hxxps://marshalls[.]cm/

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/10/2026, 20:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://marshalls.cm/
Sample261003-zawkyswhrd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4468	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2C18C1E2-D05E-4A84-861B-C559BADAF139}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{578B2FB5-2DE6-46D9-8CAB-6EBE667A6E13}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
672	msedge.exe
672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4720 wrote to memory of 5088	4720	msedge.exe	85
PID 4720 wrote to memory of 4468	4720	msedge.exe	86
PID 4720 wrote to memory of 3644	4720	msedge.exe	87
PID 4720 wrote to memory of 3644	4720	msedge.exe	87
PID 4720 wrote to memory of 3644	4720	msedge.exe	87
PID 4720 wrote to memory of 2012	4720	msedge.exe	88
PID 4720 wrote to memory of 2012	4720	msedge.exe	88
PID 4720 wrote to memory of 1924	4720	msedge.exe	89
PID 4720 wrote to memory of 2544	4720	msedge.exe	90
PID 4720 wrote to memory of 1924	4720	msedge.exe	89
PID 4720 wrote to memory of 1924	4720	msedge.exe	89
PID 4720 wrote to memory of 2544	4720	msedge.exe	90
PID 4720 wrote to memory of 2544	4720	msedge.exe	90
PID 4720 wrote to memory of 468	4720	msedge.exe	92
PID 4720 wrote to memory of 2124	4720	msedge.exe	93
PID 4720 wrote to memory of 468	4720	msedge.exe	92
PID 4720 wrote to memory of 468	4720	msedge.exe	92
PID 4720 wrote to memory of 2124	4720	msedge.exe	93
PID 4720 wrote to memory of 2124	4720	msedge.exe	93
PID 4720 wrote to memory of 2068	4720	msedge.exe	97
PID 4720 wrote to memory of 2068	4720	msedge.exe	97
PID 4720 wrote to memory of 2068	4720	msedge.exe	97
PID 4720 wrote to memory of 712	4720	msedge.exe	98
PID 4720 wrote to memory of 712	4720	msedge.exe	98
PID 4720 wrote to memory of 4908	4720	msedge.exe	99
PID 4720 wrote to memory of 2228	4720	msedge.exe	100
PID 4720 wrote to memory of 4332	4720	msedge.exe	101
PID 4720 wrote to memory of 2228	4720	msedge.exe	100
PID 4720 wrote to memory of 4332	4720	msedge.exe	101
PID 4720 wrote to memory of 1468	4720	msedge.exe	105
PID 4720 wrote to memory of 5140	4720	msedge.exe	112
PID 4720 wrote to memory of 5140	4720	msedge.exe	112
PID 4720 wrote to memory of 5140	4720	msedge.exe	112
PID 4720 wrote to memory of 5612	4720	msedge.exe	116
PID 4720 wrote to memory of 5612	4720	msedge.exe	116
PID 4720 wrote to memory of 5612	4720	msedge.exe	116
PID 4720 wrote to memory of 6012	4720	msedge.exe	117
PID 4720 wrote to memory of 6012	4720	msedge.exe	117
PID 4720 wrote to memory of 6012	4720	msedge.exe	117
PID 4720 wrote to memory of 6092	4720	msedge.exe	118
PID 4720 wrote to memory of 6092	4720	msedge.exe	118
PID 4720 wrote to memory of 6092	4720	msedge.exe	118
PID 4720 wrote to memory of 2596	4720	msedge.exe	119
PID 4720 wrote to memory of 2596	4720	msedge.exe	119
PID 4720 wrote to memory of 2596	4720	msedge.exe	119
PID 4720 wrote to memory of 5540	4720	msedge.exe	121
PID 4720 wrote to memory of 3824	4720	msedge.exe	122
PID 4720 wrote to memory of 2972	4720	msedge.exe	123
PID 4720 wrote to memory of 6052	4720	msedge.exe	128
PID 4720 wrote to memory of 6052	4720	msedge.exe	128
PID 4720 wrote to memory of 6052	4720	msedge.exe	128
PID 4720 wrote to memory of 6100	4720	msedge.exe	129
PID 4720 wrote to memory of 6100	4720	msedge.exe	129
PID 4720 wrote to memory of 6100	4720	msedge.exe	129
PID 4720 wrote to memory of 4804	4720	msedge.exe	130
PID 4720 wrote to memory of 4804	4720	msedge.exe	130
PID 4720 wrote to memory of 4804	4720	msedge.exe	130
PID 4720 wrote to memory of 5296	4720	msedge.exe	131
PID 4720 wrote to memory of 5296	4720	msedge.exe	131
PID 4720 wrote to memory of 5296	4720	msedge.exe	131
PID 4720 wrote to memory of 3084	4720	msedge.exe	136
PID 4720 wrote to memory of 3084	4720	msedge.exe	136
PID 4720 wrote to memory of 1172	4720	msedge.exe	137
PID 4720 wrote to memory of 1172	4720	msedge.exe	137

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://marshalls.cm/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ff84e96c188,0x7ff84e96c194,0x7ff84e96c1a0
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,9525349145071506567,1555126263681445759,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8799257771105679295,1463201841323329816,262144 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,16673382754279357769,3789397076549368050,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,5554249597952766238,13853303699483243668,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,2599755452969609431,2711874005791582964,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,4435620230548300245,2523079213489614281,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,9508949540609666248,15717257180711348134,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:2
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5096,i,8919877825218626373,6518790935241947682,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,2798636948558072396,283335915058723210,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,15717083164660976437,13635395568135054359,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,17371673262335378853,1158035411004820332,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,4222330161851315712,8368296620947000037,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,7807380323679959445,12223319359107831419,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,7807380323679959445,12223319359107831419,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6720,i,2713400072021623726,5337188528453374708,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6888,i,10361286682954936424,9670551559457148432,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7028,i,16305708395421557442,3709067445891448348,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4628,i,12006543351578616392,2572104625390984820,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6968,i,4282923138055609765,13954664068864833667,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,6761057136425368579,8987688653383290911,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:8
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,15274218630881533619,15398369510655058844,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,6318358340563378691,5634153308904497954,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6984,i,12006344536782845779,3017009393913065296,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3508,i,8944882579254426270,4315385063706165949,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5200,i,14540749308247046196,13255881007279174430,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=3656,i,13898235174595147513,7046720455084565837,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7220,i,13382732861275895522,499854534494789011,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6296,i,4176956671260255681,4984102927677739714,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4664,i,7327975091660131294,15231008545021846955,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7588,i,4553228360671918354,15910626456327798864,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,1599013679591937058,17570964651196348213,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7736,i,1302246639577465559,969753525028371584,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7756 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6620,i,12349618283673917399,7418284941602902630,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7484,i,7255273815290616135,17234945328791773824,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,4820578911104508693,10756981350542101397,524288 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8076,i,16451517118466124488,14450205908291536507,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8160,i,11384570548365841950,9800146060447857071,262144 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=3712,i,17036293722223197680,16425971185823179423,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5152,i,13481028282566650021,6344087227423652290,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5568,i,1961792603860082360,17402084052523438319,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7556,i,7164137807347449996,13548584650312037448,2097152 --field-trial-handle=2308,i,1633378628645449531,15627743604283012020,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

03f695cc-b9fa-43e6-bc99-248dced2ce24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03f695cc-b9fa-43e6-bc99-248dced2ce24.tmp
Size 392B
SHA256 561fb89c71124923c3ad1d388800a3845200a5b1179751a8be1b4d5b57900968
MD5 34ae2c8f40564ebbd9e8832673deeb56
SHA1 bb0dc012bf61c8919bbc6778b66dd48277f22553
SHA512 f260a6702ea42fe57de06b0258bf1717711e12396e90f9398cfeab9fcbc8b15ec72bd7bcaf8825001d85a19233bcf5e77d572e8d4dbc814450b0e7333ab02d18
TLSH
T1BCE00201D20041BFD53D033100831F352EA2805013E702194F30427C3C353003E30FD2
MD5 SHA1 SHA512 TLSH

Submit Download

1ff880d0-16a5-4ed5-ac91-57035546d394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ff880d0-16a5-4ed5-ac91-57035546d394.tmp
Size 392B
SHA256 c094a1c65389e6b1a21f87c68608bce78263e98654ed4e0636733c5cc33e248d
MD5 1eefee299c82dbbff1e21e8f0f67ff7f
SHA1 993c2c75784f004243cf75f12270f71c96d7465b
SHA512 bc9db118cd52165fda2f6d0a669c2fae9520f804cf0077b44623a7b6dfc0e04bfeee598ec02efd5b5025382488adaee59396067a9a96a72de1036975d3d4dee6
TLSH
T17AE00102D24081BED57D033100D31F353AB2906413E7025A0A3052783C663003F30FD1
MD5 SHA1 SHA512 TLSH

Submit Download

4f02be0e-f710-449f-ba08-95423740a56e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f02be0e-f710-449f-ba08-95423740a56e.tmp
Size 8KB
SHA256 552009768d4520193dcbf755677ea230e20c3fcc7b59d85a63c4adbee9e15879
MD5 345b217f50197e8abf557f0ca7ec0db5
SHA1 2022755a1aebf45f090d3a45a7d5a9142336f25b
SHA512 08410e39458881e9e8c02000322de8ee6ac7a529941780e168a749333fafa2b65fcb45f691a0e145ddf677e46ce349489aa8e174fbf27c2a51de69d5f88e9667
SSDEEP 96:KqONkCQsjpfbUmjH5ih/cIPURHl8h4otop5oaDwBKP4v+Y1xf//ojdDxv3ywlBCL:BONy6JUm0QmiUyh0so//2ywlBCPNU6
TLSH
T1A502F838BC687CBB9EF3AE45B48777239FA4106BAA912F84DAD81E1D01D715C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

507d33ac-d20f-4ece-9f1d-edb839c28b54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\507d33ac-d20f-4ece-9f1d-edb839c28b54.tmp
Size 392B
SHA256 064dccf559612dbdceebb85e243933ebb6c9715eabd26e37fe8fdf9ee348b49b
MD5 712f84c4683fc2899c3fadeaaa09b485
SHA1 f76c0d70578cf2ce6cb5101fe577a4687d1873e8
SHA512 f07771648a2ac4a2a47d1dfd28c6dff4b14b478ebd52b04d3ba80221ec3ffad68669a851545e2a0e5069e454b97e0861391c31514d06f9ad7e16684e3307520b
TLSH
T1E6E00401D30041DDD135033100C31D3135F340701377011C0D1041743C153001F107D1
MD5 SHA1 SHA512 TLSH

Submit Download

94603179-a38c-4392-9412-6cb0f12f23be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94603179-a38c-4392-9412-6cb0f12f23be.tmp
Size 392B
SHA256 44a9513dd41653563eb97642e7ff49fad4e29755a44f393c4cd1938d5161b60d
MD5 559ff44ffd064159c9f2284bae744f30
SHA1 b74c57c2a463b72d01dc875659d55516db634b69
SHA512 1a7f6f73f3e4c02bb948ea5965b8bdd781df81ab8b1975e3c8e876b40cfc86495b3f196735ecb7f736f3d4c08317a5fd14253740720f2c67306d83487f9ce66e
TLSH
T133E00902D34081BED57D033100D32F353AB2906513E7025A4A3052783D663003E30AD1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

008bdcb5-1c47-4dc5-854d-979c04219eb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\008bdcb5-1c47-4dc5-854d-979c04219eb1.tmp
Size 14KB
SHA256 7ad897658fc5c21c29d2c95778dbf57255c231acd2673718a4823c777c66ca64
MD5 f53ef04a76023b8c9c50cc6edefb9255
SHA1 12797dfd7d19f565024ebcd05fc23fac14c7598b
SHA512 ec81df1e0f7a1549ffeb468bf5b4b6b797aaefe59456a8baf5ea34cd1227478ae0caed9ed6cbeb125ea8067e592d182e87d39346e7ee777008888a1d7aa11a87
SSDEEP 192:sxZbRuWj/fws+62KKdpiXa8/E/lIQL9HNYq6+WNAw3PPikxMjEUARd6FPqLVD7Zu:sxZb/j/fws+62TPH+IAOOheZXhQi
TLSH
T11262D753A8345AFB8CD7D219FA10FB56E2F5916294D49E48ABFCCD0C08E67DE2207847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23e18dfe-9abe-4093-b7b0-58b783bcab73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23e18dfe-9abe-4093-b7b0-58b783bcab73.tmp
Size 27KB
SHA256 0bf1c735b42ef58fbf679d6ca6cb43cd4512e607c3adee9bff452a927d937b56
MD5 d21c40d543462479a70337501f0c8de2
SHA1 a0c1f95d5b5bb859e2e42d90645ec5928098abec
SHA512 641923f2f8256913af4f8632574aaaf138d95d42c11f709ed6aab2116cb560fd61bd26fe7d3dc4077b045649a988ca989e73e3a90db1081cfc8e3212e457c61c
SSDEEP 768:cSKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/HroQa:cSKlm7QWvUYm0u1ja8/L/E/UQa
TLSH
T196C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D404BFA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47ebf4e0-b308-4c76-a2e1-af1f99823981.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47ebf4e0-b308-4c76-a2e1-af1f99823981.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bdb30c3-09d1-4dfe-93ff-ccea1bf4eb39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bdb30c3-09d1-4dfe-93ff-ccea1bf4eb39.tmp
Size 12KB
SHA256 348f679b7dadf577fb0f4812b3bc8be860bc2e5d0a5ff39a3874a76e580936e6
MD5 94ad28ff8cf87e71a477d6ab8cb37a79
SHA1 d8877153728e3a1e3fdb7b6c2230da3b7494b876
SHA512 66ccbc348a440b7300d473a93ec7eaf1bc9afabe4e473cf75ba2e87d43379e848ffe1b11fbde6ce729af7f896d7c11b8a61f71db1f9479878c1eb55e249814d8
SSDEEP 192:sxZpRuWj/fws+62cxHdp/AnAlKqHW6+WNEEx3CO77ZnbwKInfY36avXVIg55GlWJ:sxZp/j/fws+62cViSHbpZ3kfX0Qi
TLSH
T15F42FA52A93469BB8CC7D20AFA14BF53E2F9517255D45E48BBFCC91C08E67DE220B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

724b3c7a-bf00-439e-ac85-93fa336ecb6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\724b3c7a-bf00-439e-ac85-93fa336ecb6e.tmp
Size 12KB
SHA256 ceb30c8a1b0b7ecc8788c03a3aec94c7f2fbe8626f3be002aabc940d63654542
MD5 c01382f9796b96cfbf8abb3a1ab23fe1
SHA1 414bfb5137f16f9c25616a0ec36941c372cdf7f7
SHA512 604cdbd7e637c35add8519bb7cd444ffc2d411f0bc19a8d87d4c0dade25861d59d0e85f1b3b9218b7cc5d2a83b5ed54db3670eb7d466fb28e8ed0a7ea29ae28b
SSDEEP 192:sxZpRuWj/fws+62Hdp//E/lIQtHW6+WNAy+xMjEUARd6D7ZnbwioZY36AXVIg55l:sxZp/j/fws+62zMHbJAOheZXUQi
TLSH
T1CD52F952693459BB8CDBD219FA14BB53E2F5516254D09E48BBFCCE0C08E67DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8763535c3dbb1119160f1f89af7020eed4adfad04d1e305a94f716ecba1db9b0
MD5 90bd7cf6ba130ce32c5a3c4c46f608c3
SHA1 54b599d1891a4e4f3765954bea35e004af70838a
SHA512 d3ecc7a9f50ce1953238b7a1a409124b45c5e0c9894c238e8e09392dd3c3c2d9ed026fdbd09cfda170930e25c465c6327af2c5938637bc62156959740d4d39c0
TLSH
T179E020D424CCC31EE1446487027C834CC7C03B1FD6C0AECE6B04C5457506544F6E5570
MD5 SHA1 SHA512 TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
Size 58KB
SHA256 c38b583c99b7a550c9716e1e180b0db3ccfdc346580e1dd64d04cc28b0415252
MD5 4ebda91483ce419a7a243cc636f1e3b1
SHA1 71bd047369e8b60efe30ed8adc390ec0e514b5ef
SHA512 d6728dd80628be6156ef19eccc3104b824d556a540460f975a6b3100a12cad7f6d77ebd5898d3a3234bd888887a1856ce3ed6cb63e36ead85c711a2164b19d07
SSDEEP 1536:Z2ZwiwkViWqldF8jLrPauDnAaHUAZlkkhppYvIf5:Z2ZVwFWqfmjLrPaXa0Ao2YvIh
TLSH
T10F43022EDF0070D769C7BDE90B692D601A2B9657E8F9433AB2FC524CE18E22468D3417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 179KB
SHA256 9ce5da38fc4f53319696074ae9c6a44275a2dc5f21692d651a0bbea80b1dddd6
MD5 cccc4202b22509bb89d201c197a5f0ae
SHA1 213e7cf2cd06d743ac6943ded013a6ed1052ef0b
SHA512 e4d74f0ecc0dd843a4a868a3c0d27c3d2a3c8bc6098df15d6a54292935446bf8a6a5e02415678b8110a3a4f19b043e2ae8611a632701a3c79a3124802dde2c3d
SSDEEP 3072:OyeJjvXlth3EUHuPsn9AxjRvFhVkY48DHZf9g1CmXHoso7FMhIHQGKe7rsKg:feJz1D3EUOs4xg8LZfGIsoRwGl0z
TLSH
T1980423529ED0609236B74F61D518E8BA3331538395D2B341B1E2DBA639F1FB0897CB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
Size 56KB
SHA256 03f591ef1dd551a578ef421bc70ee419e4fb47334deb635ee3d7b29ab52e2004
MD5 ec130d12f6a5a40dd640dfa7d751a17d
SHA1 3075e4fce324b5032b3f743b0acdf503319511a3
SHA512 5bb645d37f8fff66415913898cd1b47d9f13405536d9d59fcd14d030ce9dd229bde5b574b8ae0b0407efe5fa13559cbc24f60d620743b4cca83fe74f9d2d5560
SSDEEP 1536:XoJlW8iOIID418zTlDIxJftXrEPS8k6wKywCAQ2Uw:XoJBFXD4183lkZXoah6x5
TLSH
T1E543024B9801F3D9BC9614897EEF671B16B7A70472FA0ABFD148872D14125DBB100DAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
Size 17KB
SHA256 134a760e37046ab06a9744c61eed3d0a2cacace98392e775e39dc910b58bacdd
MD5 17cba5b82e130c20f93e6f24fd088145
SHA1 afacf467de2529d1a10b42bff9014b1c408bd1c3
SHA512 bcc549da3f9acc0df9084588ffd0b092fc49b46eae12f61874f7f649000240c6e2207286caa32f7d1855a24253b3603f0f1fc2c13a63bc8b2d00f42e406bcfe8
SSDEEP 384:2/XIL5gFUrwqTZOB0k08GrsZpwSEV+zgggqEFtR:+XIqbeZlk08fP36nPz
TLSH
T10E82D1B595B765F2070CC072BE679802059C2E587A25241664EE7CCBCEF081A1EFA09D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
Size 32KB
SHA256 b8e470c8aaf6e402bff65d116249cd642b8bf894b62f5049020d0f01c2051bb7
MD5 3d1811441d0bff6f51b419f2087a992d
SHA1 3e281d6405b24b51bea7ef1d6a0246cb6a4f0219
SHA512 0454d5d765b3cee6407f1f54510e68501b6c47f8d4bbc65a3a374f3ce47e77f56d65cb63ad211a4a3e450fbf4ce5b7ce1c4f260767e8caca9e9ea2fd97abef7d
SSDEEP 768:tcQjzMPUCy09rkLWx8sVY/9gBVFwLrO1dRWAB4As:n3MP9yUUg7VQ9gBVeO7lB1s
TLSH
T105E2E1274CDD11B88EAB3EBB6C461AD963D8DA6C9B1081B6D14CC60C816CB11F962A5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
Size 45KB
SHA256 d932cb696892a4a8a52e5fc341cc1f43d14f402379d9ba73e42b1da7ff38f24e
MD5 2d575a733bcb74cd07b3d12b5adcd54f
SHA1 815b1ec7d4397cd8205a0d2d165e84cbbef80a89
SHA512 4b3e8d0fc7843a3539eb45845a920fa25b9f9ac8d7c9b6a45d2820f0e5030209917d2d7ec1a336286d5e4c278fdcddb50aba858ce45d05ad267132ec8f5604bd
SSDEEP 768:/FqYuZlLw0mvyzbun210CpQPjGal0f1xziNbgookNtVLmvMUfneV+bfoS:sYuLzburPjGb1piNbgsfLmvMUfeV+bf9
TLSH
T1AF23F2D21A017FCA32B7EFA3535F5205453A4A30932019D59A7C9FFE28289E3AA165F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
Size 55KB
SHA256 526d083073d22ad6fe5d2a4b46ec1b5267f0fa62d3668b207cba71b02594ef16
MD5 08bdcf8f9ce625a2a593fb9113b3982b
SHA1 16ec8317e7f62efc47e5c5d996b4295b00607a5a
SHA512 3ddcf0cb286bb0c867116aed2a9147ece6c64765e41dddb09a4d0f46c68b5ec879268f6266d5246dbe95f29673763e16a14b9eba57249ae8e4144aa0716f5446
SSDEEP 1536:tJMADkDaz71YLh0oqyA1cqf/CxwFERXBvd:cADWaNSvqTfxqRXL
TLSH
T1B54302E5D8CE01C8765420493BAF60135CD9102CE8B9EF72F46D9B51C9FA59BB11F287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 428KB
SHA256 e25bf8fce0881ddd90d87ce0d52ff57e3e02ab1a0b9f0aa5f0815493d3eec6ae
MD5 bc5bda366ea40158f4e53079f5fc0a52
SHA1 25c5d81679950638663688d650e0b12d2192b943
SHA512 d9b599ab89a87ab4203bbe3ef101f5b60cfa9e0a27f401dec4d43a258e7dc0b97fb74ded4289e645f4356929037592040fc7ecae7c8f33d9025a33279e694768
SSDEEP 12288:fMXijNzVxhgU0Napwu9uOB/VeJ51O841Owx7IV7:fCixVbgU0biuK/Vej1L41xQ7
TLSH
T14694232826A62007D6D99735D39EFF2589A0FD30E0406DC773F178B413B4DAA9B96347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 ddade724b6d114d2c8a917282ce666c9dfaf1fd53c4d39d866431e02094bff3f
MD5 50422939823740bb5f16c2d02c4e6684
SHA1 78c393b013cc5d28fb86d062fd7515fbbecd0362
SHA512 e9cb21e2250aeca7197e3b23b1649da541c964e8dfbfa7875e42d1dedbda48dfcf5bd44b6130c08ec1bf6045521730d9baa3e7a3d2669a381fb3c4e334db506f
SSDEEP 96:FckMuYGzBcjWlCY/bGZCKYi0vQjUtIdkbF+UMwgvmr:FckkGz6ygYyZHYZQAeGbF+UMwMY
TLSH
T13DA1A9C115965391FB74D4F489E41AEA363C2CA02E031E32E6A6DBB1BE3375731186F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 99bcf4d7c4b5f19e2f9306de4506ec964c09051de3a69faa9e00952f66c8162f
MD5 7ce0868134114cec69d3d0fca14ce7f4
SHA1 3de2d903ba3f1eee32c967959e92ca219f7ef7f6
SHA512 501b307fbc6ccbe91f3ae00d6b5eff7d03e3c91185d13ec1b6add764c75e224a6636081a4471781a94a98e3568914c5800c777f2f15e14273b9eb4544342ae4e
SSDEEP 96:bHlMX2GzBcjWCCYYbGrCKlkki6vQTitIlkbm+UMyNvm1:bHlvGz6yrY7rH3XQueebm+UMyNK
TLSH
T1ABC1A7C111D65391FBB4D9F489E45ADA313C2CA12E031E31E6A6DBB1BE3278B31185F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

904f52d3-2c92-4f1a-9dd7-19c17b14d1ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\904f52d3-2c92-4f1a-9dd7-19c17b14d1ec.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 185KB
SHA256 96a2b3d40165946ef3de62e3ba0a96c0dcd2d98ebd9cb1ba90d23e8908bf2168
MD5 c9979e8775f8ec86f483b6f8ce12a7b9
SHA1 25f01dc0fd0b860e94a17c111d39d9121a61f581
SHA512 a0eb1c12b8f3a1100415157c5b23efab2ffdde7e8e964a1602160ea78f0277b08eea1ed5cb5ddbc4cec14d2d7f2a116f6d3c5fa52a1b8a1becaa542955ac5b18
SSDEEP 3072:7GGk6H2niY2bWdp18Ic4ugRKu1cuQtoXLSCnlo34ujRKuFccEALNo1P1MBkwkih:unp1sLeOi1P18
TLSH
T16B04D725A266A1D8E83F837707165C13E336C9C4D658309BB9E1764D2AF7F803B54B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 ab7c402137ba3f4165b012e51dfb581ec99cc22d4a3e95ea549db669b0ec4288
MD5 19d710f6b0d6335014afb6c9a33be378
SHA1 122ee367c0f442fe3ee01101dcd25f79f9ba4a55
SHA512 1d0899729ddc3189a1c2b219e3424f9ca22176407caa83c8ee72ed3b2089c2cb8a05a2abd178cbd1f1cde5933e841d672de34b2b17184099817acb380c8a8745
TLSH
T133E0683888C8C22FA11960D614287B0EDAD7651FB7CCEE460F44C800784AA48D0AE171
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

14a66af9-0288-4aa8-a790-b310e81572b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\14a66af9-0288-4aa8-a790-b310e81572b5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

47983d52-4f4b-489b-b46c-78438ff347d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\47983d52-4f4b-489b-b46c-78438ff347d4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4fd5fae7-700e-4a4d-a45f-201d1255503c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4fd5fae7-700e-4a4d-a45f-201d1255503c.tmp
Size 15KB
SHA256 f391841580c167da1b1221a3f3da58cfc9c679b1ac05659bf029fa4707129358
MD5 9f217dac4fe4cf02f40f3570a2921801
SHA1 cbb0c2305fe1d6e50af71bbb3de855fd19835626
SHA512 2c13cd526db6ee4842019215c0dc7136752cf96520033fe560fb5ce5758aae7562ab73af6ab8cdd875267375cd8c3da5feaaabfc0c950d197ecfbdd928f03f36
SSDEEP 384:DJQspreWh1BFJ8AJgJ/a5FdxesTjlCQ1LElT9U517VV9K+y9rJAWdmUG4kgH4guV:lOWuZ0Oc+MYw
TLSH
T1DF72F1F7C3D4866DCC5266F4AB24BE2FCE690918536C3D2AC8D99F46A3D1071E24161F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d598678-47de-42a9-864d-785990ac1c5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6d598678-47de-42a9-864d-785990ac1c5d.tmp
Size 211B
SHA256 e48356c9a2a580edab34cef70c149da623cf172708710103fb63d1e311ad0bcc
MD5 90f99c189d60028d99e87d1bc85de7a9
SHA1 3488b30c95b6f35b03131b4e069b81347c01ef0c
SHA512 3221aa4847eace95b827fa3f87256152618e2e5f22735d77ca8d451477ff4089bab0f10afd8d7eea9681cde3106aab2cf4817d0c956847f0bf0f1c02123f1d5b
TLSH
T13CD02357250430B655FC5F875079FCCFC33600541C05D9D410F4545D0D316BC0757344
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\71779cb4-1efe-418b-84e7-8c55ee5f1427\index-dir\temp-index
Size 2KB
SHA256 7ff9c5c66104e9bbef855ebebc775312750f199b6b13b883e417c99748d9c081
MD5 43e1944433ca9c0847135254fa8f34c2
SHA1 ac444c5ba8841d8a9482631b33284972b864cb39
SHA512 c3822c3e5f20626f123314ccc1836cf8e146b3d6f3768cc63f103cd3160a7ce0632355eb691ccf3cc796b9158cfcf47fb7f71a78d3e6ffa393ae999719476722
TLSH
T13141634CCC94BBAEEC7551BE2D9418F257752D38FC58C39281A8B1B134032A41B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\71779cb4-1efe-418b-84e7-8c55ee5f1427\index-dir\the-real-index
Size 48B
SHA256 5a748523c9d8f2f289bdf29f10a5d92c627a50e590ead730a174315ec0acdd27
MD5 b3554309f456267503795ccc4b235799
SHA1 49630a2ed4b839479eb45ea7728258e4d5c89b81
SHA512 969affb73c69390bda2545cbdca58dc9397a8618d1c1af5e9093806a53281091a9afc2abaef88a63757403c789c261708e3103b86a46543ef4c44992eb99d647
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 137B
SHA256 0f679e3c9b9b567df6154f927b39874422773baa64b258c8c167c05c0c3577d1
MD5 04f495f6b7d8b19d523854b06843fe64
SHA1 fd7e3d07b65e3275659a6c895a970c72ba433e7a
SHA512 eea0b0daed0385f09afbf9683ab550bc8d3c39e71f8a40d57ac5d48680538dc3b0805e4afff4804ecc85efd58888dfc5b84fffb68d271f80cca3a4465a2df8b8
TLSH
T1A0C04CD2042145560A6069D42138665D932BCE5A98D0CCF8A105F4466434953C805975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 e966d9c1855282405d469bd3bb98caf5b5ddec3575e67b4ea3d9ac5f6f8b2bb6
MD5 2f9bd8f491387470e9acfedeac7d21c7
SHA1 af672bc0c77c6e9da43a385dc2fec81347d35a87
SHA512 fbb57abd16f33f7c9b9e5dd6b655408d175476dec6dae9a429e75a5012aa9fa3b89cfae79a2c28c6950f30ab38ec7a4857c77ea90d283723ff67f696f6a6ccb4
TLSH
T16DD023C74132DC461E349FD0207C325D9327CE5A9880CCD89500F0433478D03D403A3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 50ce1b2f8f65c49ab8ee5c50010ce7331244a4353033b5086c8c99fda589ace0
MD5 cc1dbab372c0bcb411650780dcaef3fe
SHA1 1e2ed54883adaf1368fe45c9cea987be1c1b8b65
SHA512 8a58c6c2fd38920562174e20de796989427e0c3a1928edf2b4df54f1a125b6a58d69ca0cfa2d777e5456682cd04f10f74514898486ce824a0505722712903cf0
TLSH
T1DCC09BD34421855B0970AFD43038765DD31BC75D98D0CCF86104E4476834D53CC02939
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 a3872663802333c17d1da2a6f1592d53b0d610bc459ab73b214a178875c01e86
MD5 92ad3604a6557d1418ff27f3f54f0969
SHA1 52bfbdce0af0463b0bfcda4cc3099c35dd5febe7
SHA512 c231f893ef6b7b70d66573bc870894a74a3ef148a5959ca33827a406733e36cd654f4cbcddb5761ce3152646a9c66d563216ef2da29820cfb9f3c993860e91a8
TLSH
T1BDA0021701491001C523067550AA15C47774C8234182035344E0D0ACDCE3682EF42A82
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 96B
SHA256 477885f0092540f42d7bd399c9afbdc8eb54136072de1040fb580172c93f46bd
MD5 c02b34f7bd037bfc6d21f40997816bc6
SHA1 ab1c8b82aa85b3afdaeb6f6290ae85a1581e91fe
SHA512 6922b1a97c17494e98e5cc265a24e4ec32e341ec0c52285eded2565b59fb9ae65f9378391b0140a9f21267bf92efd031e81cd9d4b1a146a3f29836ec26286cf8
TLSH
T126B0220B803E2082CC2003B08C8A08CC3338CC32028B03A320FCC0FCAC32282BE03228
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 e60ff845b5e1271fa897ad8d4566deb0344c656e9614082f20f97228977e78d0
MD5 5847fbad84e586cfa227cf40e70324e6
SHA1 1b8977545d4859debcc63417d66c576eac2b83fa
SHA512 f9323f600aa7ab069f7f3c2f16ef7223bba25f6ebe932b6c1e61b81ce3eb0d36c3f9d02a78e28c10bafb159c4900958acafe496364992ad203880b80db160835
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8b421bbc5babfc198717b4cc6f882c3553ff72eef92ac73d81a1fccd03515f20
MD5 eb45251427eea68bf68d1224a9b7f409
SHA1 c4dd214a2a08ebf5f43bbdbf6b739da48d2767e5
SHA512 0d500799abf0a12accb88837d454757ceae98cb807ece6f3043d1117777b9446b9b9f1dfec7e9cda1e91eb74cd126f95c897078424da3ca3a4d6e59c9f524810
SSDEEP 48:K0BQ9xbfj8bP6nISJ8K9p1D8xhsYarhhyL6lI064I5bkjUISs5K9Q1K5xipYb8gr:KUuQKTS2OJWKK01y4Kvqum
TLSH
T1B391280131F74251387F668942658A2B469135BB3058ED7FBBBC40A2CEAFD055CFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6e71af3-c013-4c38-93db-5b1aac8a2eb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6e71af3-c013-4c38-93db-5b1aac8a2eb9.tmp
Size 11KB
SHA256 99f4e8821a7ab04fa8c571560eeeb1d3b0a5e0ccdfbc99b4080d401863798d2c
MD5 b4b17a4d09935257b8025dda09af16a6
SHA1 2f1bfeb244c99e77ce8ec530e867109c170bc700
SHA512 54881674af25bddebd524f1d959df250bcefa89ba3a256cca0e2c198de47a61442c45aa6cc816e6b513b47bc7df0021352ec78ec277f58e913f6b4e6e7f5ceec
SSDEEP 192:sxZpRuWj/fws+627MdpJAnAlKqHW6+WN3x3COuKInfY36xXVIg55GlWJ:sxZp/j/fws+624kSHbhNkfXnQi
TLSH
T18B32CA52AD3469BB8CC7D209FA14BF53E6F9513255D45E48ABFCCA1C04E67DE220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b00eb52d-9c5b-448a-afe4-7f3e8429b535.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b00eb52d-9c5b-448a-afe4-7f3e8429b535.tmp
Size 12KB
SHA256 2ed5b85c5e8ffb6140dd4af9f25981683231a8e1457bcde35d5c957132712fd0
MD5 23f6fc1486c7dcea8206b128b654eaef
SHA1 ca694d45d4fa0a9385dc93a730837f92a3656ce8
SHA512 76ba8b58670bcbb97810fccabf92961a8d724c8cbe3e1155377963ea002652f8f98a7d777b8a35b787338223542f8ea82cfc02e535304be1b34ea2fba958ec95
SSDEEP 192:sxZpRuWj/fws+62Adp/A/lIQtHW6+WNAy+xf3EUAe7ZnbwioZY36jXVIg55GlWJ:sxZp/j/fws+62QIHbyAoeZX1Qi
TLSH
T16A42E952A93459BB8CDBD219FA10FF53E2F5516254D45E48ABFCCD1C08E67DE220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3455fa4-82e1-4500-a378-e3b4f43cff59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c3455fa4-82e1-4500-a378-e3b4f43cff59.tmp
Size 10KB
SHA256 228d3f996f99e8310d30d53cddcabae48fc52596f1fbab8c9d8f4559b8bd9b05
MD5 8be29d54394e6a46ce36933599cf3729
SHA1 12d558adc3977392d70c3c6ddefd8dd07d9d0ea2
SHA512 62255cbdac1f19ecdf73831749ff1e7cbd52586263196ee6573e8e24638b89596d2d3a62a8e7e33defed679d2fb9ae3edd25b800a0a6a730f271af28cc06c3c2
SSDEEP 192:sxZwRuWj/fws+S2eIdpbnyHW6+WNNKInfY36FXVIg5PJ:sxZw/j/fws+S2PTyHbIkfXLj
TLSH
T1BE22C8526E38A97B8CC7D20DBA15BF53E6F9503251D55E4CAAFCD61C04E66CE220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5035145-5b2b-4f8c-a534-7ff7149230bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5035145-5b2b-4f8c-a534-7ff7149230bd.tmp
Size 10KB
SHA256 690ae9ef3869a750125b8a4b8ee983a65c8e71bf4788d4f5a9b2ce1d8d4a3bcb
MD5 79708e313192163c76d6cc2162b3505c
SHA1 a28d2e4979a2010f6908b8a57607f4abb912302a
SHA512 53361dd4a5c50bf95b9099e06a50c5df2222bccfbd721de9df9469a71e3c52e760e1e406d4e038a9d8d20dade61050d3141444950ad23ede84f0e552ab7137c4
SSDEEP 192:sxZwRuWj/fwseS2eIdpbnyHW6+WNNKInfY36FXVIgrJ:sxZw/j/fwseS2PTyHbIkfXL9
TLSH
T1EE22B7526E38A97B8CC7D20DBA25BF53E6F9503251D55E48AAFCD51C04E66CE220B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb6ded57-03a8-4d4f-8628-0b1593381ad2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb6ded57-03a8-4d4f-8628-0b1593381ad2.tmp
Size 11KB
SHA256 4733e991e2ddc88144aa0c3ec60d7fc1232873571bbf2793ab4595d3f4e87c0f
MD5 2a6afeca9ee4d755a563108e24d8dd6e
SHA1 e97916b618b727f50f37dd9364a218b9a377cbec
SHA512 ae55cb59dd22f47c71b22d4f80f185e9e35ed0839090796497b14f4bfb8fffc1ae8b577e9fac615678199ac9f1b44d85f81c914985ad542426234be65972d7cb
SSDEEP 192:sxZpRuWj/fws+62sjIdpJAnyHW6+WNC3GmWKInfY361XVIg55GlWJ:sxZp/j/fws+62HkyHbulkfX7Qi
TLSH
T1F032DA52AD3869BB8CC7D209FA14BF53E2F9513255D45E48AAFCCA1C04E67DE220B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7f3ede1-9cd4-47b7-b935-92d06a0bb4fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7f3ede1-9cd4-47b7-b935-92d06a0bb4fa.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c4477d68-4ff7-43a9-af0a-28d29aa56b53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c4477d68-4ff7-43a9-af0a-28d29aa56b53.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1e412ee7b71f4a6a0175fcdfd388415a90d584f46bbc26dcb672241c9a2a8b91
MD5 216448aab0709ca381e59fe46dc3c766
SHA1 502be604f461c6c5ab86fca8e9818dec441ec976
SHA512 7c8f460504c4c018aaf080e2250fb70e37e74c64ead023a8ed38db4ce6aa8b176f5a8db30ca1fafcad6500cc78898f2a6283058834c4f9a16960a8bb79265812
MD5 SHA1 SHA512

Submit Download

b259c05c-ea21-4cba-925b-e84743d56bf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b259c05c-ea21-4cba-925b-e84743d56bf7.tmp
Size 8KB
SHA256 9506b07450b3f8ec251ab8eb0baafe20cf5fe18132e749e4cd443d104af06ed3
MD5 edfdcd36c8fa8583ad9b114370d49345
SHA1 bc0d373f181365dc0e6f37266c4d6fa4c81e2e51
SHA512 2364fdd4bfebf481071402ca812463b787e3e2d88d954c4fcb56f16f7b92aa3386984ce4f3319b198eaf2f1619e086953fc4bfc44d1003a0f77177ab58c198e9
SSDEEP 96:KqONkJQsjpfbUIH5ih/cIPURHl8h4otop5o5/DwBtP4v+Y1xf//ojdDxv3ywxxPf:BONR6JU3QmiUyE70to//2yw3xNx0qtU6
TLSH
T12E122A35B868BC7B5DE3A485B08736139EA44127EB897F84D6DC1E1C05DF1AC530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4a4107d-3b71-47dc-a2e8-40c7f956bf99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4a4107d-3b71-47dc-a2e8-40c7f956bf99.tmp
Size 18KB
SHA256 a5eec0fe2618c3cb5db85568e73dd2e65d027dc9f95248589848968413c53df4
MD5 be42f4dc4649d6fbbcf7bcde558eaed6
SHA1 94c006370e936cf461828680cdd7b4a4bfbabdf6
SHA512 e647b4f84417339fca4e950d716a7b48a6ac83cfd39789c54a0add8061fdda8bacf069aca126e3d04e7e209cef374f5c001b06516ba3df3db0a798bc606e28d5
SSDEEP 384:QZcIqsN4wdwuKb/GmFvh//S3rIvtgOIwZOyZLjoT:uqAg5/+IvXsK/g
TLSH
T122828D31AC78ACBB5CEB9184B58777034FB4C127D7C9AF9495ED9B1D04EA1A8030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb706fac-5fe8-446a-9f1b-b725bc6dd549.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eb706fac-5fe8-446a-9f1b-b725bc6dd549.tmp
Size 392B
SHA256 48bbcd445e5cac1eaba9ac148bba96f98b139c25d0b3b98e18da24ba5fe62bd0
MD5 07a2fdbbb8e0cfae212b7d381fbeb839
SHA1 73a1722bdd5deba2ea29c16b38e3a98da7f626c0
SHA512 f20ae62cf35c9673367e03351a3dc0c789ee7d60eed152f87b9e19f48d497aa5a7d4d7fd74910a459e886dcfe561498a81e72a355e2c1940da218201b6e7c5c1
TLSH
T1F9E00201D20041BDD53D033100431A3116A2805012E60219092042643C252002F30BD1
MD5 SHA1 SHA512 TLSH

Submit Download

ed4601ec-4a64-4841-9f19-fa7ab1cc3574.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed4601ec-4a64-4841-9f19-fa7ab1cc3574.tmp
Size 26KB
SHA256 7634f8b89c9a32bbfaccae66b4745a0a9bc064fc6108224faa810b47ea30ab1b
MD5 44bdbe5aa83b0bf4e1c453f73f1bb506
SHA1 2e86c6d3b4ad99e5776c36153c3a65c5c3d34640
SHA512 c7e821af76a13df46c8e6479bf5d1fe8f59c5dcbb1a4ea6c005d7252940ec2dabb8fde25405435fa344b5af70cd1a902bc0ee6df09331b26abd15242bf27ff47
SSDEEP 384:XiFiZcIHEsNo8TUNTUlIlwdwuKb/WvmBw2h//S3pcvtgOIwZOyZLjoT:SFQk5wgCgwG/ScvXsK/g
TLSH
T170C229F258E7887AD8AE4747A77D7E034E7CC063B584AA54B7D85A0CCC960BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8973c6c-c4c5-4759-af04-b16d41cd30ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b8973c6c-c4c5-4759-af04-b16d41cd30ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7de0837-b382-4c5c-a81d-64ff24391a3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7de0837-b382-4c5c-a81d-64ff24391a3f.tmp
Size 18KB
SHA256 06b87dae7965b9c4facfe68e3a50f83cf24a7a1a63fe1b54347a8e916819c91b
MD5 7b40d9d8a74042af561f4e57425adef2
SHA1 af7c6d0ed35661f23b41558128a937dee94c61b3
SHA512 390ea1c54348e97594b77c715b3db05ff5caf61304177d96179ccb08e81591a829b3370ec3a1dd9446d7c78f60bbf005a0c07fcc17dfbd27eccc044eab7f9722
SSDEEP 384:LZcIhsN4ldwuKb/dmrvh//S3rIvtgOIwZOyZLjoT:Thtj5/+IvXsK/g
TLSH
T164829E31AC78ACB76DFB9184B18777034FB48127D7C9AF9485ED9B1D04EA1A8030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 00a7893d186263844d1e15a7e89c86c4243c2338dffe13f04a0e77fc6149f3f5
MD5 107339a4955476715711a8b40687caf7
SHA1 b7b5910c347e9c1b63c004706776e2fd20a37945
SHA512 dddd313acbb15b2c803c1a44501b78bfcbcb317f27c09e4668f7410e432ee34e50f6819d5bad4b92e31df6c7cffc7d834560d9edcccca1001a6638692093c0d0
TLSH
T1F4411A98B6EA1148B3B37E5AABF6646D487B79732F0AD49D40010E4F0626A40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download