6fd09e5ba6d077e4331b3b0d0a3a842df556cf22731e74390f7a19ec6295e4ac4594971409c39a1b2ec4bb7e0fcf596bb3ceda5d1fdb6
TLSH
T123A002AC025C7486E15116B0694509ED6714DD595B89430766E18695CCB115F4981282
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 e7fd5f7fcbecbdfe7dce90ef1b8acb478c0075247afc3e26724477e1eeadd89d
MD5 f42f709c5c098dbba8eeb37cfa799f51
SHA1 d0c70bb8e40c155bd84aa9fb3acb20b9c098a7b2
SHA512 fcecb7919c996898360ee04f421f05637c64c563a24af81e60feb27a4805df766701a19bbf0eb9aec756e91c197e55b90b7b73412cfa20c2dc80fa63c7cf28be
TLSH
T14EF04CB77FFB2C14FCEFC7E6303004B946197C588A54AD4F5053B15A50B2701141AD72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 17d10c41a236adcbf18f3a8d806ffc678481c242ed129ee2dcce04a174cf9fc0
MD5 cfca32158e2d21e296d5bc9607a3a773
SHA1 dede6d717ed224765938bae6615f132a015d2da8
SHA512 43709af9356fb09e14d4feee6613e1f97ce9ae0c8d4f75a213ec6fd565f60b1bb498fdb0f24a75c37f3fd7b6dc129d6d400e9d6bc70a9f4ef7d40de975222765
TLSH
T166F028B76FFA1814FCEFC7E6203508B5465A78588664ED4F5056A15A50B26001416DB2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 aef0ba4c4e713fd639e130e7b9810d75dabc6bda6a945aae9edf0418c91aa198
MD5 4d8f7e3fcdbb8ca107a6c1a0a92f85cc
SHA1 82e63f88cf0b539da1cc44aa14263a239cfcdc2c
SHA512 81f9615eecab272cf561843142ff3da81443c9ff5761977def8732b4df20d4ec76deda61ae897558d98f4e53a882553e7feedec3152ecc7c0eac2404359b9b2b
TLSH
T129E0D8BA6EBA1810ACEF97E634714465460678589A94BD8E205AF29F24F13442806C31
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 0b5e00e3c79322622eba02ab90c477a551a0fec043f6a5a73ee111aa7f58a864
MD5 c7d93f97622564a04f6194deed573958
SHA1 d463f1f8e86defea8a3b99aaee3d51ef7d67b852
SHA512 3e55ca1e108a40f822f89aab687acbb4c1c83201b94b202393d34f8a093ea589f9984415fcf11da3da8f2de2a5cb8afebda30f0f5f75d357294c09530a442cbe
TLSH
T17DF0E9B67FFA1814BCAF87E6603144A585567C588A55BD4F5057B28A24B27012405D72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 070f223d783deae17fa1a5ba177b96d1c14cf5ce20535abd26d287293e354cf3
MD5 6b8eab843b3791a91a2b1aea5bc47252
SHA1 1264edf83a4588ca74906e61377ce36a9fcf7b87
SHA512 c0b49ec37a8b5f974f8f2e219871e77b501811de73d19326c39732997a813f8b1918d206ec0967f4f3dad6af10a2f4fb888f7445d3fa7f7b4b3ef67191ccc6e0
TLSH
T1B8E0DFBB6EBB1814ACEF97E6347144A6464678589A94BD8E606AB29B20B23042806C71
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c4bfa463c8046533b5e8ba4ea4554db8a718d748970319416d9fe74b90f5bf10
MD5 2f5a555a06f92373834f3fa3bd7c877f
SHA1 e1fcf1ae725c3bba672cbbf8986e88ac370e247c
SHA512 c13bda0ca39f9c0c4bbf9440ece60bb9ebc61a558aa40ad74f599fb4a8e68a30cc7df4b25a4e3e426ca4eecfcee54d8d56e59836e7228f494c99662d26a6e17c
TLSH
T163B0120040381522DD4901385301054412A045554511A10AC0D8F06C8CA204671A116C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 9f39d3d2e81eb07cd875cd2fc5d9358dc0680a32fc9d8ebad24c3083ca3c65d3
MD5 0ef35f3d590a2f2080e0d003e02f9384
SHA1 10c04ab3a0bff4f949b472332343f97b03c4245e
SHA512 33cff2f3179613feb68dc0b24160805f6186ba6e48e6930689db9a5c6dc1dcac90d67f48c011dc3bdfc5aaf02f219c73d753183fb1cc76fe3066b673ae247171
TLSH
T162B00122422A14A3C9840770E085198437A198A61357551699A4A0BC8C96289D1A2269
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e32b6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e32b6.TMP
Size 48B
SHA256 ab0302c6762058a0f5add48724466564314496965f798bd34a8a0b9b1ee53ab8
MD5 35449ddf46bef829add33b274919dec8
SHA1 791879a48f5eaa8c1fb1a67eb433a8629671237b
SHA512 a736033c435c57e8ebdaee649b803229d29036303bbb4da912c7cc54c62b4ae49f4beb122f8946047c4a53e1a0ff0f2af2ae16f269ab7ac19f41c4679a3a4b9f
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a63e6aba9573b40b43a78395fd78b401080f901327475a6aaaf3787b4c517903
MD5 99488cd7e20704964e1721da0a89d649
SHA1 95cc8971b76e6dccf01f7a4774c45132601456d0
SHA512 3344cec184cba7b0f17c9622987ea396b5cc99c2ad9acc8ab17968c66768d746d1501fd1059f3fa65e656020109981cf336bf0db005249e6c4ad8dc5459a07a7
SSDEEP 48:K4BI9KKY4PyjGbIZK0QknyREI/Kd+cs8F6OseynJKR:K4BSKKYihbGK0Q+yEAKd+zw
TLSH
T17F91148131BF021039BD288989A4C71E52823173341CE6FA7F7D5159DE6BD092EFE9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a4e6f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a4e6f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 fe838d4c6058559fdf235f03a35440b64ca8e16a6590e23540e7a98c56c16527
MD5 ec6e3c9a5c99d2c1b5b73f40a0d1c6c9
SHA1 2bbcdbf47db76713c4393f7f7ba478c897911a68
SHA512 855bfc59e384aa6a1f7e6c8c79d334998762ffb9f5151bebd4ed981e2fe922c8954467c3d6853e16e9d4abcf494dde4229c9cadfb89dc2c796413f04e57856c3
SSDEEP 768:Nb3BsThQybNbeIZbnOeRFZD1fTos7RjC2s2k:Nb32W/EbOY1fT/Rm2s2k
TLSH
T111F2AE39B8E49D775CFAD281F28A76027FF445A3D98D564444EC6F0F04DBAAE130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1b81b2235037e2df9eacfd8892b15860e6a8e8c9d2a173fcdb31b3f0a791cc2b
MD5 49543fc2e7327a175177a80536615a5b
SHA1 c1e40db6d885f4ad950c1fb13079a5b26e48e6e2
SHA512 13650732ff8030204d3dd2f6360691ca3ebc0be7c5a51e772c317aaa2a01fc32f20d739f91473bdd76dfc9763ac2169d53591cfe07a6c31ff34c63ab22a89250
SSDEEP 768:h/UxvxjgC+y3BsTLQybNbeIZbLOeRFZD1fTos7RjCA4M:0Zj3+y32M/EbCY1fT/RmA4M
TLSH
T12103AE39B8E46C374CF6E244B24A7647BFF445A395C9599849EC2F0F05CBBAD130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 401cd9c938c2cbfb1983499cb1585dcfebbab41de5acea22855fba5bfedf9936
MD5 75cfe37c0cec60cf471c708802084c47
SHA1 b5ee70a7e74ecbc6a62ccb8f6c23fd2cd448267a
SHA512 9963569e042b59e2d21a46486ca04e38b443794dfea7d38cccf522c34aeb225b2183f2ca9cdfa3ccf1c413dafde83060c3243faf75bc8fb395e90c5ae2973d0f
SSDEEP 768:Fn3MsTsb8ybNbeIZbxOeRFZD1fTos7RjC2s2k:Fn3xX/EbEY1fT/Rm2s2k
TLSH
T1FEF2AE39B8E49D775CEAE281F24A76027FF445A3D98D564444EC6F0F04DBAAE130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 035c0d38bc00660d2328b272a59837eff728c0b08a382ba90aafef81b5d35dea
MD5 78ac888466af7393aa88e3f737e1cd28
SHA1 3cde7a8dbd5c5740fc9aecc7a0a33f7c2c4e90cd
SHA512 4a63d5d850e490d12e0af010c9fc4db6dd5de696f0bcac1aacd1402fb4a6ff973b32b00523794049a1f18dadf8c1bdf546fe631039cf58ab3eb31d6fba312072
SSDEEP 768:tFMo32wgxsT5gybNbeIZb5OeRFZD1fTos7RjC2s2k:Io3D2/Eb8Y1fT/Rm2s2k
TLSH
T1D4135AFAA8D78837D8AE9743A37D2E016EBCC163B489954473D85A0ECC975BFC207815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c96871fe26e72629de93ff0ff8d7cd9df281511b10bb0cf0a52dfbb877a205ed
MD5 d7eedcb47b881272310a0dfb5181517e
SHA1 ca9a85a87a23d473f6d15e387ba2fa5a0f057cd7
SHA512 ca9ce1ff7b5eabcf7df02064de45cce42389dd3b552fda4b5167d22569b0dec068e41812fb3ee38602fc3ecffc0451fc2d9933a2b116cf774aa469c1e59c7c65
SSDEEP 768:tFH73qwgxsTZb8ybNbeIZbpOeRFZD1fTos7RjC2s2k:b73Dm/EbMY1fT/Rm2s2k
TLSH
T1B6135AF6A8D78937D8AE9743A37D2E016EBCC163B489954473D85A0ECC976BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 0821839c352445bae81483d9d726fac3d12a301ccd1d355c016e0c554f955e59
MD5 cafeb37e18d640d1329d7b247f36a596
SHA1 25874df9d1b59a8c2219566b35aaa74090cd9b25
SHA512 3d1ac7d42cd7fb4e645e29f08ba533f791a57679dc4ecbe704d5a3b495b39dbd86c123037aa24351defad07d9aface5d5af493d09d65d3901b1c32762258d7d5
SSDEEP 768:NF3BsTFQybNbeIZbnOeRFZD1fTos7RjC2s2k:NF32i/EbOY1fT/Rm2s2k
TLSH
T1CBF2AE39B8E49D775CEAD281F24A76027FF445A3D9CD564844EC6F0F04DBAAE130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 907669bd6659f85ccda49793f05410e59efb1efac6c78941958fd91762bd10d6
MD5 e316644528c45262f2bde734a5c28a76
SHA1 fcba0a1dcd0aa5867f9270636f8ea117dcf72add
SHA512 694b6bc71dcc848b14aefcdd19e5615a8add7e499e550229831528c998c4a590f5dc1e331f7b805b60b5c742b13e2be84a8cc321ae31b536c9c087f2e84d5a50
SSDEEP 768:9n3MsTbQybNbeIZbnOeRFZD1fTos7RjC2s2k:9n3x8/EbOY1fT/Rm2s2k
TLSH
T1CBF2AE39B8E49D775CEAD281F24A76027FF445A3D98D568444EC6F0F04DBAAE130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 5dfe4724f96ee97c9992acb20be1b9c06c22208efb49209adf1eeb89b498d2e5
MD5 7958f1e1a507212581f0b1d980c1c7c8
SHA1 4dd29710c250ca8100799dcec11a0c4726c1800c
SHA512 a4cf779aab9dc8b7217f9f4a6834decabf0723268a3a8c8a7379e548f6a7ae05a5814970bf09f2ce1e3e143bf04fce810ea961d7dc8612510e2c2ca1fcbf818b
SSDEEP 768:z/UxvxjgC+k3U1dybNbeIJOeRFZD1fTos7RzP1/+Pu:GZj3+k3UT/JY1fT/Rr1Ku
TLSH
T10C03BE39F8D86C378CF7E244B24A764BBFF445A395C91A9809EC2F0E159B7AD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1735582a2ac070ec564327f5460bb4e13db1dfca87be4de96b4f57a8f02c18b4
MD5 4a057e69de5e034a5a53015887a066f0
SHA1 d2c1116b22f6fcf051a20c7e966b645416d36756
SHA512 65a5ab9025f72bc34b5c72ed4fe6da1ba0895eb077f98875dad4db784a6afdc64e9475a49294e8f009275e2991964d3d842fcae889acafdda353cfed153f1296
TLSH
T179E00103D70045A3C19A0B3000D32F207BF6C46093A703675B2509783D733882C29B40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0eddd25acbc8b4d31337538ad6327ea91836169bb24c165581a342285146de09
MD5 ffa6d9a60c75546dea7bbda445f9c1e0
SHA1 d5beb03658cddbce93553e3651a4e3fc2c9c04d2
SHA512 2f63a5b91df47ebfe4fda519d7199b76ea14efaf3a5d880d918acdf700c8abdecc51ed03da27d03f96c0ccb94a517c74a5db455396ee99f68550d97b50da376d
TLSH
T19AE00201D7000563C04A0B3000932F101BD5C45083A10357572505583D333441C35B40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a09221b842b534a1eaa14b5cf891226dcbf2fb690877bb41dc450203f46e54be
MD5 13cd22841b7f495dd144bb944fa6e445
SHA1 2996bfbd3b98479cad0519064a60d072756579e7
SHA512 7b6a4bd1caecbfbded281e9f348a084a8e7877ae8121d3f0ea9a0dec99eaa2afb33acd5c3a8a21bc9854dfd3e9319b5ceead4f9f876073d26d0ab73f180118fb
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 694f53b541fb2b760bcba2381329de30ba9c95213d783054d058a353ad693f13
MD5 b462162be9c606cf3e881233249e5686
SHA1 b60b3ec60c50361ab92eb15c80334ccf9c1976b0
SHA512 3f48a30616518c500c1fe6469f38e8e8e7d9adbf6f919de3fe06fb420b44fda1ee57a591fcd3262a8f1c665bba22d978bd117f3a90b0ca7b6d31c6c8a1c04bca
TLSH
T103E0EA43930019ABC07E0B3040D72A357AB6802193E342524A2249383C623482F31FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7fe6ec3ed22069fe5839af6d540b9aaaf043075731545259609904cce0c7355d
MD5 86d16b8a4215730c0fe34e4eb8eb4347
SHA1 fa0b12edc14a6ee90c2865273c657612faaa9ea8
SHA512 d0c9854bb02fcd73f4f2e8539e4d2ea1f74071b729d24b4131eebf469553065721421480d106fb430b163b582f3efc5060b84f5046237085dbcfc6451f98594c
TLSH
T1C1E0EA43930019ABC07D0B3140D72A347AF78071A3F342524A2249782C623482F31FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c0c7933c058c45c5120c831537d06fabaf729a235a67deacd879dbb7ae07ec79
MD5 245dc55e8e3912a435dba22bf119dae8
SHA1 b5b8c9fc8c9780c0b2ecc1349695462455c5f085
SHA512 162c97332ddbd8e5c81f4348d99cdeac89dfe3e84947e6b94529c1cf3b8b6bd24034c5f120168fb621cf80edb95c73de4e0b602d973b1812c8c422a6a7bfde5d
TLSH
T18DE00143C3000AABC07E0B3040E72E317ABA8022A3E343538B2686383C623882F31FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b95b50edd0745f30dcb09d8541f12ec73ec5c7725dff0dd2496a21dd8fd4d859
MD5 1c75ff8c4a7f81c60fc26ec7435a3e6b
SHA1 61eaf6cbcce8d9a85f238012ba2c94d36d28a1b7
SHA512 a3b06fa823a915540f90be5c1920fb148505af7ee981a986b7df94b5e3499a6db5aedc1e19919f980a303db798d95b45234c68c9c095f3b46965b1b1683f5d03
TLSH
T162E00203D70005E3C08A0B3000D32F202BE7C470C3A203575F2505683D733481C39B40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b85887f55a00feb4fc532b44a98082156be7d5c3e4277909486da005b8cc092b
MD5 2c1a7dc6e2579ea7f07da771fb1dd912
SHA1 d214e5d7adfd6302a99cf701ba7d7d311c0b4a97
SHA512 ddd9b51883d65080ca0e02dc777853ece5ebd55e40087493f4b2faaea5b373cbe8447883b67242957e0a29c730fce6947c213917906c6beee49add996272e623
TLSH
T18BE00943D70545ABC1AE1B3080D72F31BBBAC464A39743679B3A4A783D723886D75E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6050aa09d84d3eebc22d37a1c254b0aea639932b3ff3c270f8ab7a0cc31d0ed9
MD5 802e4f976b33d91d9647c78bc6a1bba1
SHA1 9507841a11b170a76a0e41b65aa471706ebe62d4
SHA512 bd4fb73a23c267780c2982674659398aa41d5719b81f60f9a28c1befde573efb616c749d6e52df1fd27bb3b71537c265cda2549f01e0b14131e8cee51e907b0b
TLSH
T14CE00143C30005ABC06E0B3040E32F307AB6C020A3A343134B2446382C623482F31FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e1c0cd665717625156d80d7844376c4f95d0235c7fb47f4c04f52f47329f407c
MD5 9ba4c07bc27e413fb5e16fe9e533762b
SHA1 736a8bfecefa9526c0d94429009366b611e4c98d
SHA512 45b4aed6d56163744a1345307aabccb8548cc6303d45719895ca4b91524ab50f07d27b8ed4f0179678bc558145b2fbc8edb18244eca7e83dd17c5bfaa6d650d2
TLSH
T14CE00143C30009ABC06E0B3040E72F307AB6C022A3A343138B2486382CA23882F31EC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f1fb17595bb3de26932a5138183d4181709c85ca22a8355976150f6b334b411e
MD5 12547bb79d5f1cfe6406e6d8f1108e31
SHA1 46f100bbf3a529cd88cd63d34befe73f76d5fffa
SHA512 e63949200e207545cabca321390a44a578c98d6d57c44e9533d5ef145529c728ac38eceeb8116d9a558498d37941f53e60a5f6a3c28fea973a77effcae524b3c
TLSH
T1D3E00903D70585A7C19E0B3040D72F217BBAC460A39703679B2A4A783D623886C35E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 87b4684cf510b80b9cc2b48c2739db44260c7d246ea7bc5bee8c477ce74dccb2
MD5 666d852840324fd9d586fd20b0274281
SHA1 a38069873b320f8975c55c0603de1643598e62ce
SHA512 10fbf9fd3c730ae42ec0e02a43a6477703744485bda8d764bfd549b5d49d2707b0e314c51c10cad270e3bdb05d7dce5cbc30bcc3586b549137dea6bc95015734
TLSH
T1DDE0EA43930059ABC07D0B3184D72A347AF780B1A3F746924A2259792C723442F31FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 710339224c8d0a142faccd626ebba46ec8a2f4d47007ee2db10f4b14bfc762a6
MD5 f557d56ecfca840cebfbf587173284cc
SHA1 06c995e312642f4b4162c9d5e7903333e9303f95
SHA512 e05547782b7ecb0f0e7e4ed66fb9b467a1e65a2f5d1e97b132d84714dfdb7f9fc552c8a39ad57294f14f27fc101b1e2a3e290d7f84b280d2c1ef205df410bf3b
TLSH
T1DAE00103D70585A7C19A0B3040D32F307BF7C460A3A703675F2A49783D723886C25B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d03bab02077ee92b84a6a696b694d7784d59c72737e8c6882f3ca5e3f85e177a
MD5 55c75e0d574df5e67fd03ac7d5601447
SHA1 bb37e0b151257dd45a173aeb8cadf3ace944fd5c
SHA512 3e383323cf5055c54ca055cf7b2aefd29879da7e7ff6ee2a7fb3e1c4f318c82f7ca03625210402cfd3b8a753ea2a02e8ce4deaaea0f5bcc90ff1919bb9ad6ee8
TLSH
T1B3E00103C30005ABC07A0B3080D32F307BB6C021A39303134B2505383C223482E30EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0fd9d9f40a4a184aeb9b84dc30426765bb0f6d22129e05db853f6948ee910ca5
MD5 3b56033692aeede76f50835350debc30
SHA1 d166054e351c23fe49ac802e2497622afca8a93e
SHA512 0455de268ebfef675246c0a1462128746e44792f53904b2e94ed121e60cbd0561e799dc3a3190ac00b7941450b68feccfb439ee359ff1ec8e83bc6f63be15820
TLSH
T13EE04803C3000567C06E0B3080D32F207BB6C020A39303134B2505383C223482D30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7f4b657d5f9b946bfee4ce665fcb0946a510976c856df35c1404bcba893a6d01
MD5 2e79344ee6e4af3fb8a830266bee3121
SHA1 97e41b5741f7e5a85b8a746249a88f4229a24cfd
SHA512 4f9b4dca7987a53e388de71d74210ef745462af1dbff3d530a52d4ec5fbfab011e3a7844370c231b6697e9850b3f43201d47ca5d1d4ce13fd5a62eb3ec838f03
TLSH
T191E0C543920049ABC07D0B3184D72A347AF780B1A3E746934A625A7968A23486F31FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a3559.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a3559.TMP
Size 392B
SHA256 bdd7110d53b0f47222b743ef7ee7776244d91e64ba7bb66a35c9ec8e1c9dd0a3
MD5 7b0870682bbce2fb0b204e60aea8e538
SHA1 d86c887dc046a5d56a4e680fc42129f62501ba0d
SHA512 ec4539adfe6512d62352c75d785d03853473a24a0b5722e209675d7dcdbab824bc9db420342fcab9804262dd48bef231719f144522750b34e11d03a5832ec42d
MD5 SHA1 SHA512

Submit Download

83cc215d-3bd7-417f-a58b-0e9f6635fcef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\83cc215d-3bd7-417f-a58b-0e9f6635fcef.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 f2ac8d90be14bd02858ff367bded4948695e281c1fb1374a0bca23d48a36c574
MD5 69db296301d524083f115026da78344b
SHA1 f5683901becb8e04525f0385b21a1dd0145631ca
SHA512 b412c47ed67971c7c59e498b90c77b5cac7657a87dec62137bace2632f3ae525f959bb37743fcab01c75f4b34ad1602ae8dcdc2b9bada7693a060fcad54dbc55
SSDEEP 96:hONKJzzhlwuzhxkrDJ5kCuqPkrDJVumrkDJruU9kRDJnIu0R:gNKxhFhmDfkCaDfWD5uDBI5
TLSH
T1A322DF105FE11E56F2FB6D7765726711AF3BBD495E084F0E11C542094C22F04A9AEFA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 7d3050cd83e7153822c4c816b0a42258812cb03c60d4702cd4500c2dfcfb4435
MD5 bf8972e351b1f2f4650747828640dbf3
SHA1 fef0de0d293b26f8edfadae493099723b2fa13b8
SHA512 f9e42b7770b37bd22d42579ff269145b6d374c4ef3dd71e78c63785fb18c606d0170315c53694c48f580260a8d617525b55c4564573931d8e5457b81ced11ce6
SSDEEP 96:AaDJz76uwVa62t9aDJzzhlwuzhx9rDJ5kCuqPCkDJruU99RDJnIu0R:pDlniDxhFhnDfkCzD53DBI5
TLSH
T1B822F1005FE15E56F2FB6D7769B26741AF3BBD059D048F0E11C582094C23F0499AAFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

astra-webfiles-v2.1.zip

Path C:\Users\Admin\Downloads\astra-webfiles-v2.1.zip
Size 26.8MB
SHA256 4e7d3d1c4d50b12d8e9b94f2c21825bb09cf445bb4e8fa24c43eb4bf4adb7697
MD5 9d34cdf8ce1160b8d22972b6850e1e44
SHA1 c13f51368589dbc42f022796c7a3b935742ad57c
SHA512 55e6969d28b6e83b2913485c04821536faa63381e1a1f9c42bffedeabdbab51263982f03d6cca0a522fdb4a2f669a4f712b576d9d75ac18c50bf2abc5ca98b54
SSDEEP 393216:FXBgLHLXyB11lWrITdc0DGjJ7ZV4h1LUBKps5TmoHYqUcPxhj7+uYu5Y9pdBipuL:lKrXyBHlWGGRZopQN4xcPb+tuRQSSz
TLSH
T12B57338BDBCCBA59FDD398CA04526503949F61D7E2A921491E9EC7F9E13E23C18C2F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

astra18.html.crdownload

Path C:\Users\Admin\Downloads\astra18.html.crdownload
Size 37.4MB
SHA256 eac2fbbc38cefe36a15256e384d9dd3609fa0e73a9b9d4c2448f83fc361f9880
MD5 c82e00a1a50e13514679937e23966f11
SHA1 62b7d7fb1a63a195dcb90449230ca708ce523517
SHA512 9f704f2bafde5fd889fe0fa20b061cf4973c6d7158a29520f9a0cb489fdc340450143f6c9a5c91cf6998659632d467b291cceef762aa9e59ace518c574886652
SSDEEP 49152:kxC+a/0eXC3VCocSRNsnVbeDNC+/s5uMWPeIJB/rHPUqHBdi1yiXVVpn/DGgiwA0:j
TLSH
T10F87333297537E7FCB744B28315F3E0E2C845EC7814866D8F7C894E3A19AE58585ACE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download