hxxp://www[.]designatelier[.]at/

Analysis

user interaction
yes
max time kernel
114s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.designatelier.at/
Sample260928-rap46swbmd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{6683C316-7318-4F3D-B75E-85081BBEB83C}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 3776 wrote to memory of 4944	3776	msedge.exe	86
PID 3776 wrote to memory of 1760	3776	msedge.exe	88
PID 3776 wrote to memory of 3744	3776	msedge.exe	89
PID 3776 wrote to memory of 1752	3776	msedge.exe	90
PID 3776 wrote to memory of 3744	3776	msedge.exe	89
PID 3776 wrote to memory of 3744	3776	msedge.exe	89
PID 3776 wrote to memory of 1752	3776	msedge.exe	90
PID 3776 wrote to memory of 5044	3776	msedge.exe	91
PID 3776 wrote to memory of 4256	3776	msedge.exe	92
PID 3776 wrote to memory of 5044	3776	msedge.exe	91
PID 3776 wrote to memory of 5044	3776	msedge.exe	91
PID 3776 wrote to memory of 4256	3776	msedge.exe	92
PID 3776 wrote to memory of 4256	3776	msedge.exe	92
PID 3776 wrote to memory of 828	3776	msedge.exe	93
PID 3776 wrote to memory of 1120	3776	msedge.exe	94
PID 3776 wrote to memory of 828	3776	msedge.exe	93
PID 3776 wrote to memory of 828	3776	msedge.exe	93
PID 3776 wrote to memory of 1120	3776	msedge.exe	94
PID 3776 wrote to memory of 1120	3776	msedge.exe	94
PID 3776 wrote to memory of 3984	3776	msedge.exe	98
PID 3776 wrote to memory of 3984	3776	msedge.exe	98
PID 3776 wrote to memory of 3984	3776	msedge.exe	98
PID 3776 wrote to memory of 3336	3776	msedge.exe	99
PID 3776 wrote to memory of 3336	3776	msedge.exe	99
PID 3776 wrote to memory of 4616	3776	msedge.exe	100
PID 3776 wrote to memory of 4616	3776	msedge.exe	100
PID 3776 wrote to memory of 4296	3776	msedge.exe	104
PID 3776 wrote to memory of 3348	3776	msedge.exe	114
PID 3776 wrote to memory of 3348	3776	msedge.exe	114
PID 3776 wrote to memory of 3348	3776	msedge.exe	114
PID 3776 wrote to memory of 5380	3776	msedge.exe	117
PID 3776 wrote to memory of 5380	3776	msedge.exe	117
PID 3776 wrote to memory of 2796	3776	msedge.exe	121
PID 3776 wrote to memory of 2988	3776	msedge.exe	122
PID 3776 wrote to memory of 2268	3776	msedge.exe	123
PID 3776 wrote to memory of 5936	3776	msedge.exe	126
PID 3776 wrote to memory of 5936	3776	msedge.exe	126
PID 3776 wrote to memory of 5936	3776	msedge.exe	126
PID 3776 wrote to memory of 3340	3776	msedge.exe	127
PID 3776 wrote to memory of 3340	3776	msedge.exe	127
PID 3776 wrote to memory of 3340	3776	msedge.exe	127
PID 3776 wrote to memory of 5768	3776	msedge.exe	128
PID 3776 wrote to memory of 5768	3776	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.designatelier.at/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff06f1c188,0x7fff06f1c194,0x7fff06f1c1a0
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,10702989607548170536,11349275317189763726,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,2726776143474712511,16686074010473234333,262144 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,3800613802324494191,1065050370828637329,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,16472631705069321714,7836983625648447651,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,17907384698699526534,13902467091310917298,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,6752524219624666663,946193434039709723,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,13151387167323226959,18010825227951763977,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4988,i,10635233812420499767,8384416613840320418,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,7288803202153542465,9414472522181886269,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,10368301125421033593,11152795127923461841,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,1570594226336496011,704728079007533073,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,1570594226336496011,704728079007533073,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6156,i,13116858780670584303,1428508862574785519,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,800729719753294306,15340132676619895770,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:8
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,4457938726213754523,2177928873505585275,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,11329594311529655793,14515642522095212318,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,14734856807303444285,3169132844030416750,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=1884,i,1045784083027762880,16265455250965519754,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4100,i,11097971525651367281,6647829627503974061,2097152 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6964,i,8652191224891091369,4635822198593193066,524288 --field-trial-handle=2308,i,4057025399524804015,18433292894347541331,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  PID:5768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 416KB
SHA256 e005e7c659d8ecb0e22ab812441fe994f65b27ebfc7b35e7e8d60bb12a6820d3
MD5 e1bf2fdbc0f04cc64f4ef4fe99b1f67d
SHA1 14bd8bf4d0d932191b0b0240960c7b0e2719b73b
SHA512 2b743974cbe3db526a377289aa867e34e885c952cf4659a46ce93acecb08bd1d112119906818ed574460784c10e2b470dd035edb73aa47ec805d0177ba4a3c50
SSDEEP 12288:+SHC66TjhX40sJswpxBCeQ5XLQB8GYB0ZspRQIn:hHCzHhX4d1CtQ6++pRQIn
TLSH
T1799423295599B04367B2AB7B09B261337D1AC0336B5F00152E20DE29FCBAF8F9D85D71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 449e39c1d73dc4d90dac4524876e0b608f75ad77bd104283903420f357fcb413
MD5 064440ad82c2337f1e08db7a1ea57af3
SHA1 6166095c2715b137feeb17d1e669d1647ca15c1e
SHA512 dd6f2f1110c8e551dd4e43bd542e1e10ce9cfe475d3064c8b1ef5b5bff75e8cc7d2180ad1cff9bcd62b846c93cb80a7cc50e5399941394377655423bc4ac887e
SSDEEP 96:aLep/G2hf2hL7yszsO9SGJZ1/bSYoB9b4pYXyu72yRP:ayph8zzSGhj09jP/RP
TLSH
T1ADC16582C9D97082FF59EC3AAEE06D9616BF37CE03845B57551DEC38BC836E649D0248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 d1567ba6649e6398a51126c3714516d5330454835b8817de844f67e5a41ff73d
MD5 4c2c45b2f143630f4592fc6ffb48183e
SHA1 03308ee0bb021e43738787d4172808fba6158965
SHA512 8b869fdc8e5fae2e8b5423bdf57b2252541a492c7ab8c7d1afbf6b7053213a22f11d042c69bbec1d16183fbcd239682da8f178d723ed2b0985c75620a69160dd
SSDEEP 96:GJ9es/NfhffuCd7yXzsObSanJ4laLZYWjmsHdfArpY6yu7M1tYn:GJEsjTkzYEPeWCsFBsMzC
TLSH
T1ABE10C8285DF2881FF19A8365ED01F92257A37CE03651BD77519D8387CB32F7C59A208
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe594452.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594452.TMP
Size 3KB
SHA256 08ffaa57e43cc796f4d32a3025d9928c9cfba1f638156d80ccb33df52127fdc4
MD5 616048ca8845bb788c35bc72acf2720b
SHA1 47e262d9ea421bafa503be1eafb648e6c0903fdf
SHA512 4f841b190eb23f75c06262e9f87f0e335c47ebb3f9d3734b0eb3d9e3d1d6a6773d86eed9453f109742f2886abada66ceae87f017d0a2dbe9c7b40cb8599fe752
TLSH
T178615E86499485D5FB96FD72A3D900A7BE7F65C24783AE8B829CC87ED44670520C419C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 21eed7bc1bb050fccee0b05404db8b04107bb91302fb606ad20da79e32e1f712
MD5 9d4b76372c1aba6278d25b23454b6f6b
SHA1 54353d823b4e462a5f387a2b4bb9fb9ebd55075f
SHA512 2dd20c1a72225c75f9aa62006bd5c0aca0f354a2b9ee4fe1500a2488dbb5a7ca6ecc3f4a1e8fda14d06e5a74009a40d81f1ae84244d19416a5bc94328b4569a1
SSDEEP 192:DD+X2X05JzKDKcQHAfc75atOGcqGSj7qRKqvWqa1JdT:DD+X2X05JzKDKfHAfc75atOGcqGSj7qS
TLSH
T163D1B8F3C3E5862DCD1152F0AA246E1BCF1D0856536C3D5AC5E49E9BE3E2471E242B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 7954e7d3eb816dbe4ad319a2964b1739f3fe1f6daecb5a38f717f37abc1a9e84
MD5 21af6f315ba8efe7a22b6e26bb297b73
SHA1 f2adf02d9ec7a2c5383d932087125f2393311a6a
SHA512 33fc8fe6fa7ee66b3a2b58eabc8e632fd518020abb3552c972862847cafd06e77108913e010f14822bdd6fdc8ac4ded3262ed324749cca1c821f5804a40b5246
TLSH
T1DBD022E3271830B9A57C6ECB506ABD8FC3AB20214883DDD520E0B99C163B9AC4547281
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe591275.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe591275.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e666b081373c597907e289eccf8f4c26f9110cc46202671dec6b532f7eb6ada9
MD5 cacd6117137021ed9e036b7a49fd4624
SHA1 1633f0a092e7f25a59279ad58d2ed16b4c9aa477
SHA512 bf3e970f3a0089261ec19285de2e00f20213b1585c144058d2ddfda7b41be1cd43d5feab65a63746be68f825240220cf8ad69bb626e03ec8d418b2b0095c0198
SSDEEP 192:sxZ6R7WG/ffsjxIdpOVHW6+WNdEe/YgcuXIgUEJ:sxZ6MG/ffsj6qHbz/7UI
TLSH
T15522A8516E28A97B8CC7D20DBB15BF53E6F9503291D51E48AAFC861C04E7BDD220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ee7840ec82af072abe3994c1c23a4fd495dcbe97b03bacb44116a6e6d2ab9b8d
MD5 d2bc2987496bc0f9172b4d9a39cade5e
SHA1 c99852308bfe2458b3eb4d0ef1a1376be9ed5fea
SHA512 0ddc3c6362dda2ac47bef1f94d9ce45529aeb12a9afa963c2a143f06f82d1dbe8e8f6853d201a733039e7b7cdc1174123012f7ad2a39d02e40659e82fd608500
SSDEEP 192:sxZJR7MOG/ffsjPhgcbMmQdpmGVHW6+WNdEeqdK/Yg2uXIg56EJ:sxZJuOG/ffsj+JXrHbzh/Z8I
TLSH
T11042E7026E2469BB8CD7D219BA15BF52E7F95032D5941E48A6FC8A1C08F7BDE120784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c22b75e6c44587d652b28348232481eb90db6e9fb5e0121fb8f61f17d99d46a1
MD5 74cd7be19b9abe2571e00d4c304e1797
SHA1 5698326b45987206a8bd9a337a6168a0f50fb465
SHA512 4546e0ef62fa780a224bac1dd1e77c76ba99ad023d5ce4e2528b26a21c3d60409c43ca7728ff717c5bb1c48bc6324c9b85fc3e964e0d425d8f0e0834655f17de
SSDEEP 192:sxZJR7MOG/ffsDPh5bM2QdpmEVHW6+WNdEeqdK/YgnuXIg5MEJ:sxZJuOG/ffsD0n1Hbzh/KyI
TLSH
T1F242B6126E2469BF4CC7D619BA15BF53E7F91032D5941E88E6FC861C08F6BDD220784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7024dffd24240b64fc26bd87a8b1bf44eb0778f2099c1c94b651a7f0620adb1e
MD5 e2bbe2bf5ad07c49442c750ebe41e4e6
SHA1 3e1fc2a52e60a64f110bc7d58ef466451b3765b5
SHA512 cb129bc039985aed6ddf65c5fbd8edb58d5da456a0b988c4c163993f1d54531a5b08f10ea297da87aa37820bbfb0827b63635dad1831b2be2eb3866f5a1abda4
SSDEEP 192:sxZJR7WG/ffsjPhgcbMmUddpmG7nHW6+WNLdEezlRqdK/YgOuXIg56EJ:sxZJMG/ffsj+J3VHbn3h/R8I
TLSH
T19C52E842692469BB8CD7D21ABE15BF12E7F95032D5D00E48E6FC8A1C08F7BDE120784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e967dc542df04f0b0b2d7d8711231913d172d526adced74c170549414a2f093b
MD5 e5510e8c121d225741b1a89798641a82
SHA1 3828465b8aef6d608dafcebcbc6e4a881f08da2e
SHA512 00e58ac8a11818119cee3b029d8d377e9ad38cd99a7f0adf16ba0f463e14ec78b68e48435aef573bde727f74bb3940b34b0bd84b9c8bfca87bdb2ecfe700ddfa
SSDEEP 768:NaichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzLroRTl:NaichfPWvPZplu1jan+LKgz4ll
TLSH
T1CCC2FA3B640CCB7E4FC01A9DDD5A6FDA7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\46843c8b-13ed-43f4-9da9-1501f0d9094e\index-dir\the-real-index
Size 72B
SHA256 bc91c1c0ba811316cf2c4c4609f2d3b882683f6586de0068394bcd2d90a59ddc
MD5 e54d29aa9fa9463216884a972b696ab4
SHA1 3d4dcda79c3a0e33d459728afaf8ae0f606bf967
SHA512 73bae496584384583c3ee89dd70e4f278de9b5014c6f2ad23c6719525a9323594a9d48b579da6a50dd390da7d09ee08632d90a23dc47ecef010cbd47ceb66d55
TLSH
T107A002104AC611C2D4021EF07FDA216573E5CC2C4202270B41E30094FCB29415D4101C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\46843c8b-13ed-43f4-9da9-1501f0d9094e\index-dir\the-real-index
Size 72B
SHA256 4710b6567e4f13b5748833b4986a7a4648e29595af9747d2dccd2c5f1bc94cdc
MD5 a0029d8532efabcb98d59f9e187bd601
SHA1 1e9bafb172ee6d8b7da268a7e2113e94232109d1
SHA512 6c204d6f282c6eab4f8858b5229d9e2291f5e308f527f61d5720814d5f69d43b6edbb2c36c03cb217a79ae91c86924cd97e04d8f23aaa683a772e238729a2d64
TLSH
T1E2A0021443D00029D41617B3159643411344D9102110130B84AB4699CF544404D4230E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
Size 3KB
SHA256 26b94b879dda29823967c326709a692755363555a161dadff1eb4028398b157b
MD5 27523e7d023f313cce94983953e70e5f
SHA1 c6fcdd63d5cc23effc32cb5b1d0db526b82f48a9
SHA512 9f3be7282868e880e1ae5e47f5cc11eb3fca8a4af20f101e868e059b84c96af5719cf1a77ae562c53808a1caad2ca2c2182241de8e3aa89b66f16013bedca766
TLSH
T1D951E74F4E472B2FECACA27119B80842337415DC17780E1BA5FE4138F8C3A3818C9758
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
Size 744B
SHA256 2caaeb46404c2d0309c102719337a5eaac694f315a51cdcaa07ffc6a5ab23209
MD5 658e595c554c031f9d60218c5fbe7f8f
SHA1 5bc97ca1110bc9b6e4ce7b25b38d8c89fd4fcf39
SHA512 637121d05ce1069d9b8512c791b3ce579d1612bc421207c3496c1c30735450d550a7f07c935595d7eedff3d0724b9bc65a5c5669cd410078de76512a74a2ec85
TLSH
T1890126DB4E12495FFD550731643D744961B407CC4340670FA3BDC12AAC97344EE41594
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c975.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index~RFe58c975.TMP
Size 744B
SHA256 33b32ce813b50cd82e3c021489b706c353dfebbc2cec3471db1d014e04acdaf2
MD5 652f30a92933f4524e85b0a6b5dad56d
SHA1 76d449b02be0db61acf0a739ad07e81b9e7b7f58
SHA512 2aadf7869dc124ed4f192d05db24157fbcb1121243203b508bef9a97b3a59c7a0f4593cd7106c6f5cfcff85a10764a892ba28633e1f4074701115f487f119c04
TLSH
T15A0105D741139B87FC0402B1DE3DA4556166814853507F4FA3FBA06ACC927847E43EF0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 73d9832b75e9d1c797d230d2bcfc56ae2d36c08c77608dd16e2152539e362ba3
MD5 ab3bc5a55f71e55c81f03760f1241781
SHA1 31c7cd06f6b9bd830b92d806e3958f3425886ec8
SHA512 b812e9ecca3f8ce2c44f3e1d91c6a5619653b9c3a676349cfb86ce1c292ad34d0fa6911b41e9053e98e7ffb4ca07892afc63f8f083f0436d3647d236fb92548a
TLSH
T1B2E020B72FD72854ECDF83D2103188954105B968C544EE4F607E91C7A1B1755785AC26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e58e9d7277b2aaf78a791a1a1d2b75c59f19b9910d1927a4cd7b91494214f7e6
MD5 544b730175002262c6c33c9d634303e4
SHA1 aa530a4260fecb569f9153db812ffb7e1f3302d1
SHA512 0d8843a50011567e5fcf2b2a45047ee90e0cd1b64d8401ed384396762299e9f2d840a611a6e01679c0313019248b82a23f24d0af3160c4147ef15e44acb89c11
TLSH
T1E9A0025999688059D060067490AA16986210989C1607321380FC9194AC5118C45A3016
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5920ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5920ad.TMP
Size 48B
SHA256 60ddb36761fa85fd324324054f7f59460b21dbace522e446e4aee880857126a4
MD5 ca4687fb243fbc7812e4f7b60ca81efd
SHA1 5e0365a369dd585c9664cf06077817abe539d341
SHA512 19778c15916aab2d46d9eb79a36c1b27ea6e975d147f766060c56195d83c8f63a34dc67ef57a039f31a689a599cc9a032ec1e60533fb317b50ad5fbb558bcfb5
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe598265.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe598265.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b442e8f0e3e76814ff192acb82526cee6d817f00ce963c022a42a3d955dc7780
MD5 63164aea798160c20c7106de87452146
SHA1 829e4e6f195daa35fef0330efd23a2bfd0475c12
SHA512 e33f9aa584e29f3d7438de0684d6a2ad60d483106054ecda88c904a4cb426f35f3466772df3a70ccbfc1d96da720ec48552889be64da3144aed635f08363aa0d
SSDEEP 384:nZcIhsNZjUf252rBBGYX5EWuh89E1tgOIwZOyQ8op:Ph6WzGYuWsIE1Xsa+
TLSH
T1C0827E3298785C771CEBA285F48B36035FF89027EBC56B9495ED1B1C01D7698130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 29fae37ae45cab4aadab08b385ddac824040bceaa067ff105046c08e241a15d6
MD5 4a1054fea107d3f46993dc171aa11e2c
SHA1 cc9f71e5260878e72591f6b74bd1c2a608380317
SHA512 24cd27f0072163b73a0fd1133b611070c67e19adbd6dfc424bc63bb94a6d326cc66a511e096cf7d97f898da6b0a2e8518c1d591dfb9453eec6c67c43c90255d1
SSDEEP 384:aZcIhsNZCTtf25pyK2BGYX5EWuh89E1tgOIwZOyQ8op:YhyGKwGYuWsIE1Xsa+
TLSH
T1CC826D3298786C771CEBA285F54B36035FB89027EBC46F9495ED5B1C01D7698130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 01c433593fb4c3819b9bcb64ffcbd3d1e949bafb7524235ef7bc0903b9a9327e
MD5 597ffef616f1fd925341c64d713919bc
SHA1 df55f60b00d743d40f78cd831562cb9cfa7f11e5
SHA512 e287ba3e1800a738398044db1bdf6126037648d63c6bd1b2bc0c3dfe8cb63dd6d338221c6af78b4d56a03d1f07367b55425356af714866e8688761a8579a2703
SSDEEP 384:oiFiZcIizsN78TUNTUlIlCTtf25pHK2BGYX5EWuh89y1tgOIwZOyQ8op:zFQq2wgRLKwGYuWsIy1Xsa+
TLSH
T149C22BF248E7987BDCAE5743A77E2D024EBCC027B580AA50B3D91A1CCC961BFD306855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c2644fd2aac1eafc000a5254dd9ff5ed1be81904766b5db6e3b86aabd3acee9
MD5 856b70e56df12d435ac4bb4805dbebbc
SHA1 ce26273d4555b6da9071d854f637ed0b52f2d1f5
SHA512 a76f9e08616df7adc45e74fe86cc771727b9e5e4b488de6c52d19eae8ea958e48538620a998aec4a850117896ca476a3d8cdc979fb95ed7a4106d7c9ec33eba2
SSDEEP 192:LJONQ6DphmqQmiUyBYq8wGYX59eznCi7bkk7aHFiU6:lONQ619RRwGYX5EWuzrU6
TLSH
T12B02EA35E8787C7B4EE3AE55B44B2B235FE4212BAA916F44D6E81E1D00D768C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bfc0fcb3dd68707c323ad1919137671bb49befc4806fb46ae4a8495fd95f1faa
MD5 3b9bdd5822568db19102378761cc1e6f
SHA1 0149ac77efed59d45aae8861a2cd636de045299c
SHA512 17cd9ef61b36c424f79b97ea4344433e50faf2e5513ac3f17282de7c9f4188cbe1227e4f117a04d75dde29a49a85135c8da29d40680d629e61e83f1c094cfd72
SSDEEP 192:LJONU6DphfqQmiUy8YzwGYX59eznCi7h89n+kIIeq5TU6:lONU61YCzwGYX5EWuh89X1U6
TLSH
T129121936E878AC7B1DD36591B48B3A135FE4522BEB847F94D5DC1A1C01DF69C230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3945f3c1205ec808e3d1fe219d7ffe0db08160b8436911033eb4e6e541aaef6f
MD5 33445266da31a296a982dfd40b8ff9ee
SHA1 98a5c865703313096fe84111b17ffea95b958c3c
SHA512 03b34de04b4bd5b75f984582934baf38f090db9cb7fb63ca0e5fe7e6839aa091c217c7080aad2ecf281847893b286df00928e5deeee4d49a6a06f9bccf327309
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe596a39.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe596a39.TMP
Size 392B
SHA256 f0de1e2c0d590c6bedbddf23847bcbe92fff8bbd0f5c915fe35a2fc4566e21f7
MD5 f026e485102aa3075c27b07531a1ea3e
SHA1 64e911e88c030bf801da8e8f69fa37878528c89a
SHA512 839f8d11e707f2a54c1e91e69db6dcc78204b051352ed726050979c30ea7c029a465cc1dba21a24c99ea27d520a8dd9321249ffd6b8590341331154191a8dc2f
MD5 SHA1 SHA512

Submit Download

c2c4a863-4c02-4885-9ba8-86017ee9769f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c2c4a863-4c02-4885-9ba8-86017ee9769f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cc6a102daebe5713fd9c2f1c914bd1eebd800370720d81225b1003fbaff80f1b
MD5 1913ac2ef50cc5d49f6aff43a9fd5a7d
SHA1 302a0fd9958af0417224cba7f4841b5a6c656a56
SHA512 86cf3f46f870186ef873202dabb08daf354868f76544c51e0deb31a9db432683ac3f22e86acaeca49ea7fde37e1c885c54408ca33219397e34ba0fb6dfb1819d
TLSH
T19B412448A6E91148B3B76F5AABF6A86E487AB9732A06C49D10110E4F0767A40CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads