hxxp://notfans[.]com

Analysis

user interaction
yes
max time kernel
899s
max time network
901s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://notfans.com
Sample260928-phf55aaf65

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1076	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 14 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{695BAC56-BBCD-4A9E-BE11-0DF4D364B46E}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-2904698490-2540843659-2047741361-1583039222-628509060-1343416660-4183458959\Moniker = "cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.xrf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6032	msedge.exe
6032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe
2172	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 3160	2172	msedge.exe	87
PID 2172 wrote to memory of 1076	2172	msedge.exe	88
PID 2172 wrote to memory of 1476	2172	msedge.exe	89
PID 2172 wrote to memory of 4680	2172	msedge.exe	90
PID 2172 wrote to memory of 1476	2172	msedge.exe	89
PID 2172 wrote to memory of 1476	2172	msedge.exe	89
PID 2172 wrote to memory of 4680	2172	msedge.exe	90
PID 2172 wrote to memory of 4156	2172	msedge.exe	92
PID 2172 wrote to memory of 4156	2172	msedge.exe	92
PID 2172 wrote to memory of 4156	2172	msedge.exe	92
PID 2172 wrote to memory of 3936	2172	msedge.exe	93
PID 2172 wrote to memory of 3936	2172	msedge.exe	93
PID 2172 wrote to memory of 3936	2172	msedge.exe	93
PID 2172 wrote to memory of 4876	2172	msedge.exe	94
PID 2172 wrote to memory of 3960	2172	msedge.exe	95
PID 2172 wrote to memory of 4876	2172	msedge.exe	94
PID 2172 wrote to memory of 4876	2172	msedge.exe	94
PID 2172 wrote to memory of 3960	2172	msedge.exe	95
PID 2172 wrote to memory of 3960	2172	msedge.exe	95
PID 2172 wrote to memory of 4880	2172	msedge.exe	100
PID 2172 wrote to memory of 4880	2172	msedge.exe	100
PID 2172 wrote to memory of 4880	2172	msedge.exe	100
PID 2172 wrote to memory of 2760	2172	msedge.exe	103
PID 2172 wrote to memory of 2760	2172	msedge.exe	103
PID 2172 wrote to memory of 4920	2172	msedge.exe	104
PID 2172 wrote to memory of 4920	2172	msedge.exe	104
PID 2172 wrote to memory of 2196	2172	msedge.exe	108
PID 2172 wrote to memory of 212	2172	msedge.exe	114
PID 2172 wrote to memory of 212	2172	msedge.exe	114
PID 2172 wrote to memory of 212	2172	msedge.exe	114
PID 2172 wrote to memory of 916	2172	msedge.exe	115
PID 2172 wrote to memory of 916	2172	msedge.exe	115
PID 2172 wrote to memory of 916	2172	msedge.exe	115
PID 2172 wrote to memory of 5004	2172	msedge.exe	116
PID 2172 wrote to memory of 5004	2172	msedge.exe	116
PID 2172 wrote to memory of 2540	2172	msedge.exe	117
PID 2172 wrote to memory of 2540	2172	msedge.exe	117
PID 2172 wrote to memory of 2540	2172	msedge.exe	117
PID 2172 wrote to memory of 4156	2172	msedge.exe	119
PID 2172 wrote to memory of 4156	2172	msedge.exe	119
PID 2172 wrote to memory of 4156	2172	msedge.exe	119
PID 2172 wrote to memory of 1240	2172	msedge.exe	120
PID 2172 wrote to memory of 1032	2172	msedge.exe	121
PID 2172 wrote to memory of 3372	2172	msedge.exe	122
PID 2172 wrote to memory of 5164	2172	msedge.exe	123
PID 2172 wrote to memory of 5164	2172	msedge.exe	123
PID 2172 wrote to memory of 6036	2172	msedge.exe	132
PID 2172 wrote to memory of 6036	2172	msedge.exe	132
PID 2172 wrote to memory of 6036	2172	msedge.exe	132
PID 2172 wrote to memory of 6100	2172	msedge.exe	133
PID 2172 wrote to memory of 6100	2172	msedge.exe	133
PID 2172 wrote to memory of 3896	2172	msedge.exe	134
PID 2172 wrote to memory of 3896	2172	msedge.exe	134
PID 2172 wrote to memory of 6032	2172	msedge.exe	139
PID 2172 wrote to memory of 5392	2172	msedge.exe	140
PID 2172 wrote to memory of 5428	2172	msedge.exe	141
PID 2172 wrote to memory of 5392	2172	msedge.exe	140
PID 2172 wrote to memory of 5428	2172	msedge.exe	141
PID 2172 wrote to memory of 5704	2172	msedge.exe	142
PID 2172 wrote to memory of 5704	2172	msedge.exe	142
PID 2172 wrote to memory of 844	2172	msedge.exe	143
PID 2172 wrote to memory of 844	2172	msedge.exe	143
PID 2172 wrote to memory of 5564	2172	msedge.exe	153
PID 2172 wrote to memory of 5564	2172	msedge.exe	153

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://notfans.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff90fa7c188,0x7ff90fa7c194,0x7ff90fa7c1a0
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,17814233705499922769,1488341842515161303,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,1890460093933706900,12973849217031932603,262144 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:2
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,10800645397953370147,7070449839232606013,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,3613700288137989094,4720019688395160998,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,1305277888399049699,6877242212694954979,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,12405851593054140076,6326762202855237315,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,7956949484205518721,5919204264351346090,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:2
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,5744476326962401528,11475323862224114829,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,10504748033023721664,16867104904562459093,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,13559420559999272524,17633476272945782193,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,6659033183786735641,13447942250540040192,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,6659033183786735641,13447942250540040192,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4236,i,5049902255096581978,4325274378268477019,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4312,i,4227433487213695150,12264171154926583902,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,1675415136637738427,3814857089553986024,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6484,i,15485404419756038781,2803545265067698738,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3656,i,8120951846737490913,9598941632977463811,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,8491559160952421349,4742216951208790607,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,14036534661507353248,15889613249110342481,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,15838684953504953516,15040607910036268358,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=device.mojom.XRDeviceService --lang=en-US --service-sandbox-type=xr_compositing --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6752,i,5931308758552913059,11635671945780002417,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5900,i,12726875874500703670,7704630873089814840,2097152 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,7307833135659224835,13441316077651441841,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:8
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7368,i,10279234465536578307,5334242757598828582,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7520,i,5222812596300411492,15515719777462462018,262144 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,11513737256058389165,13554541878851153081,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,14120422686375811,1039122376579749077,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:8
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,17101424086884812280,5329753091662848462,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,10497835044463401567,10002625599573839754,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7776,i,2283132662068295044,7045957802604307915,524288 --field-trial-handle=2612,i,6129235254132956458,8571777465566837191,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:5564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 829de3adff7d703f99a191ab636dc0a18b928f76c5eff72c8f6b66fafc22d366
MD5 14db3ebbcd53b632c3c2e4c9cf1a4936
SHA1 f528db8b7ab35fd093891d58f79ea08cff2f3c28
SHA512 2000e29136b726b82d394671f19afa11281df90f85521634cd290c5f53f14d93990b45ba81de2c0cd3033be74c6af8d884b6e8382eac24be73deadd5bf4b377a
TLSH
T18CE0DFC824C8C22EA65464C7817C6B0C82C0374E92CCAA8A1B00888C7183484A7C76A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d3e1a832588a11cf71d091b1c0f2f5ea1f58730771aa4efb5fd6b5e69f4e2a13
MD5 403f98d3e3598345420b03df326dda69
SHA1 5bf3e07af09ac3485e6bb7069171586975dac734
SHA512 3e32d1ff8d5b3bdd77a95ff6894019aa69ca673504d984bbb765dd233252040620d8ec070691a2fbd89bc7f0e19ac549f9f6d6fb725ac560c7d6aac85856bab7
TLSH
T104E020D958C5C26D76456447417D670C85C03F0B9ACCAA8D2704844471C11C0AB87555
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 30KB
SHA256 41c09ab303208d0fc9ca0c0a457aaf075b26d8f009a2403bb84c8ed051a87182
MD5 46507d6f8a142eab2b8bfb1a60c54ac3
SHA1 ac659a60448446e3d52d2445ca4d4e8d7f9a5fc3
SHA512 78ef514bf36d424c2b955deb18ea73f482f073583d6921aa30db047424aff7bd88e239afdff55b10307bf31de272f0cb92d6cfc0cf734fbc4940d0c9be5cbf33
SSDEEP 768:LTVVclvW4wrL+IrYJaQolnX6z/02yY4hrQ6Tw92HCg4JFXNO50D:LTVWu4wGIrCaQgnKzEnM6k92mJPOo
TLSH
T169D2E18370F97956A194B11810DF84BF8C102F919767CFF0ADED7D92A92D4A848FD2A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 20KB
SHA256 b5837374742ce11296955260d2a980816a9b2fbdbe0452b332fc7ca4ade8eecf
MD5 0ca5a7011cdc9009b5dec1afc02038e3
SHA1 b4acc29367d5a95733ef9fdecbf762ec2d652861
SHA512 d92a5a698d63bb32d1a04db51d79e08b85319829a1bfb665b7d5964f8907adc20d9e884f317f6e32fc7bfe2cdf3ab01d96a43b4dac149bf3330d2c63fdcd71fc
SSDEEP 384:9YIcY3DWWi7sj+X6Is5qTgrzJ96uIPRu3vqbhSyrSVVFhABIABpneWaoloYheAx8:9YIp3yWi7bNs5DzX9IECSyr6hAGK3myu
TLSH
T195A2E12DD867AE82ED3764BA26F2D30DA14E0F77347A6E242D31A54101CFC6E8053356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 79KB
SHA256 5f4c0b4f516586ab06d6c8d9393f04d7c7724420905710fa1c0dd6c51de6aadc
MD5 b699888f311eb54e879be051209c1f56
SHA1 c42621e27c8c758c90b2952b44f6613be4bdec37
SHA512 23eca54fba69d752d6ebda5c2302a87ac0192b42c8b354105244aa5aa9d01925adc356bcb398d0f453c19f694332775a802571850c55c2e6898d74bb34a49889
SSDEEP 1536:ifAG0O8CP71pZ6PPwTmoGCAyRGriAwEElCD3rXZXCtUB1pWzcLjYHwynxB:gAPGDsPXBCAyAW9CD3rX8tg1NYHwyxB
TLSH
T1268302CB2011FD02A8E02C7EB7E9D50F8F2E84F6AC2855234ED54085E21CFD5966ADDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 58KB
SHA256 c7837a1454a24faa8930ee7a51811cafd9b2abcbc2ea9e15f653b60932324b42
MD5 2824d42c2423fe148813b3aa8d29c1f1
SHA1 f338fb745486b9bb1bda3dc1bb62dff7f9b29fc9
SHA512 fc3af34dd76b748efebe2260011a78756395e80db6b98e9f2471ddb0275cdf9e75790312c9415b6174abee819170e6a1bea012bec5355bef2c9dd65924cdfea6
SSDEEP 1536:3pOr1jusFdSS5qpz6sxEMoaNpyIrUBjL7CNEX:ZejusFodpzOabymUB/+NEX
TLSH
T154430293507C8024F9FB447A13805255EE6C05737DA99FD6B27F8690F32B936BE04DA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 1024KB
SHA256 c536b29cb31b2bac5168a9e3d71139af7c33889ed97ef490e140fea108359eef
MD5 cc6596751fc2b7adc01bb37cd375815d
SHA1 4794ba1c6b68d66e87cfdd4752a9c753516c628f
SHA512 eeae2c9e38a617fcc9b0a4e9e5966e39195417eb62319f7472640af66adae5c55f35d43fe71bb2327aea5b6c252efe4daa894ff3233b26e934f90c4cb201db76
SSDEEP 12288:RtS1Q6qSR3MHekQq86UuJ+tdIqr5LGHCCwtPnuL6lAaeHrRO1OWgxQe1eCeoW4Qa:Wh/++A8U+4qcCnhuLK8ruGQUeC3LQsF
TLSH
T1B0258B0977A0832BCA725378DCE643407334D5F9A74B874F8668B77C6D863E91E864E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 1024KB
SHA256 8b414a5d4a007c73973841662fc4d0569ab10c08702e3000589c38e667d6d617
MD5 6b0cf518434db8d7659772f61e1ffb94
SHA1 385162104eb7834350d2307c3c44a198353624e4
SHA512 c31ea2d3620ea3d2fb9dddba7c486de056d7b50becadd6d4dc820ec598f852718e3bb1a10d4f1eb66c70d5134acce6b13cc0f31b684c7a5f8e65eacd7cea0beb
SSDEEP 24576:U3E3XEVZqdwvoNnn1IsWSQtmy+ut8DvgGgCnQgW7xK/:U38jy2+sWTF+BnQgQg
TLSH
T1B625339D5433F071FD5C9AF896A6ACD1FDBD445203D0CDABC056311AC2AA3C49F168AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
Size 264KB
SHA256 71f2f6e54d28b27e6d4c2d607fb0bd1219413569703dc0d44f818c9529d1fb8b
MD5 cecc9b0945ce24b9acaaaf343235b335
SHA1 161f198ceec4a5e1b71ef05ad14aa160dc4cf2d1
SHA512 e5f46577be33c1ea95ab939d3430943467cf10843d7fbc3d8ce39b1c1b7994da5b7db1950af069c5830ada603bbfe13b42aea51410fc72879633842e9c8e40a7
SSDEEP 6144:4oo6NNrAX9qhjcE5ixm/Zp0Yw+mOmfC12eoThunGWJVsV2Tw:noUNrAXkVcEcaZmYw+R2CnVGWJVsV2c
TLSH
T189441289435CD540FAB5883458992B1E6EFFF82B59E1940BA95A224FF5C38F05C3789C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000102

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
Size 1024KB
SHA256 fff3c57b5888e2441b104819025f2d54f319fbcd016fd0283c4540e10873cc3d
MD5 6183beb36ac7b0ab9c8f972d318a0007
SHA1 c528451fe8e589f8290c9dec902943a89c64830c
SHA512 bd1f783c473784bd516bdf1ec3fdd928ab116e6820ac074020ab72cab8adf94ae072d3fef57639400f4f2225e9aa57e61b69983f6433466be742963e2ed0888b
SSDEEP 12288:kz7+lD7ehS/FprWdiNxk55Fpwq3lcL5IxlR2EGj2Hw/UUNZvtO8cOoQK6FsDepKv:kzyUSDqiNqHFpwq1uU3zGUOfoQK4LWx
TLSH
T1AF25AD0AB371472BD46687B8C8C64300B674E5E96747470B8764F778BE0A3F92EC65E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000195

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000195
Size 432KB
SHA256 9ae4135386cd796ae729f8e1e1fa35728c6f4fe5a92edcc12c28aecede4566b3
MD5 fe4ac49e9efd9968293e7fd05df89589
SHA1 babae4aa6747632fa54c14e7abdb4cddfc66bb91
SHA512 ed2dc47b0bd8d3a08fcebc360373896e5c0ca6b88cb09e7f67369a8a14c76b72d807a7a9a3202c6eef2b791ae354d43cd794adb1620ffc6b7e25c065e73c07c3
SSDEEP 12288:gY8tZoKMJ2x1EusvMoDy387FA+y1SHgMs1X4hH9Hh:NYLMJ2x19IjPy1Ggj9G9Hh
TLSH
T18B94230A83EEA26FFD37D0B97F8A036B7255E8A12EA397E719407541CC447F5A130668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001d9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001d9
Size 1024KB
SHA256 d1c022169a108d0d80991c762f8b0fc4158201d563ce591dd853a679ccc51cb4
MD5 2d75f72b7e7785ee562dfdc7bd0e7dcd
SHA1 59f599734e278d7ea37e81f0dbfeeb0eb7342c00
SHA512 b64c74cf3d3f920b0f22ec746056f7efb34d624a577533bb92c3c99091be028bac029546952f87cc87394c6330ae34a0591fb998c4a84798420b95cc3264bec2
SSDEEP 24576:sXXcmxVlRYaPcm6G4gw9pl4/DLHcCDnMG1:sXJVYKag+mncCoG
TLSH
T1E225334FD1E4F85FC094D2796D7131A12029A80E0A8ABFC7429DEB4054D7783AE8BDDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 a5345f49d35152ccbdda4cb13fbe7bd5dec447e02c9ef5c880ba61430ac736ce
MD5 c8ec9460d9219977a742e5349167b506
SHA1 f646a568884547c2c8a952419e325f7c5c13cb39
SHA512 7725d6ba1081c24d5d2d14257be7b423e156156fbc88583ed7542d265c81571e6b32adf82020f7fd5e11dff67bf3488e72b47e454e585d3525364fc4a8b8d2fe
SSDEEP 96:MO6F6VGbguE/VzG7s7SaLFSCzJrAduok9s:MOmbgVd7SwFSCzJ0du9s
TLSH
T1C1B1FA466C52C763FF65553088FF9466313A8D473483AE12EC5CD2B8BC7B79A144B8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 11aee4144fd5e982deba35f38ac8692b614ffeda4d75251a7827b5322768f4db
MD5 857db81071d1ad14131244ddb008ecec
SHA1 7473fb9b2ce873229be2b6159b7cd817508f9eac
SHA512 4d261bab88782c46a10f578d2370f97774dbc0bba0bf42364fc0bb7c1cea78f5cac41cd86ccbbb9344f9bb5e73886fe949d277dd9e1e42298e2c141b0298d81b
SSDEEP 96:X7FRowmHfGBFUyNTu3ACrAvAp+ci+XT4Z:rFROuBFUyNTOAC04pByZ
TLSH
T18AB1EA466C42C763FF65553089EF9467313A8D473483AE12E85CD2B8BC3B79A055B4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e26b4d414d75ec8aca2f0858c5adaa4c71543b310427df0e27172328aeed59ea
MD5 45314104b8fc7fe79e9d6c2a990dcf2d
SHA1 04cd9f349b2cd325189e2948a0153cd460b8a0b6
SHA512 7469349119ee08a6beeeceadf332b189ef0a95a073bd0e6c6c8e0d54e85f0c02061ec3750f53cd12b042ed57eecab1d7b3611825a3ce60497c645ae06418c94f
TLSH
T1F961724B5C42C266F7A88970CDFF10AB36774D83B5C3AD122DACE6BC840E726515A04E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 721c21e2ba7a734349bc3b6592a02a057592a6acd747c3adf47c1bbeb4ae635f
MD5 4e997ce40451bd5b9e1c1eb6776ab30b
SHA1 443a2a11e53f152563857463a724f2833a78b813
SHA512 76b76f9ef251644328caa9f18989772fcb77bc9024998926e438179a3c654bb8b2739ca196043b5ea747b0c7b84d740904d68b3540af5f24e4dfd39aa4cfa608
SSDEEP 96:RM7FRowmHfGBFUANTu3ACrAv5p+cF5XTQ2:6FRO+BFUANTOAC0xpBs2
TLSH
T1B4B1DB466C52C763FF65553089EF8467313B8D473483AE11EC5CE2B8BC3B39A144B88A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 981e2214b52ff6a51b13d739b8fd74fee266552686cac6f50b52eabdcabc35b7
MD5 6a0a3b5a1b3f385618188db356e349d5
SHA1 3ea6aedfde4a93c398c41d9864c1e35f17f18445
SHA512 779ada5108fe28aad0b2dffaf811b6ff545e9064b4d803b79ce79b0d12578e7d651942c7e8ecf8132c8a474ab12de2e709697d83b2a5474826b325ce38856fef
SSDEEP 96:97FRowmHfH7BFUyNTu3ACrAvCp+ci+XT4i:BFROjBFUyNTOAC0apByi
TLSH
T14EB1E9466C52C763FF65553088EF9066313B8D4734839E12EC5CE2B8BC3B79A104B48A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe594cde.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594cde.TMP
Size 3KB
SHA256 040b73ffe16e7bfd293a6c6d088f64872ffa7f39d66d67ae61ae779b0c6174d2
MD5 03ea5adb98983ab9cece41fcf2f6b073
SHA1 92ccb50ce3bc2ca5d826c547a52068e4e23e3915
SHA512 a541ff62156687ea7722e065c3982e4240f1ea8f9372cca9597d5247724fa80d98548122fa4e86f2222d7481585231fe233f148f018b3163c844b4d12db7d2f4
TLSH
T12561824B5C42C266F7A88470CDFF10AB36774D83B4C3AD123DACE6BD840E726615604E
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 d302bcd8f51eb8dc9999255db1393e00ca14c534836ca1a8bb074939becfbffc
MD5 ff0f5102c9c903de63e7083f0d4b22b3
SHA1 0e4f251f8bda32677a49269c2d048672dfe47f02
SHA512 a414ad7e9dc497233c36dbfc0d231804c8666f304575fe815d0bbc99ce7d749c50b1cf4fd51ad55a469ec6533b0b7e1ef792dd66434cd2bd703d9e90dbafc96e
SSDEEP 192:DWBHX64Q1ERdibrqYCEcXmQNytUxywp5oJkMwpMbIIUj4SzDx6FhNzgMI:DWBHX64Q1ERdibrqYCEcXmQNytUxywpB
TLSH
T1990290F783F4866DCC1162F09B147E2ACE1D052867A83D2B89D6DE4793D3472E142B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 8be3c814143712bf948615bbbd0cf67717042a7765d0f26114ddfc181e3dc678
MD5 60524098a982d6c0f471fbc594c84c68
SHA1 280ef321d8ae9d85e0a43e8dee0551b4f88aaa18
SHA512 cbfc3381b99c17740ce45cf69fe36fa66b24589aad460cc314ad8117e212eacf03a9859c562c59695c41c8646b4f1d5b3062d2f1f73cbefc04497ea3a61c129a
SSDEEP 192:D7zomrY0c6MI6OxvcXLj4JQ7oAytUxqgwUC9/73Xpjj6tlM3:D7zomrY0c6MI6OxvcXLEJQ7oAytUxqgE
TLSH
T1B902C4E7C3E8866DCC1252F09B157E2ACE1E092863683D1B88DADF4B63D3472D141A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 a9f40a41721adfa8da0b7a7597700903d2abf99a364ab2bd599768dc5f1cfe8c
MD5 16c07c9cc74018375b03eac2fbf036e5
SHA1 49d818f868816aae05043c6aadffbaf54bb994b3
SHA512 03597c09ec9c50f0975386a621b946ce792a932031545210d945a36928a966b42c8a968da82294c9644467a81d364c5201f85a7ff890617e7501bf651c39b10f
SSDEEP 192:D7zomrY0c6MI6kUEcXLj4JQ7jytUrgwUC9/0BJkvB1wMbIk/Ff6pN/Mzr:D7zomrY0c6MI6kUEcXLEJQ7jytUrgwUS
TLSH
T1C612B4E7C3E8866DCC1152F09B157E2BCE1D092863683D5B89D6DF4763E3472E141A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b1247c89c23de063e514b31d2c41e4852cecd3cf12fb730e7a642cdba7bfc3b5
MD5 24cbc071bbe793f0698bc564d5bd6e93
SHA1 83909607fdcbddfbe612ec1f57d0d393293c49ea
SHA512 ac180d1b9dc1a9ea794380c67530f6a10a99148e5580ad944533fbc6866ce78098c74acdcad2c1aedadfebfdb4f2b80198b260523c97faf682cf71272d4ad447
SSDEEP 192:DW6BHV0c6QI6kSERAEcXmQhytUxgwU7/oJkMwpMbII6NUu9Dj4Sp5kMI:DW6BHV0c6QI6kSERAEcXmQhytUxgwU74
TLSH
T1751280F7C3F4866DCC1152F09B147E2ACE1D092863A83D6B89D6DE47A3D3472E141A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 00de906b2584d751c146a2144148e137f34678cec686db8d9db1f694d0714770
MD5 3ea45356becb21d67119bf4e6166c892
SHA1 8adc382166fc133975060bdeb223b1b0c171a9f4
SHA512 e28071e1ada65048aa463da59331258fa09955d07a21e5402c8614079d86db21b2a2dc5d2623213190b5781985112a3ee2ca17424ece138fafdf4c7ae8016283
SSDEEP 192:DWBHX64Q1inERdibPEcXmQNytUxywp7/oJkMwpMbIIU9Dj4SU6t9+pMI:DWBHX64Q1inERdibPEcXmQNytUxywp7e
TLSH
T14102B0F783F4866DCC1162F09B147E2ACE1D052863A83D2B89D6DE47A3D3472E142B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 bc370499c69bf73dd3624186e967134d11e9bdcbd7e1f617bef01edefb9f27a1
MD5 077891a56cd1647b924dd7596e6e0cb3
SHA1 f492352e1c3087bb18cdd559376eba9d4bbd85ac
SHA512 6714265913eeaff94b09187289a41ac2f9b23ccf20194de0645d68187171547f1d7bea744ef724041146b7c5086c3c37ac6f10409b17fcbde56751abf363315a
SSDEEP 192:DWBHX64Q1iERdibrSEcXmQNytUxywp7/oJkMwpMbIIU9Dj4SU6ohMeKSr:DWBHX64Q1iERdibrSEcXmQNytUxywp78
TLSH
T11302A0F783F4866DCC1162F09B147E2ACE1D052867A83D2B89D6DE47A3D3472E142B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ae0b24d9a48d5f5dde079fcf2b509e1560816a26d1c76afaf1dc3593fdc991f6
MD5 bf36ec00273254aec489f5c43c59f3ca
SHA1 fefa67d524a30cc4e4bd507aba9654284b38a535
SHA512 accf31662a565b7f883f348b83150127d325f060c1be10e9a43c69d39e801e8b3cdf136f12bcbf6216783d6c721dbac981df89ce78f5a43f640b2257f81777fe
SSDEEP 192:sxZbRKW0/fBse5IdpLyHW6+WNrETY/YrIC7IgrJ:sxZbD0/fBseS2Hbj/q9
TLSH
T10C22C8526E38A9BB8CC7D20DFA29BF13D6F9503255D41E58AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9b64c3884403da33e929dc67617af587a675f9b992d1559a13ca86f469080dd7
MD5 26065199bd4d6c56d094b7e26f29f133
SHA1 401bfe41cffe430f6d2f23d88bd78c3fe3480b09
SHA512 020953f5bdc30916f6f87bff1c11e07b91d6f32a232b9584856d345b8aec2091413f60b6a5e8e41b147d6e30988ea6e9f454bf08beda53316f9404560b70385c
SSDEEP 192:sxZbRKW0/fBscXIdpjuW3NHW6+WNrETYZYrMC7Ig5u5J:sxZbD0/fBsc4fHbjZswj
TLSH
T16C32A7526D38A9BB8CC6D209FA19FF13E6F9506255D41E58AAFCC61C04E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0916a477baf3d8044ce34a3ef6c7cfcd88bbf1968b45d99b57ff6bb1925899fe
MD5 cb6e318268497dbcc340802792842826
SHA1 e738b094249530e8155e15d3f9e31a05b6021499
SHA512 6400ea89d2dd6ce1979ff0beb340ca0e18795a46df8534cf08f5f7bb59e9a8c1836f19c2d15f0549ee53cbd0c74a37aeb48714246ffa2a8dd00d9c499ba4d7df
SSDEEP 192:sxZbRKW0/fBsciIdpxuW3UHW6+WNrEZ+NYr2C7Ig5u5J:sxZbD0/fBscL0HbrNuwj
TLSH
T1DE32B7536D38A97B8CC6D20DFA19BF13E6F9507256D01E58AAFC861C04E7BDD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2960b645fa95355048a4dfb472ee93710796f5d813a798c166718e68aa08e3e4
MD5 30585f660ef7ed1acbbbc1438a920b25
SHA1 19add3c08e5602679ccf32091b1274c785c35de2
SHA512 42330e3f674b87c5dd97dfe4638a46bd23131a81c8a2c625e6000188bfd5ad48d06b2b48384ca8c78e5f83f01672555f0c3a66b1c0e9b2969118cd9e1437c451
SSDEEP 192:sxZbRKW0/fBsc5IdpxuW3qHW6+WNrEH0nYrMC7Ig5u5J:sxZbD0/fBscSKHbjnQwj
TLSH
T18A32B6536E38A97B8DC6D20DFA19BF13E6F9507255901E98ABFC861C04E7BDD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 2b27f94af0214721c0a41e66bde1c6784466c117cde8d72170f96a25643c8db1
MD5 c494228380d959a17dc9daa46d91ca17
SHA1 186a30991c360611555bc40dab2f91d62a5106b6
SHA512 c2e1dd28d8c8f00782950ec5115c065716f6919f3c6f74381c3f0dc0ea1706b4559fa088288dd273c3b467fcb493af9be3c9d909ff45e25daba311f7f6fa9101
SSDEEP 192:sxZbRKW0/fBscLIdpxuW3OHW6+WNrEWWlYrFC7Ig5u5J:sxZbD0/fBscUuHbollwj
TLSH
T13D32B6536D38A9BB8CC6D20DFA19BF13E6F9507295901E58ABFC861C04E77DD220784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 402ced08b31fc836ebd6c4b836bfdda181aa2ddf67d5f29c8a18d30008699061
MD5 8a775648bf7088b3864a041f626355da
SHA1 402e32d9c1362c1e41e8d8db9c047016f5d38f8d
SHA512 793c18c73a64ed6bd5fc68d43f56bdd92a87ca58d002d30afdb3f6c2a9090ccc3f99be517442e234a17f149c55935c8e5507e86414f6162e09567bc633e88bb7
SSDEEP 192:sxZbRKW0/fBscyIdpxuW3OHW6+WNrEtmpYrnC7Ig5u5J:sxZbD0/fBsc7uHbjpDwj
TLSH
T17032B7536D38A97B8CC6D20DFA19FF13E6F9507295901E58AAFC861C04E7BDD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 2a09f7a7a4f6ba47413fbb56e7555d6ac8229aee77299fab1ab17aefca33ec3e
MD5 f8e4c3b80fe1e3d7e5cb065b256b595c
SHA1 b240f116db7b1114919a6ec44046042f04a045a0
SHA512 58c6c01166da30ea532ba60b32a6aa91c6bb3f42c8f74411f559eaf81d81e08416d30084cded374467b80c2ed50f0db3f86f13cd18add4261f0805a58117fc0b
SSDEEP 384:sxZbD0/fBsN66s8qMpRiYnazAW8pZS15posJWeT+62G7uHbr9Hwj:sTD0/f24Mnc7WeT+iiHbRg
TLSH
T172C2E502A924C87B9FC35D18A53DBE33AAAC505212C5CEDE5AECCA1C019E1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 00ee948e024baf87b711cfd54e46507aab74b0636909c5465c363ccfd8354afa
MD5 fdbbb91b04d4a93d57c47c99cdead13f
SHA1 5b3aba25d6aac51774bef1a2dbd62a485f1ac4c6
SHA512 3640af975912e814cdaf307eebd2ddaa417e5180c2f70688c4f0f45268de72b4464c29bef769bfec15e221d98e7cc10daa78e682ae355d209e8f42f024c937df
SSDEEP 192:sxZbRKW0/fBs65IdpLyHW6+WNrEmdXYrvC7Ig5ubJ:sxZbD0/fBs6S2HbXXJwt
TLSH
T11122B7526E38A9BB8CCBD20DFA19BF53D6F9503255D41E58AAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 76c27b442b9805c3b15748a8b5e86b9366e463636dbaf1dd39b97ac70ac74beb
MD5 d8a9767a76e415f82de130901e7a2126
SHA1 d01c5415755aadb90f2760148ed8b54b0ad151c0
SHA512 c59bfcad67b4c96df2161b7de93a753bd7402a425debf6d34a41ba2e9831c75fb90143c7c0acf199dd26fb92c5332b8363e4637d760e4f2e34768095a7900a80
SSDEEP 768:Yhy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbrroRxW:Yhy4J/DWvbtBhu1jajiLm0bYvW
TLSH
T1C9C2FA3B684CCA7E4FC00A9DDD5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\def216cf-cd80-4ec5-9c74-e86d9de98628\index-dir\the-real-index
Size 768B
SHA256 0655bc91a1c5a44b2f1f5fa36a59c372a7aa86e18248ee403b13231d56681e67
MD5 ccbb952d75952d7ac2ab9a9ad98f8b9d
SHA1 e75b689f79ee172b4f0209d057d7cff500948624
SHA512 dcdd59cc6f35cc00cd1ac753ad71a4ed7b4123f7c35f1fa03746d63e5c57413bbca6b72950b4eea3f04ab08f198e1625be4c3140f5f30e1692dd950c8fa2668f
TLSH
T1910126D61D034F46FD510274543DB819557501DC1351794FB2FDC127DC677407E86B90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d8e58.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\def216cf-cd80-4ec5-9c74-e86d9de98628\index-dir\the-real-index~RFe5d8e58.TMP
Size 768B
SHA256 22b17efa7fe775739707d53b13b28a37311506cbaa068143b69d5de7376ad475
MD5 ad4e76771f7d3931acf10277829ad46e
SHA1 d1d20f531689f6d9d133ab06e31531a3e9ce1830
SHA512 63e36f8a2e762e296a95b67d275c012a0999f7af77f6232721f5974f08e68fa84e18bcd3c79d79e3c3ac1eb4c6e357afc6b016c716ba22a7078e81bc55d1ae20
TLSH
T1D30120D605034F42FC0003709E3CA406316681485390774FA3EAA427CC53B80BD83FB0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 b4d757dcb5c4af9ea2c3722443e55a9dbc4be8ee324366a31f1c68274c4a8dcc
MD5 3ee6261546760daec83485b0aad1ffd0
SHA1 be8bb62744cdcbb7886ef67e281a5061a5fc96ff
SHA512 d0f28d3d6365fd4ac06abbc548439ca36654f5f8c55446743fa5959ec4626e641157f8b07ed053345c264c46ef2850dcd42bbf2d5d7c48a600fc83226e34c4c4
TLSH
T175E068BB3EFB1450FCBE97EA187061A00000B6688804AE8E142B52D3207131828AAC52
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3c2ac14eeb7c067ca6b86e75a6af5389857d8eb2d5eee142614bb4d2375c116b
MD5 060b0515d43c22e813d6cbc9c2341741
SHA1 35c8abba9108a7acefc5d51b8b3e3cda975ea6ca
SHA512 a40558a052a4ceeedeabb87061f592ab1fa7042cb4b82475324cf296d289e6ac1dec577a0d448945f59c3b4ccccf667fd8d469d3559590dd4b1248f530df70c9
SSDEEP 48:KIDI1Ks04jyL5f5i5r5/5B5h5B5ab555U5pIS5P5aK95v15l5ax5/5KY5s5t5v5/:KIDCKs0+aS8K/aeaYoKB6+H
TLSH
T18791725176FA064138BD684891718B1F564232B33058E96B7FBC80A69F2BE085EFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 1d80c01119117e01dad0f184bf09e2be9ac1e1f25ebdde1e99bcc086fea46dee
MD5 a5af5b9fa76dea31a1bedecc806a7a35
SHA1 fa29d99f6a9acd08fd967750d9458968e8611c83
SHA512 2c860b2e1a3639548214aee1457e74958d1a4630114c8237cd32ee72d4919c2696c9097f1afd9da7ae4eed962fab8b81f3a078ef5d8d04f0e08a7ead7ffb1665
TLSH
T19E213E86F6F918D47F89E94AC12A5503B8A33A99154D9DB2671D80F51F8881C0BAEF31
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59deae.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59deae.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dbbb8553774abec478686a62260661c5b8d8b5c18d5f268e5bf56384028894fe
MD5 5f44181ff56b3fadae06d623ad200519
SHA1 ec17a15209696b82ad362fa872661c83dc7dccc6
SHA512 3f81650cd275d957718ce015620fb409a41bb30ab57c09f4351f56605d905b0fb8c75cad9698a2b7c24aa08ad574587573d087ac612c68990088329409dc877e
SSDEEP 384:eZcIhsNjLzy5/qGZuBqwHX58EcOWJsUa1KtgOIwZOyzUoL:chvhqGJOabOVbKXs10
TLSH
T126828D32A978AD7B6DF6A145F58336035FB88067E2C96F94C5ED6B1D01A92A8030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 420afcc0f92be890efc7167ef7ce72432bdb5b2fb4bc5ba201514189129e0d73
MD5 7f77f9bd4b68ef5278d7cdc12541b115
SHA1 e47bb840e361e56c1aad53531c2ce8928ac19377
SHA512 62861ddb39fc4f9621057802a1c3132cac2524f6c6a7d510dc9dc70c8473d9dbd4cde9a0cc942a8560972492b0eaa80d9aa5209a7c52b6bf8f11fe0fb9bd0712
SSDEEP 192:1ONF6wlDgQmiUyYYW4X58gZcOKBJBDlbBA5U6:1ONF6kgcW4X58EcOWJPgU6
TLSH
T1BD02F834F9787C7B8EF2AE09F5873B139FA5112BE5512F84CAE81A1D00D725C1306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cb49220458e262490e3863bf8390073fe066b5611ffc938df1203bd04fc3d54c
MD5 962faac0eac426529a28658abc8cb43e
SHA1 20c6a894bf522d3744fc9b561b9a77d7af2c8f0b
SHA512 e8651ac67904ea687707be2df3a99d19f17eb8d0a9cc6f02ddcdb24e84110adf82cea9b1becb80942f0067dd02a64bd500748b504e19f8081a55e5c131b8a023
SSDEEP 384:NZcIhsNjEzy5/qGZuBgcHX58EcOWJsUa1KtgOIwZOyzUoL:VhehqGPCabOVbKXs10
TLSH
T1E6829D32A978DD7B5DF6A145F58336035FB88067E2C96F94C5ED6B1D00A92AC030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 39483fa109d66a7f3bfc5bc38be7678229cfacbfe68e700f921c93198d197c2f
MD5 14d94a4b24f0ede7226cafd52c557aa5
SHA1 ceb7ba0241fda7cda8b9792464c73b7d9504873d
SHA512 455e3e0d26c8eab3d048924ad98c37ec3fd0cfbda70ef8a0ba0a2aa8dfa7b95be8224a4ab3dc2e11cc3c1489dada07866399f4a69f35b04cad09cbe8d1f8390f
SSDEEP 384:PhiFiZcIlzsN98TUNTUlIlEzy5/qGZuBu8HX58EcOWJsUaGKtgOIwZOyzUoL:PIFQd4wgXhqGViabOVkKXs10
TLSH
T1A7C22AF288E7897AD9AE5747E77E2E034EBCC063F4859A90B398561CCC551BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3a4a5bd84251f0362212a4b42a5bc3e063bffed0895c5a0d625131783c181e9a
MD5 fe80910a5ebb8a1de6296f3ea01e6ee8
SHA1 8f3c07ba63317fb935953bee4f4aedd8c05e1d03
SHA512 9fd26fba40d1a769e0101881dece1e0416ca528e926c8a4c7e0a2f7d4546ff18877ae9fbb231b8628a3122d52a8f76de0fcb8f7fd5c78248207793ec7682cd69
SSDEEP 192:1ONe6wlDFQmiUyEYw4X58gZcOKBJsUaktve5iqEU6:1ONe6kj6w4X58EcOWJsUahKU6
TLSH
T158121935F568EC3B5EE2A549F48336139FB54127E6896F94D5DC2A1C01EE2AC130EC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ebb16cc7623f968570bad13e13cfc04e6b2f2726094a05556e723111e4fba5c8
MD5 2a5b849d83ed75d0c83c994026e204da
SHA1 43e02cb7dee993d284dc767f38227904c2043c10
SHA512 8f3dccf430149d3ffe9585fb6770f46c76834522858bd6f9de077d68504fe675770222348a47832a74aff5397227983142bf8ab62675a554762b58f78abfa429
TLSH
T1BCE00100D700100AC0B8037440971B206BE0C20802720357532005A86DA37105F10BD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 393be1db31e17459b1670ee9846191c38c9d6dbe1f1542f1410d0418b9d098c0
MD5 08a2b7eaa40c5f06ede1fe16be30fcb2
SHA1 8effcf2a21e0b5447af0bc643bd42fc37f8334ed
SHA512 db8a9774697238b633dc8d15e041f9022ca52909932797a7d6c8124b445952b0ef26faca18b851bee4b47935c93ba22655a920ff882d948198bea8fb265aa56f
TLSH
T141E00100D700106EC0BC0374809717306BE1C21902B20357562005A8BDA37105F24FE1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 85da8f089704e702fe14571f7604590e2335f1049081fa7a838c7083aa09ad18
MD5 faa8e6eba33fa1308542a5a4248ccfe5
SHA1 1239e40fa5c90f6ec6f6b94d794aa024655f9630
SHA512 1b65066c1d1392d2f7eed5b88bb10708be0c4d0d297fe89d8f0ce3f6d264e3b8ca39089861da4a02d681fc14cee75f9d901b2b0223cd33fe0fe98cf1a3532657
TLSH
T19CE00102D71021AEC0BD037580971B706BE2C33912B2035B5B2005A8BDA37165F24FE1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 17520f5d795bfa640c5b662990f187eacc0f2e1e53fd65db42695ede959ffd77
MD5 d6c07cc9ed731ced4544a01e4a1c0427
SHA1 0aeb6cefd0d6797a7a28441d7abbad7480d0236c
SHA512 02cfa0c0268e3a7aed220cf8edaac6425404deb9e75fe6009fb01946fb3d704e4f829bb3e6a35027c237893626adce8f9f79744baf25afa1576abfe3f2fc9243
TLSH
T16EE00902E71022AAE07D077582871B726FE2C37816B2035B5B3005ACBDB37166F24BE2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a2898.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a2898.TMP
Size 392B
SHA256 0a61ab61c910ac795cae72a757b78e38ffe4ebdf4d88193a972f36df7a0a9041
MD5 4c6b511139099585f2ae2e0df37ab541
SHA1 ed640c1fbb4f4b59e21ef6bccaa9de1f3fe6a7bf
SHA512 917136ebaf2cfdbc55d93433e3078feee931368bcb1902089143ccc9184c1ec9470cd12a31e59b42a8dd5570cfcc6e5cba614029cfa248d9d471e1b25444fdbf
MD5 SHA1 SHA512

Submit Download

5d45a45d-9c99-488c-ab4c-d7bf1129d157.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5d45a45d-9c99-488c-ab4c-d7bf1129d157.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0524c2265fc09d07f56987cd6e88df320e701f012ee9fc571a747efd02da548d
MD5 bd46b9c9cc79684a2c23d14ed80903c8
SHA1 9b67da23ca8cdf1a13a0635f4eba8b2776c050be
SHA512 e6f828bb6baecc26df633d228aa73d9ff3ee369952c8c27448607c8c81daea1bae3dea2376edb986f701cbfec69b6b96f99776a567a8f60a4ceee22f240e2b1e
TLSH
T10641275CA7E91148B3B76F16AFF6A9AD487EBC331E0AD46D00010D4E4A26E00DC72B37
MD5 SHA1 SHA512 TLSH

Submit Download